AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAT/bnHQVCIAzCYO/6zmTuf1hp0NDYpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/3jiKKADg7/b+OAkgjEEuDChIFNAQ5xIS0lKALAo+ApLlnIPhQiBxQSILyQ0dcp0mghIhJJDp8h1Sx1Ka0KVwYSRqo93bvWwcBx/B7C7x7yfNzbu70cybvZPlt7s2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDYfj9eS/K4nT5Mj+Litbs7a0tpv7WnT93euDeXtjRuVZz3/8Dr5ScnZ+tLBAAAgKOjXdT3EXG/u7mQ9sl0Vv93izFpzf/9C6O4qOf31v1bO2vH8rfmivr/t18fvDJeaHq0Tjrp8spwcPrxVDr/0RYb78UDR3SyI5+de2lnH0jy0frL293seLa+u3Png14WTlWRLQDwNE4VfR4Uvw+lfb/OxAA4Mjqlwruo/9vT9eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIXt9XiuiFsRMdd5GKe2dtaW9utvb9ybK9r5mzc3ynOmU3QjYnllODhd4V6a7tr1G58vDoeDqwcGtyYY84+CkxFxqBM+TfDJBGMi/n5M/vWM+nbx5KDVjDRqDZL882lKPocZFN+9w5+5ph9IAAA8s7p5S+v6+93NhfS11kzE7g+P1v9vleKYsP5/8On5u+W1yvV/v7IdNt/86uUv569dv/HOyuXFS4NLgy/ePdN/r3/2wrlzF+azcyXzy5E4YwIAAMC/0Mtbuf5PZh6//n+iFMeE9f9Xt/rflNdq71f/7+5Wsc1Ge3jRr+5MAAAAjqLeOHrpjT//aO0zotXrxdeLq6tX+6PH8fMzo8dK032yqYPenNpT/7dnKssNAAAAqNH2euuR6/8XS3FMeP3/+R9f/bk8ZzsijkdciYjBqaUrw4vVbafRqvhD5WyhXt07BQAAoC7H81a+/t/N7v9Pxrc8JBHx9pujuPhfV5PU/+0Pv/2pvFb5/v+z1W2xkZLZ0fHI+tmIzmzdGQEAAPAsO5a3tNj/vbu58NkvJz7uuf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGp/BQAA//8o6jB4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 19:17:40 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:40 executing program 3: socket(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) [ 2162.686045][T11156] overlayfs: failed to resolve './file1': -2 19:17:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:40 executing program 3: socket(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) 19:17:40 executing program 3: socket(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) [ 2162.892743][T18804] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2162.902610][ T5124] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2162.927545][T11166] overlayfs: failed to resolve './file0': -2 19:17:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2162.992554][ T777] usb 6-1: new high-speed USB device number 32 using dummy_hcd 19:17:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2163.146181][T11173] overlayfs: failed to resolve './file0': -2 [ 2163.164277][T18804] usb 2-1: Using ep0 maxpacket: 16 [ 2163.182763][ T5124] usb 5-1: Using ep0 maxpacket: 16 [ 2163.242956][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2163.302772][T18804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.312668][ T5124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.323378][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2163.336364][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2163.347237][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2163.347264][T18804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2163.347288][T18804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2163.381606][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.397785][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2163.397935][T11152] loop0: detected capacity change from 0 to 40427 [ 2163.408975][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2163.425164][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2163.435111][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2163.438679][T11152] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2163.445010][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2163.445163][ T5124] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2163.462900][T18804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2163.467403][T31247] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2163.490299][T18804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2163.492917][ T5124] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2163.501829][T11152] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2163.521942][T18804] usb 2-1: Manufacturer: syz [ 2163.531311][T18804] usb 2-1: config 0 descriptor?? [ 2163.533512][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2163.542514][T11152] F2FS-fs (loop0): invalid crc value [ 2163.545812][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2163.561565][ T777] usb 6-1: Manufacturer: syz [ 2163.569766][T11152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2163.570275][ T777] usb 6-1: config 0 descriptor?? [ 2163.602820][ T5124] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2163.612180][ T5124] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2163.628345][ T5124] usb 5-1: Manufacturer: syz [ 2163.635231][T11152] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2163.637362][ T5124] usb 5-1: config 0 descriptor?? [ 2163.647922][T11152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2163.732699][T31247] usb 4-1: Using ep0 maxpacket: 16 [ 2163.852927][T31247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.869672][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2163.883070][T18804] rc_core: IR keymap rc-hauppauge not found [ 2163.893716][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2163.895514][T18804] Registered IR keymap rc-empty [ 2163.908381][ T777] rc_core: IR keymap rc-hauppauge not found [ 2163.914533][ T777] Registered IR keymap rc-empty [ 2163.919298][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2163.932526][T31247] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2163.952046][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.963726][T31247] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2163.982644][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2163.992815][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.032766][ T5124] rc_core: IR keymap rc-hauppauge not found [ 2164.038948][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2164.043719][ T777] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2164.067278][T31247] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2164.072142][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input581 [ 2164.079363][ T5124] Registered IR keymap rc-empty [ 2164.114130][T31247] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2164.131194][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.141152][T31247] usb 4-1: Manufacturer: syz [ 2164.151827][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input582 [ 2164.168452][T11149] overlayfs: failed to resolve './file0': -2 [ 2164.177282][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.190940][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.200778][T31247] usb 4-1: config 0 descriptor?? [ 2164.207293][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.223108][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.243685][ T5124] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 2164.256810][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.262851][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.278545][ T5124] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input583 [ 2164.293267][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.295987][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.312341][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.332592][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.332614][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.352657][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.372794][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.383005][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.392580][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.406618][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.423740][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.431208][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.451327][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.458754][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.472640][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.482794][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.492732][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.502646][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.522960][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.535890][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2164.542985][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.553082][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2164.572640][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.581456][T18804] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2164.583278][T31247] rc_core: IR keymap rc-hauppauge not found [ 2164.597250][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2164.597445][T18804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2164.605690][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.605767][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2164.632793][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2164.640083][T31247] Registered IR keymap rc-empty [ 2164.647638][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2164.652807][T18804] usb 2-1: USB disconnect, device number 52 [ 2164.658479][ T777] usb 6-1: USB disconnect, device number 32 [ 2164.674272][ T5124] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2164.682589][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 19:17:42 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:42 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:42 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5538, &(0x7f000000ac00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) [ 2164.707611][ T5124] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2164.717052][T11174] overlayfs: failed to resolve './file1': -2 19:17:42 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) [ 2164.748897][ T5124] usb 5-1: USB disconnect, device number 4 [ 2164.757103][T31247] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc3 [ 2164.819882][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc3/input584 [ 2164.864482][T11192] overlayfs: failed to resolve './file0': -2 19:17:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2165.038885][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.083728][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.125296][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.193283][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.239935][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 19:17:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x824}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40100}, 0x4860) [ 2165.294466][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.345367][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.364764][ T5124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2165.372660][T18804] usb 2-1: new high-speed USB device number 53 using dummy_hcd 19:17:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x824}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40100}, 0x4860) [ 2165.412680][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.444581][ T777] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2165.462583][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2165.522907][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 19:17:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x824}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40100}, 0x4860) [ 2165.565472][T31247] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2165.602906][ T5124] usb 5-1: Using ep0 maxpacket: 16 [ 2165.610307][T31247] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 19:17:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2165.648727][T31247] usb 4-1: USB disconnect, device number 104 [ 2165.662693][T18804] usb 2-1: Using ep0 maxpacket: 16 [ 2165.722508][ T777] usb 6-1: Using ep0 maxpacket: 16 19:17:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x824}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) [ 2165.752601][ T5124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.767913][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2165.803851][T18804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.823304][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2165.831760][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2165.842715][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.878338][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2165.888119][ T5124] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2165.888148][ T5124] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2165.888797][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2165.961104][T18804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2165.992968][ T5124] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2166.000150][T18804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2166.002036][ T5124] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2166.002057][ T5124] usb 5-1: Manufacturer: syz [ 2166.043744][ T5124] usb 5-1: config 0 descriptor?? [ 2166.071982][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2166.072716][T11190] loop0: detected capacity change from 0 to 40427 [ 2166.091173][T11190] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2166.099154][T11190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2166.110615][T11190] F2FS-fs (loop0): invalid crc value [ 2166.119705][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2166.146403][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2166.155446][T11190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2166.192724][T18804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2166.227079][T18804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2166.244995][T18804] usb 2-1: Manufacturer: syz [ 2166.254192][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2166.259674][T18804] usb 2-1: config 0 descriptor?? [ 2166.280238][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2166.301026][T11190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2166.308794][T11190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2166.316918][ T777] usb 6-1: Manufacturer: syz [ 2166.349680][ T777] usb 6-1: config 0 descriptor?? [ 2166.442688][ T5124] rc_core: IR keymap rc-hauppauge not found [ 2166.449824][ T5124] Registered IR keymap rc-empty [ 2166.459981][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.502608][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.563578][ T5124] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2166.608841][ T5124] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input585 [ 2166.666091][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.682769][T18804] rc_core: IR keymap rc-hauppauge not found [ 2166.688871][T18804] Registered IR keymap rc-empty [ 2166.702698][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.705642][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2166.755821][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.773188][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2166.793099][ T777] rc_core: IR keymap rc-hauppauge not found [ 2166.799039][ T777] Registered IR keymap rc-empty [ 2166.804085][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.822661][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2166.842832][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.842930][T18804] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 2166.853493][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2166.887108][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.912719][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input586 [ 2166.923588][ T777] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2 [ 2166.952053][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2166.964498][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2/input587 [ 2166.981477][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2166.985694][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2166.988896][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2167.033240][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2167.042707][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.053933][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.072575][ T5124] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2167.079944][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.092928][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.118782][ T5124] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2167.132652][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.135163][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.154446][ T5124] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2167.171227][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.181967][ T5124] usb 5-1: USB disconnect, device number 5 [ 2167.193248][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.222765][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.232765][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.263754][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.273920][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.294442][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.312737][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.323344][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.350308][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.352653][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2167.383263][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 19:17:45 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:45 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) 19:17:45 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:45 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5538, &(0x7f000000ac00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 19:17:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:45 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) [ 2167.399384][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2167.407883][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2167.424748][T18804] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2167.429190][ T777] usb 6-1: USB disconnect, device number 33 19:17:45 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121100, 0x0) [ 2167.454279][T18804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2167.516020][T18804] usb 2-1: USB disconnect, device number 53 [ 2167.588783][T11239] overlayfs: failed to resolve './file0': -2 19:17:45 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:45 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x121100, 0x0) 19:17:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 19:17:45 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x121100, 0x0) [ 2167.819186][T11246] overlayfs: failed to resolve './file0': -2 19:17:45 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2167.932816][T18804] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2167.995150][T11254] overlayfs: failed to resolve './file0': -2 [ 2168.102648][ T777] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2168.192535][T18804] usb 2-1: Using ep0 maxpacket: 16 [ 2168.261198][T11238] loop0: detected capacity change from 0 to 40427 [ 2168.271478][T11238] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2168.279344][T11238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2168.289290][T11238] F2FS-fs (loop0): invalid crc value [ 2168.298874][T11238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2168.322631][T18804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.332908][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2168.344289][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2168.354361][T18804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2168.355937][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2168.369806][T18804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2168.393533][T11238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2168.402786][T11238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2168.463295][T18804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2168.482566][T18804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2168.491046][T18804] usb 2-1: Manufacturer: syz [ 2168.502962][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.508155][T18804] usb 2-1: config 0 descriptor?? [ 2168.521146][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2168.540984][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2168.550821][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2168.560856][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2168.662997][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2168.675489][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2168.702519][ T777] usb 6-1: Manufacturer: syz [ 2168.714628][ T777] usb 6-1: config 0 descriptor?? [ 2168.884860][T18804] rc_core: IR keymap rc-hauppauge not found [ 2168.890802][T18804] Registered IR keymap rc-empty [ 2168.895815][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.942630][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.983471][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2169.011785][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input588 [ 2169.039481][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.042541][ T777] rc_core: IR keymap rc-hauppauge not found [ 2169.060816][ T777] Registered IR keymap rc-empty [ 2169.068518][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.082804][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.106472][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.122549][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.143156][ T777] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2169.157735][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input589 [ 2169.162580][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.183172][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.223265][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.235105][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.252577][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.262853][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.282777][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.294372][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.312575][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.329028][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.343937][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.366153][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.382836][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2169.402869][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.415131][T18804] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2169.423473][T18804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2169.436753][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.438284][T18804] usb 2-1: USB disconnect, device number 54 [ 2169.482975][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.532700][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2169.567448][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2169.575675][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2169.587342][ T777] usb 6-1: USB disconnect, device number 34 19:17:47 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:47 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x121100, 0x0) 19:17:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 19:17:47 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:47 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:47 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 19:17:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2169.802228][T11270] overlayfs: failed to resolve './file1': -2 19:17:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 2169.852342][T11274] overlayfs: failed to resolve './file1': -2 19:17:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x101040) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = fsopen(&(0x7f0000001600)='msdos\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) r12 = getpgrp(0x0) fstat(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001780)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000200)="f939ebb220fdcf7d09e4fba6453061d790eb3d394412292461c2ffb11677712d49ae090e4fa969a864636eb3f43947", 0x2f}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="8f6c25619abb81438c6b59d44b95e1d75a8ce1baeed15bf9a512053ec60f1b760a2323786f9cb0737f1c6d67fbd63f02211f7cf3cc1e95afc137ca53a59f7f7f3b24cc13ea72b9aa9b9c9f90cee53bf7fcf1eba9971d838d3e354ed0a75e20e6596fe98fe73048a8270cd1c223129e557448d69e3d7d01d2878cadf5af8e4b7e0e1c97bb3ce1f7fc1d5ecde57c2fe44006b5d0f82cfe4f0b4bbdff3f1d842c191845ae18798c38e01652d99b3bce5adc7440605f2b5f79b7f12e471a06c385e9df14ac7ce3f95876272e8f0d86da7ebaf8a917e75ea6d47760d9826bf81b26bd", 0xe0}, {&(0x7f0000001340)="24c4373d6d594eb56891b53feb116cc1b53e4b8d7d9079f5b9ffa8c53432a922f4bc2b99af7220d1c00a2d3cf1fc70c7717c187bfda1a8a4656df5891ef20d1b0cb72ed5d18480f281f31f063b286afd7054eada0dc6c076aa5a1dbceaa1b9019bfb20a5ccaeae7ebd8ab55843492bbbb2be56c69a3b3a2459ccc6ed869b2f43ac76c03cf61a3842963bcd366aaf3408cc04eefc1bd742fe248035fc73afa30693f108c9", 0xa4}, {&(0x7f0000001400)="b3e032c97d491c648fc245dcf6eef041c3953adadcea443670b99a48c8a3b1e48322a7ec3a085628383fe6a782707d4ad9f1ae0155d87082275b7374549f968410644ac18234ae16fcc15fe21b43044997992a0b5a5763e91c160fb36801e4bea286fbee2367d1b1637a551686363e8b55c1f3eb1d9004998787493aa6ed12fdc1e86d3fc6b86b7e4eb60580a32208953144de410c536d837d12056b7af9466c1099b6d7946807401babf7926167e1d97c5052fd56bf6c049f7d955627bb71a66d183ee3ffcf88b0d10709f525c04ce3a212cd3095e8af6e8d566e3f9a530595", 0xe0}], 0x5, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r7, r1, r0, r1, r8, r9, r10]}}, @rights={{0x18, 0x1, 0x1, [r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}], 0xa0, 0x8000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x6c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 19:17:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2169.947378][T11280] overlayfs: failed to resolve './file1': -2 [ 2170.065946][T18804] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2170.073824][ T5130] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2170.202685][T31003] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2170.342754][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2170.347941][T18804] usb 2-1: Using ep0 maxpacket: 16 [ 2170.472963][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.483272][T18804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.493467][T31003] usb 6-1: Using ep0 maxpacket: 16 [ 2170.498738][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2170.510759][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2170.522520][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2170.532200][ T5130] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2170.542098][T18804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2170.553276][T18804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2170.563014][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2170.576164][T18804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2170.642896][T31003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.653236][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2170.664977][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2170.674263][T18804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2170.683659][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2170.701242][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2170.709376][T18804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2170.717492][T31003] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2170.728033][ T5130] usb 1-1: Manufacturer: syz [ 2170.732875][T18804] usb 2-1: Manufacturer: syz [ 2170.741095][ T5130] usb 1-1: config 0 descriptor?? [ 2170.747219][T18804] usb 2-1: config 0 descriptor?? [ 2170.753267][T31003] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2170.853182][T31003] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2170.862272][T31003] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2170.881690][T31003] usb 6-1: Manufacturer: syz [ 2170.888422][T31003] usb 6-1: config 0 descriptor?? [ 2171.092698][T18804] rc_core: IR keymap rc-hauppauge not found [ 2171.098716][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2171.105702][T18804] Registered IR keymap rc-empty [ 2171.110628][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.117964][ T5130] Registered IR keymap rc-empty [ 2171.122980][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.153588][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.160952][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.193582][T18804] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 2171.206871][ T5130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2171.224178][T31003] rc_core: IR keymap rc-hauppauge not found [ 2171.230109][T31003] Registered IR keymap rc-empty [ 2171.239523][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input591 [ 2171.256965][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input590 [ 2171.278338][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.295982][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.308784][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.323727][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.332594][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.352605][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.360739][T31003] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2 [ 2171.381753][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.390122][T31003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2/input592 [ 2171.403880][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.415035][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.433866][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.441108][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.450113][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.462592][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.472649][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.492665][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.499984][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.507367][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.553819][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.561149][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.569176][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.582595][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.602630][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.610210][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.617764][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.632628][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.650001][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.657472][T18804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2171.666507][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.694286][T18804] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2171.702321][T18804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2171.711026][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2171.718300][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.734703][T18804] usb 2-1: USB disconnect, device number 55 [ 2171.755692][ T5130] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2171.780162][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2171.787923][ T5130] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2171.812169][ T5130] usb 1-1: USB disconnect, device number 8 [ 2171.832541][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:17:49 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:49 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:17:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2171.873056][T31003] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2171.881092][T31003] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2171.934196][T31003] usb 6-1: USB disconnect, device number 35 19:17:49 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2172.292602][ T5126] usb 4-1: new high-speed USB device number 105 using dummy_hcd 19:17:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2172.532565][T31003] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2172.542951][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 2172.673019][ T5126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.686026][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2172.702906][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2172.712934][ T5126] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2172.722911][ T5126] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2172.782504][T31003] usb 6-1: Using ep0 maxpacket: 16 [ 2172.832896][ T5126] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2172.842059][ T5126] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2172.852257][ T5126] usb 4-1: Manufacturer: syz [ 2172.861119][ T5126] usb 4-1: config 0 descriptor?? [ 2172.932789][T31003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.943041][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2172.955052][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2172.969656][T31003] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2172.980367][T31003] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2173.082865][T31003] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2173.092163][T31003] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2173.102115][T31003] usb 6-1: Manufacturer: syz [ 2173.112945][T31003] usb 6-1: config 0 descriptor?? [ 2173.182576][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2173.190015][ T5126] Registered IR keymap rc-empty [ 2173.196006][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.243246][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.273557][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2173.290060][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input593 [ 2173.308280][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.342867][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.372902][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.403924][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.442903][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.463751][T31003] rc_core: IR keymap rc-hauppauge not found [ 2173.469747][T31003] Registered IR keymap rc-empty [ 2173.475403][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.482985][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.512778][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.520590][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.552651][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.560514][T31003] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2173.575211][T31003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input594 [ 2173.588859][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.602677][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.623654][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2173.632622][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.654455][ T5126] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2173.662598][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.669804][ T5126] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2173.692612][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.733671][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.756648][ T777] usb 4-1: USB disconnect, device number 105 [ 2173.773113][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.811231][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.852887][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.893825][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.932588][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2173.976114][T31003] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2173.984344][T31003] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2173.998958][T31003] usb 6-1: USB disconnect, device number 36 19:17:51 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:52 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:52 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:52 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:52 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2174.583103][T31003] usb 6-1: new high-speed USB device number 37 using dummy_hcd 19:17:52 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2174.852785][T31003] usb 6-1: Using ep0 maxpacket: 16 [ 2174.992726][T31003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.003985][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2175.015494][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2175.025495][T31003] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2175.036154][T31003] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2175.126264][T31003] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2175.136219][T31003] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2175.144434][T31003] usb 6-1: Manufacturer: syz [ 2175.151768][T31003] usb 6-1: config 0 descriptor?? [ 2175.472519][T31003] rc_core: IR keymap rc-hauppauge not found [ 2175.478474][T31003] Registered IR keymap rc-empty [ 2175.484090][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.512603][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.544626][T31003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2175.559390][T31003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input595 [ 2175.578316][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.614763][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.642984][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.672626][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.712573][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.753401][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.783662][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.812567][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.842566][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.872585][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2175.904219][T31003] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2175.912240][T31003] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2175.923840][T31003] usb 6-1: USB disconnect, device number 37 19:17:53 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:53 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:53 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:53 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:54 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2176.652589][ T777] usb 6-1: new high-speed USB device number 38 using dummy_hcd 19:17:54 executing program 0: setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000f40), 0x4) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003718a434aa6fe9def3b00000001024909050276"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x0, 0xb, 0xfa, {0xfa, 0x10, "116b1c1fec9e07adc9aff7435aca1fb76ae9b6e782af2a2951df01de5f068d46a3f675c8e9a10f5a0a912b84c2bcb5ffd770d77abba74236c2e26f8bcbc70320503a030403c2b278799502bca2d77d32aa37432b7b875df0d734ac6ad8cde3d8f6a68a5bfa0c6c6b30012a56dcc4535f0dfabf81d89f468036af37091efb59283760cecdf5a70559168b2af55516f5137a5a3efc9d2169c7f4638bb7849145fbd45d58aa272ff50f46815acb3e95d978dd0efe11430c3d6e9eb5221f812447c5b052324081aae6b53438408661308e18c8b2008504c6da5814ccfedad492def9c0b367e64dd859075762e1dc129c09d5f426d2dc8af2aaa8"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f00000008c0)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6f, 0x8, 0x7, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x0, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xb7, 0x2, 0x3, 0xf0f, 0x3, [0xe07f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x7, 0x0, 0x120c}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x1, 0x7f, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x3, 0x3, 0xee98, 0xb0}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x1, 0x7, "dc14ba74", "aa02b3a4"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x9, 0x3}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x20, 0x17, 0x44, "db2cf609341c89711a27d804be6006ea2c885944c2a56a2646f5e0e7917d27d5fd6f54ccb16b0c1d94281357f2f37b047fedf0eb970e7685f969ad9748135b55d97cb55f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x140, 0x40}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0xbd}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "40b4"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000d00)={0x40, 0x17, 0x6}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "b3ab"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x48}}) syz_usb_connect(0x0, 0x4c7, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xca, 0x32, 0x91, 0x20, 0x10c4, 0x8938, 0xbb5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b5, 0x1, 0x21, 0x5, 0x90, 0xfb, [{{0x9, 0x4, 0x75, 0x1f, 0xc, 0x77, 0xef, 0xe7, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cb4e58"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x6, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x27}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7ff}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x9, 0x7, 0x6}, @mdlm_detail={0xa3, 0x24, 0x13, 0x0, "ed77792f6e466372ab60a05761b469bb1d8f215a8716172c535917776d328ba7cb9297330e8168c30654bb1e7d30d4f53e9ce4855a8684484c4fcf7ee6f1107f482fd9535b894f3c3e98adf9f210429d9386b535be4888db86073de47ba4d61b47f0d2c663972ca6d41dccef46f5e473f48f761f668432f5cf3743cd1456d01c515661f1267c0d02e43787ca993e310a7c1d121deb6fb32437594571489fd8"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x858d, 0x1, 0x401}]}, @hid_hid={0x9, 0x21, 0x5, 0xfe, 0x1, {0x22, 0x757}}], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0xf8, 0x81, 0x2, [@generic={0x9c, 0x2, "df7c9121851042344086846ff17b9bee74a11fb0e96c9e1db836bd0c2e9093992fd829ab0b97f8c832b85da32ee68b533841628e42c084863a6997cbc78ebfb411b2cab640a4b94d599a94a20503de1186b9fdea303c19a667c3ec4c78a3e352b832a6e70f7457bb323962d5c9240f597c64cfa5395da6c95ee7facc9c7bd612cefd560b6d4ad5b186ec07eb65792d9e291f4a8ed6c6bbe9446d"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0xcd, 0x787d}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x7, 0x3a}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x1, 0x8f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x3}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x10, 0x2, 0x3f, 0x3f}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x9, 0x40, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0x6, 0x6, [@generic={0xad, 0x7, "8cad8bfdca3e370c6cea62c3099089613174ebded2fa955f1998206476492a6e0a25218eb8245503249b99afb8abb06551f6ac9ade857621ae510190d3176b5fed3a104caa5ce64cd7cff9a89fdac50f90165e34a983d61cd0cab9db197c112c42d41290bb5c8246677dde018e664ad5982f61a84393509f9323d4b87e727d52b6756bcddb3c750cc65b11472831547c659420d9f76fecace59746f70c9c6c9cb5ebaf54a2066857776c73"}]}}, {{0x9, 0x5, 0x9, 0x19, 0x200, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0x9, 0x7, 0x400, 0x2, 0x1, 0x7, [@generic={0x91, 0xe, "d09b0707629ae4716a12b3c1aa035c25dc0886b9dc280603aaee4aa6517e348fe838c34aad02b22ccadf85dd1c572ae1a2f15305e456396caa825e5b77eb1d62b52cbcc6a830c092ca1f34b315b91c67330b512c23347fa14def4b1e9293f7c02e6a0703f0ef49da1302dfb894a161de910d91d91c800b1ad58ab8ba196042a54516af1490f0baff94255b13e4f7f1"}, @generic={0x11, 0x7, "4953187f184fbc39a5ada0fbb1ff6d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3a7, 0x0, 0x80, 0x9, [@generic={0x7b, 0x22, "450336eaeb8b4a856195817cc8435d0769c4174014effb711883aeb15844d64fe6336b00c8366de510a265565ee3f664d1ded844f85dcf51f4ffd8384f32779af3bde4c24026aeab3ac9bc598bee1af09e85662c14402c0233c4bcd9e7c0e8f7159990d210816032093fd9ec33ec39ad6a0e85112c477af8fc"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x5, 0xc99}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x0, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x8, 0xe7, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x3, 0xc1, [@generic={0xc5, 0x22, "db87331c10d5499b0cb163ed3ca554dac6f1e8ce31e297e7f1fe4a6d2c1de6646fc13c84b4674b038e360bfb6adcc470ca75b2dc8676ab4b2aeb0dbce1600db92c81c819bdf7cf9c911766c976070a49bcc6a1679a50a34161911dda424b8777de9f8681a2d72da3ff1b0e22346c010a8fad6c881ebde728d46ecb6b4a7b19c53eff3a2970e147f96b4a684417488b20ea52a73f2fee8d41a0c4f75763d8c74c2ebc3f878414a53f9c4cea3aaa99a6c2da72be4efa8acdf08f26a9a528438cc697004c"}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0xa0, 0x6, 0x8, 0x1c}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb0, "b217e3c618612cd8300dda9da068ab60"}]}, 0x2, [{0x35, &(0x7f00000000c0)=@string={0x35, 0x3, "da1b597824b9418cb57b7df04fa6a7a70f45014d4931542097abea68de1c53545dc9199c54f4ca11e4df0c4f2c9e2783fcc07d"}}, {0xcc, &(0x7f0000000100)=@string={0xcc, 0x3, "acbbda55c7c68826ed81563a27af039bea343225e1e1504df3b08cf3e4d504d6e30ee61e9f52f13cf5e09b709e484627aecd67660abce73efbad35be8ca2f8cb39c52a4e40e0eaa3164432863f323cf94383b8768ee27fdece14e766dd99c70a5c1e82457ec965d295e853c8b117d9045825d1fa9291bb5b6b44cecf5bbdd7306813dc9162f0f6d41d117983442a8e0f98f7b6862221ebc65e853492408482ce58ee5978357c2a76adb32be12193422e8e0866df41eb6899c6d1740ce303b74f1b8a235a864159ba1b98"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:17:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2176.892702][ T777] usb 6-1: Using ep0 maxpacket: 16 19:17:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0xf800) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="00d67e3747036d6e6ee9c70000", @ANYRES16=r4, @ANYBLOB="0103000000000000000001000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0xc8, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8}, {0xa, 0x4e20, 0x46521b7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r5, 0x2}}, 0x48) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 2177.022642][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.062598][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2177.089623][ T28] audit: type=1804 audit(1698434274.905:1629): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir934852819/syzkaller.wtIn4E/2000/bus" dev="sda1" ino=1948 res=1 errno=0 [ 2177.116343][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2177.136503][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2177.147713][ T28] audit: type=1800 audit(1698434274.905:1630): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 2177.168352][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2177.262943][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2177.272031][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2177.282899][ T5126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2177.291577][ T777] usb 6-1: Manufacturer: syz [ 2177.300030][ T777] usb 6-1: config 0 descriptor?? [ 2177.542697][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2177.633197][ T777] rc_core: IR keymap rc-hauppauge not found [ 2177.639161][ T777] Registered IR keymap rc-empty [ 2177.653357][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.691209][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.709086][ T5126] usb 1-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 2177.719401][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2177.723753][ T777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2177.747833][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input596 [ 2177.764052][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.800031][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.812837][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2177.823100][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2177.831150][ T5126] usb 1-1: Manufacturer: syz [ 2177.833203][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.854091][ T5126] usb 1-1: config 0 descriptor?? [ 2177.884398][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.914450][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.942588][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.972588][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2178.003213][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2178.032576][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2178.062573][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2178.094117][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2178.112511][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2178.128585][ T777] usb 6-1: USB disconnect, device number 38 19:17:56 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:56 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2178.357925][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.383219][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:17:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2178.428124][T11193] usb 1-1: USB disconnect, device number 9 [ 2178.853018][T31003] usb 6-1: new high-speed USB device number 39 using dummy_hcd 19:17:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:56 executing program 0: setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000f40), 0x4) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003718a434aa6fe9def3b00000001024909050276"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x0, 0xb, 0xfa, {0xfa, 0x10, "116b1c1fec9e07adc9aff7435aca1fb76ae9b6e782af2a2951df01de5f068d46a3f675c8e9a10f5a0a912b84c2bcb5ffd770d77abba74236c2e26f8bcbc70320503a030403c2b278799502bca2d77d32aa37432b7b875df0d734ac6ad8cde3d8f6a68a5bfa0c6c6b30012a56dcc4535f0dfabf81d89f468036af37091efb59283760cecdf5a70559168b2af55516f5137a5a3efc9d2169c7f4638bb7849145fbd45d58aa272ff50f46815acb3e95d978dd0efe11430c3d6e9eb5221f812447c5b052324081aae6b53438408661308e18c8b2008504c6da5814ccfedad492def9c0b367e64dd859075762e1dc129c09d5f426d2dc8af2aaa8"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f00000008c0)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6f, 0x8, 0x7, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x0, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xb7, 0x2, 0x3, 0xf0f, 0x3, [0xe07f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x7, 0x0, 0x120c}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x1, 0x7f, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x3, 0x3, 0xee98, 0xb0}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x1, 0x7, "dc14ba74", "aa02b3a4"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x9, 0x3}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x20, 0x17, 0x44, "db2cf609341c89711a27d804be6006ea2c885944c2a56a2646f5e0e7917d27d5fd6f54ccb16b0c1d94281357f2f37b047fedf0eb970e7685f969ad9748135b55d97cb55f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x140, 0x40}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0xbd}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "40b4"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000d00)={0x40, 0x17, 0x6}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "b3ab"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x48}}) syz_usb_connect(0x0, 0x4c7, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xca, 0x32, 0x91, 0x20, 0x10c4, 0x8938, 0xbb5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b5, 0x1, 0x21, 0x5, 0x90, 0xfb, [{{0x9, 0x4, 0x75, 0x1f, 0xc, 0x77, 0xef, 0xe7, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cb4e58"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x6, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x27}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7ff}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x9, 0x7, 0x6}, @mdlm_detail={0xa3, 0x24, 0x13, 0x0, "ed77792f6e466372ab60a05761b469bb1d8f215a8716172c535917776d328ba7cb9297330e8168c30654bb1e7d30d4f53e9ce4855a8684484c4fcf7ee6f1107f482fd9535b894f3c3e98adf9f210429d9386b535be4888db86073de47ba4d61b47f0d2c663972ca6d41dccef46f5e473f48f761f668432f5cf3743cd1456d01c515661f1267c0d02e43787ca993e310a7c1d121deb6fb32437594571489fd8"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x858d, 0x1, 0x401}]}, @hid_hid={0x9, 0x21, 0x5, 0xfe, 0x1, {0x22, 0x757}}], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0xf8, 0x81, 0x2, [@generic={0x9c, 0x2, "df7c9121851042344086846ff17b9bee74a11fb0e96c9e1db836bd0c2e9093992fd829ab0b97f8c832b85da32ee68b533841628e42c084863a6997cbc78ebfb411b2cab640a4b94d599a94a20503de1186b9fdea303c19a667c3ec4c78a3e352b832a6e70f7457bb323962d5c9240f597c64cfa5395da6c95ee7facc9c7bd612cefd560b6d4ad5b186ec07eb65792d9e291f4a8ed6c6bbe9446d"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0xcd, 0x787d}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x7, 0x3a}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x1, 0x8f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x3}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x10, 0x2, 0x3f, 0x3f}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x9, 0x40, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0x6, 0x6, [@generic={0xad, 0x7, "8cad8bfdca3e370c6cea62c3099089613174ebded2fa955f1998206476492a6e0a25218eb8245503249b99afb8abb06551f6ac9ade857621ae510190d3176b5fed3a104caa5ce64cd7cff9a89fdac50f90165e34a983d61cd0cab9db197c112c42d41290bb5c8246677dde018e664ad5982f61a84393509f9323d4b87e727d52b6756bcddb3c750cc65b11472831547c659420d9f76fecace59746f70c9c6c9cb5ebaf54a2066857776c73"}]}}, {{0x9, 0x5, 0x9, 0x19, 0x200, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0x9, 0x7, 0x400, 0x2, 0x1, 0x7, [@generic={0x91, 0xe, "d09b0707629ae4716a12b3c1aa035c25dc0886b9dc280603aaee4aa6517e348fe838c34aad02b22ccadf85dd1c572ae1a2f15305e456396caa825e5b77eb1d62b52cbcc6a830c092ca1f34b315b91c67330b512c23347fa14def4b1e9293f7c02e6a0703f0ef49da1302dfb894a161de910d91d91c800b1ad58ab8ba196042a54516af1490f0baff94255b13e4f7f1"}, @generic={0x11, 0x7, "4953187f184fbc39a5ada0fbb1ff6d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3a7, 0x0, 0x80, 0x9, [@generic={0x7b, 0x22, "450336eaeb8b4a856195817cc8435d0769c4174014effb711883aeb15844d64fe6336b00c8366de510a265565ee3f664d1ded844f85dcf51f4ffd8384f32779af3bde4c24026aeab3ac9bc598bee1af09e85662c14402c0233c4bcd9e7c0e8f7159990d210816032093fd9ec33ec39ad6a0e85112c477af8fc"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x5, 0xc99}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x0, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x8, 0xe7, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x3, 0xc1, [@generic={0xc5, 0x22, "db87331c10d5499b0cb163ed3ca554dac6f1e8ce31e297e7f1fe4a6d2c1de6646fc13c84b4674b038e360bfb6adcc470ca75b2dc8676ab4b2aeb0dbce1600db92c81c819bdf7cf9c911766c976070a49bcc6a1679a50a34161911dda424b8777de9f8681a2d72da3ff1b0e22346c010a8fad6c881ebde728d46ecb6b4a7b19c53eff3a2970e147f96b4a684417488b20ea52a73f2fee8d41a0c4f75763d8c74c2ebc3f878414a53f9c4cea3aaa99a6c2da72be4efa8acdf08f26a9a528438cc697004c"}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0xa0, 0x6, 0x8, 0x1c}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb0, "b217e3c618612cd8300dda9da068ab60"}]}, 0x2, [{0x35, &(0x7f00000000c0)=@string={0x35, 0x3, "da1b597824b9418cb57b7df04fa6a7a70f45014d4931542097abea68de1c53545dc9199c54f4ca11e4df0c4f2c9e2783fcc07d"}}, {0xcc, &(0x7f0000000100)=@string={0xcc, 0x3, "acbbda55c7c68826ed81563a27af039bea343225e1e1504df3b08cf3e4d504d6e30ee61e9f52f13cf5e09b709e484627aecd67660abce73efbad35be8ca2f8cb39c52a4e40e0eaa3164432863f323cf94383b8768ee27fdece14e766dd99c70a5c1e82457ec965d295e853c8b117d9045825d1fa9291bb5b6b44cecf5bbdd7306813dc9162f0f6d41d117983442a8e0f98f7b6862221ebc65e853492408482ce58ee5978357c2a76adb32be12193422e8e0866df41eb6899c6d1740ce303b74f1b8a235a864159ba1b98"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:17:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:56 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2179.112537][T31003] usb 6-1: Using ep0 maxpacket: 16 [ 2179.252683][T31003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.263078][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2179.274156][T31003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2179.275636][T11193] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2179.283903][T31003] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2179.283933][T31003] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.403863][T31003] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2179.419060][T31003] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2179.428005][T31003] usb 6-1: Manufacturer: syz [ 2179.437398][T31003] usb 6-1: config 0 descriptor?? [ 2179.552799][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2179.672909][T11193] usb 1-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 2179.685577][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.772654][T31003] rc_core: IR keymap rc-hauppauge not found [ 2179.772706][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2179.778583][T31003] Registered IR keymap rc-empty [ 2179.778710][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2179.800677][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2179.811350][T11193] usb 1-1: Manufacturer: syz [ 2179.821629][T11193] usb 1-1: config 0 descriptor?? [ 2179.832736][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2179.873684][T31003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2179.890278][T31003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input597 [ 2179.917483][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2179.962710][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2179.992723][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.022941][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.059540][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.102692][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.147658][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.182706][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.215459][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.253248][T31003] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.284487][T31003] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2180.293752][T31003] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2180.304959][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.307489][T31003] usb 6-1: USB disconnect, device number 39 [ 2180.341311][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.371533][ T777] usb 1-1: USB disconnect, device number 10 19:17:58 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:58 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200a02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:17:58 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:58 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:17:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:17:58 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:17:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fsi_master_gpio_in\x00', r2}, 0x10) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = getpid() statx(r3, &(0x7f0000000540)='./file1\x00', 0x2000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) r12 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)) sendmmsg$unix(r4, &(0x7f0000000780)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="158b75e4a82a869eb47d712ce345fcd48eba46c953155798df77c8cd410f95e3faf9f3f106ce58cd9503f92b699e5d3fdc445486115b80973e0cd8430c2805b30f88d72ca47c0b80fe8341068576b4fe5f6f29fb66705549eef843971a", 0x5d}, {&(0x7f0000000300)="d924be098ca67ea032cd7eb275e96a496c97e5a8c69ddd07ee0c5a6abf26d3c0f2499120801e503d334d52647215b972f90aa474cac0468487303db7092e38b1b43c4d3f39fee4c8bc750eeb4defccc6bc6b27124faa01fb880577a25ca5a5c7eb2dccba43ec84a5313bca6ba406c5a31c2bc30e4d9fdcda7ad4f27b15e9719ed1d27a41d05e211a0fd53fe09d62477ebe5bd92bca8013a81fb55f62259c2b6d70af843182111259f09ffa97c2b72ae5181821f1d446f22ff00dbe62b85e48ed920ffbe6337ccd786f4b46ca60e2db3e846bdf7e6a157eaa2abfe0d73bad3bac2a3c34680d74fa9013ac", 0xea}, {&(0x7f0000000400)="b77898c53dafdbbfc87966126807a8ee8d09aa7eb59a2397e62ad00a3cf7cd154cce0d3de1c611c7945f121c5e1ae012b8272b2e9d1e8136", 0x38}, {&(0x7f0000000440)="ecc41683a827e438dc4d32df857d51aa99637da7f6e598bdc465b664f7177ce3c1abb170411aac4bd79b289b95fd0fc44fc83c9a9dc24da7be47a5bccc13f8a8522a5a2b6d79c0a954c8589e45fc42d2c219baaaf1f1d5e22873a2bbab13840a0c461c31f596", 0x66}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000009d184ca3b231c0000000000000001003b7e9c5a8076b60e0d059b8c7d6f1b099416e52c108005b8b4a3b82b67c96ecefb4c848fde1d6dc4723f2996cb6822d2bd9cd5aba81141053fcba121317ff0eacbcda02ca9fc42d477db4507b5753ff54804b96f3aee0fdb4d973c34434d1b62ee8aa20a7eb9c07d5d380aa800000000435b0ba0c19248c223d5b5159760b48726e697cea85699850ecaa4c87e4aab49eae64d7a1995008d545e3b71221ef905059fe21f63390e58dcee70d5258c6a6cc68c", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r13], 0xb8, 0x20048014}}], 0x1, 0x80440c1) [ 2180.942536][T22580] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2181.195941][T11490] hub 5-0:1.0: USB hub found [ 2181.200737][T11490] hub 5-0:1.0: 1 port detected [ 2181.244728][T22580] usb 6-1: Using ep0 maxpacket: 16 [ 2181.362603][T22580] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.377243][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2181.388512][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2181.398606][T22580] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2181.408594][T22580] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2181.522679][T22580] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2181.531960][T22580] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2181.540437][T22580] usb 6-1: Manufacturer: syz [ 2181.547838][T22580] usb 6-1: config 0 descriptor?? [ 2181.912818][T22580] rc_core: IR keymap rc-hauppauge not found [ 2181.919767][T22580] Registered IR keymap rc-empty [ 2181.925628][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.962738][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.993605][T22580] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2182.007264][T22580] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input598 [ 2182.036073][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.082597][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.122856][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.172552][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.203764][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.232569][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.263738][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.292617][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.322711][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.352586][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2182.385314][T22580] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2182.393474][T22580] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2182.405327][T22580] usb 6-1: USB disconnect, device number 40 19:18:00 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:00 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect$hid(0x983c1c77216adfba, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x9da, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0x10, 0xff, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xffe6, 0x1, 0x1, {0x22, 0xcb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x5, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x80, 0x2, 0xf7, 0xff}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x810}}, {0x88, &(0x7f0000000140)=@string={0x88, 0x3, "d536bb7391756efc5ae0468e999d45e4b540c87691df9b8aebb265b4f479952b20453c6494511e06edcfb41f2a0b001dc231a86b658ab97f3558f9e92d028a5230a35f7301f67ace99a52ff4f92f5902720439a104ace735b5eebad82d86b314d5d575fe8a4108e0459f3948e4e40b93692b1557f06ffcb3ffda607ac9b5cc801e635abc4801"}}, {0x90, &(0x7f0000000280)=@string={0x90, 0x3, "f96e4779e5e0f64f1649af52f81b0066829eedfa68ea7e83a646367c7efc09694c2ed67d4b6950b0e8de6f444a85014f0b4c37255d67501b43b67dfed9f793d27a500ddcbf90d2df9dbe3bde80b6306a17461008447aa9fc5522b2312b4662c8b414fd3ea9e7ba1863edc33f411f3c0b09dfbc9e379e1b70ab05916974c657a9973100f17bd70d3f222b9fd6de4f"}}, {0xfd, &(0x7f0000000340)=@string={0xfd, 0x3, "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"}}, {0x9e, &(0x7f0000000440)=@string={0x9e, 0x3, "9ab8aa23b4fd010f265d44bf914af67cfa04b473f03bcb3f9c134d63a8bdb7ad227d7050150bbf0c2c0a0dbe24de5af9adf5cdc05c256565f6a7166b177d958f25590885ecbd9bce78eda3ab1c7d6a8bf85d44a7a14305aa2c942fbb02848dab4f3c4d64ff6cd0c6bd5ddb9f08b42ac42b4993b45fa2859a9c0df411c7da1282b8211fa737c6338bba4112c3df3a1924406d022ef216e522633a3425"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0xe39}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x42, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6a, 0xfa, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0xa5, 0x20, 0x0, 0x0, 0x3f}, 0x60, &(0x7f0000000680)={0x5, 0xf, 0x60, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "89e535c8ed0b17ac2082f0d81c5a1327"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x99, 0x4}, @generic={0xa, 0x10, 0xa, "54819a4acd9841"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c2282098b45501b78ea0b987c539b57e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9b, 0x7, 0x11d6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "487d16eae3019711194a1025cf3acdec"}]}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) 19:18:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:18:00 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) 19:18:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2182.622173][T11499] overlayfs: missing 'lowerdir' 19:18:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) [ 2182.766204][T11509] overlayfs: missing 'lowerdir' 19:18:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 2182.871764][T11513] overlayfs: missing 'lowerdir' [ 2182.902620][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2182.903224][T31003] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2183.012932][T22580] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2183.152630][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 2183.202656][T31003] usb 4-1: Using ep0 maxpacket: 16 [ 2183.273447][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.289743][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2183.292530][T22580] usb 6-1: Using ep0 maxpacket: 16 [ 2183.302346][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2183.323331][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2183.333477][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2183.352880][T31003] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.363616][T31003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2183.374553][T31003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2183.385779][T31003] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2183.395471][T31003] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2183.422702][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2183.432854][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2183.440873][ T8] usb 1-1: Manufacturer: syz [ 2183.447403][ T8] usb 1-1: config 0 descriptor?? [ 2183.453008][T22580] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.469709][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2183.480660][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2183.490629][T22580] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2183.501957][T22580] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2183.515207][T31003] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2183.524427][T31003] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2183.534303][T31003] usb 4-1: Manufacturer: syz [ 2183.542947][T31003] usb 4-1: config 0 descriptor?? [ 2183.622912][T22580] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2183.632383][T22580] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2183.641378][T22580] usb 6-1: Manufacturer: syz [ 2183.648850][T22580] usb 6-1: config 0 descriptor?? [ 2183.772634][ T8] rc_core: IR keymap rc-hauppauge not found [ 2183.778564][ T8] Registered IR keymap rc-empty [ 2183.784680][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2183.797766][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.813269][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2183.814613][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.845879][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2183.869332][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input599 [ 2183.896878][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2183.918001][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.932880][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2183.943817][T31003] rc_core: IR keymap rc-hauppauge not found [ 2183.954699][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.955977][T31003] Registered IR keymap rc-empty [ 2183.972914][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2183.992904][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.006824][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.014189][T22580] rc_core: IR keymap rc-hauppauge not found [ 2184.020671][T22580] Registered IR keymap rc-empty [ 2184.026424][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.034017][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.044205][T31003] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 2184.060935][T31003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input600 [ 2184.075901][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.082716][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.090641][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.113686][T22580] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2 [ 2184.123817][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.129901][T22580] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2/input601 [ 2184.152594][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.174903][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.184451][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.193349][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.213092][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.214036][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.232780][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.252697][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.262809][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.272521][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.283093][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2184.306592][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.314334][ T8] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2184.314750][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.322327][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2184.352773][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.372719][ T8] usb 1-1: USB disconnect, device number 11 [ 2184.378914][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.391015][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.434648][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.442025][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.473035][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.482706][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.522877][T31003] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2184.530206][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.558727][T31003] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2184.568230][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2184.575755][T31003] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2184.589819][T31003] usb 4-1: USB disconnect, device number 106 [ 2184.625358][T22580] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2184.642034][T22580] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2184.661783][T22580] usb 6-1: USB disconnect, device number 41 19:18:02 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19:18:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:02 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 2185.110861][T11532] overlayfs: missing 'lowerdir' 19:18:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2185.174098][T22580] usb 6-1: new high-speed USB device number 42 using dummy_hcd 19:18:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2185.377154][T11548] overlayfs: missing 'lowerdir' [ 2185.453263][T22580] usb 6-1: Using ep0 maxpacket: 16 [ 2185.458609][ T5126] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2185.572807][T22580] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.594651][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2185.609387][T22580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2185.622044][T22580] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2185.635940][T22580] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2185.742761][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2185.748005][T22580] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2185.757244][T22580] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2185.765364][T22580] usb 6-1: Manufacturer: syz [ 2185.771858][T22580] usb 6-1: config 0 descriptor?? [ 2185.891064][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.902266][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2185.913401][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2185.923743][ T5126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2185.933665][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2186.043264][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2186.052406][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2186.060504][ T5126] usb 1-1: Manufacturer: syz [ 2186.068301][ T5126] usb 1-1: config 0 descriptor?? [ 2186.122713][T22580] rc_core: IR keymap rc-hauppauge not found [ 2186.128665][T22580] Registered IR keymap rc-empty [ 2186.136083][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.182602][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.225195][T22580] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2186.241684][T22580] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input602 [ 2186.263174][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.302914][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.336576][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.372696][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.412586][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2186.418579][ T5126] Registered IR keymap rc-empty [ 2186.423525][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.430750][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.455034][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.462824][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.482579][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.504366][ T5126] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2186.518065][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input603 [ 2186.532040][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.541729][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.551492][T11533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.560220][T11533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.573681][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.580946][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.603317][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.612931][T22580] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2186.633101][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.644501][T22580] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2186.652722][T22580] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2186.663022][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.671661][T22580] usb 6-1: USB disconnect, device number 42 [ 2186.702771][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:04 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:18:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 19:18:04 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x0, 0x2, 0x2f, {0x2f, 0x23, "f950e42322a69e5e888a178df1cefee797ff938750693a9d9af26dcab6861407c772d79abec3c90c304d28803b"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0x9, 'sK'}, @main=@item_012={0x2, 0x0, 0xc, "e072"}, @local=@item_4={0x3, 0x2, 0x7, "1ee72999"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0xfee}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0xba, "1fd4f3a8346ebba02df93d7792a6ecbfb8a53108728393e1628d5f68c4150c9257bc178a134d3c1f12dbaa2af4e04856ef7c52755b2df76f25e0f205198fb40f2d86b42933fef38483a467e0ca9fe84415f01b08201fb73eb8d743648f33ee925808a25d46a99adc7f3459439401e453d13f0da0ab8e4a8f39be770c3123eee46d4ce5dca5669dec41b76c583cb61796179b595416e295d887bb246b72a261f8845aa2a936712ae37157012eb549f98feef6fb340b58b0b8f39c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x33, "67d73b8ca77571782a763c88349b83aeffacf1ccd1c8a08d0b381f95ae55f2096efa26193add47b0066beb5af0ee17f34f9d98"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x5d}}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2186.743795][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.772617][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.810641][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.853535][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2186.879021][T11563] overlayfs: missing 'lowerdir' [ 2186.918506][ T5126] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2186.968997][ T5126] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2187.031765][ T777] usb 1-1: USB disconnect, device number 12 [ 2187.102574][ T8816] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2187.202679][ T8] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2187.372539][ T8816] usb 4-1: Using ep0 maxpacket: 16 [ 2187.442582][ T8] usb 6-1: Using ep0 maxpacket: 16 19:18:05 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:18:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2187.513207][ T8816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.524640][ T8816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2187.535741][ T8816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2187.545632][ T8816] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 19:18:05 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x8040ae9f, 0x0) [ 2187.566771][ T8816] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2187.573176][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 19:18:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2187.635225][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2187.662751][T11574] overlayfs: missing 'lowerdir' 19:18:05 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x8040ae9f, 0x0) 19:18:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2187.683080][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2187.703930][ T8816] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2187.711469][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2187.730518][ T8816] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2187.753778][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2187.765499][ T8816] usb 4-1: Manufacturer: syz [ 2187.784303][ T8816] usb 4-1: config 0 descriptor?? [ 2187.813401][T11580] overlayfs: missing 'lowerdir' [ 2187.873140][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2187.886719][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2187.899034][ T8] usb 6-1: Manufacturer: syz [ 2187.909519][ T8] usb 6-1: config 0 descriptor?? [ 2188.033541][ T5126] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2188.132568][ T8816] rc_core: IR keymap rc-hauppauge not found [ 2188.139151][ T8816] Registered IR keymap rc-empty [ 2188.146398][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.192680][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.223670][ T8816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2188.241241][ T8816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input604 [ 2188.242568][ T8] rc_core: IR keymap rc-hauppauge not found [ 2188.263048][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.270343][ T8] Registered IR keymap rc-empty [ 2188.278685][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.293442][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2188.298714][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.314359][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.332589][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.347548][ T8] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2188.371603][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input605 [ 2188.371928][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.394732][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.422660][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.432711][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.443193][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.454508][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2188.463944][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.465603][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.481401][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2188.491305][ T5126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2188.501438][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.502670][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.514838][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.552630][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.555702][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.593860][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.610345][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.622656][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2188.632164][ T8816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2188.639475][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2188.642922][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.649095][ T5126] usb 1-1: Manufacturer: syz [ 2188.667557][ T5126] usb 1-1: config 0 descriptor?? [ 2188.674468][ T8816] mceusb 4-1:0.0: Registered ᠉ with mce emulator interface version 1 [ 2188.684163][ T8816] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2188.715191][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.743355][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.792639][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2188.828754][ T8] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2188.839883][ T8] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2188.860689][ T8] usb 6-1: USB disconnect, device number 43 19:18:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:18:06 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x8040ae9f, 0x0) 19:18:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2189.044211][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2189.050179][ T5126] Registered IR keymap rc-empty [ 2189.050744][T11594] overlayfs: missing 'lowerdir' [ 2189.082676][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.136164][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.167502][T11576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2189.179474][ T5126] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2189.192777][T11576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.207272][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input606 [ 2189.223816][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.263933][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.292936][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.323750][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.363440][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.392635][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.400379][ T777] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2189.432688][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.472635][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.503109][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.542612][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2189.576186][ T5126] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2189.584532][ T5126] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2189.644552][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2189.675544][T11193] usb 1-1: USB disconnect, device number 13 [ 2189.782648][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.793519][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2189.804979][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2189.814860][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2189.825674][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2189.913406][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2189.922597][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2189.930639][ T777] usb 6-1: Manufacturer: syz [ 2189.939496][ T777] usb 6-1: config 0 descriptor?? 19:18:07 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2190.088725][ T5126] usb 4-1: USB disconnect, device number 107 19:18:08 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) 19:18:08 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) 19:18:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:18:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) 19:18:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:08 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) [ 2190.269754][T11604] overlayfs: failed to resolve './f': -2 19:18:08 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) [ 2190.342596][ T777] rc_core: IR keymap rc-hauppauge not found [ 2190.363009][ T777] Registered IR keymap rc-empty [ 2190.378524][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.427322][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.449821][T11614] overlayfs: failed to resolve './f': -2 [ 2190.475517][ T777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2190.511810][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input607 [ 2190.532876][ T5126] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2190.545052][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.582626][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.582742][ T8816] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2190.619292][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.658641][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.695729][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.733131][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.766815][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.802581][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.812736][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 2190.832658][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.852891][ T8816] usb 1-1: Using ep0 maxpacket: 16 [ 2190.862653][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2190.893799][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2190.910457][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2190.928088][ T777] usb 6-1: USB disconnect, device number 44 19:18:08 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:18:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0) [ 2190.954040][ T5126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2190.984743][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2191.003433][ T8816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.024579][ T8816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2191.037324][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2191.055636][ T5126] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2191.066622][ T8816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2191.077361][ T5126] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2191.094020][ T8816] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2191.112886][ T8816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2191.212752][ T5126] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2191.228540][ T5126] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2191.237441][ T8816] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2191.246713][ T5126] usb 4-1: Manufacturer: syz [ 2191.251979][ T8816] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2191.270039][ T5126] usb 4-1: config 0 descriptor?? [ 2191.275137][ T8816] usb 1-1: Manufacturer: syz [ 2191.281634][ T8816] usb 1-1: config 0 descriptor?? [ 2191.492543][ T777] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2191.613701][ T8816] rc_core: IR keymap rc-hauppauge not found [ 2191.620348][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2191.626371][ T5126] Registered IR keymap rc-empty [ 2191.631320][ T8816] Registered IR keymap rc-empty [ 2191.636610][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.644386][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.672635][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.680403][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.713530][ T8816] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2191.729475][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2191.732576][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2191.744780][ T8816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input609 [ 2191.763137][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.763514][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input608 [ 2191.790288][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.800596][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.809980][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.833670][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.862742][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.870046][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.892612][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.902838][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.912726][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.920430][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2191.933186][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2191.941965][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2191.944773][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2191.953595][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2191.959773][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2191.982699][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.002659][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2192.016488][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.048950][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2192.052789][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2192.057257][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.067454][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2192.080340][ T777] usb 6-1: Manufacturer: syz [ 2192.088062][ T777] usb 6-1: config 0 descriptor?? [ 2192.102667][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2192.111115][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.142579][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2192.149771][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.192650][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2192.200356][ T5126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2192.224305][ T8816] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2192.233320][ T8816] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2192.247577][ T8816] usb 1-1: USB disconnect, device number 14 [ 2192.253990][ T5126] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2192.262576][ T5126] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2192.285419][ T5126] usb 4-1: USB disconnect, device number 108 19:18:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x21}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, r0}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)=0x7) r3 = socket(0x6, 0x3, 0x1cc2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000180)={r4, 0x3, 0x1, "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"}) fcntl$setown(r0, 0x8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup(r1) 19:18:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:18:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 19:18:10 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) 19:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8040ae9f, 0x0) 19:18:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) [ 2192.483002][ T777] rc_core: IR keymap rc-hauppauge not found [ 2192.488961][ T777] Registered IR keymap rc-empty [ 2192.505922][T11635] overlayfs: failed to resolve './f': -2 [ 2192.507205][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) [ 2192.612994][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.673806][ T777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2192.698361][T11644] overlay: Bad value for 'upperdir' [ 2192.714953][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input610 [ 2192.750343][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.793956][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.823050][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.842844][T11193] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2192.857068][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.892689][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.927392][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2192.965919][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2193.002662][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2193.032824][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2193.062633][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:10 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 19:18:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2193.084050][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2193.094728][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2193.119211][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2193.145897][T11652] overlay: Bad value for 'upperdir' [ 2193.162815][ T777] usb 6-1: USB disconnect, device number 45 [ 2193.212938][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.242681][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2193.282107][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2193.292192][T11193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2193.312820][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2193.402913][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2193.411972][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2193.424088][T11193] usb 1-1: Manufacturer: syz [ 2193.431285][T11193] usb 1-1: config 0 descriptor?? [ 2193.602648][ T777] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2193.752767][T11193] rc_core: IR keymap rc-hauppauge not found [ 2193.758694][T11193] Registered IR keymap rc-empty [ 2193.768305][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2193.803115][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2193.839129][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2193.853990][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2193.863220][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input611 [ 2193.884966][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2193.900591][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.909422][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.913863][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2193.952960][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2193.972627][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.982874][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2193.995813][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.003129][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2194.013028][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2194.023906][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2194.042626][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.075911][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.113275][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.122675][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2194.131871][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2194.147105][ T777] usb 6-1: Manufacturer: syz [ 2194.151805][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.163209][ T777] usb 6-1: config 0 descriptor?? [ 2194.192609][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.223013][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2194.260079][T11193] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2194.268219][T11193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2194.286479][T11193] usb 1-1: USB disconnect, device number 15 [ 2194.502569][ T777] rc_core: IR keymap rc-hauppauge not found [ 2194.508591][ T777] Registered IR keymap rc-empty [ 2194.515545][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.558718][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.594016][ T777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2194.619709][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input612 [ 2194.644194][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.678133][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.718088][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.752728][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.794297][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.834370][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.866999][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.903559][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.939333][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2194.978611][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2195.015846][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2195.024020][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2195.039042][ T777] usb 6-1: USB disconnect, device number 46 19:18:13 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x21}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, r0}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)=0x7) r3 = socket(0x6, 0x3, 0x1cc2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000180)={r4, 0x3, 0x1, "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"}) fcntl$setown(r0, 0x8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup(r1) 19:18:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) 19:18:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:13 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) 19:18:13 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) [ 2195.704793][T11666] overlay: Bad value for 'upperdir' 19:18:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) 19:18:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2195.861150][T11679] overlay: Unknown parameter 'i' 19:18:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2195.952627][T11193] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2195.971645][T11684] overlay: Unknown parameter 'i' [ 2196.012565][ T5126] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2196.202603][T11193] usb 6-1: Using ep0 maxpacket: 16 [ 2196.282637][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2196.323970][T11193] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.338434][T11193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2196.350125][T11193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2196.361354][T11193] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2196.372123][T11193] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2196.412976][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.432157][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2196.444398][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2196.454106][ T5126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2196.463845][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2196.464051][T11193] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2196.486379][T11193] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2196.494574][T11193] usb 6-1: Manufacturer: syz [ 2196.501105][T11193] usb 6-1: config 0 descriptor?? [ 2196.554025][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2196.563279][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2196.571335][ T5126] usb 1-1: Manufacturer: syz [ 2196.579407][ T5126] usb 1-1: config 0 descriptor?? [ 2196.824660][T11193] rc_core: IR keymap rc-hauppauge not found [ 2196.830703][T11193] Registered IR keymap rc-empty [ 2196.836245][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2196.872782][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2196.902707][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2196.908645][ T5126] Registered IR keymap rc-empty [ 2196.910575][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2196.915445][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2196.937104][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input613 [ 2196.957636][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2196.973217][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2196.992789][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.013497][ T5126] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2197.029443][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input614 [ 2197.032682][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.045096][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.061439][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.070122][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.092718][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.112619][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.133120][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.143787][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.163512][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.192662][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.200021][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.222692][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.238365][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.252804][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.282613][T11193] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2197.282885][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.318980][T11193] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2197.327155][T11193] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2197.332574][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.346792][T11193] usb 6-1: USB disconnect, device number 47 [ 2197.373635][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.419381][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.453539][ T5126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2197.495161][ T5126] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2197.503728][ T5126] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2197.516721][ T5126] usb 1-1: USB disconnect, device number 16 19:18:16 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) 19:18:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:16 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:16 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2198.812368][T11703] overlay: Unknown parameter 'i' 19:18:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x8040ae9f, 0x0) 19:18:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) [ 2199.004139][T11713] overlay: Bad value for 'index' [ 2199.022613][ T5126] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2199.042752][ T5130] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2199.050849][ T8816] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2199.272722][ T5126] usb 6-1: Using ep0 maxpacket: 16 [ 2199.312573][ T5130] usb 4-1: Using ep0 maxpacket: 16 [ 2199.332652][ T8816] usb 1-1: Using ep0 maxpacket: 16 [ 2199.412678][ T5126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.423242][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2199.434830][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2199.445170][ T5126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2199.455262][ T5126] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.468369][ T5130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.478976][ T8816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.491438][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2199.503372][ T8816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2199.514876][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2199.524916][ T8816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2199.535109][ T5130] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2199.545109][ T8816] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2199.554959][ T5130] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.568796][ T8816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.581873][ T5126] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2199.591532][ T5126] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2199.600741][ T5126] usb 6-1: Manufacturer: syz [ 2199.608814][ T5126] usb 6-1: config 0 descriptor?? [ 2199.692739][ T5130] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2199.701906][ T8816] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2199.712806][ T5130] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2199.720825][ T5130] usb 4-1: Manufacturer: syz [ 2199.725920][ T8816] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2199.742380][ T8816] usb 1-1: Manufacturer: syz [ 2199.750077][ T8816] usb 1-1: config 0 descriptor?? [ 2199.756151][ T5130] usb 4-1: config 0 descriptor?? [ 2199.932686][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2199.939692][ T5126] Registered IR keymap rc-empty [ 2199.945346][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2199.982624][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.015467][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2200.030926][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input615 [ 2200.067163][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.112924][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.132528][ T8816] rc_core: IR keymap rc-hauppauge not found [ 2200.138491][ T8816] Registered IR keymap rc-empty [ 2200.144120][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.151347][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.158516][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2200.166989][ T5130] Registered IR keymap rc-empty [ 2200.171923][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.202743][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.210674][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.219874][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.232592][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.253270][ T8816] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 2200.267294][ T5130] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 2200.281471][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.293761][ T8816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input617 [ 2200.307320][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input616 [ 2200.326171][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.334004][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.343279][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.372964][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.380309][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.388585][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.402561][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.424249][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.431458][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.442566][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.452875][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.482708][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2200.489945][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.497866][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.534139][ T5126] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2200.542150][ T5126] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2200.550848][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.558122][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.568601][ T5126] usb 6-1: USB disconnect, device number 48 [ 2200.592575][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.599878][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.623171][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.642594][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.672626][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.680199][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:18 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:18 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) [ 2200.722598][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2200.732011][ T8816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2200.774874][ T5130] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2200.798351][ T8816] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2200.810404][T11730] overlay: Bad value for 'index' [ 2200.817935][ T5130] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2200.828375][ T8816] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2200.867394][ T5130] usb 4-1: USB disconnect, device number 109 [ 2200.876316][ T8816] usb 1-1: USB disconnect, device number 17 [ 2201.153136][ T5126] usb 6-1: new high-speed USB device number 49 using dummy_hcd 19:18:19 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) 19:18:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x8040ae9f, 0x0) 19:18:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2201.303677][T11742] overlay: Bad value for 'index' [ 2201.305801][ T5130] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2201.402660][ T5126] usb 6-1: Using ep0 maxpacket: 16 19:18:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2201.441683][T11750] overlay: Bad value for 'index' [ 2201.516001][T11752] overlay: Bad value for 'index' [ 2201.523430][ T5126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.543462][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2201.570897][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2201.580875][ T5130] usb 4-1: Using ep0 maxpacket: 16 [ 2201.591979][ T5126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2201.592770][T31247] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2201.603005][ T5126] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2201.702671][ T5130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.713118][ T5126] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2201.722156][ T5126] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2201.731010][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2201.741964][ T5126] usb 6-1: Manufacturer: syz [ 2201.746680][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2201.758915][ T5126] usb 6-1: config 0 descriptor?? [ 2201.764021][ T5130] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2201.773996][ T5130] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2201.842521][T31247] usb 1-1: Using ep0 maxpacket: 16 [ 2201.862643][ T5130] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2201.871868][ T5130] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2201.880162][ T5130] usb 4-1: Manufacturer: syz [ 2201.887747][ T5130] usb 4-1: config 0 descriptor?? [ 2201.972611][T31247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.982957][T31247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2201.994440][T31247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2202.004628][T31247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2202.017313][T31247] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2202.092698][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2202.100441][ T5126] Registered IR keymap rc-empty [ 2202.106142][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.124921][T31247] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2202.141211][T31247] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2202.142612][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.149756][T31247] usb 1-1: Manufacturer: syz [ 2202.172092][T31247] usb 1-1: config 0 descriptor?? [ 2202.194067][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2202.209556][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input618 [ 2202.225107][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.242557][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2202.248504][ T5130] Registered IR keymap rc-empty [ 2202.255247][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.262668][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.302609][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.309893][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.342594][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.350441][ T5130] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 2202.372547][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input619 [ 2202.390908][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.398260][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.432741][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.442715][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.472708][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.482542][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.504475][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.512997][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.522682][T31247] rc_core: IR keymap rc-hauppauge not found [ 2202.528642][T31247] Registered IR keymap rc-empty [ 2202.532647][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.533850][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.543058][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.562593][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.582637][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2202.591629][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.592897][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.617159][ T5126] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2202.629802][ T5126] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2202.634111][T31247] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 2202.638341][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.654347][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input620 [ 2202.672169][ T5126] usb 6-1: USB disconnect, device number 49 [ 2202.710265][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.722861][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.753726][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.762697][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2202.795256][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.811096][ T5130] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2202.833364][ T5130] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2202.833427][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.861493][ T5130] usb 4-1: USB disconnect, device number 110 [ 2202.882666][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:20 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:20 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2202.942586][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2202.994889][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2203.044705][T11768] overlay: Bad value for 'index' [ 2203.053244][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2203.105265][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2203.143392][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2203.173888][T31247] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2203.181919][T31247] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2203.200449][T31247] usb 1-1: USB disconnect, device number 18 [ 2203.263866][ T5126] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2203.402699][ T5130] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2203.502525][ T5126] usb 6-1: Using ep0 maxpacket: 16 19:18:21 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2203.622579][ T5126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.637948][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2203.650884][ T5130] usb 4-1: Using ep0 maxpacket: 16 [ 2203.663250][ T5126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 19:18:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2203.683518][ T5126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2203.715904][ T5126] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2203.783390][ T5130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.812250][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 19:18:21 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2203.842893][ T5126] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2203.866999][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2203.884349][ T5126] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2203.906027][ T5126] usb 6-1: Manufacturer: syz [ 2203.910741][ T5130] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2203.923280][ T5126] usb 6-1: config 0 descriptor?? [ 2203.929494][ T5130] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2204.025495][T31247] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2204.042997][ T5130] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2204.052062][ T5130] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2204.068699][ T5130] usb 4-1: Manufacturer: syz [ 2204.076781][ T5130] usb 4-1: config 0 descriptor?? [ 2204.263491][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2204.272837][ T5126] Registered IR keymap rc-empty [ 2204.281325][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.312594][T31247] usb 1-1: Using ep0 maxpacket: 16 [ 2204.313841][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.353188][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2204.369197][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input621 [ 2204.385563][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.422723][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.462750][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.462857][T31247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.487731][T31247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2204.493202][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.500070][T31247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2204.515930][T31247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2204.528323][T31247] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2204.533970][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.587707][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.623435][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.630544][T31247] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2204.639861][T31247] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2204.652727][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.656875][T31247] usb 1-1: Manufacturer: syz [ 2204.670821][T31247] usb 1-1: config 0 descriptor?? [ 2204.682641][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.712560][ T5126] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2204.744538][ T5126] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2204.753127][ T5126] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2204.767723][ T5126] usb 6-1: USB disconnect, device number 50 [ 2204.982699][T31247] rc_core: IR keymap rc-hauppauge not found [ 2204.990433][T31247] Registered IR keymap rc-empty [ 2204.995988][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.042908][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.083691][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2205.101225][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input622 [ 2205.120766][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.167817][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.214579][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.253500][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.282590][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.312726][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.343127][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.372585][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.402738][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.442764][T31247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2205.486324][T31247] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2205.497312][T31247] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2205.516945][T31247] usb 1-1: USB disconnect, device number 19 19:18:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) poll(&(0x7f0000000000)=[{r0, 0x441c}], 0x1, 0x0) 19:18:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:23 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:23 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:23 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2206.232630][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2206.239283][ T5130] Registered IR keymap rc-empty [ 2206.245106][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 19:18:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2206.302604][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 19:18:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2206.347348][ T5130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2206.384247][T18804] usb 6-1: new high-speed USB device number 51 using dummy_hcd 19:18:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2206.398696][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input623 [ 2206.435865][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.452817][T11193] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2206.479215][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.522719][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.562647][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.602728][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.633114][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.642567][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2206.662704][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.692795][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.727123][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.732556][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2206.762801][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2206.773545][ T5130] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2206.789384][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2206.801352][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2206.818796][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2206.830432][ T5130] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2206.838804][ T5130] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2206.847441][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2206.863980][ T5130] usb 4-1: USB disconnect, device number 111 [ 2206.882639][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2206.905628][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2206.928653][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2206.942746][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2206.951820][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2206.953248][T11193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 19:18:24 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559000905828ebcb2eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b67c8140501da1603dde000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x6, 0xaf, {0xaf, 0xb, "20daa05c01954498a8370f81fb32fde472d0360238e10479516a5c9b5d5323bacbcd463533ae3fac5ef28406fba28f84f0a808ecb909d6ca4857a2a806e11546074d225fcae8f4429a2181d749f46b2de13b02ca9871ed617a6687549e77e32b2760b2932bdf6e3764da12c8fdfb4d2b5bf383c5431720d5fb49df67cbf2e73231159f0f0033a90fc985b809359b2299e6b8ff92c3f841c48bcae512aa3486bb2f85e8323362e51ae0cd75d5a4"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000280)={0x40, 0x30, 0xe5, "1e4ed6d9aa5268f0a4bf06bcdf8330f6d6a9ab94cabcfb4d6b73d29e01632e935f0ed277cfaba7c7367187b4d1ccdc6db36b5237725d8cdc97e6649555345cd0da9f43468391f34b8caa8492c1c05340795e11913fdf8c1975116dfeffce21379ffc3232617bdac221caea9bf229e7a473b7401f3016d16b39c921a5cad16a8b0e6ee50366309639553205dcdceaa1a7e51107738531097fdd5ae9542d56b80c82060e5cfdff11a49113cc8770faa2769ce32335c36993597a6111bada009ae5d9a765491b58f1d301f810ea6b1d14dc4de53a95ca0b5161b43eed71ab66e832513c599123"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000001c0)={0x0, 0x8, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:24 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) [ 2206.981548][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2206.988680][T18804] usb 6-1: Manufacturer: syz [ 2207.015129][T18804] usb 6-1: config 0 descriptor?? [ 2207.112986][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2207.130383][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2207.139698][T11193] usb 1-1: Manufacturer: syz [ 2207.155052][T11193] usb 1-1: config 0 descriptor?? [ 2207.352515][T18804] rc_core: IR keymap rc-hauppauge not found [ 2207.358564][T18804] Registered IR keymap rc-empty [ 2207.364310][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.392973][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.406680][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.416972][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.426258][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2207.439028][ T5130] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2207.448702][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input624 [ 2207.466743][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.512536][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.542768][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.572614][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.602565][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.640744][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.672765][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.682497][ T5130] usb 4-1: Using ep0 maxpacket: 16 [ 2207.714547][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.748286][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.787542][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2207.807946][ T5130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.818883][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 45756, setting to 1024 [ 2207.838560][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2207.846736][ T5130] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2207.857055][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2207.870698][ T5130] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2207.890483][T18804] usb 6-1: USB disconnect, device number 51 19:18:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2207.983087][ T5130] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2207.992345][ T5130] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2208.001385][ T5130] usb 4-1: Manufacturer: syz [ 2208.010954][ T5130] usb 4-1: config 0 descriptor?? [ 2208.033873][T11823] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2208.626361][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.636777][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:18:26 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:26 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 19:18:26 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2209.323065][T11193] rc_core: IR keymap rc-hauppauge not found [ 2209.334193][T11193] Registered IR keymap rc-empty [ 2209.355238][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.402842][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.454126][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2209.480100][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input625 [ 2209.497152][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.503377][T18804] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2209.537069][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.578628][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.612643][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.643423][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.672634][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.702620][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.732564][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.762573][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.772531][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2209.792692][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2209.823849][T11193] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2209.832157][T11193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2209.848984][T11193] usb 1-1: USB disconnect, device number 20 [ 2209.903042][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2209.920368][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2209.932528][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2209.942292][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2209.953643][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2210.071268][ T5130] usb 4-1: USB disconnect, device number 112 [ 2210.079903][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2210.103844][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 19:18:27 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) [ 2210.120797][T18804] usb 6-1: Manufacturer: syz [ 2210.146772][T18804] usb 6-1: config 0 descriptor?? 19:18:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2210.242633][T11193] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2210.526232][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2210.558415][T18804] rc_core: IR keymap rc-hauppauge not found [ 2210.570705][T18804] Registered IR keymap rc-empty [ 2210.581749][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.632822][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.642612][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.672524][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2210.676390][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2210.708802][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2210.724266][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input626 [ 2210.745072][T11193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2210.763256][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.763507][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2210.792976][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.825051][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.863303][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.883511][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2210.903405][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2210.905310][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2210.911409][T11193] usb 1-1: Manufacturer: syz [ 2210.934906][T11193] usb 1-1: config 0 descriptor?? [ 2210.973336][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2211.024640][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2211.083248][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2211.113371][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2211.151002][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2211.179897][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.190290][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.195792][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2211.206410][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2211.218986][T18804] usb 6-1: USB disconnect, device number 52 19:18:30 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:30 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:30 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:30 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2212.372643][T11193] rc_core: IR keymap rc-hauppauge not found [ 2212.389387][T11193] Registered IR keymap rc-empty [ 2212.404019][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2212.444107][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:30 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2212.495169][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2212.512610][ T777] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2212.525761][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input627 [ 2212.543426][T31247] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2212.564856][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:30 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2212.614256][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.650076][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.692541][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.726977][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.772789][ T777] usb 6-1: Using ep0 maxpacket: 16 [ 2212.778117][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.802516][T31247] usb 4-1: Using ep0 maxpacket: 16 [ 2212.814714][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.843580][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.872806][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.892945][ T777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.903800][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2212.911803][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2212.924734][T31247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.935108][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2212.946131][ T777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2212.955877][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2212.967431][T11193] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2212.977542][ T777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2212.987361][T11193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2212.995911][T31247] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2213.005860][ T777] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2213.030531][T11193] usb 1-1: USB disconnect, device number 21 [ 2213.039126][T31247] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2213.142763][T31247] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2213.151945][ T777] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2213.161084][T31247] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2213.169426][ T777] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2213.178842][T31247] usb 4-1: Manufacturer: syz [ 2213.183568][ T777] usb 6-1: Manufacturer: syz [ 2213.191592][T31247] usb 4-1: config 0 descriptor?? [ 2213.201759][ T777] usb 6-1: config 0 descriptor?? [ 2213.425119][T11193] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2213.536128][T31247] rc_core: IR keymap rc-hauppauge not found [ 2213.542092][ T777] rc_core: IR keymap rc-hauppauge not found [ 2213.548083][ T777] Registered IR keymap rc-empty [ 2213.553130][T31247] Registered IR keymap rc-empty [ 2213.559294][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.567138][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.602668][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.609981][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.646941][ T777] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2213.660692][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2213.674449][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2213.681871][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input628 [ 2213.697045][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input629 [ 2213.723319][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.736119][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.772605][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.779792][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.792838][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.809376][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2213.820424][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.828056][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.835275][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2213.846453][T11193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2213.856209][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2213.872624][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.879893][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.905951][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.913324][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.942869][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2213.951944][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2213.960093][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2213.967381][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2213.977483][T11193] usb 1-1: Manufacturer: syz [ 2213.988156][T11193] usb 1-1: config 0 descriptor?? [ 2214.002896][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2214.012756][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2214.043064][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2214.050271][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2214.085028][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2214.092339][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2214.115180][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2214.131546][ T777] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2214.147338][T31247] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2214.155779][T31247] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2214.168486][ T777] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2214.176936][T31247] usb 4-1: USB disconnect, device number 113 [ 2214.183237][ T777] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2214.214945][ T777] usb 6-1: USB disconnect, device number 53 [ 2214.239895][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.279505][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:18:33 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:33 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:33 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:33 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) 19:18:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) [ 2215.513075][T11193] rc_core: IR keymap rc-hauppauge not found [ 2215.519777][T11193] Registered IR keymap rc-empty [ 2215.528112][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.564511][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) [ 2215.603959][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2215.622074][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input630 [ 2215.652880][ T8816] usb 6-1: new high-speed USB device number 54 using dummy_hcd 19:18:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2215.661187][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.668688][T31247] usb 4-1: new high-speed USB device number 114 using dummy_hcd 19:18:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 2215.712662][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.763917][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.804304][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.855153][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.892660][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.922806][T31247] usb 4-1: Using ep0 maxpacket: 16 [ 2215.928114][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.942653][ T8816] usb 6-1: Using ep0 maxpacket: 16 [ 2215.964577][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2215.992938][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2216.023286][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2216.054444][T11193] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2216.062798][T31247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.074218][T11193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2216.082688][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2216.098589][T31247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2216.109651][T11193] usb 1-1: USB disconnect, device number 22 [ 2216.112770][ T8816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.117786][T31247] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2216.137944][T31247] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2216.146615][ T8816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2216.163120][ T8816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2216.175715][ T8816] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2216.203678][ T8816] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2216.223086][T31247] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2216.245637][T31247] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2216.262178][T31247] usb 4-1: Manufacturer: syz [ 2216.269939][T31247] usb 4-1: config 0 descriptor?? [ 2216.344641][ T8816] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2216.355038][ T8816] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2216.364577][ T8816] usb 6-1: Manufacturer: syz [ 2216.370816][ T8816] usb 6-1: config 0 descriptor?? [ 2216.592550][T11193] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2216.602721][T31247] rc_core: IR keymap rc-hauppauge not found [ 2216.608649][T31247] Registered IR keymap rc-empty [ 2216.614281][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.643520][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.679458][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2216.692731][ T8816] rc_core: IR keymap rc-hauppauge not found [ 2216.699792][ T8816] Registered IR keymap rc-empty [ 2216.706985][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input631 [ 2216.708739][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.731871][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.763127][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.763168][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.798580][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.815049][ T8816] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2216.832227][ T8816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input632 [ 2216.832705][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 2216.851914][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.862661][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.892802][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.902859][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.932841][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.942771][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.962742][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.972782][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2216.992597][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2216.992627][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.012213][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2217.023305][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2217.030479][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2217.040209][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2217.048483][T11193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2217.058352][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2217.065662][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2217.072657][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2217.102666][T31247] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2217.115298][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2217.134530][T31247] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2217.142976][T31247] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2217.154489][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2217.155139][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2217.177766][T31247] usb 4-1: USB disconnect, device number 114 [ 2217.184118][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2217.202585][T11193] usb 1-1: Manufacturer: syz [ 2217.208443][ T8816] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2217.232287][T11193] usb 1-1: config 0 descriptor?? [ 2217.254563][ T8816] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2217.271158][ T8816] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2217.285146][ T8816] usb 6-1: USB disconnect, device number 54 [ 2217.562579][T11193] rc_core: IR keymap rc-hauppauge not found [ 2217.568727][T11193] Registered IR keymap rc-empty [ 2217.574542][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.602700][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.633615][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2217.649253][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input633 [ 2217.679713][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.704278][T11902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.713217][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.721472][T11902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.744311][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.777350][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.812779][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.848426][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.888456][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.923725][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.958370][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2217.997194][T11193] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2218.038862][T11193] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2218.047545][T11193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2218.099661][T18804] usb 1-1: USB disconnect, device number 23 19:18:36 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19:18:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:36 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:36 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19:18:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 19:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 19:18:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2218.917556][T11193] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2218.972855][T31247] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2219.002655][T18804] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 2219.172654][T11193] usb 4-1: Using ep0 maxpacket: 16 [ 2219.225547][T31247] usb 6-1: Using ep0 maxpacket: 16 [ 2219.292624][T11193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.303410][T11193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2219.314675][T11193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2219.325163][T11193] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2219.337948][T11193] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2219.351044][T31247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.362108][T31247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2219.375088][T31247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2219.384871][T31247] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2219.394918][T31247] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2219.432786][T18804] usb 1-1: not running at top speed; connect to a high speed hub [ 2219.432946][T11193] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2219.454064][T11193] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2219.462080][T11193] usb 4-1: Manufacturer: syz [ 2219.471872][T11193] usb 4-1: config 0 descriptor?? [ 2219.492992][T31247] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2219.502071][T31247] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2219.515211][T31247] usb 6-1: Manufacturer: syz [ 2219.537989][T31247] usb 6-1: config 0 descriptor?? [ 2219.542600][T18804] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2219.551107][T18804] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2219.561257][T18804] usb 1-1: config 80 has no interface number 0 [ 2219.568774][T18804] usb 1-1: config 80 has no interface number 1 [ 2219.576224][T18804] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2219.587976][T18804] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2219.602206][T18804] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2219.613527][T18804] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2219.624940][T18804] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping [ 2219.636085][T18804] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2219.656667][T18804] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2219.665033][T18804] usb 1-1: config 80 interface 6 has no altsetting 0 [ 2219.794696][T11193] rc_core: IR keymap rc-hauppauge not found [ 2219.802367][T11193] Registered IR keymap rc-empty [ 2219.807554][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2219.842768][T18804] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2219.842878][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2219.851829][T18804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.867608][T18804] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2219.872783][T31247] rc_core: IR keymap rc-hauppauge not found [ 2219.874943][T18804] usb 1-1: Manufacturer: ⠊ [ 2219.888442][T18804] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2219.894475][T11193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2219.923868][T31247] Registered IR keymap rc-empty [ 2219.928783][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2219.944823][T11193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input634 [ 2219.971750][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2219.979187][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.023697][T31247] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2220.038930][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.049597][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input635 [ 2220.072630][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.085650][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.110189][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.123010][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.144407][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.152546][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.172525][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.183182][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.202711][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.222574][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.232860][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.254616][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.272584][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.286154][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.292691][T18804] usb 1-1: USB disconnect, device number 24 [ 2220.302605][T11193] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2220.342638][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.350770][T11193] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2220.359573][T11193] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2220.381550][T11193] usb 4-1: USB disconnect, device number 115 [ 2220.392133][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.442839][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2220.474724][T31247] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2220.484184][T31247] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2220.507136][T31247] usb 6-1: USB disconnect, device number 55 19:18:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 19:18:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:38 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:18:38 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:38 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 19:18:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2221.032700][T31247] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2221.042723][ T8816] usb 1-1: new full-speed USB device number 25 using dummy_hcd 19:18:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) [ 2221.292579][T31247] usb 6-1: Using ep0 maxpacket: 16 [ 2221.412780][T31247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.425617][T31247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2221.437722][T31247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2221.447711][T31247] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2221.457506][T31247] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) [ 2221.522814][ T8816] usb 1-1: not running at top speed; connect to a high speed hub [ 2221.542962][T31247] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2221.553189][T31247] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2221.561399][T31247] usb 6-1: Manufacturer: syz 19:18:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2221.596631][T31247] usb 6-1: config 0 descriptor?? [ 2221.625830][ T8816] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2221.643049][ T8816] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2221.651299][ T8816] usb 1-1: config 80 has no interface number 0 [ 2221.664754][ T8816] usb 1-1: config 80 has no interface number 1 [ 2221.684863][ T8816] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2221.707641][ T8816] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2221.719316][ T8816] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2221.743161][ T8816] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2221.754469][ T8816] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping [ 2221.766286][ T8816] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2221.780369][ T8816] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2221.787432][ T8816] usb 1-1: config 80 interface 6 has no altsetting 0 [ 2221.805085][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.811406][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.912508][T31247] rc_core: IR keymap rc-hauppauge not found [ 2221.918435][T31247] Registered IR keymap rc-empty [ 2221.924372][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2221.965604][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2221.982844][ T8816] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2221.991951][ T8816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.000213][ T8816] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2222.005075][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2222.019867][ T8816] usb 1-1: Manufacturer: ⠊ [ 2222.019888][ T8816] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2222.058894][T11961] overlayfs: failed to resolve './file1': -2 [ 2222.071026][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input636 [ 2222.087996][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.123313][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.162624][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.200003][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.233880][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.262844][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.292560][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.323595][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.352838][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.388917][T31247] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2222.430883][T31247] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2222.440168][T31247] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2222.455841][T31247] usb 6-1: USB disconnect, device number 56 [ 2222.477073][ T8816] usb 1-1: USB disconnect, device number 25 19:18:40 executing program 1: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) 19:18:40 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) 19:18:40 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:18:40 executing program 1: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) 19:18:40 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) 19:18:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 19:18:40 executing program 1: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) 19:18:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:18:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) [ 2223.142780][T18804] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2223.152651][ T5130] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 2223.422738][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2223.572691][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.583043][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2223.593991][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2223.604703][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2223.614598][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2223.627803][ T5130] usb 1-1: not running at top speed; connect to a high speed hub [ 2223.722932][ T5130] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2223.733660][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2223.743285][ T5130] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2223.751801][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2223.759931][ T5130] usb 1-1: config 80 has no interface number 0 [ 2223.767567][T18804] usb 6-1: Manufacturer: syz [ 2223.774888][ T5130] usb 1-1: config 80 has no interface number 1 [ 2223.781296][ T5130] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2223.793482][T18804] usb 6-1: config 0 descriptor?? [ 2223.798728][ T5130] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2223.819427][ T5130] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2223.830780][ T5130] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2223.841870][ T5130] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping [ 2223.852750][ T5130] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2223.865701][ T5130] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2223.874328][ T5130] usb 1-1: config 80 interface 6 has no altsetting 0 [ 2224.042672][ T5130] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2224.051760][ T5130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.061415][ T5130] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2224.069016][ T5130] usb 1-1: Manufacturer: ⠊ [ 2224.080018][ T5130] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2224.162628][T18804] rc_core: IR keymap rc-hauppauge not found [ 2224.168570][T18804] Registered IR keymap rc-empty [ 2224.174065][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.222929][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.253416][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2224.268682][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input637 [ 2224.287903][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.295752][T11999] overlayfs: failed to resolve './file1': -2 [ 2224.326059][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.362892][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.397392][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.436919][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.476595][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.491161][ T5130] usb 1-1: USB disconnect, device number 26 [ 2224.522763][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.563115][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.603072][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.637799][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2224.679485][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2224.688646][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2224.703634][T18804] usb 6-1: USB disconnect, device number 57 19:18:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 19:18:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:18:42 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 19:18:42 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:42 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x19b3}}, './file0\x00'}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 19:18:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:18:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 19:18:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 19:18:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}}, 0x0) 19:18:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2225.212564][ T5130] usb 1-1: new high-speed USB device number 27 using dummy_hcd 19:18:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2225.313032][T18804] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2225.472990][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2225.592495][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2225.602896][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.614076][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2225.625655][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2225.635921][ T5130] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2225.645686][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2225.722836][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.733717][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2225.744931][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2225.754099][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 19:18:43 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) [ 2225.767758][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2225.780209][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2225.789977][ T5130] usb 1-1: Manufacturer: syz [ 2225.796187][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2225.822741][ T5130] usb 1-1: config 0 descriptor?? [ 2225.900180][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2225.910834][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2225.918966][T18804] usb 6-1: Manufacturer: syz [ 2225.931550][T18804] usb 6-1: config 0 descriptor?? [ 2226.152629][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2226.158819][ T5130] Registered IR keymap rc-empty [ 2226.164127][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.193171][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.235979][ T5130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2226.250358][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input638 [ 2226.264990][T18804] rc_core: IR keymap rc-hauppauge not found [ 2226.270916][T18804] Registered IR keymap rc-empty [ 2226.277221][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.288277][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.297230][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.303116][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.332676][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.339976][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.374007][T18804] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2226.387160][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.400987][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input639 [ 2226.415217][T12024] overlayfs: failed to resolve './file1': -2 [ 2226.430929][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.439106][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.483164][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.490537][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.512776][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.522640][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.542541][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.562544][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.573870][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.592554][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.602788][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.632780][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.641085][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2226.682740][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.702168][ T5130] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2226.710453][ T5130] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2226.725211][ T5130] usb 1-1: USB disconnect, device number 27 [ 2226.732884][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.772569][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.805865][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2226.844735][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2226.853345][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2226.867947][T18804] usb 6-1: USB disconnect, device number 58 19:18:44 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:18:45 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0xfff, 0xffffffff, 0x1}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:18:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}}, 0x0) 19:18:45 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 19:18:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}}, 0x0) 19:18:45 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:45 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2227.462736][T18804] usb 6-1: new high-speed USB device number 59 using dummy_hcd 19:18:45 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2227.602557][ T777] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2227.723864][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2227.822586][ T5130] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 2227.842636][ T777] usb 1-1: Using ep0 maxpacket: 16 [ 2227.862629][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.875251][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2227.886589][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2227.896587][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2227.906557][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2227.962836][ T777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.974738][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2227.986594][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2227.996643][ T777] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2228.004733][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2228.007050][ T777] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.029541][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2228.044447][T18804] usb 6-1: Manufacturer: syz [ 2228.050935][T18804] usb 6-1: config 0 descriptor?? 19:18:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:18:45 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) [ 2228.102673][ T777] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2228.127805][ T777] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2228.155994][ T777] usb 1-1: Manufacturer: syz [ 2228.192735][ T777] usb 1-1: config 0 descriptor?? [ 2228.212793][ T5130] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2228.224193][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2228.235771][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2228.246254][ T5130] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.352906][ T5130] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2228.362106][ T5130] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2228.371282][ T5130] usb 5-1: Manufacturer: syz [ 2228.384809][T18804] rc_core: IR keymap rc-hauppauge not found [ 2228.391371][ T5130] usb 5-1: config 0 descriptor?? [ 2228.398951][T18804] Registered IR keymap rc-empty [ 2228.404326][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.445662][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.484903][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2228.501679][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input640 [ 2228.521519][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.524120][ T777] rc_core: IR keymap rc-hauppauge not found [ 2228.547321][ T777] Registered IR keymap rc-empty [ 2228.552571][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.557963][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.603227][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.604301][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.643144][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.644508][ T777] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2228.655149][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.677075][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.681654][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input641 [ 2228.702576][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.728742][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.745831][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.774987][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.783027][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2228.790070][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.797355][ T5130] Registered IR keymap rc-empty [ 2228.802390][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2228.803172][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.822887][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.832801][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.843249][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2228.863396][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.867622][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.879522][ T5130] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 2228.892757][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.902524][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2228.910910][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input642 [ 2228.924467][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.937528][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2228.950691][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2228.962805][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2228.971082][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2228.983661][T18804] usb 6-1: USB disconnect, device number 59 [ 2228.992996][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2229.022734][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.023633][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2229.065253][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.071563][ T777] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2229.099952][ T777] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 19:18:46 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2229.123654][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.158822][ T777] usb 1-1: USB disconnect, device number 28 [ 2229.173020][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.214500][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.253159][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.299398][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.332541][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.372611][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2229.405468][ T5130] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2229.416730][ T5130] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2229.434723][ T5130] usb 5-1: USB disconnect, device number 6 19:18:47 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x1}) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:47 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) 19:18:47 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2229.623764][T18804] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2229.872505][T18804] usb 6-1: Using ep0 maxpacket: 16 19:18:47 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2229.962723][ T777] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2229.992967][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.010187][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2230.030037][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2230.039864][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2230.058781][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2230.152673][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2230.162021][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2230.170864][T18804] usb 6-1: Manufacturer: syz [ 2230.180186][T18804] usb 6-1: config 0 descriptor?? [ 2230.212642][ T777] usb 1-1: Using ep0 maxpacket: 16 [ 2230.252613][ T5130] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 2230.332600][ T777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.345159][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2230.356625][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2230.368697][ T777] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2230.378696][ T777] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:48 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 19:18:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) [ 2230.474837][ T777] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2230.484582][ T777] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2230.505227][ T777] usb 1-1: Manufacturer: syz [ 2230.512737][T18804] rc_core: IR keymap rc-hauppauge not found 19:18:48 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2230.528899][ T777] usb 1-1: config 0 descriptor?? [ 2230.541535][T18804] Registered IR keymap rc-empty [ 2230.573389][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.623156][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.662680][ T5130] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.673738][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2230.688400][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2230.701050][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input643 [ 2230.715157][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2230.726322][ T5130] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2230.741268][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.772550][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.812631][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.833819][ T5130] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2230.845235][ T5130] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2230.853548][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.861686][ T5130] usb 5-1: Manufacturer: syz [ 2230.862598][ T777] rc_core: IR keymap rc-hauppauge not found [ 2230.875023][ T5130] usb 5-1: config 0 descriptor?? [ 2230.882608][ T777] Registered IR keymap rc-empty [ 2230.887721][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2230.902639][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.922873][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2230.933727][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2230.953789][ T777] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2230.969297][ T777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input644 [ 2230.985793][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2230.994678][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2231.003737][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.016339][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.025580][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.042738][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2231.062701][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.091580][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2231.099644][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.132627][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.132754][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:49 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2231.172785][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.175401][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2231.188770][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2231.222740][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.228307][T18804] usb 6-1: USB disconnect, device number 60 [ 2231.282725][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:49 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) [ 2231.342843][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2231.352509][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2231.358856][ T5130] Registered IR keymap rc-empty [ 2231.367930][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.382700][ T777] mceusb 1-1:0.0: Error: mce write submit urb error = -90 19:18:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2231.403026][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.425387][ T777] mceusb 1-1:0.0: Registered with mce emulator interface version 1 19:18:49 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2231.447994][ T777] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2231.458081][ T5130] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 2231.465539][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input645 [ 2231.527492][ T777] usb 1-1: USB disconnect, device number 29 [ 2231.540968][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.593609][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.642742][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.684352][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.712571][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.742754][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.762561][T18804] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2231.782797][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.812537][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.846494][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:18:49 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2231.883217][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2231.914824][ T5130] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2231.923938][ T5130] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2232.001805][ T5126] usb 5-1: USB disconnect, device number 7 [ 2232.012654][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2232.172632][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.183248][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2232.194861][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2232.205148][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2232.215165][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 19:18:50 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:18:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2232.323178][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2232.332279][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2232.340386][ T5130] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2232.348137][T18804] usb 6-1: Manufacturer: syz [ 2232.356304][T18804] usb 6-1: config 0 descriptor?? 19:18:50 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2232.592882][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2232.672508][T18804] rc_core: IR keymap rc-hauppauge not found [ 2232.680925][T18804] Registered IR keymap rc-empty [ 2232.688635][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2232.722746][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.733176][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2232.740374][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2232.751418][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2232.761159][ T5130] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2232.778291][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2232.794543][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2232.817990][T12113] overlayfs: failed to resolve './file0': -2 [ 2232.825540][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input646 [ 2232.852787][ T5126] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 2232.863716][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2232.892717][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2232.933456][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2232.944257][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2232.951481][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2232.959754][ T5130] usb 1-1: Manufacturer: syz [ 2232.967671][ T5130] usb 1-1: config 0 descriptor?? [ 2232.982597][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.025015][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.064983][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:50 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) [ 2233.092759][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.122661][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.163274][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.202697][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2233.233869][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2233.241914][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2233.252675][ T5126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 19:18:51 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:18:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2233.274116][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2233.290199][T18804] usb 6-1: USB disconnect, device number 61 [ 2233.322639][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 19:18:51 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2233.347102][ T5126] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2233.422600][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2233.432733][ T5130] Registered IR keymap rc-empty [ 2233.434788][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.437721][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.484790][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.504296][ T5126] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2233.514478][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.523289][ T5126] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2233.542511][ T5126] usb 5-1: Manufacturer: syz [ 2233.556765][ T5126] usb 5-1: config 0 descriptor?? [ 2233.563679][ T5130] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2233.580906][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input647 [ 2233.602779][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.632762][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.666163][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.706816][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.745722][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.782576][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.823044][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.863628][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.882708][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2233.888968][ T5126] Registered IR keymap rc-empty [ 2233.894503][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.901745][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2233.922547][T18804] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2233.932800][ T5130] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2233.940065][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:18:51 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) [ 2233.980923][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2233.993941][ T5130] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2234.003757][ T5130] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2234.032138][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input648 [ 2234.049240][ T5130] usb 1-1: USB disconnect, device number 30 [ 2234.064918][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.109793][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.152620][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.172814][T18804] usb 6-1: Using ep0 maxpacket: 16 19:18:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2234.193969][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:18:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2234.242663][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.272929][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.304376][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.314763][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.323178][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2234.334944][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2234.345050][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2234.356107][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.369197][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.402552][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.432606][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2234.462728][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2234.471866][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2234.481243][ T5126] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2234.490315][ T5126] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2234.498868][T18804] usb 6-1: Manufacturer: syz 19:18:52 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2234.509775][ T5126] usb 5-1: USB disconnect, device number 8 [ 2234.522098][T18804] usb 6-1: config 0 descriptor?? 19:18:52 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) [ 2234.882585][T18937] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 2234.903860][T18804] rc_core: IR keymap rc-hauppauge not found [ 2234.909811][T18804] Registered IR keymap rc-empty [ 2234.921503][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2234.962952][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.003653][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2235.019649][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input649 [ 2235.025273][T12144] overlayfs: failed to resolve './file0': -2 19:18:52 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 2235.048560][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2235.109987][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2235.153280][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.193982][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.222742][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2235.262576][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.282789][T18937] usb 1-1: not running at top speed; connect to a high speed hub [ 2235.292962][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.322893][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2235.363792][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.372599][T18937] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2235.386874][T31247] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2235.394515][T18937] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2235.413702][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2235.414622][T18937] usb 1-1: config 80 has no interface number 0 [ 2235.432119][T18937] usb 1-1: config 80 has no interface number 1 [ 2235.439108][T18937] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2235.452290][T18937] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2235.460275][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2235.476825][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2235.478959][T18937] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2235.492205][T18804] usb 6-1: USB disconnect, device number 62 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2235.515799][T18937] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2235.540022][T18937] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping 19:18:53 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2235.585886][T18937] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2235.609998][T18937] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2235.636958][T18937] usb 1-1: config 80 interface 6 has no altsetting 0 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) 19:18:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:18:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0, 0x403}], 0x3, 0x40) [ 2235.793868][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.807220][T18937] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2235.816411][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2235.828084][T18937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.836613][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2235.847018][T18937] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2235.857943][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2235.871017][T18937] usb 1-1: Manufacturer: ⠊ [ 2235.876216][T18937] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2235.979207][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2235.988485][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2235.997312][T31247] usb 5-1: Manufacturer: syz [ 2236.010600][T31247] usb 5-1: config 0 descriptor?? [ 2236.052878][T18804] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2236.268097][T18937] usb 1-1: USB disconnect, device number 31 [ 2236.332503][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2236.355612][T31247] rc_core: IR keymap rc-hauppauge not found [ 2236.361956][T31247] Registered IR keymap rc-empty [ 2236.370587][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.408707][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.450268][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2236.464299][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input650 [ 2236.473672][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.495899][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.501459][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2236.514162][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2236.523990][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2236.532796][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.534045][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2236.572677][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.602614][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:18:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x40) 19:18:54 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2236.632883][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2236.634598][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.650472][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2236.665578][T18804] usb 6-1: Manufacturer: syz [ 2236.684323][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.685611][T18804] usb 6-1: config 0 descriptor?? [ 2236.742692][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.778649][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.812800][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.853825][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2236.888798][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2236.898206][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2236.917413][T31247] usb 5-1: USB disconnect, device number 9 19:18:54 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 19:18:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:18:54 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2237.092872][T18804] rc_core: IR keymap rc-hauppauge not found [ 2237.111887][T18804] Registered IR keymap rc-empty [ 2237.120801][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.164717][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.206578][T12174] overlayfs: failed to resolve './file0': -2 [ 2237.213714][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2237.230168][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input651 [ 2237.255323][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.297920][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.342656][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.362547][ T777] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 2237.382787][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.415492][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.463921][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.492902][T31247] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2237.492911][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:55 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:18:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x40) [ 2237.534007][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.586392][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.632869][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2237.676113][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2237.684404][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2237.701317][T18804] usb 6-1: USB disconnect, device number 63 19:18:55 executing program 5: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2237.762762][ T777] usb 1-1: not running at top speed; connect to a high speed hub 19:18:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2237.852819][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2237.863294][ T777] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2237.871466][ T777] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2237.880377][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2237.903699][ T777] usb 1-1: config 80 has no interface number 0 [ 2237.910061][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2237.920180][ T777] usb 1-1: config 80 has no interface number 1 [ 2237.926759][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2237.940058][ T777] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2237.953513][ T777] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2237.965202][ T777] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2237.976361][ T777] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2237.987767][ T777] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping [ 2237.998844][ T777] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2238.013837][ T777] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2238.020789][ T777] usb 1-1: config 80 interface 6 has no altsetting 0 [ 2238.042959][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2238.053658][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2238.061818][T31247] usb 5-1: Manufacturer: syz [ 2238.070748][T31247] usb 5-1: config 0 descriptor?? [ 2238.182978][ T777] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2238.192239][ T777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.204077][ T777] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2238.212911][ T777] usb 1-1: Manufacturer: ⠊ [ 2238.217796][ T777] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2238.222731][T18804] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2238.413435][T31247] rc_core: IR keymap rc-hauppauge not found [ 2238.419383][T31247] Registered IR keymap rc-empty [ 2238.426343][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:18:56 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x40) 19:18:56 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2238.462654][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.493984][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2238.507472][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2238.545322][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input652 [ 2238.565238][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.603730][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.635725][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.647406][ T777] usb 1-1: USB disconnect, device number 32 [ 2238.652834][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2238.680033][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2238.687043][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.691583][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2238.709759][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2238.720739][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 19:18:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2238.762733][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.792846][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.819249][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2238.829767][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2238.838484][T18804] usb 6-1: Manufacturer: syz [ 2238.844503][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.854660][T18804] usb 6-1: config 0 descriptor?? [ 2238.883627][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.913907][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.942592][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2238.973807][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2238.981811][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 19:18:56 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2238.994956][T31247] usb 5-1: USB disconnect, device number 10 19:18:56 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 2239.292738][T18804] rc_core: IR keymap rc-hauppauge not found [ 2239.299280][T18804] Registered IR keymap rc-empty [ 2239.305031][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:57 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}], 0x2, 0x40) [ 2239.342591][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.362533][ T5126] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 2239.374379][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 19:18:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2239.393073][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input653 [ 2239.425301][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.472684][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.502571][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.502798][T31247] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2239.542735][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.572568][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2239.603944][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.644039][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:57 executing program 5: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2239.672629][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.703165][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.739014][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2239.783113][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2239.791154][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2239.799897][ T5126] usb 1-1: not running at top speed; connect to a high speed hub [ 2239.821593][T18804] usb 6-1: USB disconnect, device number 64 [ 2239.902850][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2239.903640][ T5126] usb 1-1: config 80 has an invalid interface number: 27 but max is 1 [ 2239.913325][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2239.930634][ T5126] usb 1-1: config 80 has an invalid interface number: 6 but max is 1 [ 2239.933227][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2239.952085][ T5126] usb 1-1: config 80 has no interface number 0 [ 2239.955805][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.968200][ T5126] usb 1-1: config 80 has no interface number 1 [ 2239.987137][ T5126] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2240.000583][ T5126] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2240.020006][ T5126] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x3, skipping [ 2240.031338][ T5126] usb 1-1: config 80 interface 6 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2240.042802][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2240.054340][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2240.057390][ T5126] usb 1-1: config 80 interface 6 altsetting 224 has an invalid endpoint with address 0x0, skipping [ 2240.064439][T31247] usb 5-1: Manufacturer: syz [ 2240.081809][T31247] usb 5-1: config 0 descriptor?? [ 2240.089618][ T5126] usb 1-1: config 80 interface 6 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 2240.108150][ T5126] usb 1-1: config 80 interface 27 has no altsetting 0 [ 2240.115264][ T5126] usb 1-1: config 80 interface 6 has no altsetting 0 19:18:58 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}], 0x2, 0x40) [ 2240.224796][T18804] usb 6-1: new high-speed USB device number 65 using dummy_hcd 19:18:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2240.303820][ T5126] usb 1-1: New USB device found, idVendor=0df6, idProduct=0066, bcdDevice=ed.c6 [ 2240.322623][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.330658][ T5126] usb 1-1: Product: 䐺剼㬺䥔뇅든㋤ᳫㅗ雬ὑ [ 2240.364972][ T5126] usb 1-1: Manufacturer: ⠊ [ 2240.369620][ T5126] usb 1-1: SerialNumber: 箋逗㸻˚ᤸ꓍Ƒ컁襙츲鿠旭㎎㣢놶簒☥塹ꎚ猡᳃ྤ곒㖻➹樉丄굼斞矍襥浩ퟦᱡ佭礽㝖띪쐹ൟ뉮阴昔ᕼ檩鈀۔疓᜼쏰 [ 2240.442731][T31247] rc_core: IR keymap rc-hauppauge not found [ 2240.451623][T31247] Registered IR keymap rc-empty [ 2240.457161][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.482558][T18804] usb 6-1: Using ep0 maxpacket: 16 [ 2240.492618][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.523701][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 19:18:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2240.539063][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input654 [ 2240.559358][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.592619][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.623115][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.632934][T18804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.644543][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2240.652728][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.666372][T18804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2240.677297][T18804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2240.687148][T18804] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2240.703549][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.738104][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.776152][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.797688][T18804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2240.808834][ T5126] usb 1-1: USB disconnect, device number 33 [ 2240.818094][T18804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2240.821860][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.838672][T18804] usb 6-1: Manufacturer: syz [ 2240.862684][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.869239][T18804] usb 6-1: config 0 descriptor?? [ 2240.902644][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2240.936278][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2240.945748][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2240.960585][T31247] usb 5-1: USB disconnect, device number 11 19:18:58 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:58 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}], 0x2, 0x40) 19:18:59 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:18:59 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2241.342651][T18804] rc_core: IR keymap rc-hauppauge not found [ 2241.353001][T18804] Registered IR keymap rc-empty [ 2241.361168][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2241.402658][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.437009][T18804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2241.463532][T18804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input655 [ 2241.495316][T31247] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2241.504992][T11193] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2241.514366][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.553342][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.592538][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.622571][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2241.662607][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.702711][T11193] usb 1-1: device descriptor read/64, error -71 [ 2241.703230][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 19:18:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2241.772586][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.812963][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.842552][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.873169][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.892926][T18804] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2241.900623][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2241.900658][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 19:18:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2241.900680][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2241.935139][T12254] overlayfs: failed to resolve './file1': -2 [ 2241.969525][T18804] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2241.972685][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2241.987134][T11193] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2241.999975][T18804] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 19:18:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) [ 2242.016411][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2242.031836][T18804] usb 6-1: USB disconnect, device number 65 [ 2242.044015][T12256] overlayfs: failed to resolve './file1': -2 [ 2242.049243][T31247] usb 5-1: Manufacturer: syz [ 2242.069224][T31247] usb 5-1: config 0 descriptor?? 19:18:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2242.187230][T12261] overlayfs: failed to resolve './file1': -2 [ 2242.192727][T11193] usb 1-1: device descriptor read/64, error -71 [ 2242.333148][T11193] usb usb1-port1: attempt power cycle [ 2242.749023][T11193] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2242.851773][T11193] usb 1-1: device descriptor read/8, error -71 [ 2243.124715][T11193] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2243.212820][T11193] usb 1-1: device descriptor read/8, error -71 [ 2243.341128][T11193] usb usb1-port1: unable to enumerate USB device 19:19:01 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:02 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:02 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0xfefdffff) 19:19:02 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) [ 2244.212755][T31247] rc_core: IR keymap rc-hauppauge not found [ 2244.225689][T31247] Registered IR keymap rc-empty [ 2244.230642][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.292559][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.335112][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2244.370956][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input656 [ 2244.423158][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.465390][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.503389][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.553651][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.592906][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.636374][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.672926][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.726462][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.752866][ T5126] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2244.762845][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2244.794378][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2244.848638][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2244.867246][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2244.904501][T31247] usb 5-1: USB disconnect, device number 12 [ 2244.962844][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2245.252699][ T5126] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2245.292530][T31247] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2245.462537][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2245.592834][ T5126] usb usb1-port1: attempt power cycle [ 2245.652614][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2245.669446][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2245.681659][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2245.694014][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2245.782700][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2245.794665][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2245.803991][T31247] usb 5-1: Manufacturer: syz [ 2245.810157][T31247] usb 5-1: config 0 descriptor?? [ 2246.022761][ T5126] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2246.132889][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2246.422560][ T5126] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2246.533264][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2246.653791][ T5126] usb usb1-port1: unable to enumerate USB device 19:19:05 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x6, 0x4}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:05 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:05 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0xfefdffff) 19:19:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {0xffffffffffffffff, 0x403}], 0x3, 0x40) 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.313846][T31247] rc_core: IR keymap rc-hauppauge not found [ 2247.336820][T31247] Registered IR keymap rc-empty [ 2247.345307][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.393842][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.445322][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2247.480669][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input657 [ 2247.506420][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.554076][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.584664][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.632822][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2247.682638][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.713053][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.753813][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.793023][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.812985][ T5126] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2247.845785][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.882783][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2247.914974][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2247.929925][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2247.947390][T31247] usb 5-1: USB disconnect, device number 13 [ 2248.013555][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2248.292655][ T5126] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2248.332809][T31247] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2248.502511][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2248.638735][ T5126] usb usb1-port1: attempt power cycle [ 2248.692687][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.703493][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2248.714502][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2248.724641][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2248.814001][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2248.823258][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2248.831251][T31247] usb 5-1: Manufacturer: syz [ 2248.843244][T31247] usb 5-1: config 0 descriptor?? [ 2249.062529][ T5126] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2249.172854][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2249.462632][ T5126] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2249.583963][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2249.703599][ T5126] usb usb1-port1: unable to enumerate USB device 19:19:08 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2250.353221][T31247] rc_core: IR keymap rc-hauppauge not found [ 2250.359144][T31247] Registered IR keymap rc-empty 19:19:08 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0xfefdffff) 19:19:08 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}, {r0}], 0x3, 0x40) 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:08 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2250.394609][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.422579][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.467381][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2250.506034][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input658 [ 2250.553649][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.592808][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2250.643877][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2250.685416][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.709740][T12347] overlayfs: missing 'lowerdir' [ 2250.722784][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2250.753526][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.770976][T12349] overlayfs: missing 'lowerdir' [ 2250.803384][T18804] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2250.804404][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 19:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2250.848861][T12351] overlayfs: missing 'lowerdir' [ 2250.863155][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.907831][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2250.941514][T12353] overlayfs: missing 'lowerdir' [ 2250.962990][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2251.013207][T18804] usb 1-1: device descriptor read/64, error -71 [ 2251.015169][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2251.028690][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2251.042002][T31247] usb 5-1: USB disconnect, device number 14 [ 2251.282732][T18804] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2251.410200][T31247] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 2251.492548][T18804] usb 1-1: device descriptor read/64, error -71 [ 2251.612895][T18804] usb usb1-port1: attempt power cycle [ 2251.772832][T31247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.783069][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2251.795075][T31247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2251.804874][T31247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2251.892647][T31247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2251.901770][T31247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2251.909936][T31247] usb 5-1: Manufacturer: syz [ 2251.917416][T31247] usb 5-1: config 0 descriptor?? [ 2252.052673][T18804] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2252.143179][T18804] usb 1-1: device descriptor read/8, error -71 [ 2252.243727][T31247] rc_core: IR keymap rc-hauppauge not found [ 2252.249710][T31247] Registered IR keymap rc-empty [ 2252.254937][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.289834][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.323418][T31247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2252.338263][T31247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input659 [ 2252.357375][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.393115][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.422649][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.422728][T18804] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2252.457870][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.498215][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.533059][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.542829][T18804] usb 1-1: device descriptor read/8, error -71 [ 2252.567327][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.602701][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.633825][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.662982][T31247] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.674316][T18804] usb usb1-port1: unable to enumerate USB device [ 2252.699715][T31247] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2252.707881][T31247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2252.758798][T18804] usb 5-1: USB disconnect, device number 15 19:19:11 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2253.326545][T12359] overlayfs: missing 'lowerdir' 19:19:11 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0xfefdffff) 19:19:11 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.543209][T12363] overlayfs: missing 'lowerdir' 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.642841][T12373] overlayfs: missing 'lowerdir' 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.711758][T12375] overlayfs: missing 'lowerdir' 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.769719][T12377] overlayfs: missing 'lowerdir' 19:19:11 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.856809][T12379] overlayfs: failed to resolve './f': -2 19:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2253.942862][T12383] overlayfs: failed to resolve './f': -2 [ 2253.982653][T18804] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2253.992574][T12385] overlayfs: failed to resolve './f': -2 19:19:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2254.193868][T18804] usb 1-1: device descriptor read/64, error -71 [ 2254.462894][T18804] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2254.662514][T18804] usb 1-1: device descriptor read/64, error -71 [ 2254.792684][T18804] usb usb1-port1: attempt power cycle [ 2255.212708][T18804] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2255.338548][T18804] usb 1-1: device descriptor read/8, error -71 [ 2255.612498][T18804] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2255.704410][T18804] usb 1-1: device descriptor read/8, error -71 [ 2255.829475][T18804] usb usb1-port1: unable to enumerate USB device 19:19:14 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:14 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0xfefdffff) 19:19:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) 19:19:14 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x100000) 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2256.663125][T12393] overlay: Bad value for 'upperdir' 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2256.731885][T12404] overlay: Bad value for 'upperdir' 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2256.801519][T12406] overlay: Bad value for 'upperdir' 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2256.877558][T12408] overlay: Unknown parameter 'i' 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2256.956143][T12410] overlay: Unknown parameter 'i' 19:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2257.025245][T12412] overlay: Unknown parameter 'i' [ 2257.052571][ T5126] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2257.103362][T12414] overlay: Bad value for 'index' [ 2257.262592][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2257.532935][ T5126] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2257.722673][ T5126] usb 1-1: device descriptor read/64, error -71 [ 2257.848979][ T5126] usb usb1-port1: attempt power cycle [ 2258.283942][ T5126] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2258.382613][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2258.658153][ T5126] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2258.752943][ T5126] usb 1-1: device descriptor read/8, error -71 [ 2258.872833][ T5126] usb usb1-port1: unable to enumerate USB device 19:19:17 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:17 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x100000) 19:19:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0xfefdffff) 19:19:17 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2259.724461][T12424] overlay: Bad value for 'index' 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2259.799787][T12430] overlay: Bad value for 'index' 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2259.881400][T12433] overlay: Bad value for 'index' 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2259.954144][T12435] overlay: Bad value for 'index' [ 2259.987297][ T5126] usb 5-1: new high-speed USB device number 16 using dummy_hcd 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2260.030033][T12437] overlay: Bad value for 'index' 19:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2260.123025][ T5130] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2260.272744][ T5126] usb 5-1: Using ep0 maxpacket: 16 [ 2260.372574][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2260.402715][ T5126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.413796][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2260.425304][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2260.438148][ T5126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2260.448860][ T5126] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2260.492664][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.503121][ T5130] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2260.552727][ T5126] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2260.567014][ T5126] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2260.581461][ T5126] usb 5-1: Manufacturer: syz [ 2260.592661][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2260.604295][ T5126] usb 5-1: config 0 descriptor?? [ 2260.609470][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2260.618124][ T5130] usb 1-1: Manufacturer: syz [ 2260.626062][ T5130] usb 1-1: config 0 descriptor?? [ 2260.932474][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2260.938465][ T5126] Registered IR keymap rc-empty [ 2260.945744][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2260.992704][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.023467][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2261.037210][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input660 [ 2261.055117][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.082948][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.112647][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.147569][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.196186][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.230823][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.239787][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.243385][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.303235][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.342538][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.382997][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.412528][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2261.448160][ T5126] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2261.457428][ T5126] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2261.492722][ T5126] usb 5-1: USB disconnect, device number 16 19:19:20 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="9403e2e46e92a78d1e0ad4bfe5df925cd35ee0565d93f766a90ced27f51eb88d6c4f930523603acfc57f5e9c2730b989996b2f04ef4ddf52ac536aaec9e6981a0ecb3a9c9a7f965e92d13b47a1d3feede3148c7ba37680565fa79c772265e14a709b07936a7e02be3bb1a7c7876fb7840e8b06e86f19131d75c1b9333dd883d5e8ee53b5de2432eb11e28906ff782c7824f61c184c807724e5343332abca4c8f5720748fb2a2d52ea0eb91109dbd8d0618c6c616e39d63894c64da2fd84cd14621e1ab3ee6d0ef31ecd872bb98f3e272b17e6a9ea20deceedf554208c615697d4fcf2a87341fc202bb7da2e06f28d21e2c73f43d67860a307a4630ed4478bbbb403ff34e"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(0x0, 0x0, 0x100000) 19:19:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x418}, {r0}], 0x3, 0x40) 19:19:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) 19:19:20 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2262.696296][ T5126] usb 1-1: USB disconnect, device number 58 19:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2263.042834][ T5130] usb 5-1: new high-speed USB device number 17 using dummy_hcd 19:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2263.172528][ T5126] usb 1-1: new high-speed USB device number 59 using dummy_hcd 19:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2263.283909][ T5130] usb 5-1: Using ep0 maxpacket: 16 [ 2263.412587][ T5130] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.422882][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2263.429302][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2263.440532][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2263.462687][ T5130] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2263.476977][ T5130] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2263.572653][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.583044][ T5130] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2263.592098][ T5130] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2263.609611][ T5126] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2263.624098][ T5130] usb 5-1: Manufacturer: syz [ 2263.643784][ T5130] usb 5-1: config 0 descriptor?? [ 2263.712693][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2263.721767][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2263.730715][ T5126] usb 1-1: Manufacturer: syz [ 2263.738082][ T5126] usb 1-1: config 0 descriptor?? [ 2263.963847][ T5130] rc_core: IR keymap rc-hauppauge not found [ 2263.969932][ T5130] Registered IR keymap rc-empty [ 2263.975430][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.012827][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.043460][ T5130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2264.058963][ T5130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input661 [ 2264.076947][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.115802][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.152625][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.182529][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.212726][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.248087][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.288555][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.323220][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.339693][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.348462][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.356371][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.403215][ T5130] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2264.434350][ T5130] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2264.445025][ T5130] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2264.476160][T31247] usb 5-1: USB disconnect, device number 17 19:19:23 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0x100000) 19:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:23 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x418}, {r0}], 0x3, 0x40) 19:19:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) 19:19:23 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2265.776588][ T5130] usb 1-1: USB disconnect, device number 59 19:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2266.112517][ T5126] usb 5-1: new high-speed USB device number 18 using dummy_hcd 19:19:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2266.260109][ T5130] usb 1-1: new high-speed USB device number 60 using dummy_hcd 19:19:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2266.372663][ T5126] usb 5-1: Using ep0 maxpacket: 16 [ 2266.522794][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2266.528067][ T5126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2266.539259][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2266.550272][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2266.560299][ T5126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2266.570109][ T5126] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2266.672913][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2266.684380][ T5126] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2266.701196][ T5130] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2266.710730][ T5126] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2266.728408][ T5126] usb 5-1: Manufacturer: syz [ 2266.747090][ T5126] usb 5-1: config 0 descriptor?? [ 2266.822801][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2266.831874][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2266.841441][ T5130] usb 1-1: Manufacturer: syz [ 2266.848929][ T5130] usb 1-1: config 0 descriptor?? [ 2267.062971][ T5126] rc_core: IR keymap rc-hauppauge not found [ 2267.069984][ T5126] Registered IR keymap rc-empty [ 2267.075317][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.113098][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.143451][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2267.164347][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input662 [ 2267.189723][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.223764][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.257148][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.304390][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.342614][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.372544][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.412905][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.448889][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.458782][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.464482][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.494343][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.528697][ T5126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2267.564523][ T5126] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2267.573328][ T5126] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2267.605714][ T5126] usb 5-1: USB disconnect, device number 18 19:19:26 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0xfefdffff) 19:19:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:26 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x418}, {r0}], 0x3, 0x40) 19:19:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0x100000) 19:19:26 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2268.871841][ T5130] usb 1-1: USB disconnect, device number 60 19:19:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2269.344142][ T5130] usb 1-1: new high-speed USB device number 61 using dummy_hcd 19:19:27 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2269.602509][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 2269.732729][ T5130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.743657][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2269.767852][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2269.874030][ T5130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2269.883543][ T5130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2269.891549][ T5130] usb 1-1: Manufacturer: syz [ 2269.902212][ T5130] usb 1-1: config 0 descriptor?? [ 2270.501170][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2270.509855][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:19:29 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:29 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:29 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 19:19:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000), 0x0, 0x100000) 19:19:29 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2271.937216][T22580] usb 1-1: USB disconnect, device number 61 19:19:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2272.422684][T22580] usb 1-1: new high-speed USB device number 62 using dummy_hcd 19:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2272.692612][T22580] usb 1-1: Using ep0 maxpacket: 16 [ 2272.852772][T22580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.881031][T22580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2272.893574][T22580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2272.985143][T22580] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2272.994401][T22580] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2273.002450][T22580] usb 1-1: Manufacturer: syz [ 2273.009594][T22580] usb 1-1: config 0 descriptor?? [ 2273.617632][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.626314][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:19:32 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:32 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) 19:19:32 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 19:19:32 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) [ 2275.025957][T22580] usb 1-1: USB disconnect, device number 62 19:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2275.234133][T12583] overlay: Bad value for 'index' 19:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2275.307154][T12585] overlay: Bad value for 'index' 19:19:33 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0, 0x418}], 0x2, 0x40) [ 2275.372547][T18937] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2275.489947][T22580] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2275.582960][T18937] usb 5-1: device descriptor read/64, error -71 [ 2275.782528][T22580] usb 1-1: Using ep0 maxpacket: 16 [ 2275.862702][T18937] usb 5-1: new full-speed USB device number 20 using dummy_hcd 19:19:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) 19:19:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) [ 2275.924156][T22580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2275.957975][T22580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2275.973656][T22580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2276.052499][T18937] usb 5-1: device descriptor read/64, error -71 [ 2276.062922][T22580] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2276.072484][T22580] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2276.080518][T22580] usb 1-1: Manufacturer: syz [ 2276.087698][T22580] usb 1-1: config 0 descriptor?? [ 2276.172960][T18937] usb usb5-port1: attempt power cycle [ 2276.582546][T18937] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 2276.672655][T18937] usb 5-1: device descriptor read/8, error -71 [ 2276.691059][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.701217][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2276.942556][T18937] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 2277.032567][T18937] usb 5-1: device descriptor read/8, error -71 [ 2277.152621][T18937] usb usb5-port1: unable to enumerate USB device 19:19:35 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:35 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:35 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 19:19:35 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}], 0x1, 0x100000) 19:19:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x40) 19:19:35 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2278.086939][T11193] usb 1-1: USB disconnect, device number 63 [ 2278.452497][ T5126] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 2278.552577][T11193] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2278.662607][ T5126] usb 5-1: device descriptor read/64, error -71 [ 2278.807326][T11193] usb 1-1: Using ep0 maxpacket: 16 19:19:36 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x9f, 0x0, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:36 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 2278.932691][T11193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.944806][T11193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2278.955840][T11193] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2278.964849][ T5126] usb 5-1: new full-speed USB device number 24 using dummy_hcd 19:19:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {r0}, {r0}], 0x3, 0x40) [ 2279.061994][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2279.095691][T11193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2279.112556][T11193] usb 1-1: Manufacturer: syz [ 2279.125418][T11193] usb 1-1: config 0 descriptor?? [ 2279.223092][ T5126] usb 5-1: device descriptor read/64, error -71 [ 2279.352498][T22580] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2279.360607][ T5126] usb usb5-port1: attempt power cycle [ 2279.622652][T22580] usb 6-1: Using ep0 maxpacket: 16 [ 2279.720977][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.730249][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.742587][T22580] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.752769][T22580] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2279.782742][ T5126] usb 5-1: new full-speed USB device number 25 using dummy_hcd 19:19:37 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 2279.835812][T22580] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2279.845014][T22580] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2279.853690][T22580] usb 6-1: Manufacturer: syz [ 2279.860370][T22580] usb 6-1: config 0 descriptor?? [ 2279.872715][ T5126] usb 5-1: device descriptor read/8, error -71 19:19:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {r0}, {r0}], 0x3, 0x40) [ 2280.142508][ T5126] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 2280.243281][ T5126] usb 5-1: device descriptor read/8, error -71 [ 2280.368855][ T5126] usb usb5-port1: unable to enumerate USB device 19:19:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 19:19:39 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{}, {r0}, {r0}], 0x3, 0x40) 19:19:39 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2281.189366][ T777] usb 1-1: USB disconnect, device number 64 [ 2281.612606][T18937] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 2281.652900][ T777] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2281.802857][T18937] usb 5-1: device descriptor read/64, error -71 [ 2281.899352][ T777] usb 1-1: Using ep0 maxpacket: 16 [ 2282.023688][ T777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.034000][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2282.046911][ T777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 19:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 1) 19:19:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x0) [ 2282.071689][T11193] usb 6-1: USB disconnect, device number 66 [ 2282.078810][T18937] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2282.134678][ T777] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2282.164099][ T777] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2282.176520][ T777] usb 1-1: Manufacturer: syz [ 2282.188010][ T777] usb 1-1: config 0 descriptor?? [ 2282.200954][T12640] FAULT_INJECTION: forcing a failure. [ 2282.200954][T12640] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.214854][T12640] CPU: 0 PID: 12640 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2282.225302][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2282.235354][T12640] Call Trace: [ 2282.238633][T12640] [ 2282.241563][T12640] dump_stack_lvl+0x1e7/0x2d0 [ 2282.246257][T12640] ? nf_tcp_handle_invalid+0x650/0x650 [ 2282.251723][T12640] ? panic+0x770/0x770 [ 2282.255789][T12640] ? __might_sleep+0xc0/0xc0 [ 2282.260383][T12640] should_fail_ex+0x3aa/0x4e0 [ 2282.265067][T12640] should_failslab+0x9/0x20 [ 2282.269572][T12640] slab_pre_alloc_hook+0x59/0x310 [ 2282.274603][T12640] kmem_cache_alloc+0x52/0x300 [ 2282.279361][T12640] ? getname_flags+0xbc/0x4f0 [ 2282.284049][T12640] getname_flags+0xbc/0x4f0 [ 2282.288544][T12640] ? build_open_flags+0x448/0x5b0 [ 2282.293587][T12640] do_sys_openat2+0xd2/0x1d0 [ 2282.298199][T12640] ? mutex_unlock+0x10/0x10 [ 2282.302795][T12640] ? do_sys_open+0x230/0x230 [ 2282.307420][T12640] __x64_sys_openat+0x247/0x290 [ 2282.312298][T12640] ? __ia32_sys_open+0x270/0x270 [ 2282.317240][T12640] ? syscall_enter_from_user_mode+0x32/0x230 [ 2282.323231][T12640] ? lockdep_hardirqs_on+0x98/0x140 [ 2282.328438][T12640] ? syscall_enter_from_user_mode+0x32/0x230 [ 2282.334434][T12640] do_syscall_64+0x41/0xc0 [ 2282.338860][T12640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.344768][T12640] RIP: 0033:0x7f8e7947cae9 [ 2282.349189][T12640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2282.368794][T12640] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2282.377213][T12640] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 19:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 2) [ 2282.385182][T12640] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2282.393147][T12640] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2282.401114][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.409074][T12640] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2282.417052][T12640] [ 2282.503062][T18937] usb 5-1: device descriptor read/64, error -71 [ 2282.567749][T12645] FAULT_INJECTION: forcing a failure. [ 2282.567749][T12645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.580980][T12645] CPU: 1 PID: 12645 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2282.591393][T12645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2282.601454][T12645] Call Trace: [ 2282.604751][T12645] [ 2282.607692][T12645] dump_stack_lvl+0x1e7/0x2d0 [ 2282.612373][T12645] ? nf_tcp_handle_invalid+0x650/0x650 [ 2282.617857][T12645] ? panic+0x770/0x770 [ 2282.621932][T12645] ? __lock_acquire+0x7f70/0x7f70 [ 2282.622789][T18937] usb usb5-port1: attempt power cycle [ 2282.626949][T12645] should_fail_ex+0x3aa/0x4e0 [ 2282.637011][T12645] strncpy_from_user+0x36/0x2e0 [ 2282.641879][T12645] getname_flags+0xf9/0x4f0 [ 2282.646399][T12645] do_sys_openat2+0xd2/0x1d0 [ 2282.651000][T12645] ? mutex_unlock+0x10/0x10 [ 2282.655532][T12645] ? do_sys_open+0x230/0x230 [ 2282.660164][T12645] __x64_sys_openat+0x247/0x290 [ 2282.665045][T12645] ? __ia32_sys_open+0x270/0x270 [ 2282.670005][T12645] ? syscall_enter_from_user_mode+0x32/0x230 [ 2282.676008][T12645] ? lockdep_hardirqs_on+0x98/0x140 [ 2282.681223][T12645] ? syscall_enter_from_user_mode+0x32/0x230 [ 2282.687232][T12645] do_syscall_64+0x41/0xc0 [ 2282.691677][T12645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.697590][T12645] RIP: 0033:0x7f8e7947cae9 [ 2282.702021][T12645] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2282.721632][T12645] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2282.730042][T12645] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2282.738030][T12645] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2282.746015][T12645] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2282.754007][T12645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 3) [ 2282.761984][T12645] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2282.769979][T12645] [ 2282.881645][T12647] FAULT_INJECTION: forcing a failure. [ 2282.881645][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.894472][T12647] CPU: 0 PID: 12647 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2282.904898][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2282.914951][T12647] Call Trace: [ 2282.918222][T12647] [ 2282.921150][T12647] dump_stack_lvl+0x1e7/0x2d0 [ 2282.925828][T12647] ? nf_tcp_handle_invalid+0x650/0x650 [ 2282.931283][T12647] ? panic+0x770/0x770 [ 2282.935344][T12647] ? __might_sleep+0xc0/0xc0 [ 2282.939934][T12647] should_fail_ex+0x3aa/0x4e0 [ 2282.944612][T12647] should_failslab+0x9/0x20 [ 2282.949109][T12647] slab_pre_alloc_hook+0x59/0x310 [ 2282.954143][T12647] kmem_cache_alloc+0x52/0x300 [ 2282.958905][T12647] ? alloc_empty_file+0x9e/0x1d0 [ 2282.963840][T12647] alloc_empty_file+0x9e/0x1d0 [ 2282.968600][T12647] path_openat+0xfa/0x3180 [ 2282.973014][T12647] ? verify_lock_unused+0x140/0x140 [ 2282.978207][T12647] ? kasan_set_track+0x4f/0x70 [ 2282.982966][T12647] ? __kasan_slab_alloc+0x66/0x70 [ 2282.987983][T12647] ? kmem_cache_alloc+0x123/0x300 [ 2282.992996][T12647] ? getname_flags+0xbc/0x4f0 [ 2282.997664][T12647] ? do_sys_openat2+0xd2/0x1d0 [ 2283.002425][T12647] ? __x64_sys_openat+0x247/0x290 [ 2283.007452][T12647] ? do_syscall_64+0x41/0xc0 [ 2283.012036][T12647] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2283.018106][T12647] ? do_filp_open+0x490/0x490 [ 2283.022791][T12647] do_filp_open+0x234/0x490 [ 2283.027290][T12647] ? vfs_tmpfile+0x4b0/0x4b0 [ 2283.031886][T12647] ? _raw_spin_unlock+0x28/0x40 [ 2283.036787][T12647] ? alloc_fd+0x59c/0x640 [ 2283.041118][T12647] do_sys_openat2+0x13e/0x1d0 [ 2283.045793][T12647] ? mutex_unlock+0x10/0x10 [ 2283.050293][T12647] ? do_sys_open+0x230/0x230 [ 2283.054890][T12647] __x64_sys_openat+0x247/0x290 [ 2283.059744][T12647] ? __ia32_sys_open+0x270/0x270 [ 2283.064702][T12647] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.070679][T12647] ? lockdep_hardirqs_on+0x98/0x140 [ 2283.075876][T12647] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.081855][T12647] do_syscall_64+0x41/0xc0 [ 2283.086268][T12647] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2283.092161][T12647] RIP: 0033:0x7f8e7947cae9 [ 2283.096568][T12647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2283.116169][T12647] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2283.124582][T12647] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2283.132550][T12647] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2283.140511][T12647] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2283.148474][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.156439][T12647] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2283.164414][T12647] 19:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 19:19:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x0) [ 2283.184049][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.212796][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.254606][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.260948][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.268487][T18937] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2283.340871][T12652] FAULT_INJECTION: forcing a failure. [ 2283.340871][T12652] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.354032][T12652] CPU: 1 PID: 12652 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2283.362883][T18937] usb 5-1: device descriptor read/8, error -71 [ 2283.364448][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2283.380687][T12652] Call Trace: [ 2283.383979][T12652] [ 2283.386918][T12652] dump_stack_lvl+0x1e7/0x2d0 [ 2283.391590][T12652] ? nf_tcp_handle_invalid+0x650/0x650 [ 2283.397062][T12652] ? panic+0x770/0x770 [ 2283.401179][T12652] ? __might_sleep+0xc0/0xc0 [ 2283.405808][T12652] should_fail_ex+0x3aa/0x4e0 [ 2283.410505][T12652] should_failslab+0x9/0x20 [ 2283.415012][T12652] slab_pre_alloc_hook+0x59/0x310 [ 2283.420050][T12652] kmem_cache_alloc+0x52/0x300 [ 2283.424817][T12652] ? security_file_alloc+0x28/0x120 [ 2283.430033][T12652] security_file_alloc+0x28/0x120 [ 2283.435065][T12652] init_file+0xa5/0x220 [ 2283.439227][T12652] alloc_empty_file+0xb8/0x1d0 [ 2283.443992][T12652] path_openat+0xfa/0x3180 [ 2283.448418][T12652] ? verify_lock_unused+0x140/0x140 [ 2283.453622][T12652] ? kasan_set_track+0x4f/0x70 [ 2283.458397][T12652] ? __kasan_slab_alloc+0x66/0x70 [ 2283.463449][T12652] ? kmem_cache_alloc+0x123/0x300 [ 2283.468518][T12652] ? getname_flags+0xbc/0x4f0 [ 2283.473221][T12652] ? do_sys_openat2+0xd2/0x1d0 [ 2283.478001][T12652] ? __x64_sys_openat+0x247/0x290 [ 2283.483045][T12652] ? do_syscall_64+0x41/0xc0 [ 2283.487654][T12652] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2283.493750][T12652] ? do_filp_open+0x490/0x490 [ 2283.498467][T12652] do_filp_open+0x234/0x490 [ 2283.502990][T12652] ? vfs_tmpfile+0x4b0/0x4b0 [ 2283.507621][T12652] ? _raw_spin_unlock+0x28/0x40 [ 2283.512489][T12652] ? alloc_fd+0x59c/0x640 [ 2283.516843][T12652] do_sys_openat2+0x13e/0x1d0 [ 2283.521531][T12652] ? mutex_unlock+0x10/0x10 [ 2283.526043][T12652] ? do_sys_open+0x230/0x230 [ 2283.530651][T12652] __x64_sys_openat+0x247/0x290 [ 2283.535506][T12652] ? __ia32_sys_open+0x270/0x270 [ 2283.540456][T12652] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.546438][T12652] ? lockdep_hardirqs_on+0x98/0x140 [ 2283.551646][T12652] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.557631][T12652] do_syscall_64+0x41/0xc0 [ 2283.562057][T12652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2283.567960][T12652] RIP: 0033:0x7f8e7947cae9 [ 2283.572392][T12652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2283.592008][T12652] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2283.600424][T12652] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2283.608390][T12652] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2283.616366][T12652] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2283.624351][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.632326][T12652] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 19:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 5) [ 2283.632703][T18937] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2283.640289][T12652] [ 2283.744066][T12655] FAULT_INJECTION: forcing a failure. [ 2283.744066][T12655] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.753085][T18937] usb 5-1: device descriptor read/8, error -71 [ 2283.758504][T12655] CPU: 1 PID: 12655 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2283.773783][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2283.783838][T12655] Call Trace: [ 2283.787112][T12655] [ 2283.790045][T12655] dump_stack_lvl+0x1e7/0x2d0 [ 2283.794726][T12655] ? nf_tcp_handle_invalid+0x650/0x650 [ 2283.800187][T12655] ? panic+0x770/0x770 [ 2283.804253][T12655] ? __might_sleep+0xc0/0xc0 [ 2283.808849][T12655] should_fail_ex+0x3aa/0x4e0 [ 2283.813536][T12655] should_failslab+0x9/0x20 [ 2283.818035][T12655] slab_pre_alloc_hook+0x59/0x310 [ 2283.823060][T12655] kmem_cache_alloc_lru+0x4e/0x300 [ 2283.828165][T12655] ? __d_alloc+0x31/0x710 [ 2283.832499][T12655] __d_alloc+0x31/0x710 [ 2283.836659][T12655] d_alloc_parallel+0xe1/0x1590 [ 2283.841502][T12655] ? read_lock_is_recursive+0x20/0x20 [ 2283.846873][T12655] ? __d_lookup+0x8f/0x7a0 [ 2283.851282][T12655] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 2283.857254][T12655] ? __lock_acquire+0x7f70/0x7f70 [ 2283.862282][T12655] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2283.867388][T12655] ? __d_lookup+0x6da/0x7a0 [ 2283.871894][T12655] path_openat+0x916/0x3180 [ 2283.876404][T12655] ? getname_flags+0xbc/0x4f0 [ 2283.881077][T12655] ? do_sys_openat2+0xd2/0x1d0 [ 2283.885848][T12655] ? do_filp_open+0x490/0x490 [ 2283.890539][T12655] do_filp_open+0x234/0x490 [ 2283.895043][T12655] ? vfs_tmpfile+0x4b0/0x4b0 [ 2283.899652][T12655] ? _raw_spin_unlock+0x28/0x40 [ 2283.904497][T12655] ? alloc_fd+0x59c/0x640 [ 2283.908828][T12655] do_sys_openat2+0x13e/0x1d0 [ 2283.913500][T12655] ? mutex_unlock+0x10/0x10 [ 2283.918003][T12655] ? do_sys_open+0x230/0x230 [ 2283.922598][T12655] __x64_sys_openat+0x247/0x290 [ 2283.927444][T12655] ? __ia32_sys_open+0x270/0x270 [ 2283.932381][T12655] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.938369][T12655] ? lockdep_hardirqs_on+0x98/0x140 [ 2283.943566][T12655] ? syscall_enter_from_user_mode+0x32/0x230 [ 2283.949548][T12655] do_syscall_64+0x41/0xc0 [ 2283.953960][T12655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2283.959848][T12655] RIP: 0033:0x7f8e7947cae9 [ 2283.964260][T12655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2283.983864][T12655] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 19:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 6) [ 2283.992272][T12655] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2284.000236][T12655] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2284.008201][T12655] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2284.016167][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.024129][T12655] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2284.032103][T12655] 19:19:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x0) [ 2284.153793][T18937] usb usb5-port1: unable to enumerate USB device [ 2284.159763][T12657] FAULT_INJECTION: forcing a failure. [ 2284.159763][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.175222][T12657] CPU: 1 PID: 12657 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2284.185670][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2284.195743][T12657] Call Trace: [ 2284.199027][T12657] [ 2284.201958][T12657] dump_stack_lvl+0x1e7/0x2d0 [ 2284.206661][T12657] ? nf_tcp_handle_invalid+0x650/0x650 [ 2284.212135][T12657] ? panic+0x770/0x770 [ 2284.216210][T12657] ? __might_sleep+0xc0/0xc0 [ 2284.220816][T12657] should_fail_ex+0x3aa/0x4e0 [ 2284.225524][T12657] should_failslab+0x9/0x20 [ 2284.230054][T12657] slab_pre_alloc_hook+0x59/0x310 [ 2284.235113][T12657] kmem_cache_alloc_lru+0x4e/0x300 [ 2284.240245][T12657] ? __d_alloc+0x31/0x710 [ 2284.244608][T12657] __d_alloc+0x31/0x710 [ 2284.248800][T12657] d_alloc_parallel+0xe1/0x1590 [ 2284.253678][T12657] ? __asan_memset+0x23/0x40 [ 2284.258297][T12657] ? __asan_memset+0x23/0x40 [ 2284.262906][T12657] ? lockdep_init_map_type+0xa1/0x910 [ 2284.268304][T12657] ? lockdep_softirqs_off+0x420/0x420 [ 2284.273707][T12657] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2284.278855][T12657] ? __init_waitqueue_head+0xae/0x150 [ 2284.284259][T12657] __lookup_slow+0x117/0x3e0 [ 2284.288879][T12657] ? lookup_one_len+0x2d0/0x2d0 [ 2284.293775][T12657] lookup_one_unlocked+0x1a0/0x280 [ 2284.298912][T12657] ? lookup_one+0x2f0/0x2f0 [ 2284.303468][T12657] ovl_lookup_single+0x120/0xa90 [ 2284.308541][T12657] ? ovl_lower_positive+0x3c0/0x3c0 [ 2284.313761][T12657] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 2284.319768][T12657] ? print_irqtrace_events+0x220/0x220 [ 2284.325254][T12657] ovl_lookup_layer+0x417/0x510 [ 2284.330119][T12657] ? ovl_lookup+0x2930/0x2930 [ 2284.334798][T12657] ? mark_lock+0x9a/0x340 [ 2284.339153][T12657] ? override_creds+0xf6/0x180 [ 2284.343938][T12657] ovl_lookup+0x5ef/0x2930 [ 2284.348380][T12657] ? __d_lookup_rcu+0x3b8/0x4c0 [ 2284.353244][T12657] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2284.358658][T12657] ? d_alloc_parallel+0x31e/0x1590 [ 2284.363798][T12657] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2284.368927][T12657] ? __d_lookup+0x6da/0x7a0 [ 2284.373461][T12657] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2284.378863][T12657] path_openat+0x11f1/0x3180 [ 2284.383512][T12657] ? do_filp_open+0x490/0x490 [ 2284.388246][T12657] do_filp_open+0x234/0x490 [ 2284.392758][T12657] ? vfs_tmpfile+0x4b0/0x4b0 [ 2284.397391][T12657] ? _raw_spin_unlock+0x28/0x40 [ 2284.402248][T12657] ? alloc_fd+0x59c/0x640 [ 2284.406591][T12657] do_sys_openat2+0x13e/0x1d0 [ 2284.411278][T12657] ? mutex_unlock+0x10/0x10 [ 2284.415788][T12657] ? do_sys_open+0x230/0x230 [ 2284.420398][T12657] __x64_sys_openat+0x247/0x290 [ 2284.425255][T12657] ? __ia32_sys_open+0x270/0x270 [ 2284.430209][T12657] ? syscall_enter_from_user_mode+0x32/0x230 [ 2284.436229][T12657] ? lockdep_hardirqs_on+0x98/0x140 [ 2284.441441][T12657] ? syscall_enter_from_user_mode+0x32/0x230 [ 2284.447418][T12657] do_syscall_64+0x41/0xc0 [ 2284.451828][T12657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2284.457727][T12657] RIP: 0033:0x7f8e7947cae9 [ 2284.462148][T12657] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2284.481755][T12657] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2284.490198][T12657] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2284.498204][T12657] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2284.506201][T12657] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2284.514192][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.522168][T12657] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2284.530163][T12657] 19:19:42 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:42 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 7) [ 2284.562003][T18937] usb 1-1: USB disconnect, device number 65 [ 2284.717073][T12667] FAULT_INJECTION: forcing a failure. [ 2284.717073][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.729855][T12667] CPU: 1 PID: 12667 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2284.740273][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2284.750340][T12667] Call Trace: [ 2284.753624][T12667] [ 2284.756566][T12667] dump_stack_lvl+0x1e7/0x2d0 [ 2284.761263][T12667] ? nf_tcp_handle_invalid+0x650/0x650 [ 2284.766734][T12667] ? panic+0x770/0x770 [ 2284.770813][T12667] ? __might_sleep+0xc0/0xc0 [ 2284.775404][T12667] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 2284.781405][T12667] should_fail_ex+0x3aa/0x4e0 [ 2284.786102][T12667] should_failslab+0x9/0x20 [ 2284.790617][T12667] slab_pre_alloc_hook+0x59/0x310 [ 2284.795653][T12667] ? ovl_lookup+0x884/0x2930 [ 2284.800261][T12667] __kmem_cache_alloc_node+0x4b/0x270 [ 2284.805658][T12667] ? ovl_lookup+0x2930/0x2930 [ 2284.810363][T12667] ? ovl_lookup+0x884/0x2930 [ 2284.814962][T12667] __kmalloc+0xa8/0x230 [ 2284.819141][T12667] ? override_creds+0xf6/0x180 [ 2284.823935][T12667] ovl_lookup+0x884/0x2930 [ 2284.828391][T12667] ? __d_lookup_rcu+0x3b8/0x4c0 [ 2284.833278][T12667] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2284.838693][T12667] ? d_alloc_parallel+0x31e/0x1590 [ 2284.843848][T12667] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2284.848986][T12667] ? __d_lookup+0x6da/0x7a0 [ 2284.853525][T12667] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2284.858932][T12667] path_openat+0x11f1/0x3180 [ 2284.863578][T12667] ? do_filp_open+0x490/0x490 [ 2284.868275][T12667] do_filp_open+0x234/0x490 [ 2284.872788][T12667] ? vfs_tmpfile+0x4b0/0x4b0 [ 2284.877422][T12667] ? _raw_spin_unlock+0x28/0x40 [ 2284.882304][T12667] ? alloc_fd+0x59c/0x640 [ 2284.886646][T12667] do_sys_openat2+0x13e/0x1d0 [ 2284.891339][T12667] ? mutex_unlock+0x10/0x10 [ 2284.895853][T12667] ? do_sys_open+0x230/0x230 [ 2284.900467][T12667] __x64_sys_openat+0x247/0x290 [ 2284.903316][T11193] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2284.905311][T12667] ? __ia32_sys_open+0x270/0x270 [ 2284.917804][T12667] ? syscall_enter_from_user_mode+0x32/0x230 [ 2284.923815][T12667] ? lockdep_hardirqs_on+0x98/0x140 [ 2284.929056][T12667] ? syscall_enter_from_user_mode+0x32/0x230 [ 2284.935068][T12667] do_syscall_64+0x41/0xc0 [ 2284.939504][T12667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2284.945416][T12667] RIP: 0033:0x7f8e7947cae9 [ 2284.949839][T12667] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2284.969454][T12667] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2284.977899][T12667] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2284.985890][T12667] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2284.992749][T18937] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2284.993858][T12667] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2285.009394][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:19:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 8) [ 2285.017395][T12667] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2285.025457][T12667] [ 2285.112738][T11193] usb 5-1: device descriptor read/64, error -71 [ 2285.117982][T12669] FAULT_INJECTION: forcing a failure. [ 2285.117982][T12669] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.131917][T12669] CPU: 1 PID: 12669 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2285.142345][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2285.152402][T12669] Call Trace: [ 2285.155684][T12669] [ 2285.158611][T12669] dump_stack_lvl+0x1e7/0x2d0 [ 2285.163293][T12669] ? nf_tcp_handle_invalid+0x650/0x650 [ 2285.168765][T12669] ? panic+0x770/0x770 [ 2285.172836][T12669] ? __might_sleep+0xc0/0xc0 [ 2285.177451][T12669] ? lookup_one_unlocked+0x11d/0x280 [ 2285.182736][T12669] ? kasan_set_track+0x61/0x70 [ 2285.187502][T12669] should_fail_ex+0x3aa/0x4e0 [ 2285.192177][T12669] should_failslab+0x9/0x20 [ 2285.196675][T12669] slab_pre_alloc_hook+0x59/0x310 [ 2285.201730][T12669] ? ovl_encode_real_fh+0xdf/0x400 [ 2285.206895][T12669] __kmem_cache_alloc_node+0x4b/0x270 [ 2285.212263][T12669] ? ovl_lower_positive+0x3c0/0x3c0 [ 2285.217467][T12669] ? ovl_encode_real_fh+0xdf/0x400 [ 2285.222577][T12669] kmalloc_trace+0x2a/0xe0 [ 2285.226991][T12669] ovl_encode_real_fh+0xdf/0x400 [ 2285.231920][T12669] ? ovl_set_attr+0x560/0x560 [ 2285.236597][T12669] ovl_lookup_index+0x71/0x6d0 [ 2285.241360][T12669] ovl_lookup+0x1e44/0x2930 [ 2285.245902][T12669] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2285.251276][T12669] ? d_alloc_parallel+0x31e/0x1590 [ 2285.256391][T12669] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2285.261497][T12669] ? __d_lookup+0x6da/0x7a0 [ 2285.266002][T12669] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2285.271369][T12669] path_openat+0x11f1/0x3180 [ 2285.275977][T12669] ? do_filp_open+0x490/0x490 [ 2285.280661][T12669] do_filp_open+0x234/0x490 [ 2285.285160][T12669] ? vfs_tmpfile+0x4b0/0x4b0 [ 2285.289758][T12669] ? _raw_spin_unlock+0x28/0x40 [ 2285.294619][T12669] ? alloc_fd+0x59c/0x640 [ 2285.298964][T12669] do_sys_openat2+0x13e/0x1d0 [ 2285.303648][T12669] ? mutex_unlock+0x10/0x10 [ 2285.308158][T12669] ? do_sys_open+0x230/0x230 [ 2285.312761][T12669] __x64_sys_openat+0x247/0x290 [ 2285.317618][T12669] ? __ia32_sys_open+0x270/0x270 [ 2285.322560][T12669] ? syscall_enter_from_user_mode+0x32/0x230 [ 2285.328544][T12669] ? lockdep_hardirqs_on+0x98/0x140 [ 2285.333747][T12669] ? syscall_enter_from_user_mode+0x32/0x230 [ 2285.339730][T12669] do_syscall_64+0x41/0xc0 [ 2285.344145][T12669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2285.350034][T12669] RIP: 0033:0x7f8e7947cae9 [ 2285.354444][T12669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2285.374055][T12669] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2285.382475][T12669] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2285.390449][T12669] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2285.398421][T12669] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 19:19:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 9) [ 2285.406391][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.414363][T12669] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2285.422352][T12669] [ 2285.472628][T18937] usb 1-1: Using ep0 maxpacket: 16 [ 2285.527348][T12671] FAULT_INJECTION: forcing a failure. [ 2285.527348][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.540169][T12671] CPU: 1 PID: 12671 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2285.550598][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2285.560658][T12671] Call Trace: [ 2285.563959][T12671] [ 2285.566907][T12671] dump_stack_lvl+0x1e7/0x2d0 [ 2285.571607][T12671] ? nf_tcp_handle_invalid+0x650/0x650 [ 2285.572850][T11193] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2285.577069][T12671] ? panic+0x770/0x770 [ 2285.577097][T12671] ? __might_sleep+0xc0/0xc0 [ 2285.577132][T12671] should_fail_ex+0x3aa/0x4e0 [ 2285.592791][T18937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2285.593298][T12671] should_failslab+0x9/0x20 [ 2285.599876][T18937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2285.607989][T12671] slab_pre_alloc_hook+0x59/0x310 [ 2285.608018][T12671] ? __asan_memcpy+0x40/0x70 [ 2285.608040][T12671] ? ovl_lookup_index+0xc3/0x6d0 [ 2285.608059][T12671] __kmem_cache_alloc_node+0x4b/0x270 [ 2285.608079][T12671] ? ovl_set_attr+0x560/0x560 [ 2285.608098][T12671] ? ovl_lookup_index+0xc3/0x6d0 [ 2285.608117][T12671] __kmalloc+0xa8/0x230 [ 2285.608144][T12671] ovl_lookup_index+0xc3/0x6d0 [ 2285.608172][T12671] ovl_lookup+0x1e44/0x2930 [ 2285.608228][T12671] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2285.608261][T12671] ? d_alloc_parallel+0x31e/0x1590 [ 2285.608290][T12671] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2285.608310][T12671] ? __d_lookup+0x6da/0x7a0 [ 2285.624859][T18937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2285.628648][T12671] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2285.628678][T12671] path_openat+0x11f1/0x3180 [ 2285.709260][T12671] ? do_filp_open+0x490/0x490 [ 2285.713969][T12671] do_filp_open+0x234/0x490 [ 2285.718494][T12671] ? vfs_tmpfile+0x4b0/0x4b0 [ 2285.723115][T12671] ? _raw_spin_unlock+0x28/0x40 [ 2285.727985][T12671] ? alloc_fd+0x59c/0x640 [ 2285.732344][T12671] do_sys_openat2+0x13e/0x1d0 [ 2285.737042][T12671] ? mutex_unlock+0x10/0x10 [ 2285.741567][T12671] ? do_sys_open+0x230/0x230 [ 2285.743071][T18937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2285.746174][T12671] __x64_sys_openat+0x247/0x290 [ 2285.746207][T12671] ? __ia32_sys_open+0x270/0x270 [ 2285.765000][T12671] ? syscall_enter_from_user_mode+0x32/0x230 19:19:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 1) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:43 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2285.770425][T18937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2285.770986][T12671] ? lockdep_hardirqs_on+0x98/0x140 [ 2285.781761][T18937] usb 1-1: Manufacturer: syz [ 2285.784124][T12671] ? syscall_enter_from_user_mode+0x32/0x230 [ 2285.784159][T12671] do_syscall_64+0x41/0xc0 [ 2285.784184][T12671] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2285.784209][T12671] RIP: 0033:0x7f8e7947cae9 [ 2285.784228][T12671] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2285.784244][T12671] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2285.784266][T12671] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2285.784281][T12671] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2285.784295][T12671] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2285.784308][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.784320][T12671] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2285.784351][T12671] [ 2285.815442][T12673] FAULT_INJECTION: forcing a failure. [ 2285.815442][T12673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2285.840849][T11193] usb 5-1: device descriptor read/64, error -71 [ 2285.883390][T12673] CPU: 1 PID: 12673 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2285.912865][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2285.922916][T12673] Call Trace: [ 2285.926197][T12673] [ 2285.929131][T12673] dump_stack_lvl+0x1e7/0x2d0 [ 2285.933816][T12673] ? nf_tcp_handle_invalid+0x650/0x650 [ 2285.939274][T12673] ? panic+0x770/0x770 [ 2285.943336][T12673] ? __lock_acquire+0x7f70/0x7f70 [ 2285.948361][T12673] should_fail_ex+0x3aa/0x4e0 [ 2285.953042][T12673] _copy_from_user+0x2f/0xe0 [ 2285.957628][T12673] snd_pcm_oss_write+0xa39/0x11e0 [ 2285.962743][T12673] ? snd_pcm_oss_read+0x940/0x940 [ 2285.967770][T12673] ? read_lock_is_recursive+0x20/0x20 [ 2285.973135][T12673] ? fsnotify_perm+0x63/0x5a0 [ 2285.977807][T12673] ? security_file_permission+0x79/0xa0 [ 2285.983349][T12673] ? snd_pcm_oss_read+0x940/0x940 [ 2285.988371][T12673] vfs_write+0x286/0xaf0 [ 2285.992623][T12673] ? file_end_write+0x250/0x250 [ 2285.997471][T12673] ? __fget_files+0x28/0x4a0 [ 2286.002051][T12673] ? __fget_files+0x435/0x4a0 [ 2286.006720][T12673] ? __fget_files+0x28/0x4a0 [ 2286.011310][T12673] ? __fdget_pos+0x1df/0x340 [ 2286.015899][T12673] ? ksys_write+0x7b/0x2c0 [ 2286.020315][T12673] ksys_write+0x1a0/0x2c0 [ 2286.024642][T12673] ? print_irqtrace_events+0x220/0x220 [ 2286.030097][T12673] ? __ia32_sys_read+0x90/0x90 [ 2286.034863][T12673] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.040849][T12673] ? lockdep_hardirqs_on+0x98/0x140 [ 2286.046054][T12673] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.052037][T12673] do_syscall_64+0x41/0xc0 [ 2286.056451][T12673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.062341][T12673] RIP: 0033:0x7f57e5c7cae9 [ 2286.066755][T12673] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2286.086357][T12673] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2286.094771][T12673] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2286.102735][T12673] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2286.110708][T12673] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2286.118668][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.126632][T12673] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2286.134613][T12673] [ 2286.143724][T12680] FAULT_INJECTION: forcing a failure. [ 2286.143724][T12680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2286.144029][T12679] FAULT_INJECTION: forcing a failure. [ 2286.144029][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2286.174105][T18937] usb 1-1: config 0 descriptor?? [ 2286.182549][T12680] CPU: 1 PID: 12680 Comm: syz-executor.3 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2286.192998][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2286.203079][T12680] Call Trace: [ 2286.206407][T12680] [ 2286.209333][T12680] dump_stack_lvl+0x1e7/0x2d0 [ 2286.214025][T12680] ? nf_tcp_handle_invalid+0x650/0x650 [ 2286.219485][T12680] ? panic+0x770/0x770 [ 2286.223554][T12680] ? snprintf+0xda/0x120 [ 2286.227799][T12680] should_fail_ex+0x3aa/0x4e0 [ 2286.232479][T12680] _copy_to_user+0x2f/0xa0 [ 2286.236896][T12680] simple_read_from_buffer+0xca/0x150 [ 2286.242268][T12680] proc_fail_nth_read+0x1e9/0x250 [ 2286.247292][T12680] ? proc_fault_inject_write+0x3c0/0x3c0 [ 2286.252928][T12680] ? fsnotify_perm+0x420/0x5a0 [ 2286.257690][T12680] ? proc_fault_inject_write+0x3c0/0x3c0 [ 2286.263314][T12680] vfs_read+0x279/0xb00 [ 2286.267486][T12680] ? __fdget_pos+0x2b0/0x340 [ 2286.272068][T12680] ? kernel_read+0x1f0/0x1f0 [ 2286.276677][T12680] ? __fget_files+0x28/0x4a0 [ 2286.281272][T12680] ? __fget_files+0x435/0x4a0 [ 2286.285964][T12680] ? __fdget_pos+0x2b0/0x340 [ 2286.290557][T12680] ? ksys_read+0x7b/0x2c0 [ 2286.294894][T12680] ksys_read+0x1a0/0x2c0 [ 2286.299141][T12680] ? print_irqtrace_events+0x220/0x220 [ 2286.304603][T12680] ? vfs_write+0xaf0/0xaf0 [ 2286.309020][T12680] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.315001][T12680] ? lockdep_hardirqs_on+0x98/0x140 [ 2286.320202][T12680] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.326185][T12680] do_syscall_64+0x41/0xc0 [ 2286.330601][T12680] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.336494][T12680] RIP: 0033:0x7f83efc7b78c [ 2286.340907][T12680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2286.360510][T12680] RSP: 002b:00007f83f09540c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2286.368917][T12680] RAX: ffffffffffffffda RBX: 00007f83efd9c050 RCX: 00007f83efc7b78c 19:19:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 10) [ 2286.376885][T12680] RDX: 000000000000000f RSI: 00007f83f0954130 RDI: 0000000000000004 [ 2286.384847][T12680] RBP: 00007f83f0954120 R08: 0000000000000000 R09: 0000000000000000 [ 2286.392809][T12680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.400773][T12680] R13: 000000000000006e R14: 00007f83efd9c050 R15: 00007ffcce15faf8 [ 2286.408755][T12680] [ 2286.422493][T12679] CPU: 1 PID: 12679 Comm: syz-executor.2 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2286.426124][T11193] usb usb5-port1: attempt power cycle [ 2286.432931][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2286.432946][T12679] Call Trace: [ 2286.432953][T12679] [ 2286.432962][T12679] dump_stack_lvl+0x1e7/0x2d0 [ 2286.432993][T12679] ? nf_tcp_handle_invalid+0x650/0x650 [ 2286.433016][T12679] ? panic+0x770/0x770 [ 2286.433037][T12679] ? snprintf+0xda/0x120 [ 2286.433059][T12679] should_fail_ex+0x3aa/0x4e0 [ 2286.433087][T12679] _copy_to_user+0x2f/0xa0 [ 2286.433111][T12679] simple_read_from_buffer+0xca/0x150 [ 2286.487500][T12679] proc_fail_nth_read+0x1e9/0x250 [ 2286.492533][T12679] ? proc_fault_inject_write+0x3c0/0x3c0 [ 2286.498166][T12679] ? fsnotify_perm+0x420/0x5a0 [ 2286.502930][T12679] ? proc_fault_inject_write+0x3c0/0x3c0 [ 2286.508557][T12679] vfs_read+0x279/0xb00 [ 2286.512717][T12679] ? __fdget_pos+0x2b0/0x340 [ 2286.517312][T12679] ? kernel_read+0x1f0/0x1f0 [ 2286.521904][T12679] ? __fget_files+0x28/0x4a0 [ 2286.526489][T12679] ? __fget_files+0x435/0x4a0 [ 2286.531167][T12679] ? __fdget_pos+0x2b0/0x340 [ 2286.535748][T12679] ? ksys_read+0x7b/0x2c0 [ 2286.540084][T12679] ksys_read+0x1a0/0x2c0 [ 2286.544338][T12679] ? print_irqtrace_events+0x220/0x220 [ 2286.549799][T12679] ? vfs_write+0xaf0/0xaf0 [ 2286.554214][T12679] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.560196][T12679] ? lockdep_hardirqs_on+0x98/0x140 [ 2286.565397][T12679] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.571377][T12679] do_syscall_64+0x41/0xc0 [ 2286.575790][T12679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.581679][T12679] RIP: 0033:0x7feccce7b78c [ 2286.586087][T12679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2286.605686][T12679] RSP: 002b:00007feccb9fe0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2286.614094][T12679] RAX: ffffffffffffffda RBX: 00007fecccf9c050 RCX: 00007feccce7b78c [ 2286.622081][T12679] RDX: 000000000000000f RSI: 00007feccb9fe130 RDI: 0000000000000004 19:19:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 2) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) [ 2286.630060][T12679] RBP: 00007feccb9fe120 R08: 0000000000000000 R09: 0000000000000000 [ 2286.638040][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.646023][T12679] R13: 000000000000006e R14: 00007fecccf9c050 R15: 00007ffc10d829d8 [ 2286.654015][T12679] [ 2286.713814][T12682] FAULT_INJECTION: forcing a failure. [ 2286.713814][T12682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2286.738034][T12682] CPU: 0 PID: 12682 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2286.748505][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2286.758592][T12682] Call Trace: [ 2286.761893][T12682] [ 2286.764856][T12682] dump_stack_lvl+0x1e7/0x2d0 [ 2286.769570][T12682] ? nf_tcp_handle_invalid+0x650/0x650 [ 2286.775080][T12682] ? panic+0x770/0x770 [ 2286.779180][T12682] ? __lock_acquire+0x7f70/0x7f70 [ 2286.784249][T12682] should_fail_ex+0x3aa/0x4e0 [ 2286.788969][T12682] _copy_from_user+0x2f/0xe0 [ 2286.793593][T12682] snd_pcm_oss_write+0xa39/0x11e0 [ 2286.798736][T12682] ? snd_pcm_oss_read+0x940/0x940 [ 2286.803793][T12682] ? read_lock_is_recursive+0x20/0x20 [ 2286.809191][T12682] ? fsnotify_perm+0x63/0x5a0 [ 2286.813898][T12682] ? security_file_permission+0x79/0xa0 [ 2286.819468][T12682] ? snd_pcm_oss_read+0x940/0x940 [ 2286.824517][T12682] vfs_write+0x286/0xaf0 [ 2286.828799][T12682] ? file_end_write+0x250/0x250 [ 2286.833684][T12682] ? __fget_files+0x28/0x4a0 [ 2286.838305][T12682] ? __fget_files+0x435/0x4a0 [ 2286.843005][T12682] ? __fget_files+0x28/0x4a0 [ 2286.847616][T12682] ? __fdget_pos+0x1df/0x340 [ 2286.852226][T12682] ? ksys_write+0x7b/0x2c0 [ 2286.856671][T12682] ksys_write+0x1a0/0x2c0 [ 2286.861027][T12682] ? print_irqtrace_events+0x220/0x220 [ 2286.866501][T12682] ? __ia32_sys_read+0x90/0x90 [ 2286.871271][T12682] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.877257][T12682] ? lockdep_hardirqs_on+0x98/0x140 [ 2286.882457][T12682] ? syscall_enter_from_user_mode+0x32/0x230 [ 2286.888442][T12682] do_syscall_64+0x41/0xc0 [ 2286.892862][T12682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.898757][T12682] RIP: 0033:0x7f57e5c7cae9 [ 2286.903170][T12682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2286.922771][T12682] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2286.931181][T12682] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2286.939146][T12682] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2286.947110][T12682] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2286.955078][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:19:44 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:44 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2286.963045][T12682] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2286.971018][T12682] [ 2287.019230][T12686] FAULT_INJECTION: forcing a failure. [ 2287.019230][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.035019][T12686] CPU: 1 PID: 12686 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2287.045460][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2287.055516][T12686] Call Trace: [ 2287.058810][T12686] [ 2287.061751][T12686] dump_stack_lvl+0x1e7/0x2d0 [ 2287.066456][T12686] ? nf_tcp_handle_invalid+0x650/0x650 [ 2287.071935][T12686] ? panic+0x770/0x770 [ 2287.076007][T12686] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 2287.081988][T12686] should_fail_ex+0x3aa/0x4e0 [ 2287.086668][T12686] should_failslab+0x9/0x20 [ 2287.091170][T12686] slab_pre_alloc_hook+0x59/0x310 [ 2287.096192][T12686] ? ovl_alloc_entry+0x21/0x70 [ 2287.100948][T12686] __kmem_cache_alloc_node+0x4b/0x270 [ 2287.106320][T12686] ? ovl_alloc_entry+0x21/0x70 [ 2287.111081][T12686] __kmalloc+0xa8/0x230 [ 2287.115234][T12686] ovl_alloc_entry+0x21/0x70 [ 2287.119819][T12686] ovl_lookup+0x1e96/0x2930 [ 2287.124342][T12686] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2287.129722][T12686] ? d_alloc_parallel+0x31e/0x1590 [ 2287.134835][T12686] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2287.139937][T12686] ? __d_lookup+0x6da/0x7a0 [ 2287.144441][T12686] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2287.149808][T12686] path_openat+0x11f1/0x3180 [ 2287.154429][T12686] ? do_filp_open+0x490/0x490 [ 2287.159127][T12686] do_filp_open+0x234/0x490 [ 2287.163631][T12686] ? vfs_tmpfile+0x4b0/0x4b0 [ 2287.168230][T12686] ? _raw_spin_unlock+0x28/0x40 [ 2287.173074][T12686] ? alloc_fd+0x59c/0x640 [ 2287.177402][T12686] do_sys_openat2+0x13e/0x1d0 [ 2287.182077][T12686] ? mutex_unlock+0x10/0x10 [ 2287.186581][T12686] ? do_sys_open+0x230/0x230 [ 2287.191178][T12686] __x64_sys_openat+0x247/0x290 [ 2287.196029][T12686] ? __ia32_sys_open+0x270/0x270 [ 2287.200966][T12686] ? syscall_enter_from_user_mode+0x32/0x230 [ 2287.206943][T12686] ? lockdep_hardirqs_on+0x98/0x140 [ 2287.212138][T12686] ? syscall_enter_from_user_mode+0x32/0x230 [ 2287.218118][T12686] do_syscall_64+0x41/0xc0 [ 2287.222529][T12686] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2287.228504][T12686] RIP: 0033:0x7f8e7947cae9 [ 2287.232915][T12686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2287.252528][T12686] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2287.260946][T12686] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2287.268921][T12686] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2287.276894][T12686] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2287.284861][T12686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.292825][T12686] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2287.300828][T12686] [ 2287.330524][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.348838][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.592747][T11193] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2287.842537][T11193] usb 5-1: device not accepting address 33, error -71 19:19:46 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:46 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 3) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 11) 19:19:46 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa02, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa02, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2288.368047][ T5126] usb 1-1: USB disconnect, device number 66 [ 2288.501470][T12704] FAULT_INJECTION: forcing a failure. [ 2288.501470][T12704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.530667][T12704] CPU: 1 PID: 12704 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2288.541130][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2288.551200][T12704] Call Trace: [ 2288.554494][T12704] [ 2288.557512][T12704] dump_stack_lvl+0x1e7/0x2d0 [ 2288.562221][T12704] ? nf_tcp_handle_invalid+0x650/0x650 [ 2288.567703][T12704] ? panic+0x770/0x770 [ 2288.571790][T12704] ? __lock_acquire+0x7f70/0x7f70 [ 2288.576839][T12704] should_fail_ex+0x3aa/0x4e0 [ 2288.581542][T12704] _copy_from_user+0x2f/0xe0 [ 2288.586155][T12704] snd_pcm_oss_write+0xa39/0x11e0 [ 2288.591223][T12704] ? snd_pcm_oss_read+0x940/0x940 [ 2288.596280][T12704] ? read_lock_is_recursive+0x20/0x20 [ 2288.601673][T12704] ? fsnotify_perm+0x63/0x5a0 [ 2288.606369][T12704] ? security_file_permission+0x79/0xa0 [ 2288.611934][T12704] ? snd_pcm_oss_read+0x940/0x940 [ 2288.616979][T12704] vfs_write+0x286/0xaf0 [ 2288.621255][T12704] ? file_end_write+0x250/0x250 [ 2288.626135][T12704] ? __fget_files+0x28/0x4a0 [ 2288.630740][T12704] ? __fget_files+0x435/0x4a0 [ 2288.635433][T12704] ? __fget_files+0x28/0x4a0 [ 2288.640048][T12704] ? __fdget_pos+0x1df/0x340 [ 2288.644654][T12704] ? ksys_write+0x7b/0x2c0 [ 2288.649095][T12704] ksys_write+0x1a0/0x2c0 [ 2288.653452][T12704] ? print_irqtrace_events+0x220/0x220 [ 2288.658936][T12704] ? __ia32_sys_read+0x90/0x90 [ 2288.663722][T12704] ? syscall_enter_from_user_mode+0x32/0x230 [ 2288.669731][T12704] ? lockdep_hardirqs_on+0x98/0x140 [ 2288.674959][T12704] ? syscall_enter_from_user_mode+0x32/0x230 [ 2288.680971][T12704] do_syscall_64+0x41/0xc0 [ 2288.685409][T12704] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2288.691320][T12704] RIP: 0033:0x7f57e5c7cae9 [ 2288.695752][T12704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2288.715377][T12704] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2288.723814][T12704] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2288.731798][T12704] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2288.739784][T12704] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2288.747768][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2288.755751][T12704] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2288.763769][T12704] [ 2288.768926][T12701] FAULT_INJECTION: forcing a failure. [ 2288.768926][T12701] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.782560][T12701] CPU: 1 PID: 12701 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2288.793002][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2288.803072][T12701] Call Trace: [ 2288.806358][T12701] [ 2288.809291][T12701] dump_stack_lvl+0x1e7/0x2d0 [ 2288.813975][T12701] ? nf_tcp_handle_invalid+0x650/0x650 [ 2288.819430][T12701] ? panic+0x770/0x770 [ 2288.823496][T12701] ? __might_sleep+0xc0/0xc0 [ 2288.828093][T12701] should_fail_ex+0x3aa/0x4e0 [ 2288.832773][T12701] should_failslab+0x9/0x20 [ 2288.837272][T12701] slab_pre_alloc_hook+0x59/0x310 [ 2288.842292][T12701] kmem_cache_alloc+0x52/0x300 [ 2288.847062][T12701] ? mb_cache_entry_create+0x146/0x7e0 [ 2288.852600][T12701] mb_cache_entry_create+0x146/0x7e0 [ 2288.857878][T12701] ? check_xattrs+0x2f5/0xbc0 [ 2288.862603][T12701] ext4_xattr_get+0x3bb/0x840 [ 2288.867306][T12701] ? bpf_lsm_capable+0x9/0x10 [ 2288.871982][T12701] ? ext4_xattr_trusted_list+0x20/0x20 [ 2288.877434][T12701] __vfs_getxattr+0x436/0x470 [ 2288.882123][T12701] vfs_getxattr+0x28e/0x2e0 [ 2288.886629][T12701] ? __vfs_getxattr+0x470/0x470 [ 2288.891481][T12701] ovl_get_redirect_xattr+0x178/0x670 [ 2288.896863][T12701] ovl_lookup+0x21d4/0x2930 [ 2288.901430][T12701] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2288.906811][T12701] ? d_alloc_parallel+0x31e/0x1590 [ 2288.911928][T12701] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2288.917034][T12701] ? __d_lookup+0x6da/0x7a0 [ 2288.921538][T12701] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2288.926910][T12701] path_openat+0x11f1/0x3180 [ 2288.931521][T12701] ? do_filp_open+0x490/0x490 [ 2288.936206][T12701] do_filp_open+0x234/0x490 [ 2288.940709][T12701] ? vfs_tmpfile+0x4b0/0x4b0 [ 2288.945310][T12701] ? _raw_spin_unlock+0x28/0x40 [ 2288.950152][T12701] ? alloc_fd+0x59c/0x640 [ 2288.954481][T12701] do_sys_openat2+0x13e/0x1d0 [ 2288.959156][T12701] ? mutex_unlock+0x10/0x10 [ 2288.963658][T12701] ? do_sys_open+0x230/0x230 [ 2288.968253][T12701] __x64_sys_openat+0x247/0x290 [ 2288.973106][T12701] ? __ia32_sys_open+0x270/0x270 [ 2288.978044][T12701] ? syscall_enter_from_user_mode+0x32/0x230 [ 2288.984030][T12701] ? lockdep_hardirqs_on+0x98/0x140 [ 2288.989231][T12701] ? syscall_enter_from_user_mode+0x32/0x230 [ 2288.995210][T12701] do_syscall_64+0x41/0xc0 [ 2288.999628][T12701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2289.005526][T12701] RIP: 0033:0x7f8e7947cae9 [ 2289.009935][T12701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2289.029534][T12701] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2289.037947][T12701] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2289.045910][T12701] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2289.053872][T12701] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2289.061834][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.069799][T12701] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2289.077782][T12701] 19:19:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 12) 19:19:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 4) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) [ 2289.152988][T11193] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2289.252753][T11193] usb 5-1: device descriptor read/8, error -71 [ 2289.268405][T12710] FAULT_INJECTION: forcing a failure. [ 2289.268405][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2289.290269][T12710] CPU: 1 PID: 12710 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2289.300731][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2289.310810][T12710] Call Trace: [ 2289.314112][T12710] [ 2289.316226][T12711] FAULT_INJECTION: forcing a failure. [ 2289.316226][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.317042][T12710] dump_stack_lvl+0x1e7/0x2d0 [ 2289.317078][T12710] ? nf_tcp_handle_invalid+0x650/0x650 [ 2289.317103][T12710] ? panic+0x770/0x770 [ 2289.343880][T12710] ? __lock_acquire+0x7f70/0x7f70 [ 2289.348930][T12710] should_fail_ex+0x3aa/0x4e0 [ 2289.353628][T12710] _copy_from_user+0x2f/0xe0 [ 2289.358261][T12710] snd_pcm_oss_write+0xa39/0x11e0 [ 2289.363330][T12710] ? snd_pcm_oss_read+0x940/0x940 [ 2289.368374][T12710] ? read_lock_is_recursive+0x20/0x20 [ 2289.373164][T11193] usb usb5-port1: unable to enumerate USB device [ 2289.373735][T12710] ? fsnotify_perm+0x63/0x5a0 [ 2289.384744][T12710] ? security_file_permission+0x79/0xa0 [ 2289.390307][T12710] ? snd_pcm_oss_read+0x940/0x940 [ 2289.395357][T12710] vfs_write+0x286/0xaf0 [ 2289.399626][T12710] ? file_end_write+0x250/0x250 [ 2289.404505][T12710] ? __fget_files+0x28/0x4a0 [ 2289.409118][T12710] ? __fget_files+0x435/0x4a0 [ 2289.413811][T12710] ? __fget_files+0x28/0x4a0 [ 2289.418409][T12710] ? __fdget_pos+0x1df/0x340 [ 2289.423028][T12710] ? ksys_write+0x7b/0x2c0 [ 2289.427465][T12710] ksys_write+0x1a0/0x2c0 [ 2289.431808][T12710] ? print_irqtrace_events+0x220/0x220 [ 2289.437281][T12710] ? __ia32_sys_read+0x90/0x90 [ 2289.442067][T12710] ? syscall_enter_from_user_mode+0x32/0x230 [ 2289.448071][T12710] ? lockdep_hardirqs_on+0x98/0x140 [ 2289.453280][T12710] ? syscall_enter_from_user_mode+0x32/0x230 [ 2289.459277][T12710] do_syscall_64+0x41/0xc0 [ 2289.463707][T12710] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2289.469614][T12710] RIP: 0033:0x7f57e5c7cae9 [ 2289.474111][T12710] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2289.493740][T12710] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2289.502168][T12710] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2289.510151][T12710] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2289.518135][T12710] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2289.526117][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2289.534097][T12710] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2289.542095][T12710] [ 2289.545736][T12711] CPU: 0 PID: 12711 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2289.556178][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2289.566227][T12711] Call Trace: [ 2289.569501][T12711] [ 2289.572425][T12711] dump_stack_lvl+0x1e7/0x2d0 [ 2289.577105][T12711] ? nf_tcp_handle_invalid+0x650/0x650 [ 2289.582563][T12711] ? panic+0x770/0x770 [ 2289.586636][T12711] ? __might_sleep+0xc0/0xc0 [ 2289.591229][T12711] should_fail_ex+0x3aa/0x4e0 [ 2289.595920][T12711] should_failslab+0x9/0x20 [ 2289.600439][T12711] slab_pre_alloc_hook+0x59/0x310 [ 2289.605463][T12711] kmem_cache_alloc+0x52/0x300 [ 2289.610226][T12711] ? mb_cache_entry_create+0x146/0x7e0 [ 2289.615684][T12711] mb_cache_entry_create+0x146/0x7e0 [ 2289.620972][T12711] ? check_xattrs+0x2f5/0xbc0 [ 2289.625655][T12711] ext4_xattr_get+0x3bb/0x840 [ 2289.630335][T12711] ? bpf_lsm_capable+0x9/0x10 [ 2289.635013][T12711] ? ext4_xattr_trusted_list+0x20/0x20 [ 2289.640471][T12711] __vfs_getxattr+0x436/0x470 [ 2289.645157][T12711] vfs_getxattr+0x28e/0x2e0 [ 2289.649664][T12711] ? __vfs_getxattr+0x470/0x470 [ 2289.654520][T12711] ovl_check_metacopy_xattr+0x1ec/0x660 [ 2289.660070][T12711] ovl_lookup+0x2236/0x2930 [ 2289.664594][T12711] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2289.669969][T12711] ? d_alloc_parallel+0x31e/0x1590 [ 2289.675085][T12711] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2289.680188][T12711] ? __d_lookup+0x6da/0x7a0 [ 2289.684694][T12711] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2289.690077][T12711] path_openat+0x11f1/0x3180 [ 2289.694689][T12711] ? do_filp_open+0x490/0x490 [ 2289.699375][T12711] do_filp_open+0x234/0x490 [ 2289.703875][T12711] ? vfs_tmpfile+0x4b0/0x4b0 [ 2289.708473][T12711] ? _raw_spin_unlock+0x28/0x40 [ 2289.713318][T12711] ? alloc_fd+0x59c/0x640 [ 2289.717651][T12711] do_sys_openat2+0x13e/0x1d0 [ 2289.722329][T12711] ? mutex_unlock+0x10/0x10 [ 2289.726832][T12711] ? do_sys_open+0x230/0x230 [ 2289.731430][T12711] __x64_sys_openat+0x247/0x290 [ 2289.736280][T12711] ? __ia32_sys_open+0x270/0x270 [ 2289.741214][T12711] ? syscall_enter_from_user_mode+0x32/0x230 [ 2289.747194][T12711] ? lockdep_hardirqs_on+0x98/0x140 [ 2289.752397][T12711] ? syscall_enter_from_user_mode+0x32/0x230 [ 2289.758381][T12711] do_syscall_64+0x41/0xc0 [ 2289.762805][T12711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2289.768694][T12711] RIP: 0033:0x7f8e7947cae9 [ 2289.773104][T12711] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2289.792708][T12711] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2289.801120][T12711] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2289.809083][T12711] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2289.817066][T12711] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2289.825038][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.833005][T12711] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2289.840985][T12711] 19:19:47 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa03, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa03, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 13) [ 2289.934940][ T5126] usb 1-1: new high-speed USB device number 67 using dummy_hcd 19:19:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 5) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) [ 2290.096749][T12720] FAULT_INJECTION: forcing a failure. [ 2290.096749][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.111195][T12720] CPU: 0 PID: 12720 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2290.121650][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2290.125635][T12718] FAULT_INJECTION: forcing a failure. [ 2290.125635][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.131704][T12720] Call Trace: [ 2290.131716][T12720] [ 2290.131725][T12720] dump_stack_lvl+0x1e7/0x2d0 [ 2290.131760][T12720] ? nf_tcp_handle_invalid+0x650/0x650 [ 2290.131784][T12720] ? panic+0x770/0x770 [ 2290.131805][T12720] ? __lock_acquire+0x7f70/0x7f70 [ 2290.169772][T12720] should_fail_ex+0x3aa/0x4e0 [ 2290.174477][T12720] _copy_from_user+0x2f/0xe0 [ 2290.179087][T12720] snd_pcm_oss_write+0xa39/0x11e0 [ 2290.184125][T12720] ? snd_pcm_oss_read+0x940/0x940 [ 2290.189208][T12720] ? read_lock_is_recursive+0x20/0x20 [ 2290.194585][T12720] ? fsnotify_perm+0x63/0x5a0 [ 2290.199262][T12720] ? security_file_permission+0x79/0xa0 [ 2290.204809][T12720] ? snd_pcm_oss_read+0x940/0x940 [ 2290.209832][T12720] vfs_write+0x286/0xaf0 [ 2290.214089][T12720] ? file_end_write+0x250/0x250 [ 2290.218945][T12720] ? __fget_files+0x28/0x4a0 [ 2290.223537][T12720] ? __fget_files+0x435/0x4a0 [ 2290.228214][T12720] ? __fget_files+0x28/0x4a0 [ 2290.232807][T12720] ? __fdget_pos+0x1df/0x340 [ 2290.237389][T12720] ? ksys_write+0x7b/0x2c0 [ 2290.241809][T12720] ksys_write+0x1a0/0x2c0 [ 2290.246137][T12720] ? print_irqtrace_events+0x220/0x220 [ 2290.251591][T12720] ? __ia32_sys_read+0x90/0x90 [ 2290.256354][T12720] ? syscall_enter_from_user_mode+0x32/0x230 [ 2290.262332][T12720] ? lockdep_hardirqs_on+0x98/0x140 [ 2290.267529][T12720] ? syscall_enter_from_user_mode+0x32/0x230 [ 2290.273529][T12720] do_syscall_64+0x41/0xc0 [ 2290.277947][T12720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2290.283839][T12720] RIP: 0033:0x7f57e5c7cae9 [ 2290.288249][T12720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2290.307846][T12720] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2290.316254][T12720] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2290.324242][T12720] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2290.332209][T12720] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2290.340176][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.348227][T12720] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2290.356204][T12720] [ 2290.367876][T12718] CPU: 0 PID: 12718 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2290.378361][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2290.388444][T12718] Call Trace: [ 2290.391741][T12718] [ 2290.394685][T12718] dump_stack_lvl+0x1e7/0x2d0 [ 2290.399389][T12718] ? nf_tcp_handle_invalid+0x650/0x650 [ 2290.404870][T12718] ? panic+0x770/0x770 [ 2290.408954][T12718] ? __might_sleep+0xc0/0xc0 [ 2290.413542][T12718] should_fail_ex+0x3aa/0x4e0 [ 2290.418215][T12718] should_failslab+0x9/0x20 [ 2290.422722][T12718] slab_pre_alloc_hook+0x59/0x310 [ 2290.423080][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2290.427755][T12718] ? ovl_lookup_inode+0x130/0x130 [ 2290.427786][T12718] kmem_cache_alloc_lru+0x4e/0x300 [ 2290.427806][T12718] ? ovl_alloc_inode+0x2c/0xa0 [ 2290.427826][T12718] ? ilookup5+0x1f7/0x200 [ 2290.427849][T12718] ? ovl_lookup_inode+0x130/0x130 [ 2290.457150][T12718] ovl_alloc_inode+0x2c/0xa0 [ 2290.461746][T12718] ? ovl_d_real+0x420/0x420 [ 2290.466256][T12718] iget5_locked+0xa0/0x270 [ 2290.470677][T12718] ? ovl_get_trap_inode+0x190/0x190 [ 2290.475899][T12718] ovl_get_inode+0x75b/0xfb0 [ 2290.480534][T12718] ? ovl_inode_set+0x50/0x50 [ 2290.485150][T12718] ? ovl_check_metacopy_xattr+0x366/0x660 [ 2290.490886][T12718] ovl_lookup+0x234c/0x2930 [ 2290.495402][T12718] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2290.500795][T12718] ? d_alloc_parallel+0x31e/0x1590 [ 2290.505937][T12718] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2290.511051][T12718] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2290.516419][T12718] path_openat+0x11f1/0x3180 [ 2290.521058][T12718] ? do_filp_open+0x490/0x490 [ 2290.525778][T12718] do_filp_open+0x234/0x490 [ 2290.530302][T12718] ? vfs_tmpfile+0x4b0/0x4b0 [ 2290.534937][T12718] ? _raw_spin_unlock+0x28/0x40 [ 2290.539798][T12718] ? alloc_fd+0x59c/0x640 [ 2290.544125][T12718] do_sys_openat2+0x13e/0x1d0 [ 2290.548808][T12718] ? mutex_unlock+0x10/0x10 [ 2290.553335][T12718] ? do_sys_open+0x230/0x230 [ 2290.557941][T12718] __x64_sys_openat+0x247/0x290 [ 2290.562820][T12718] ? __ia32_sys_open+0x270/0x270 [ 2290.567761][T12718] ? syscall_enter_from_user_mode+0x32/0x230 [ 2290.573749][T12718] ? lockdep_hardirqs_on+0x98/0x140 [ 2290.578982][T12718] ? syscall_enter_from_user_mode+0x32/0x230 [ 2290.585003][T12718] do_syscall_64+0x41/0xc0 [ 2290.589454][T12718] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2290.595347][T12718] RIP: 0033:0x7f8e7947cae9 [ 2290.599758][T12718] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2290.619373][T12718] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2290.627795][T12718] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2290.635783][T12718] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2290.643763][T12718] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2290.651735][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2290.659712][T12718] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2290.667688][T12718] [ 2290.679218][T12718] overlayfs: failed to get inode (-12) [ 2290.693263][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.704099][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2290.718050][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2290.803761][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2290.813073][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2290.821209][ T5126] usb 1-1: Manufacturer: syz [ 2290.829402][ T5126] usb 1-1: config 0 descriptor?? [ 2291.441443][T12723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.452050][T12723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:19:50 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 14) 19:19:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 6) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa04, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:50 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa04, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:50 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2292.494366][ T5126] usb 1-1: USB disconnect, device number 67 [ 2292.603102][T12734] FAULT_INJECTION: forcing a failure. [ 2292.603102][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2292.631715][T12728] FAULT_INJECTION: forcing a failure. [ 2292.631715][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.636466][T12734] CPU: 0 PID: 12734 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2292.654766][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2292.664834][T12734] Call Trace: [ 2292.668121][T12734] [ 2292.671055][T12734] dump_stack_lvl+0x1e7/0x2d0 [ 2292.675761][T12734] ? nf_tcp_handle_invalid+0x650/0x650 [ 2292.681232][T12734] ? panic+0x770/0x770 [ 2292.685317][T12734] ? __lock_acquire+0x7f70/0x7f70 [ 2292.690454][T12734] should_fail_ex+0x3aa/0x4e0 [ 2292.695159][T12734] _copy_from_user+0x2f/0xe0 [ 2292.699754][T12734] snd_pcm_oss_write+0xa39/0x11e0 [ 2292.704788][T12734] ? snd_pcm_oss_read+0x940/0x940 [ 2292.709858][T12734] ? read_lock_is_recursive+0x20/0x20 [ 2292.715224][T12734] ? fsnotify_perm+0x63/0x5a0 [ 2292.719896][T12734] ? security_file_permission+0x79/0xa0 [ 2292.725442][T12734] ? snd_pcm_oss_read+0x940/0x940 [ 2292.730468][T12734] vfs_write+0x286/0xaf0 [ 2292.734716][T12734] ? file_end_write+0x250/0x250 [ 2292.740087][T12734] ? __fget_files+0x28/0x4a0 [ 2292.744673][T12734] ? __fget_files+0x435/0x4a0 [ 2292.749343][T12734] ? __fget_files+0x28/0x4a0 [ 2292.753929][T12734] ? __fdget_pos+0x1df/0x340 [ 2292.758508][T12734] ? ksys_write+0x7b/0x2c0 [ 2292.762931][T12734] ksys_write+0x1a0/0x2c0 [ 2292.767258][T12734] ? print_irqtrace_events+0x220/0x220 [ 2292.772713][T12734] ? __ia32_sys_read+0x90/0x90 [ 2292.777479][T12734] ? syscall_enter_from_user_mode+0x32/0x230 [ 2292.783479][T12734] ? lockdep_hardirqs_on+0x98/0x140 [ 2292.788679][T12734] ? syscall_enter_from_user_mode+0x32/0x230 [ 2292.794669][T12734] do_syscall_64+0x41/0xc0 [ 2292.799085][T12734] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2292.804975][T12734] RIP: 0033:0x7f57e5c7cae9 [ 2292.809395][T12734] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2292.828992][T12734] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2292.837424][T12734] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2292.845415][T12734] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2292.853386][T12734] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2292.861360][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.869331][T12734] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2292.877323][T12734] [ 2292.888478][T12728] CPU: 0 PID: 12728 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2292.898943][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2292.909018][T12728] Call Trace: [ 2292.912314][T12728] [ 2292.915246][T12728] dump_stack_lvl+0x1e7/0x2d0 [ 2292.919927][T12728] ? nf_tcp_handle_invalid+0x650/0x650 [ 2292.925381][T12728] ? panic+0x770/0x770 [ 2292.929446][T12728] ? __might_sleep+0xc0/0xc0 [ 2292.934034][T12728] ? __asan_memset+0x23/0x40 [ 2292.938621][T12728] should_fail_ex+0x3aa/0x4e0 [ 2292.943302][T12728] should_failslab+0x9/0x20 [ 2292.947802][T12728] slab_pre_alloc_hook+0x59/0x310 [ 2292.952824][T12728] kmem_cache_alloc+0x52/0x300 [ 2292.957581][T12728] ? security_inode_alloc+0x28/0x120 [ 2292.962869][T12728] security_inode_alloc+0x28/0x120 [ 2292.967976][T12728] inode_init_always+0x8e3/0xc00 [ 2292.972911][T12728] ? ovl_lookup_inode+0x130/0x130 [ 2292.977933][T12728] iget5_locked+0xd3/0x270 [ 2292.982343][T12728] ? ovl_get_trap_inode+0x190/0x190 [ 2292.987543][T12728] ovl_get_inode+0x75b/0xfb0 [ 2292.992149][T12728] ? ovl_inode_set+0x50/0x50 [ 2292.996746][T12728] ? ovl_check_metacopy_xattr+0x366/0x660 [ 2293.002471][T12728] ovl_lookup+0x234c/0x2930 [ 2293.006995][T12728] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2293.012369][T12728] ? d_alloc_parallel+0x31e/0x1590 [ 2293.017487][T12728] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2293.022602][T12728] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2293.027969][T12728] path_openat+0x11f1/0x3180 [ 2293.032574][T12728] ? do_filp_open+0x490/0x490 [ 2293.037260][T12728] do_filp_open+0x234/0x490 [ 2293.041760][T12728] ? vfs_tmpfile+0x4b0/0x4b0 [ 2293.046363][T12728] ? _raw_spin_unlock+0x28/0x40 [ 2293.051210][T12728] ? alloc_fd+0x59c/0x640 [ 2293.055538][T12728] do_sys_openat2+0x13e/0x1d0 [ 2293.060213][T12728] ? mutex_unlock+0x10/0x10 [ 2293.064711][T12728] ? do_sys_open+0x230/0x230 [ 2293.069306][T12728] __x64_sys_openat+0x247/0x290 [ 2293.074178][T12728] ? __ia32_sys_open+0x270/0x270 [ 2293.079119][T12728] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.085114][T12728] ? lockdep_hardirqs_on+0x98/0x140 [ 2293.090315][T12728] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.096312][T12728] do_syscall_64+0x41/0xc0 [ 2293.100766][T12728] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.106673][T12728] RIP: 0033:0x7f8e7947cae9 [ 2293.111089][T12728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2293.130708][T12728] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2293.139398][T12728] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2293.147389][T12728] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2293.155377][T12728] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2293.163349][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2293.171313][T12728] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2293.179294][T12728] 19:19:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 7) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 15) [ 2293.202259][T12728] overlayfs: failed to get inode (-12) [ 2293.237093][T12739] FAULT_INJECTION: forcing a failure. [ 2293.237093][T12739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2293.251353][T12739] CPU: 1 PID: 12739 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2293.261804][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2293.271855][T12739] Call Trace: [ 2293.275132][T12739] [ 2293.278053][T12739] dump_stack_lvl+0x1e7/0x2d0 [ 2293.282755][T12739] ? nf_tcp_handle_invalid+0x650/0x650 [ 2293.288220][T12739] ? panic+0x770/0x770 [ 2293.292295][T12739] ? __lock_acquire+0x7f70/0x7f70 [ 2293.297340][T12739] should_fail_ex+0x3aa/0x4e0 [ 2293.302019][T12739] _copy_from_user+0x2f/0xe0 [ 2293.306613][T12739] snd_pcm_oss_write+0xa39/0x11e0 [ 2293.311650][T12739] ? snd_pcm_oss_read+0x940/0x940 [ 2293.316708][T12739] ? read_lock_is_recursive+0x20/0x20 [ 2293.322086][T12739] ? fsnotify_perm+0x63/0x5a0 [ 2293.326763][T12739] ? security_file_permission+0x79/0xa0 [ 2293.332310][T12739] ? snd_pcm_oss_read+0x940/0x940 [ 2293.337384][T12739] vfs_write+0x286/0xaf0 [ 2293.341902][T12739] ? file_end_write+0x250/0x250 [ 2293.346757][T12739] ? __fget_files+0x28/0x4a0 [ 2293.351346][T12739] ? __fget_files+0x435/0x4a0 [ 2293.356022][T12739] ? __fget_files+0x28/0x4a0 [ 2293.360613][T12739] ? __fdget_pos+0x1df/0x340 [ 2293.365196][T12739] ? ksys_write+0x7b/0x2c0 [ 2293.369611][T12739] ksys_write+0x1a0/0x2c0 [ 2293.373938][T12739] ? print_irqtrace_events+0x220/0x220 [ 2293.379393][T12739] ? __ia32_sys_read+0x90/0x90 [ 2293.384156][T12739] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.390137][T12739] ? lockdep_hardirqs_on+0x98/0x140 [ 2293.395336][T12739] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.401324][T12739] do_syscall_64+0x41/0xc0 [ 2293.405756][T12739] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.411650][T12739] RIP: 0033:0x7f57e5c7cae9 [ 2293.416065][T12739] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2293.435667][T12739] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2293.444085][T12739] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2293.452057][T12739] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2293.460029][T12739] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2293.468007][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.475972][T12739] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2293.483951][T12739] 19:19:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa05, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:51 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa05, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2293.512650][T11720] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2293.647006][T12744] FAULT_INJECTION: forcing a failure. [ 2293.647006][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.660657][T12744] CPU: 1 PID: 12744 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2293.671094][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2293.681147][T12744] Call Trace: [ 2293.684435][T12744] [ 2293.687374][T12744] dump_stack_lvl+0x1e7/0x2d0 [ 2293.692069][T12744] ? nf_tcp_handle_invalid+0x650/0x650 [ 2293.697521][T12744] ? panic+0x770/0x770 [ 2293.701583][T12744] ? __might_sleep+0xc0/0xc0 [ 2293.706197][T12744] should_fail_ex+0x3aa/0x4e0 [ 2293.710907][T12744] should_failslab+0x9/0x20 [ 2293.715434][T12744] slab_pre_alloc_hook+0x59/0x310 [ 2293.720486][T12744] kmem_cache_alloc+0x52/0x300 [ 2293.725269][T12744] ? mb_cache_entry_create+0x146/0x7e0 [ 2293.730740][T12744] mb_cache_entry_create+0x146/0x7e0 [ 2293.736026][T12744] ? check_xattrs+0x2f5/0xbc0 [ 2293.740717][T12744] ext4_xattr_get+0x3bb/0x840 [ 2293.745407][T12744] ? bpf_lsm_capable+0x9/0x10 [ 2293.750115][T12744] ? ext4_xattr_trusted_list+0x20/0x20 [ 2293.755591][T12744] __vfs_getxattr+0x436/0x470 [ 2293.760282][T12744] vfs_getxattr+0x28e/0x2e0 [ 2293.764791][T12744] ? __vfs_getxattr+0x470/0x470 [ 2293.769645][T12744] ovl_check_protattr+0x24d/0x5b0 [ 2293.774666][T12744] ? inode_dio_wait+0x340/0x340 [ 2293.779513][T12744] ? ovl_set_impure+0x3a0/0x3a0 [ 2293.784360][T12744] ? ovl_init_uuid_xattr+0x7e0/0x7e0 [ 2293.789643][T12744] ? ovl_inode_init+0x309/0x660 [ 2293.794494][T12744] ovl_get_inode+0xbd3/0xfb0 [ 2293.799103][T12744] ? ovl_inode_set+0x50/0x50 [ 2293.803690][T12744] ? ovl_check_metacopy_xattr+0x366/0x660 [ 2293.809409][T12744] ovl_lookup+0x234c/0x2930 [ 2293.813935][T12744] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2293.819311][T12744] ? d_alloc_parallel+0x31e/0x1590 [ 2293.824424][T12744] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2293.829537][T12744] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2293.834905][T12744] path_openat+0x11f1/0x3180 [ 2293.839515][T12744] ? do_filp_open+0x490/0x490 [ 2293.844202][T12744] do_filp_open+0x234/0x490 [ 2293.848706][T12744] ? vfs_tmpfile+0x4b0/0x4b0 [ 2293.853309][T12744] ? _raw_spin_unlock+0x28/0x40 [ 2293.858158][T12744] ? alloc_fd+0x59c/0x640 [ 2293.862485][T12744] do_sys_openat2+0x13e/0x1d0 [ 2293.867188][T12744] ? mutex_unlock+0x10/0x10 [ 2293.871687][T12744] ? do_sys_open+0x230/0x230 [ 2293.876282][T12744] __x64_sys_openat+0x247/0x290 [ 2293.881133][T12744] ? __ia32_sys_open+0x270/0x270 [ 2293.886069][T12744] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.892049][T12744] ? lockdep_hardirqs_on+0x98/0x140 [ 2293.897246][T12744] ? syscall_enter_from_user_mode+0x32/0x230 [ 2293.903225][T12744] do_syscall_64+0x41/0xc0 [ 2293.907637][T12744] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.913531][T12744] RIP: 0033:0x7f8e7947cae9 [ 2293.917954][T12744] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2293.937555][T12744] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2293.945969][T12744] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2293.953935][T12744] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2293.961899][T12744] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2293.969864][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2293.977826][T12744] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2293.985802][T12744] 19:19:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 8) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 16) [ 2294.001509][T11720] usb 5-1: device descriptor read/64, error -71 [ 2294.056050][T12750] FAULT_INJECTION: forcing a failure. [ 2294.056050][T12750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2294.069562][T12750] CPU: 0 PID: 12750 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2294.080011][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2294.090098][T12750] Call Trace: [ 2294.093397][T12750] [ 2294.096347][T12750] dump_stack_lvl+0x1e7/0x2d0 [ 2294.101065][T12750] ? nf_tcp_handle_invalid+0x650/0x650 [ 2294.106554][T12750] ? panic+0x770/0x770 [ 2294.110651][T12750] ? __lock_acquire+0x7f70/0x7f70 [ 2294.115496][T12752] FAULT_INJECTION: forcing a failure. [ 2294.115496][T12752] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.115691][T12750] should_fail_ex+0x3aa/0x4e0 [ 2294.132961][T12750] _copy_from_user+0x2f/0xe0 [ 2294.137579][T12750] snd_pcm_oss_write+0xa39/0x11e0 [ 2294.140313][ T5126] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2294.142625][T12750] ? snd_pcm_oss_read+0x940/0x940 [ 2294.142657][T12750] ? read_lock_is_recursive+0x20/0x20 [ 2294.160607][T12750] ? fsnotify_perm+0x63/0x5a0 [ 2294.165301][T12750] ? security_file_permission+0x79/0xa0 [ 2294.170861][T12750] ? snd_pcm_oss_read+0x940/0x940 [ 2294.175901][T12750] vfs_write+0x286/0xaf0 [ 2294.180154][T12750] ? file_end_write+0x250/0x250 [ 2294.185005][T12750] ? __fget_files+0x28/0x4a0 [ 2294.189587][T12750] ? __fget_files+0x435/0x4a0 [ 2294.194264][T12750] ? __fget_files+0x28/0x4a0 [ 2294.198849][T12750] ? __fdget_pos+0x1df/0x340 [ 2294.203428][T12750] ? ksys_write+0x7b/0x2c0 [ 2294.207844][T12750] ksys_write+0x1a0/0x2c0 [ 2294.212172][T12750] ? print_irqtrace_events+0x220/0x220 [ 2294.217629][T12750] ? __ia32_sys_read+0x90/0x90 [ 2294.222399][T12750] ? syscall_enter_from_user_mode+0x32/0x230 [ 2294.228390][T12750] ? lockdep_hardirqs_on+0x98/0x140 [ 2294.233603][T12750] ? syscall_enter_from_user_mode+0x32/0x230 [ 2294.239608][T12750] do_syscall_64+0x41/0xc0 [ 2294.244047][T12750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.249948][T12750] RIP: 0033:0x7f57e5c7cae9 [ 2294.254362][T12750] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2294.273969][T12750] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2294.282498][T12750] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2294.290472][T12750] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2294.298438][T12750] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2294.306402][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.314365][T12750] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2294.322349][T12750] [ 2294.340340][T12752] CPU: 1 PID: 12752 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2294.350809][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2294.360883][T12752] Call Trace: [ 2294.364178][T12752] [ 2294.367120][T12752] dump_stack_lvl+0x1e7/0x2d0 [ 2294.371829][T12752] ? nf_tcp_handle_invalid+0x650/0x650 [ 2294.377301][T12752] ? panic+0x770/0x770 [ 2294.381374][T12752] should_fail_ex+0x3aa/0x4e0 [ 2294.386085][T12752] should_failslab+0x9/0x20 [ 2294.390607][T12752] slab_pre_alloc_hook+0x59/0x310 [ 2294.395640][T12752] ? smack_d_instantiate+0x72c/0xa50 [ 2294.400919][T12752] ? do_raw_spin_lock+0x14d/0x3a0 [ 2294.405952][T12752] ? smk_fetch+0x92/0x140 [ 2294.410297][T12752] __kmem_cache_alloc_node+0x4b/0x270 [ 2294.415683][T12752] ? smk_fetch+0x92/0x140 [ 2294.420007][T12752] kmalloc_trace+0x2a/0xe0 [ 2294.424431][T12752] smk_fetch+0x92/0x140 [ 2294.428616][T12752] smack_d_instantiate+0x74a/0xa50 [ 2294.433763][T12752] ? smack_sem_semop+0x230/0x230 [ 2294.438727][T12752] ? kasan_quarantine_put+0xd8/0x230 [ 2294.444042][T12752] ? lockdep_hardirqs_on+0x98/0x140 [ 2294.449277][T12752] security_d_instantiate+0x9b/0xf0 [ 2294.454509][T12752] d_splice_alias+0x6f/0x330 [ 2294.459131][T12752] ovl_lookup+0x24ee/0x2930 [ 2294.463690][T12752] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2294.469106][T12752] ? d_alloc_parallel+0x31e/0x1590 [ 2294.474259][T12752] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2294.479406][T12752] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2294.484805][T12752] path_openat+0x11f1/0x3180 [ 2294.489432][T12752] ? do_filp_open+0x490/0x490 [ 2294.494137][T12752] do_filp_open+0x234/0x490 [ 2294.498650][T12752] ? vfs_tmpfile+0x4b0/0x4b0 [ 2294.503275][T12752] ? _raw_spin_unlock+0x28/0x40 [ 2294.508134][T12752] ? alloc_fd+0x59c/0x640 [ 2294.512470][T12752] do_sys_openat2+0x13e/0x1d0 [ 2294.517169][T12752] ? mutex_unlock+0x10/0x10 [ 2294.521685][T12752] ? do_sys_open+0x230/0x230 [ 2294.526292][T12752] __x64_sys_openat+0x247/0x290 [ 2294.531167][T12752] ? __ia32_sys_open+0x270/0x270 [ 2294.536114][T12752] ? syscall_enter_from_user_mode+0x32/0x230 [ 2294.542371][T12752] ? lockdep_hardirqs_on+0x98/0x140 [ 2294.547597][T12752] ? syscall_enter_from_user_mode+0x32/0x230 [ 2294.553604][T12752] do_syscall_64+0x41/0xc0 [ 2294.558044][T12752] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.563964][T12752] RIP: 0033:0x7f8e7947cae9 [ 2294.568425][T12752] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2294.588024][T12752] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2294.596443][T12752] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2294.604428][T12752] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2294.612412][T12752] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2294.620385][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2294.628348][T12752] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2294.636342][T12752] [ 2294.732808][T11720] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2294.852551][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2294.942501][T11720] usb 5-1: device descriptor read/64, error -71 [ 2294.972786][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.983280][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2294.994235][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2295.072728][T11720] usb usb5-port1: attempt power cycle [ 2295.102943][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2295.112037][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2295.121737][ T5126] usb 1-1: Manufacturer: syz [ 2295.131928][ T5126] usb 1-1: config 0 descriptor?? [ 2295.502487][T11720] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2295.593160][T11720] usb 5-1: device descriptor read/8, error -71 [ 2295.733721][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2295.744387][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:19:54 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa08, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:54 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa07, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 9) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 17) 19:19:54 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2296.760025][T22580] usb 1-1: USB disconnect, device number 68 [ 2296.837535][T12762] FAULT_INJECTION: forcing a failure. [ 2296.837535][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.874761][T12762] CPU: 0 PID: 12762 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2296.885235][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2296.895320][T12762] Call Trace: [ 2296.898621][T12762] [ 2296.900563][T12763] FAULT_INJECTION: forcing a failure. [ 2296.900563][T12763] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.901548][T12762] dump_stack_lvl+0x1e7/0x2d0 [ 2296.901585][T12762] ? nf_tcp_handle_invalid+0x650/0x650 [ 2296.924320][T12762] ? panic+0x770/0x770 [ 2296.928402][T12762] ? __lock_acquire+0x7f70/0x7f70 [ 2296.933448][T12762] should_fail_ex+0x3aa/0x4e0 [ 2296.938145][T12762] _copy_from_user+0x2f/0xe0 [ 2296.942748][T12762] snd_pcm_oss_write+0xa39/0x11e0 [ 2296.947803][T12762] ? snd_pcm_oss_read+0x940/0x940 [ 2296.952835][T12762] ? read_lock_is_recursive+0x20/0x20 [ 2296.958199][T12762] ? fsnotify_perm+0x63/0x5a0 [ 2296.962871][T12762] ? security_file_permission+0x79/0xa0 [ 2296.968418][T12762] ? snd_pcm_oss_read+0x940/0x940 [ 2296.973435][T12762] vfs_write+0x286/0xaf0 [ 2296.977682][T12762] ? file_end_write+0x250/0x250 [ 2296.982545][T12762] ? __fget_files+0x28/0x4a0 [ 2296.987129][T12762] ? __fget_files+0x435/0x4a0 [ 2296.991806][T12762] ? __fget_files+0x28/0x4a0 [ 2296.996393][T12762] ? __fdget_pos+0x1df/0x340 [ 2297.000974][T12762] ? ksys_write+0x7b/0x2c0 [ 2297.005388][T12762] ksys_write+0x1a0/0x2c0 [ 2297.009717][T12762] ? print_irqtrace_events+0x220/0x220 [ 2297.015172][T12762] ? __ia32_sys_read+0x90/0x90 [ 2297.019934][T12762] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.025918][T12762] ? lockdep_hardirqs_on+0x98/0x140 [ 2297.031115][T12762] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.037093][T12762] do_syscall_64+0x41/0xc0 [ 2297.041508][T12762] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2297.047401][T12762] RIP: 0033:0x7f57e5c7cae9 [ 2297.051812][T12762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2297.071409][T12762] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2297.079817][T12762] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2297.087784][T12762] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2297.095752][T12762] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2297.103718][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2297.111678][T12762] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2297.119653][T12762] [ 2297.140656][T12763] CPU: 1 PID: 12763 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2297.151118][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2297.161188][T12763] Call Trace: [ 2297.164477][T12763] [ 2297.167423][T12763] dump_stack_lvl+0x1e7/0x2d0 [ 2297.172115][T12763] ? nf_tcp_handle_invalid+0x650/0x650 [ 2297.177581][T12763] ? panic+0x770/0x770 [ 2297.181666][T12763] ? __might_sleep+0xc0/0xc0 [ 2297.186259][T12763] ? is_bpf_text_address+0x26/0x2a0 [ 2297.191558][T12763] should_fail_ex+0x3aa/0x4e0 [ 2297.196270][T12763] should_failslab+0x9/0x20 [ 2297.200786][T12763] slab_pre_alloc_hook+0x59/0x310 [ 2297.205813][T12763] ? smk_tskacc+0x2ff/0x360 [ 2297.210327][T12763] ? smack_inode_getsecurity+0x246/0x2e0 [ 2297.215954][T12763] __kmem_cache_alloc_node+0x4b/0x270 [ 2297.221336][T12763] ? cap_inode_getsecurity+0xd1/0x8a0 [ 2297.226706][T12763] ? smack_inode_getsecurity+0x246/0x2e0 [ 2297.232352][T12763] __kmalloc_node_track_caller+0xa5/0x230 [ 2297.238070][T12763] ? cap_inode_killpriv+0x40/0x40 [ 2297.243098][T12763] kstrdup+0x3a/0x70 [ 2297.247067][T12763] smack_inode_getsecurity+0x246/0x2e0 [ 2297.252548][T12763] security_inode_getsecurity+0xc4/0x130 [ 2297.258204][T12763] vfs_getxattr+0x19d/0x2e0 [ 2297.262728][T12763] ? ovl_lookup+0x24ee/0x2930 [ 2297.267423][T12763] ? path_openat+0x11f1/0x3180 [ 2297.272186][T12763] ? do_filp_open+0x234/0x490 [ 2297.276867][T12763] ? __vfs_getxattr+0x470/0x470 [ 2297.281728][T12763] ? override_creds+0xf6/0x180 [ 2297.286530][T12763] ovl_xattr_get+0x135/0x180 [ 2297.291136][T12763] ? ovl_xattr_set+0x540/0x540 [ 2297.295919][T12763] ? ovl_own_xattr_set+0x10/0x10 [ 2297.300863][T12763] __vfs_getxattr+0x436/0x470 [ 2297.305556][T12763] smk_fetch+0xb1/0x140 [ 2297.309725][T12763] smack_d_instantiate+0x74a/0xa50 [ 2297.314850][T12763] ? smack_sem_semop+0x230/0x230 [ 2297.319800][T12763] ? kasan_quarantine_put+0xd8/0x230 [ 2297.325083][T12763] ? lockdep_hardirqs_on+0x98/0x140 [ 2297.330296][T12763] security_d_instantiate+0x9b/0xf0 [ 2297.335500][T12763] d_splice_alias+0x6f/0x330 [ 2297.340098][T12763] ovl_lookup+0x24ee/0x2930 [ 2297.344636][T12763] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2297.350030][T12763] ? d_alloc_parallel+0x31e/0x1590 [ 2297.355152][T12763] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2297.360277][T12763] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2297.365648][T12763] path_openat+0x11f1/0x3180 [ 2297.370293][T12763] ? do_filp_open+0x490/0x490 [ 2297.375015][T12763] do_filp_open+0x234/0x490 [ 2297.379528][T12763] ? vfs_tmpfile+0x4b0/0x4b0 [ 2297.384140][T12763] ? _raw_spin_unlock+0x28/0x40 [ 2297.388995][T12763] ? alloc_fd+0x59c/0x640 [ 2297.393332][T12763] do_sys_openat2+0x13e/0x1d0 [ 2297.398031][T12763] ? mutex_unlock+0x10/0x10 [ 2297.402556][T12763] ? do_sys_open+0x230/0x230 [ 2297.407179][T12763] __x64_sys_openat+0x247/0x290 [ 2297.412042][T12763] ? __ia32_sys_open+0x270/0x270 [ 2297.416983][T12763] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.422985][T12763] ? lockdep_hardirqs_on+0x98/0x140 [ 2297.428193][T12763] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.434176][T12763] do_syscall_64+0x41/0xc0 [ 2297.438603][T12763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2297.444501][T12763] RIP: 0033:0x7f8e7947cae9 [ 2297.448934][T12763] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2297.468635][T12763] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2297.477167][T12763] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 19:19:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 10) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 18) [ 2297.485166][T12763] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2297.493157][T12763] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2297.501162][T12763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2297.509155][T12763] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2297.517148][T12763] [ 2297.568657][T12769] FAULT_INJECTION: forcing a failure. [ 2297.568657][T12769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.581957][T12769] CPU: 0 PID: 12769 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2297.592399][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2297.602469][T12769] Call Trace: [ 2297.605742][T12769] [ 2297.608700][T12769] dump_stack_lvl+0x1e7/0x2d0 [ 2297.613411][T12769] ? nf_tcp_handle_invalid+0x650/0x650 [ 2297.618902][T12769] ? panic+0x770/0x770 [ 2297.622994][T12769] ? __lock_acquire+0x7f70/0x7f70 [ 2297.628053][T12769] should_fail_ex+0x3aa/0x4e0 [ 2297.632769][T12769] _copy_from_user+0x2f/0xe0 [ 2297.633755][T18804] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2297.637369][T12769] snd_pcm_oss_write+0xa39/0x11e0 [ 2297.650340][T12769] ? snd_pcm_oss_read+0x940/0x940 [ 2297.655393][T12769] ? read_lock_is_recursive+0x20/0x20 [ 2297.660790][T12769] ? fsnotify_perm+0x63/0x5a0 19:19:55 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa08, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2297.665491][T12769] ? security_file_permission+0x79/0xa0 [ 2297.671069][T12769] ? snd_pcm_oss_read+0x940/0x940 [ 2297.676117][T12769] vfs_write+0x286/0xaf0 [ 2297.680383][T12769] ? file_end_write+0x250/0x250 [ 2297.685257][T12769] ? __fget_files+0x28/0x4a0 [ 2297.689862][T12769] ? __fget_files+0x435/0x4a0 [ 2297.694547][T12769] ? __fget_files+0x28/0x4a0 [ 2297.699140][T12769] ? __fdget_pos+0x1df/0x340 [ 2297.703742][T12769] ? ksys_write+0x7b/0x2c0 [ 2297.708179][T12769] ksys_write+0x1a0/0x2c0 [ 2297.712516][T12769] ? print_irqtrace_events+0x220/0x220 [ 2297.718005][T12769] ? __ia32_sys_read+0x90/0x90 [ 2297.722804][T12769] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.728814][T12769] ? lockdep_hardirqs_on+0x98/0x140 [ 2297.734075][T12769] ? syscall_enter_from_user_mode+0x32/0x230 [ 2297.740518][T12769] do_syscall_64+0x41/0xc0 [ 2297.744956][T12769] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2297.750869][T12769] RIP: 0033:0x7f57e5c7cae9 [ 2297.755297][T12769] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2297.774921][T12769] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2297.783370][T12769] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2297.791421][T12769] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2297.799404][T12769] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2297.807371][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:19:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa0b, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2297.815341][T12769] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2297.823345][T12769] [ 2297.854465][T22580] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2297.945967][T12777] FAULT_INJECTION: forcing a failure. [ 2297.945967][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.967257][T12777] CPU: 0 PID: 12777 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2297.977706][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2297.987759][T12777] Call Trace: [ 2297.991028][T12777] [ 2297.993950][T12777] dump_stack_lvl+0x1e7/0x2d0 [ 2297.998624][T12777] ? nf_tcp_handle_invalid+0x650/0x650 [ 2298.004075][T12777] ? panic+0x770/0x770 [ 2298.008132][T12777] ? vfs_getxattr+0x2d6/0x2e0 [ 2298.012826][T12777] ? path_openat+0x11f1/0x3180 [ 2298.017632][T12777] should_fail_ex+0x3aa/0x4e0 [ 2298.022315][T12777] should_failslab+0x9/0x20 [ 2298.026818][T12777] slab_pre_alloc_hook+0x59/0x310 [ 2298.031839][T12777] ? ovl_xattr_get+0x140/0x180 [ 2298.036619][T12777] ? smk_import_entry+0x18d/0x610 [ 2298.041654][T12777] __kmem_cache_alloc_node+0x4b/0x270 [ 2298.047025][T12777] ? smk_import_entry+0x18d/0x610 [ 2298.052051][T12777] __kmalloc_node_track_caller+0xa5/0x230 [ 2298.057798][T12777] kstrndup+0x41/0xb0 [ 2298.061776][T12777] smk_import_entry+0x18d/0x610 [ 2298.066642][T12777] ? smk_fetch+0xd3/0x140 [ 2298.070979][T12777] smk_fetch+0xdd/0x140 [ 2298.075155][T12777] smack_d_instantiate+0x74a/0xa50 [ 2298.080267][T12777] ? smack_sem_semop+0x230/0x230 [ 2298.085197][T12777] ? kasan_quarantine_put+0xd8/0x230 [ 2298.090471][T12777] ? lockdep_hardirqs_on+0x98/0x140 [ 2298.095688][T12777] security_d_instantiate+0x9b/0xf0 [ 2298.100920][T12777] d_splice_alias+0x6f/0x330 [ 2298.105527][T12777] ovl_lookup+0x24ee/0x2930 [ 2298.110038][T12777] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2298.115417][T12777] ? d_alloc_parallel+0x31e/0x1590 [ 2298.120531][T12777] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2298.125644][T12777] ? ovl_verify_lowerdata+0xbf0/0xbf0 [ 2298.131010][T12777] path_openat+0x11f1/0x3180 [ 2298.135611][T12777] ? do_filp_open+0x490/0x490 [ 2298.140288][T12777] do_filp_open+0x234/0x490 [ 2298.144783][T12777] ? vfs_tmpfile+0x4b0/0x4b0 [ 2298.149386][T12777] ? _raw_spin_unlock+0x28/0x40 [ 2298.154241][T12777] ? alloc_fd+0x59c/0x640 [ 2298.158581][T12777] do_sys_openat2+0x13e/0x1d0 [ 2298.163272][T12777] ? mutex_unlock+0x10/0x10 [ 2298.167768][T12777] ? do_sys_open+0x230/0x230 [ 2298.172355][T12777] __x64_sys_openat+0x247/0x290 [ 2298.177214][T12777] ? __ia32_sys_open+0x270/0x270 [ 2298.182151][T12777] ? syscall_enter_from_user_mode+0x32/0x230 [ 2298.188137][T12777] ? lockdep_hardirqs_on+0x98/0x140 [ 2298.193342][T12777] ? syscall_enter_from_user_mode+0x32/0x230 [ 2298.199331][T12777] do_syscall_64+0x41/0xc0 [ 2298.203741][T12777] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2298.209630][T12777] RIP: 0033:0x7f8e7947cae9 [ 2298.214047][T12777] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2298.222594][T22580] usb 1-1: Using ep0 maxpacket: 16 [ 2298.233653][T12777] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2298.233686][T12777] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 [ 2298.233701][T12777] RDX: 0000000000000000 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2298.233715][T12777] RBP: 00007f8e7a0f8120 R08: 0000000000000000 R09: 0000000000000000 [ 2298.233727][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.233739][T12777] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2298.233767][T12777] 19:19:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) (fail_nth: 19) [ 2298.272906][T18804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.304091][T18804] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 19:19:56 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 11) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) [ 2298.402891][T22580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.414324][T18804] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2298.426439][T12781] FAULT_INJECTION: forcing a failure. [ 2298.426439][T12781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2298.433408][T22580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2298.450908][T12781] CPU: 0 PID: 12781 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2298.461360][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2298.463492][T18804] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2298.471413][T12781] Call Trace: [ 2298.471425][T12781] [ 2298.471434][T12781] dump_stack_lvl+0x1e7/0x2d0 [ 2298.471468][T12781] ? nf_tcp_handle_invalid+0x650/0x650 [ 2298.471493][T12781] ? panic+0x770/0x770 [ 2298.479735][T22580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2298.482737][T12781] ? __lock_acquire+0x7f70/0x7f70 [ 2298.482775][T12781] should_fail_ex+0x3aa/0x4e0 [ 2298.482806][T12781] _copy_from_user+0x2f/0xe0 [ 2298.482831][T12781] snd_pcm_oss_write+0xa39/0x11e0 [ 2298.485893][T18804] usb 5-1: Manufacturer: syz [ 2298.490414][T12781] ? snd_pcm_oss_read+0x940/0x940 [ 2298.490447][T12781] ? read_lock_is_recursive+0x20/0x20 [ 2298.490466][T12781] ? fsnotify_perm+0x63/0x5a0 [ 2298.518666][T12784] overlayfs: failed to resolve './file1': -2 [ 2298.522417][T12781] ? security_file_permission+0x79/0xa0 [ 2298.522450][T12781] ? snd_pcm_oss_read+0x940/0x940 [ 2298.522473][T12781] vfs_write+0x286/0xaf0 [ 2298.522508][T12781] ? file_end_write+0x250/0x250 [ 2298.522535][T12781] ? __fget_files+0x28/0x4a0 [ 2298.522552][T12781] ? __fget_files+0x435/0x4a0 [ 2298.522568][T12781] ? __fget_files+0x28/0x4a0 [ 2298.522590][T12781] ? __fdget_pos+0x1df/0x340 [ 2298.522608][T12781] ? ksys_write+0x7b/0x2c0 [ 2298.522632][T12781] ksys_write+0x1a0/0x2c0 [ 2298.522657][T12781] ? print_irqtrace_events+0x220/0x220 [ 2298.522686][T12781] ? __ia32_sys_read+0x90/0x90 [ 2298.522712][T12781] ? syscall_enter_from_user_mode+0x32/0x230 [ 2298.522739][T12781] ? lockdep_hardirqs_on+0x98/0x140 [ 2298.522766][T12781] ? syscall_enter_from_user_mode+0x32/0x230 [ 2298.522795][T12781] do_syscall_64+0x41/0xc0 [ 2298.522818][T12781] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2298.522843][T12781] RIP: 0033:0x7f57e5c7cae9 [ 2298.522861][T12781] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2298.522878][T12781] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2298.522901][T12781] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2298.522915][T12781] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2298.522929][T12781] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2298.522942][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.522955][T12781] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2298.522985][T12781] [ 2298.723217][T18804] usb 5-1: config 0 descriptor?? [ 2298.752670][T22580] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2298.761760][T22580] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2298.786924][T22580] usb 1-1: Manufacturer: syz [ 2298.794731][T22580] usb 1-1: config 0 descriptor?? [ 2299.399390][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2299.412746][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.331134][T22580] usb 5-1: USB disconnect, device number 39 19:19:58 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa0b, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa0d, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:19:58 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 12) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:19:58 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:19:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2300.429811][ T5126] usb 1-1: USB disconnect, device number 69 [ 2300.489484][T12791] FAULT_INJECTION: forcing a failure. [ 2300.489484][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.529529][T12791] CPU: 1 PID: 12791 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2300.540007][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2300.550096][T12791] Call Trace: [ 2300.553399][T12791] [ 2300.556352][T12791] dump_stack_lvl+0x1e7/0x2d0 [ 2300.561067][T12791] ? nf_tcp_handle_invalid+0x650/0x650 [ 2300.566563][T12791] ? panic+0x770/0x770 [ 2300.570662][T12791] ? __lock_acquire+0x7f70/0x7f70 [ 2300.575728][T12791] should_fail_ex+0x3aa/0x4e0 [ 2300.580439][T12791] _copy_from_user+0x2f/0xe0 [ 2300.585056][T12791] snd_pcm_oss_write+0xa39/0x11e0 [ 2300.590132][T12791] ? snd_pcm_oss_read+0x940/0x940 [ 2300.595201][T12791] ? read_lock_is_recursive+0x20/0x20 [ 2300.600619][T12791] ? fsnotify_perm+0x63/0x5a0 [ 2300.605329][T12791] ? security_file_permission+0x79/0xa0 [ 2300.610899][T12791] ? snd_pcm_oss_read+0x940/0x940 [ 2300.615945][T12791] vfs_write+0x286/0xaf0 [ 2300.620205][T12791] ? file_end_write+0x250/0x250 [ 2300.625069][T12791] ? __fget_files+0x28/0x4a0 [ 2300.629660][T12791] ? __fget_files+0x435/0x4a0 [ 2300.634334][T12791] ? __fget_files+0x28/0x4a0 [ 2300.638932][T12791] ? __fdget_pos+0x1df/0x340 [ 2300.643516][T12791] ? ksys_write+0x7b/0x2c0 [ 2300.647930][T12791] ksys_write+0x1a0/0x2c0 [ 2300.652256][T12791] ? print_irqtrace_events+0x220/0x220 [ 2300.657716][T12791] ? __ia32_sys_read+0x90/0x90 [ 2300.662483][T12791] ? syscall_enter_from_user_mode+0x32/0x230 [ 2300.668463][T12791] ? lockdep_hardirqs_on+0x98/0x140 [ 2300.673678][T12791] ? syscall_enter_from_user_mode+0x32/0x230 [ 2300.679685][T12791] do_syscall_64+0x41/0xc0 [ 2300.684121][T12791] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.690025][T12791] RIP: 0033:0x7f57e5c7cae9 [ 2300.694443][T12791] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2300.714045][T12791] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2300.722457][T12791] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2300.730425][T12791] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2300.738667][T12791] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2300.746677][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.754705][T12791] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2300.762688][T12791] 19:19:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) 19:19:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3, 0x0) [ 2301.136533][T12804] [ 2301.138887][T12804] ====================================================== [ 2301.145887][T12804] WARNING: possible circular locking dependency detected [ 2301.152886][T12804] 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 Not tainted [ 2301.159893][T12804] ------------------------------------------------------ [ 2301.166902][T12804] syz-executor.5/12804 is trying to acquire lock: [ 2301.173293][T12804] ffff88807ecba410 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 2301.181980][T12804] [ 2301.181980][T12804] but task is already holding lock: [ 2301.182574][ T5126] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2301.189322][T12804] ffff88801c250080 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x7c9/0x1cf0 [ 2301.189377][T12804] [ 2301.189377][T12804] which lock already depends on the new lock. [ 2301.189377][T12804] [ 2301.189384][T12804] [ 2301.189384][T12804] the existing dependency chain (in reverse order) is: [ 2301.189390][T12804] [ 2301.189390][T12804] -> #1 (&iint->mutex){+.+.}-{3:3}: [ 2301.189416][T12804] __mutex_lock+0x136/0xd60 [ 2301.189439][T12804] process_measurement+0x7c9/0x1cf0 [ 2301.189456][T12804] ima_file_check+0xf1/0x170 [ 2301.189473][T12804] path_openat+0x2812/0x3180 [ 2301.189491][T12804] do_filp_open+0x234/0x490 [ 2301.189507][T12804] do_sys_openat2+0x13e/0x1d0 [ 2301.189527][T12804] __x64_sys_openat+0x247/0x290 [ 2301.189546][T12804] do_syscall_64+0x41/0xc0 [ 2301.189565][T12804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2301.189586][T12804] [ 2301.189586][T12804] -> #0 (sb_writers#4){.+.+}-{0:0}: [ 2301.189616][T12804] __lock_acquire+0x39ff/0x7f70 [ 2301.189634][T12804] lock_acquire+0x1e3/0x520 [ 2301.189648][T12804] sb_start_write+0x4d/0x1c0 [ 2301.189664][T12804] mnt_want_write+0x3f/0x90 [ 2301.189680][T12804] ovl_maybe_copy_up+0x115/0x180 [ 2301.189697][T12804] ovl_open+0x12b/0x310 [ 2301.189716][T12804] do_dentry_open+0x80f/0x1430 [ 2301.189735][T12804] dentry_open+0xcb/0x120 [ 2301.189754][T12804] ima_calc_file_hash+0x166/0x1d20 19:19:59 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa0d, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:19:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa10, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) [ 2301.189772][T12804] ima_collect_measurement+0x4a5/0x890 [ 2301.189791][T12804] process_measurement+0xfea/0x1cf0 [ 2301.189809][T12804] ima_file_check+0xf1/0x170 [ 2301.189827][T12804] path_openat+0x2812/0x3180 [ 2301.189844][T12804] do_filp_open+0x234/0x490 [ 2301.189861][T12804] do_sys_openat2+0x13e/0x1d0 [ 2301.189880][T12804] __x64_sys_openat+0x247/0x290 [ 2301.189900][T12804] do_syscall_64+0x41/0xc0 [ 2301.189918][T12804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2301.189936][T12804] 19:19:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 13) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) [ 2301.189936][T12804] other info that might help us debug this: [ 2301.189936][T12804] [ 2301.189943][T12804] Possible unsafe locking scenario: [ 2301.189943][T12804] [ 2301.197609][T22580] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2301.206810][T12804] CPU0 CPU1 [ 2301.206818][T12804] ---- ---- [ 2301.206823][T12804] lock(&iint->mutex); [ 2301.206838][T12804] lock(sb_writers#4); [ 2301.430234][T12804] lock(&iint->mutex); [ 2301.436927][T12804] rlock(sb_writers#4); [ 2301.441199][T12804] [ 2301.441199][T12804] *** DEADLOCK *** [ 2301.441199][T12804] [ 2301.449357][T12804] 1 lock held by syz-executor.5/12804: [ 2301.453988][T12810] FAULT_INJECTION: forcing a failure. [ 2301.453988][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.454811][T12804] #0: ffff88801c250080 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x7c9/0x1cf0 [ 2301.469547][T12810] CPU: 1 PID: 12810 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2301.477652][T12804] [ 2301.477652][T12804] stack backtrace: [ 2301.493930][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2301.503976][T12810] Call Trace: [ 2301.507263][T12810] [ 2301.510194][T12810] dump_stack_lvl+0x1e7/0x2d0 [ 2301.514892][T12810] ? nf_tcp_handle_invalid+0x650/0x650 [ 2301.520354][T12810] ? panic+0x770/0x770 [ 2301.524416][T12810] ? __mutex_unlock_slowpath+0x21c/0x750 [ 2301.530052][T12810] ? __lock_acquire+0x7f70/0x7f70 [ 2301.535074][T12810] ? mutex_lock_nested+0x20/0x20 [ 2301.540012][T12810] should_fail_ex+0x3aa/0x4e0 [ 2301.544689][T12810] _copy_from_user+0x2f/0xe0 [ 2301.549279][T12810] snd_pcm_oss_write+0xa39/0x11e0 [ 2301.554305][T12810] ? snd_pcm_oss_read+0x940/0x940 [ 2301.559323][T12810] ? rcu_is_watching+0x15/0xb0 [ 2301.564082][T12810] ? lock_release+0xbf/0x9d0 [ 2301.568667][T12810] ? read_lock_is_recursive+0x20/0x20 [ 2301.574031][T12810] ? fsnotify_perm+0x63/0x5a0 [ 2301.578702][T12810] ? security_file_permission+0x79/0xa0 [ 2301.584248][T12810] ? snd_pcm_oss_read+0x940/0x940 [ 2301.589271][T12810] vfs_write+0x286/0xaf0 [ 2301.593516][T12810] ? file_end_write+0x250/0x250 [ 2301.598364][T12810] ? __fget_files+0x28/0x4a0 [ 2301.602947][T12810] ? __fget_files+0x435/0x4a0 [ 2301.607616][T12810] ? __fget_files+0x28/0x4a0 [ 2301.612197][T12810] ? __fdget_pos+0x1df/0x340 [ 2301.616780][T12810] ? ksys_write+0x7b/0x2c0 [ 2301.621193][T12810] ksys_write+0x1a0/0x2c0 [ 2301.625521][T12810] ? print_irqtrace_events+0x220/0x220 [ 2301.630971][T12810] ? __ia32_sys_read+0x90/0x90 [ 2301.635730][T12810] ? rcu_is_watching+0x15/0xb0 [ 2301.640490][T12810] ? syscall_enter_from_user_mode+0x32/0x230 [ 2301.646474][T12810] do_syscall_64+0x41/0xc0 [ 2301.650889][T12810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2301.656779][T12810] RIP: 0033:0x7f57e5c7cae9 [ 2301.661187][T12810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2301.680785][T12810] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2301.689195][T12810] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2301.697160][T12810] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2301.705122][T12810] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2301.713083][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.721055][T12810] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2301.729022][T12810] [ 2301.732032][T12804] CPU: 0 PID: 12804 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2301.742463][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2301.752529][T12804] Call Trace: [ 2301.755802][T12804] [ 2301.758718][T12804] dump_stack_lvl+0x1e7/0x2d0 [ 2301.763414][T12804] ? nf_tcp_handle_invalid+0x650/0x650 [ 2301.768881][T12804] ? print_circular_bug+0x12b/0x1a0 [ 2301.774085][T12804] check_noncircular+0x375/0x4a0 [ 2301.779035][T12804] ? print_irqtrace_events+0x220/0x220 [ 2301.784496][T12804] ? print_deadlock_bug+0x600/0x600 [ 2301.789681][T12804] ? lockdep_lock+0x123/0x2b0 [ 2301.794360][T12804] ? stack_trace_save+0x117/0x1c0 [ 2301.799397][T12804] ? mark_lock+0x9a/0x340 [ 2301.803713][T12804] ? _find_first_zero_bit+0xd4/0x100 [ 2301.808992][T12804] __lock_acquire+0x39ff/0x7f70 [ 2301.813831][T12804] ? ____kasan_slab_free+0xd6/0x120 [ 2301.819019][T12804] ? ima_calc_file_hash+0x166/0x1d20 [ 2301.824293][T12804] ? __x64_sys_openat+0x247/0x290 [ 2301.829308][T12804] ? do_syscall_64+0x41/0xc0 [ 2301.833083][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2301.833885][T12804] ? verify_lock_unused+0x140/0x140 [ 2301.844184][T12804] ? mark_lock+0x9a/0x340 [ 2301.848523][T12804] ? tomoyo_check_open_permission+0x204/0x500 [ 2301.854590][T12804] ? __lock_acquire+0x7f70/0x7f70 [ 2301.859628][T12804] ? lockdep_hardirqs_on+0x98/0x140 [ 2301.864819][T12804] lock_acquire+0x1e3/0x520 [ 2301.869307][T12804] ? mnt_want_write+0x3f/0x90 [ 2301.873974][T12804] ? read_lock_is_recursive+0x20/0x20 [ 2301.879336][T12804] ? __might_sleep+0xc0/0xc0 [ 2301.883925][T12804] ? smk_access+0x4ab/0x4e0 [ 2301.888441][T12804] ? ovl_path_next+0x370/0x370 [ 2301.893201][T12804] sb_start_write+0x4d/0x1c0 [ 2301.897794][T12804] ? mnt_want_write+0x3f/0x90 [ 2301.902461][T12804] mnt_want_write+0x3f/0x90 [ 2301.906962][T12804] ovl_maybe_copy_up+0x115/0x180 [ 2301.911904][T12804] ovl_open+0x12b/0x310 [ 2301.916055][T12804] ? ovl_mmap+0x4d0/0x4d0 [ 2301.920373][T12804] ? __mnt_want_write+0x68/0x2a0 [ 2301.925300][T12804] ? fsnotify_perm+0x420/0x5a0 [ 2301.930052][T12804] ? ovl_mmap+0x4d0/0x4d0 [ 2301.934371][T12804] do_dentry_open+0x80f/0x1430 [ 2301.939143][T12804] dentry_open+0xcb/0x120 [ 2301.943482][T12804] ima_calc_file_hash+0x166/0x1d20 [ 2301.948597][T12804] ? generic_fillattr+0x2bc/0x670 [ 2301.953616][T12804] ? __asan_memcpy+0x40/0x70 [ 2301.958198][T12804] ? generic_fillattr+0x3ef/0x670 [ 2301.963211][T12804] ? ext4_getattr+0x51e/0x9b0 [ 2301.967948][T12804] ? __asan_memset+0x23/0x40 [ 2301.972522][T12804] ? ima_alloc_tfm+0x310/0x310 [ 2301.977271][T12804] ? revert_creds+0x1a8/0x270 [ 2301.981946][T12804] ? ovl_getattr+0xa4e/0xfc0 [ 2301.986545][T12804] ? ovl_setattr+0x580/0x580 [ 2301.991131][T12804] ? ext4_xattr_get+0x3ce/0x840 [ 2301.995991][T12804] ? __asan_memset+0x23/0x40 [ 2302.000583][T12804] ima_collect_measurement+0x4a5/0x890 [ 2302.006036][T12804] ? ima_get_action+0xb0/0xb0 [ 2302.010699][T12804] ? revert_creds+0x1a8/0x270 [ 2302.015367][T12804] ? ovl_xattr_set+0x540/0x540 [ 2302.020135][T12804] ? ima_get_cache_status+0x1e0/0x1e0 [ 2302.025592][T12804] process_measurement+0xfea/0x1cf0 [ 2302.030807][T12804] ? ima_file_mmap+0x2b0/0x2b0 [ 2302.035567][T12804] ? inode_to_bdi+0x69/0xe0 [ 2302.040069][T12804] ? ovl_open+0x20c/0x310 [ 2302.044391][T12804] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2302.049576][T12804] ? smack_current_getsecid_subj+0x22/0xf0 [ 2302.055370][T12804] ima_file_check+0xf1/0x170 [ 2302.059951][T12804] ? do_dentry_open+0xf36/0x1430 [ 2302.064876][T12804] ? ima_bprm_check+0x2b0/0x2b0 [ 2302.069724][T12804] path_openat+0x2812/0x3180 [ 2302.074330][T12804] ? do_filp_open+0x490/0x490 [ 2302.079011][T12804] do_filp_open+0x234/0x490 [ 2302.083532][T12804] ? vfs_tmpfile+0x4b0/0x4b0 [ 2302.088138][T12804] ? _raw_spin_unlock+0x28/0x40 [ 2302.092979][T12804] ? alloc_fd+0x59c/0x640 [ 2302.097304][T12804] do_sys_openat2+0x13e/0x1d0 [ 2302.101989][T12804] ? do_sys_open+0x230/0x230 [ 2302.106586][T12804] ? xfd_validate_state+0x6e/0x150 [ 2302.111690][T12804] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2302.117663][T12804] __x64_sys_openat+0x247/0x290 [ 2302.122516][T12804] ? __ia32_sys_open+0x270/0x270 [ 2302.127462][T12804] ? syscall_enter_from_user_mode+0x32/0x230 [ 2302.132591][T22580] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2302.133427][T12804] ? lockdep_hardirqs_on+0x98/0x140 [ 2302.133456][T12804] ? syscall_enter_from_user_mode+0x32/0x230 [ 2302.143572][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2302.148659][T12804] do_syscall_64+0x41/0xc0 [ 2302.155598][T22580] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2302.164728][T12804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2302.164756][T12804] RIP: 0033:0x7f8e7947cae9 [ 2302.164773][T12804] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2302.164787][T12804] RSP: 002b:00007f8e7a0f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2302.169899][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2302.178091][T12804] RAX: ffffffffffffffda RBX: 00007f8e7959bf80 RCX: 00007f8e7947cae9 19:20:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4, 0x0) [ 2302.178108][T12804] RDX: 0000000000000003 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 2302.178122][T12804] RBP: 00007f8e794c847a R08: 0000000000000000 R09: 0000000000000000 [ 2302.178133][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2302.178143][T12804] R13: 000000000000000b R14: 00007f8e7959bf80 R15: 00007ffcae9472c8 [ 2302.192873][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2302.208014][T12804] [ 2302.311098][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2302.328476][T22580] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2302.337826][T22580] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2302.346030][T22580] usb 5-1: Manufacturer: syz [ 2302.359683][T22580] usb 5-1: config 0 descriptor?? [ 2302.422916][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2302.432056][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2302.446004][ T5126] usb 1-1: Manufacturer: syz [ 2302.451794][ T5126] usb 1-1: config 0 descriptor?? [ 2303.056871][T12817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2303.066073][T12817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2303.965845][T11193] usb 5-1: USB disconnect, device number 40 19:20:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa11, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:20:01 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:20:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x5, 0x0) 19:20:01 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa10, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:20:01 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 14) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:20:01 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2304.078296][ T777] usb 1-1: USB disconnect, device number 70 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6, 0x0) [ 2304.140167][T12827] FAULT_INJECTION: forcing a failure. [ 2304.140167][T12827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.158335][T12827] CPU: 0 PID: 12827 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2304.168786][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2304.178848][T12827] Call Trace: [ 2304.182118][T12827] [ 2304.185037][T12827] dump_stack_lvl+0x1e7/0x2d0 [ 2304.189708][T12827] ? nf_tcp_handle_invalid+0x650/0x650 [ 2304.195171][T12827] ? panic+0x770/0x770 [ 2304.199237][T12827] ? __mutex_unlock_slowpath+0x21c/0x750 [ 2304.204871][T12827] ? __lock_acquire+0x7f70/0x7f70 [ 2304.209889][T12827] ? mutex_lock_nested+0x20/0x20 [ 2304.214822][T12827] should_fail_ex+0x3aa/0x4e0 [ 2304.219492][T12827] _copy_from_user+0x2f/0xe0 [ 2304.224076][T12827] snd_pcm_oss_write+0xa39/0x11e0 [ 2304.229094][T12827] ? snd_pcm_oss_read+0x940/0x940 [ 2304.234105][T12827] ? rcu_is_watching+0x15/0xb0 [ 2304.238862][T12827] ? lock_release+0xbf/0x9d0 [ 2304.243442][T12827] ? read_lock_is_recursive+0x20/0x20 [ 2304.248807][T12827] ? fsnotify_perm+0x63/0x5a0 [ 2304.253476][T12827] ? security_file_permission+0x79/0xa0 [ 2304.259012][T12827] ? snd_pcm_oss_read+0x940/0x940 [ 2304.264033][T12827] vfs_write+0x286/0xaf0 [ 2304.268275][T12827] ? file_end_write+0x250/0x250 [ 2304.273117][T12827] ? __fget_files+0x28/0x4a0 [ 2304.277698][T12827] ? __fget_files+0x435/0x4a0 [ 2304.282361][T12827] ? __fget_files+0x28/0x4a0 [ 2304.286945][T12827] ? __fdget_pos+0x1df/0x340 [ 2304.291519][T12827] ? ksys_write+0x7b/0x2c0 [ 2304.295934][T12827] ksys_write+0x1a0/0x2c0 [ 2304.300257][T12827] ? print_irqtrace_events+0x220/0x220 [ 2304.305711][T12827] ? __ia32_sys_read+0x90/0x90 [ 2304.310466][T12827] ? rcu_is_watching+0x15/0xb0 [ 2304.315221][T12827] ? syscall_enter_from_user_mode+0x32/0x230 [ 2304.321216][T12827] do_syscall_64+0x41/0xc0 [ 2304.325642][T12827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2304.331564][T12827] RIP: 0033:0x7f57e5c7cae9 [ 2304.335976][T12827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2304.355573][T12827] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2304.363981][T12827] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2304.371940][T12827] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2304.379898][T12827] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2304.387857][T12827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2304.395816][T12827] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2304.403785][T12827] 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x7, 0x0) 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9, 0x0) 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa, 0x0) 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xb, 0x0) [ 2304.792502][T11193] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 2304.800106][ T777] usb 1-1: new high-speed USB device number 71 using dummy_hcd 19:20:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc, 0x0) [ 2305.052537][ T777] usb 1-1: Using ep0 maxpacket: 16 [ 2305.182599][T11193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.192786][ T777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.202914][T11193] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2305.215478][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2305.226450][ T777] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2305.237041][ T777] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2305.282631][T11193] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2305.291974][T11193] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2305.300129][T11193] usb 5-1: Manufacturer: syz [ 2305.306488][T11193] usb 5-1: config 0 descriptor?? [ 2305.322767][ T777] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2305.334348][ T777] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2305.342343][ T777] usb 1-1: Manufacturer: syz [ 2305.352885][ T777] usb 1-1: config 0 descriptor?? [ 2305.947573][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2305.956178][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:20:04 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:20:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xb00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:20:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xd, 0x0) 19:20:04 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa11, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:20:04 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 15) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:20:04 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2307.112011][T11193] usb 5-1: USB disconnect, device number 41 [ 2307.137897][ T5126] usb 1-1: USB disconnect, device number 71 [ 2307.201334][T12855] FAULT_INJECTION: forcing a failure. [ 2307.201334][T12855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2307.217776][T12855] CPU: 1 PID: 12855 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 [ 2307.228225][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2307.238306][T12855] Call Trace: [ 2307.241603][T12855] [ 2307.244535][T12855] dump_stack_lvl+0x1e7/0x2d0 [ 2307.249205][T12855] ? nf_tcp_handle_invalid+0x650/0x650 [ 2307.254650][T12855] ? panic+0x770/0x770 [ 2307.258704][T12855] ? __mutex_unlock_slowpath+0x21c/0x750 [ 2307.264342][T12855] ? __lock_acquire+0x7f70/0x7f70 [ 2307.269352][T12855] ? mutex_lock_nested+0x20/0x20 [ 2307.274292][T12855] should_fail_ex+0x3aa/0x4e0 [ 2307.278975][T12855] _copy_from_user+0x2f/0xe0 [ 2307.283553][T12855] snd_pcm_oss_write+0xa39/0x11e0 [ 2307.288571][T12855] ? snd_pcm_oss_read+0x940/0x940 [ 2307.293594][T12855] ? rcu_is_watching+0x15/0xb0 [ 2307.298436][T12855] ? lock_release+0xbf/0x9d0 [ 2307.303014][T12855] ? read_lock_is_recursive+0x20/0x20 [ 2307.308367][T12855] ? fsnotify_perm+0x63/0x5a0 [ 2307.313041][T12855] ? security_file_permission+0x79/0xa0 [ 2307.318575][T12855] ? snd_pcm_oss_read+0x940/0x940 [ 2307.323598][T12855] vfs_write+0x286/0xaf0 [ 2307.327864][T12855] ? file_end_write+0x250/0x250 [ 2307.332741][T12855] ? __fget_files+0x28/0x4a0 [ 2307.337328][T12855] ? __fget_files+0x435/0x4a0 [ 2307.342000][T12855] ? __fget_files+0x28/0x4a0 [ 2307.346584][T12855] ? __fdget_pos+0x1df/0x340 [ 2307.351172][T12855] ? ksys_write+0x7b/0x2c0 [ 2307.355592][T12855] ksys_write+0x1a0/0x2c0 [ 2307.359925][T12855] ? print_irqtrace_events+0x220/0x220 [ 2307.365379][T12855] ? __ia32_sys_read+0x90/0x90 [ 2307.370134][T12855] ? rcu_is_watching+0x15/0xb0 [ 2307.374891][T12855] ? syscall_enter_from_user_mode+0x32/0x230 [ 2307.380866][T12855] do_syscall_64+0x41/0xc0 [ 2307.385275][T12855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2307.391158][T12855] RIP: 0033:0x7f57e5c7cae9 [ 2307.395561][T12855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2307.415242][T12855] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2307.423652][T12855] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2307.431613][T12855] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2307.439572][T12855] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xe, 0x0) [ 2307.447533][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2307.455491][T12855] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2307.463466][T12855] 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10, 0x0) 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x11, 0x0) 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x12, 0x0) 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x18, 0x0) 19:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x25, 0x0) [ 2307.722488][T11193] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2307.812593][ T5126] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2308.052463][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 2308.122782][T11193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.132974][T11193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2308.144916][T11193] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2308.192608][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.203039][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2308.214598][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2308.225390][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2308.235675][T11193] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2308.247305][T11193] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2308.259896][T11193] usb 5-1: Manufacturer: syz [ 2308.266006][T11193] usb 5-1: config 0 descriptor?? [ 2308.322539][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2308.331617][ T5126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2308.340010][ T5126] usb 1-1: Manufacturer: syz [ 2308.350565][ T5126] usb 1-1: config 0 descriptor?? [ 2308.949905][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2308.960556][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:20:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xd00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x37, 0x0) 19:20:08 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xb00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) 19:20:08 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 16) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x40) 19:20:08 executing program 4: r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) 19:20:08 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x33f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xb1, 0x29, 0x2a, 0x40, 0xdf6, 0x66, 0xedc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32d, 0x2, 0x50, 0x9, 0x40, 0x80, [{{0x9, 0x4, 0x1b, 0x1f, 0x3, 0xb3, 0x34, 0x54, 0xbb, [], [{{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0xff, 0x91}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x51, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7}, @generic={0x18, 0xd, "f4b15f06dcf8fdd5eff36e3eec93c33622a023f0f005"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x6, 0xe0, 0x7, 0x68, 0x41, 0x28, 0xfe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4fa73e17"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xb648, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x2, 0x7ff, 0x4000, 0x3]}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x67, 0xff, [@generic={0x9e, 0x3, "152f7329c3b6d26b2d21cc8ce8b812750c385b2196796db75126b784095951eba29dedf110b44e3dba749d25c9348f688006898ae6c201646f7850ecf3998e3cfaa84c839448f134af039a1b347749d669b1d55f68c88c8a779a79d6d2a03578d743c8449b7dd66031dd011d9bbf2f2ec7d78516487d0e540369181b0c3722a1dcdb3d602a660dbc6918b3979d9b98a249fd21f861d2ef8d1f95ef28"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x83, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x46}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3bf, 0x3f, 0x21, 0xd6, [@generic={0xe0, 0x21, "a8976936ad5cf2a925c692b6aff566f8db65767d89f7814d895d84ec3baadddf55481f42ab4f8c69151647eccefcbce0121ce819131f09d9f4e6fa0e905613e98f5217368642e19d6cc9dc12c52680fb94e6c08f9a52b029532379378cf2417ae444f7d857089ffa59c47dff2d512f60c75df45e35e53ef9f1c7f0714cf378e25fd1871598bbe06f030dca90d21e092dcc0ae9b35be7edccbb504d3ee76f7244f6d990ea459e96cf35e66c4e9ccb75687b446de26f9f296bf1ad3f561af5b35e92b8adf06d617d05034e7722bfb6035e1cf18156751f60591f915bbe0730"}, @generic={0xa5, 0x23, "a5072031b8413659c5b2fcc00e51638e6be903b2fcb043d7bdc61cd0b08e08a56b61eea7c975403cad5292732c8f7329e9062cf795075215619d060876769b65e54187a309c68bc40d398bde1a60650e55827f448970af85cf270e33e87502cb317fe62c411ba409c4ca3ab50a9b3fe094cc3f0ab7ce227a74bdb60884e659cfe118aa59ac031e4ef3a5ea5c95e3ccf096dcf50211009475436410caf70f93ad2e1563"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x53, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0xfff}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfa, 0x7, 0x5, 0x40, 0x4a}, 0xce, &(0x7f00000010c0)={0x5, 0xf, 0xce, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9d8622fb5db22da6edfe0e55712fd1a0"}, @generic={0x81, 0x10, 0x2, "4decfd9883db1433ac7ce85b3c907c65f185f3a6148edb712d3ac153942e1ed78a216b00497434d66821a9f82dc23db43ad4d0b8a8110ef7e8d9f49f52c03abeda2c015228d03956a88a36b70d14dd817b1a99ba653d622edf396de7e356aa52f46d8342f7da356a6640cd8a0d3ed59607df697ee8a7dae2388561462c9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x2, 0x1000}, @ssp_cap={0x20, 0x10, 0xa, 0x3c, 0x5, 0x9, 0xf, 0xc00, [0x30, 0xff3f30, 0xc0, 0xffc0, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000180)=@string={0x1b, 0x3, "3a447c523a3b5449c5b1e0b4e432eb1c57314ae4ec96511f60"}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "8b7b17903b3eda023819cda49101c1ce598932cee09fed6596d9b7e715e08e335ee0e238b6b128d9127c252679589aa32173c31ca40f7ff5d2acbb35b927096a044e89dbd9f07cad9e65cd776589696de6d7611c6d4f3d7956376ab739c45f0d6eb234961466daf17c15a96a0092d40693753c17f0c3ec"}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "cabfa02204394b736c1d0d29a5c7630d736b87d685d918d467cd31f63a31aa33283c5d632677822f88f9cf791d9c0fcaee919394617c74a80fecd7f1d9f49ce1a4dc43c70cff655a36964b577a0140baaaa8daaaab7ad92995518b9c56a07372084dc65699d760230bcf6c19db489b4d5bdbf35852a8d9ea8390fae8e46dcf3d3c0bf1eabfa66b984efe4688aac1b9fe6b695578c6ffec26b483d7748063ab3376449a1189bff4d57441c5b630f039b4477363aa0e483da31833ff41883b1ce39fa82916554b9e7750f92a459052d1509dfb4ff616aa8615ba2be5bebc7cd9fe88a5da4c3552c859405ca6da83ecbad81addb01605a03ded29e62741b506"}}, {0x94, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000001c0)=ANY=[]) [ 2310.182876][T11193] usb 5-1: USB disconnect, device number 42 [ 2310.204706][T22580] usb 1-1: USB disconnect, device number 72 [ 2310.255164][T12884] FAULT_INJECTION: forcing a failure. [ 2310.255164][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.288645][T12884] CPU: 1 PID: 12884 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-00137-g750b95887e56 #0 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x48, 0x0) [ 2310.299112][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2310.309183][T12884] Call Trace: [ 2310.312483][T12884] [ 2310.315428][T12884] dump_stack_lvl+0x1e7/0x2d0 [ 2310.320121][T12884] ? nf_tcp_handle_invalid+0x650/0x650 [ 2310.325573][T12884] ? panic+0x770/0x770 [ 2310.329635][T12884] ? __mutex_unlock_slowpath+0x21c/0x750 [ 2310.335278][T12884] ? __lock_acquire+0x7f70/0x7f70 [ 2310.340290][T12884] ? mutex_lock_nested+0x20/0x20 [ 2310.345225][T12884] should_fail_ex+0x3aa/0x4e0 [ 2310.349906][T12884] _copy_from_user+0x2f/0xe0 [ 2310.354498][T12884] snd_pcm_oss_write+0xa39/0x11e0 [ 2310.359525][T12884] ? snd_pcm_oss_read+0x940/0x940 [ 2310.364537][T12884] ? rcu_is_watching+0x15/0xb0 [ 2310.369291][T12884] ? lock_release+0xbf/0x9d0 [ 2310.373870][T12884] ? read_lock_is_recursive+0x20/0x20 [ 2310.379229][T12884] ? fsnotify_perm+0x63/0x5a0 [ 2310.383895][T12884] ? security_file_permission+0x79/0xa0 [ 2310.389443][T12884] ? snd_pcm_oss_read+0x940/0x940 [ 2310.394463][T12884] vfs_write+0x286/0xaf0 [ 2310.398724][T12884] ? file_end_write+0x250/0x250 [ 2310.403584][T12884] ? __fget_files+0x28/0x4a0 [ 2310.408165][T12884] ? __fget_files+0x435/0x4a0 [ 2310.412830][T12884] ? __fget_files+0x28/0x4a0 [ 2310.417409][T12884] ? __fdget_pos+0x1df/0x340 [ 2310.421984][T12884] ? ksys_write+0x7b/0x2c0 [ 2310.426392][T12884] ksys_write+0x1a0/0x2c0 [ 2310.430715][T12884] ? print_irqtrace_events+0x220/0x220 [ 2310.436165][T12884] ? __ia32_sys_read+0x90/0x90 [ 2310.440922][T12884] ? rcu_is_watching+0x15/0xb0 [ 2310.445681][T12884] ? syscall_enter_from_user_mode+0x32/0x230 [ 2310.451655][T12884] do_syscall_64+0x41/0xc0 [ 2310.456063][T12884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2310.461951][T12884] RIP: 0033:0x7f57e5c7cae9 [ 2310.466369][T12884] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2310.485981][T12884] RSP: 002b:00007f57e69cc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2310.494392][T12884] RAX: ffffffffffffffda RBX: 00007f57e5d9bf80 RCX: 00007f57e5c7cae9 [ 2310.502363][T12884] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 2310.510334][T12884] RBP: 00007f57e69cc120 R08: 0000000000000000 R09: 0000000000000000 [ 2310.518320][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2310.526276][T12884] R13: 000000000000000b R14: 00007f57e5d9bf80 R15: 00007ffe96648bf8 [ 2310.534243][T12884] 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4c, 0x0) 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x5c, 0x0) 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x68, 0x0) 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6c, 0x0) [ 2310.802760][T11193] usb 5-1: new full-speed USB device number 43 using dummy_hcd 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x74, 0x0) [ 2310.882438][T22580] usb 1-1: new high-speed USB device number 73 using dummy_hcd 19:20:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x7a, 0x0) 19:20:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x1100, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100000) 19:20:08 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xd00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfefdffff) [ 2311.122439][T22580] usb 1-1: Using ep0 maxpacket: 16