dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:38:86:54:de:e3:84:6f:42:f0:0e:4e:a9:8b:37:24:d9 forked to background, child pid 1206 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2021/11/26 07:01:36 fuzzer started 2021/11/26 07:01:37 dialing manager at 10.128.0.163:41661 syzkaller login: [ 33.480613][ T1280] cgroup: Unknown subsys name 'net' [ 33.486045][ T1280] cgroup: Unknown subsys name 'net_prio' [ 33.491900][ T1280] cgroup: Unknown subsys name 'devices' [ 33.498030][ T1280] cgroup: Unknown subsys name 'blkio' [ 33.620174][ T1280] cgroup: Unknown subsys name 'hugetlb' [ 33.626247][ T1280] cgroup: Unknown subsys name 'rlimit' 2021/11/26 07:01:37 syscalls: 90 2021/11/26 07:01:37 code coverage: enabled 2021/11/26 07:01:37 comparison tracing: enabled 2021/11/26 07:01:37 extra coverage: enabled 2021/11/26 07:01:37 setuid sandbox: enabled 2021/11/26 07:01:37 namespace sandbox: enabled 2021/11/26 07:01:37 Android sandbox: /sys/fs/selinux/policy does not exist 2021/11/26 07:01:37 fault injection: enabled 2021/11/26 07:01:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/11/26 07:01:37 net packet injection: /dev/net/tun does not exist 2021/11/26 07:01:37 net device setup: enabled 2021/11/26 07:01:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/11/26 07:01:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/11/26 07:01:37 USB emulation: enabled 2021/11/26 07:01:37 hci packet injection: /dev/vhci does not exist 2021/11/26 07:01:37 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/11/26 07:01:37 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/11/26 07:01:37 fetching corpus: 50, signal 33450/34960 (executing program) 2021/11/26 07:01:37 fetching corpus: 100, signal 40285/43113 (executing program) 2021/11/26 07:01:38 fetching corpus: 150, signal 44398/48520 (executing program) 2021/11/26 07:01:38 fetching corpus: 200, signal 47745/53065 (executing program) 2021/11/26 07:01:38 fetching corpus: 250, signal 49738/56213 (executing program) 2021/11/26 07:01:39 fetching corpus: 300, signal 52529/60046 (executing program) 2021/11/26 07:01:39 fetching corpus: 350, signal 55547/63981 (executing program) 2021/11/26 07:01:39 fetching corpus: 400, signal 57106/66564 (executing program) 2021/11/26 07:01:39 fetching corpus: 450, signal 58503/68966 (executing program) 2021/11/26 07:01:40 fetching corpus: 500, signal 60004/71414 (executing program) 2021/11/26 07:01:40 fetching corpus: 550, signal 61537/73848 (executing program) 2021/11/26 07:01:40 fetching corpus: 600, signal 62826/75975 (executing program) 2021/11/26 07:01:41 fetching corpus: 650, signal 63843/77900 (executing program) 2021/11/26 07:01:41 fetching corpus: 700, signal 64749/79731 (executing program) 2021/11/26 07:01:41 fetching corpus: 750, signal 65734/81568 (executing program) 2021/11/26 07:01:41 fetching corpus: 800, signal 66800/83441 (executing program) 2021/11/26 07:01:42 fetching corpus: 850, signal 67905/85346 (executing program) 2021/11/26 07:01:42 fetching corpus: 900, signal 69237/87316 (executing program) 2021/11/26 07:01:42 fetching corpus: 950, signal 70024/88909 (executing program) 2021/11/26 07:01:43 fetching corpus: 1000, signal 70880/90475 (executing program) 2021/11/26 07:01:43 fetching corpus: 1050, signal 71680/91957 (executing program) 2021/11/26 07:01:43 fetching corpus: 1100, signal 72421/93408 (executing program) 2021/11/26 07:01:43 fetching corpus: 1150, signal 73185/94854 (executing program) 2021/11/26 07:01:44 fetching corpus: 1200, signal 73808/96215 (executing program) 2021/11/26 07:01:44 fetching corpus: 1250, signal 74307/97438 (executing program) 2021/11/26 07:01:44 fetching corpus: 1300, signal 74871/98687 (executing program) 2021/11/26 07:01:45 fetching corpus: 1350, signal 75329/99854 (executing program) 2021/11/26 07:01:45 fetching corpus: 1400, signal 75870/101060 (executing program) 2021/11/26 07:01:45 fetching corpus: 1450, signal 76509/102345 (executing program) 2021/11/26 07:01:45 fetching corpus: 1500, signal 77096/103622 (executing program) 2021/11/26 07:01:46 fetching corpus: 1550, signal 77488/104699 (executing program) 2021/11/26 07:01:46 fetching corpus: 1600, signal 77944/105830 (executing program) 2021/11/26 07:01:46 fetching corpus: 1650, signal 78396/106941 (executing program) 2021/11/26 07:01:47 fetching corpus: 1700, signal 79118/108128 (executing program) 2021/11/26 07:01:47 fetching corpus: 1750, signal 79669/109270 (executing program) 2021/11/26 07:01:47 fetching corpus: 1800, signal 80020/110262 (executing program) 2021/11/26 07:01:48 fetching corpus: 1850, signal 80527/111321 (executing program) 2021/11/26 07:01:48 fetching corpus: 1900, signal 80807/112246 (executing program) 2021/11/26 07:01:48 fetching corpus: 1950, signal 81143/113236 (executing program) 2021/11/26 07:01:48 fetching corpus: 2000, signal 81486/114166 (executing program) 2021/11/26 07:01:49 fetching corpus: 2050, signal 81913/115145 (executing program) 2021/11/26 07:01:49 fetching corpus: 2100, signal 82412/116134 (executing program) 2021/11/26 07:01:49 fetching corpus: 2150, signal 82742/117035 (executing program) 2021/11/26 07:01:49 fetching corpus: 2200, signal 83342/118034 (executing program) 2021/11/26 07:01:50 fetching corpus: 2250, signal 83641/118879 (executing program) 2021/11/26 07:01:50 fetching corpus: 2300, signal 83988/119772 (executing program) 2021/11/26 07:01:50 fetching corpus: 2350, signal 84312/120629 (executing program) 2021/11/26 07:01:50 fetching corpus: 2400, signal 84635/121465 (executing program) 2021/11/26 07:01:51 fetching corpus: 2450, signal 85043/122306 (executing program) 2021/11/26 07:01:51 fetching corpus: 2500, signal 85341/123160 (executing program) 2021/11/26 07:01:51 fetching corpus: 2550, signal 85607/124007 (executing program) 2021/11/26 07:01:52 fetching corpus: 2600, signal 85964/124838 (executing program) 2021/11/26 07:01:52 fetching corpus: 2650, signal 86355/125646 (executing program) 2021/11/26 07:01:52 fetching corpus: 2700, signal 86619/126443 (executing program) 2021/11/26 07:01:52 fetching corpus: 2750, signal 86862/127215 (executing program) 2021/11/26 07:01:53 fetching corpus: 2800, signal 87138/128001 (executing program) 2021/11/26 07:01:53 fetching corpus: 2850, signal 87409/128784 (executing program) 2021/11/26 07:01:53 fetching corpus: 2900, signal 87669/129558 (executing program) 2021/11/26 07:01:53 fetching corpus: 2950, signal 87889/130313 (executing program) 2021/11/26 07:01:54 fetching corpus: 3000, signal 88143/131045 (executing program) 2021/11/26 07:01:54 fetching corpus: 3050, signal 88417/131797 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/132537 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/133242 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/133959 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/134694 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/135409 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/136092 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/136830 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/137324 (executing program) 2021/11/26 07:01:54 fetching corpus: 3053, signal 88437/137324 (executing program) 2021/11/26 07:01:55 starting 6 fuzzer processes 07:01:56 executing program 0: syz_usb_connect(0x4, 0x558, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x1d, 0x71, 0x36, 0x20, 0x11f5, 0x5, 0xa720, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x546, 0x2, 0x81, 0x9, 0x0, 0x20, [{{0x9, 0x4, 0xbc, 0x1, 0x9, 0x11, 0x27, 0x8d, 0x5, [], [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0xe4, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x28, 0x2, 0xbf}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0xff, 0x9, [@generic={0xbb, 0x2, "47ec18140e1c78cef534d42f860022dceb62f09196c58a51823365dc356ff8a1e03ed29ef727c0cee24a7423753823d1164a6c66a77826b94dc00156a13cfc877e3fcf0e33eb3117066a2755e41d6ea790b26b95107dffb8166a17a24c2013503f0d06860b10dfe4880507975ace12913b9fe8798de9e08184efd7dae84bd98f5ddf0546bfbd92ee596b5451511c4e5a98362c49cc6273e8c95170ab9506ddc7e835064405de5d9bf42505405f398abf4326283fbf5a068808"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x0, 0x80, 0x1f}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x7, 0x1, 0x40, [@generic={0x5d, 0x3, "cdf57c2ee59e7ce466a56cdadc83b0742ed7d6bb3ab40acc7bdbdcb6c16cf792dba77500725784eca63ef916f4539349098d6da253be13f6df409d0c3e28da50b5e50eb09bbe146dab2b37a73f118dbc2faf8210e11df5f87bc945"}, @generic={0xc1, 0xe, "087fc85250f09d69ae4796b3040f2dd530e09b4b697fd179dfc7d7fb2fb40ca58a5e2f5d58b346ffda3d06c28a323e571886c1bf527334a40ac693eb9df7e7cbb7bfa975a594416a6d4d122e1dcf25246679ea2550de6f65e0f2b81137a48505ae63ee21702764d1515824871c303b9f1a67b66d91c0106c849243c049e1c225ea8c4f030600e9cfe3174642e3d2ec59723810a7fa4a564254d41e1d7d6dc30cb66e08532f26cb89c3452a42b9ab6b1172cb6c2d25706d92b4e6ef6000a572"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x80, 0x2, 0x7, [@generic={0x6d, 0x8, "516edc5ab6daac32e76b4ce147b37e721b9839315e87fda6d13ecbfbdfd651ca2702ca67b3c78dfaa6200cf65a02fcb72d260c614f28d586a3065595ffc3e5bf8df4099db0dd2267965c85cc43abf05eae5582fc62bc469198652a892f8d2ce7a7575213b1564656330764"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0x100}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x0, 0xf5}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x6, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7}]}}]}}, {{0x9, 0x4, 0xeb, 0x3f, 0x9, 0xc7, 0xd6, 0x39, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x800, 0x1}}], [{{0x9, 0x5, 0x7, 0xb, 0x400, 0x6, 0x4, 0xf8, [@generic={0x5b, 0xe, "a8a85413b9c4002a0148c58a2ed84da50c208a58199b89e5fcc20def7875401a760ba62485a8b1ec2e2d3dbb6ccf9e9f10e493c126042ab18fa91571922f62790b159f966b70fe6118054f6c5d0d0657bbcd168d3f913f4aea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x7, 0xec}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x3f, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x6, 0x80, 0x1, [@generic={0xcd, 0x31, "03e539d7659fade90853ab3c5905150fa19fe9702d635502b005d9e9c6c8df3882852d674e262d7c43ce56bbd597e239f3ccc89654b3369b0b33dd84b72272bd16439a8653d409cb3433c3175b4a0b9649b30c1555e1f8eeadaa7b54e1f5cbb512efaa956be79078532b3713dfd1eaf73535b70e0ad98556f96407fec9e271d4f4698b24ff7906eceee7c2464ca9f734d89bf544370c20b0baec489acd4a9521fb783928d4b956d64316179ac1cade0ec126a35189469261644e5a17fcb0de1f011a3aa90c68df5933e269"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5c, 0x100}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xe9, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x51bd}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x20, 0x1, 0x4, [@generic={0x23, 0xa, "e8a5da3343eae0692771473679ece57addcc06186cefe3bca6d9cb6a463713f1ac"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3f, 0x2, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7, 0x6, 0x0, [@generic={0x43, 0xf, "f21101eb5c92c861a71a76d888b665bf9a891ebc96e05b01f5a5c1af335d0d713b32b9f11fb2025fc6666067690eeb2558d608c099a871987ecd563900568ea84e"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x5, 0xba, 0xff, [@generic={0x74, 0x21, "6a1412d93f7f175bfe7eb8046d6b0181d3104fbaee34aefde64a2e605a5a988e887fcc57fa95d24653d210748b7141fa6aaf8b612f4c6e7cd11f51426bb30274438ef9ffdee179e7d7fd62da751b4234cb6d9c29cf08c5d1b985965f5011c61901c4363ccfabfb3696d3dc321399b89e7d34"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x2d, 0x2e, 0x40, 0x8, 0x8}, 0xec, &(0x7f00000005c0)={0x5, 0xf, 0xec, 0x2, [@generic={0x66, 0x10, 0x3, "6766c53043d93e0254b17cd581c68596585ac4190030342e2a9d9260d71ec42693253424d2ec11fb4ffe1c05987c748e56c056e92bb7d3c71c9fac21d0a1b299b8f1158a9b54c797a847e8a421c6e21e47107dbbfeac151214bc51b7047699466efe1b"}, @generic={0x81, 0x10, 0xb, "0c53785fa0a6f62b3ca199c2bc582bb74b17aed5f691f1704f9da1d74d028bb838771c5e5adcf2ae76afef6adda7e692e04675b7ca4010e276131d0aae1fe2004eee68bbe3429f2e8af24a7559f190c024d585c123772a5ecf5187e4fb5c7f78b76557849908a5a6ef53eb22f7a16b8926e1eca807847c12b7a91596e65d"}]}, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xa1, &(0x7f0000000700)=@string={0xa1, 0x3, "bad796f86694143fdc7f7daeed71d147d56435d92189ad5b25c1cdcfcdb689845423609cca5c2b2e1469fc6b3ddf1856229da9213b9f7dbd6ae625cdad9b0dad8851d095d91cd89b78d77583fc82051c88c545024f599d4182a4115f1e517cf3aa40edef7e4fa83ec9387b9c1467b6bb543abd603d874fca6f1d76e0c68672280f7c32a156d787aa9eb8085bce570401a68fbe17f0b5c69c4b186bf31fdce6"}}]}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "21f6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4fa1, 0x0, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x9}, [@obex={0x5, 0x24, 0x15, 0x7fff}, @country_functional={0x10, 0x24, 0x7, 0x80, 0x4, [0x40, 0x1d, 0x1000, 0xef0, 0x1000]}, @obex={0x5, 0x24, 0x15, 0x8001}, @obex={0x5, 0x24, 0x15, 0xae8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x73, 0x2b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0xd7, 0x6, 0x80, 0x40, 0x2}, 0x15e, &(0x7f0000000900)={0x5, 0xf, 0x15e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3f, 0x9e, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0xfe, 0x1}, @generic={0x88, 0x10, 0xa, "a53b13931ff93c71d0c385a56b2087012fe1f80ab6c5a6a010d9a8d3f56a91aea1fb79f4900ea2d11c50e40e9571a5ccde157a18f1fea2a77d21dcb49a6ae8286daba0b47bc9613f6879816dbaf5caadcce4a8673f13e28d1d1ca5e376c88c5960bc480e26c30e0feb8bbdf849e90be79d2ee7ee32c189824b0dcfda0cfea4285a4b205dc8"}, @generic={0xbd, 0x10, 0xb, "11d585fed92eaed3e97992495ffb9782e5d8c0ccceb57a848a8598a4a0fa6f5bc954b4635e362298e1b00ba0a54d96f7e8db94b00b4bb7d50c811a70fbb86154080b6044efaf859e227aacba577c1c7d309e1e1edd7e83b22de983a0331ec596068aa3a1dda66eb408439779f7da158dd89e22ec5edd24d0a2453f75903d210753e2c058c518f98b532921fe6a082567cda28d506abbfabae4a781c5246c9f666f12b28ef4e59bebbb88abfef33852c8855b34c0716f97d79245"}]}, 0x1, [{0xc7, &(0x7f0000000a80)=@string={0xc7, 0x3, "087d32ccb12df9199f97990dd56d85976148b9f761ea7ea3017bd6a311ca9bbd592978f0de3839a74ac07cf2aa32c7e2328580342b2d9b1a7f4e1a9ddbd2b40112f5266b3f7662da0cf6ff86ac7e9640fbd6148875c5566e68652aae06f3d87bd4c217f5234a64f2ad1843c3ce447cd16474adb72d083ed48534574666726fbba19539423d8c60581c288989bd87a4760b3618d9693e44dbd0cf0f4b26ab4d8c41912ff4800be66aa2b04edf92d27d32259b3b3eb6c8ffcdee130fc837524a18ac05adeb9e"}}]}) syz_usb_connect$uac1(0x4, 0xa7, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0xd0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x4, 0xd2, 'H'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0x1f, "d20b", ' (0bd3:0555) [ 95.502942][ T3919] usb 6-1: No valid video chain found. 07:02:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6000000000000408c0d2200400000000001090224000100000000090400002103010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0xfffffffc}) [ 95.519566][ T3919] usb 6-1: USB disconnect, device number 4 [ 95.596235][ T70] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice=5c.00 [ 95.605479][ T70] usb 4-1: New USB device strings: Mfr=158, Product=242, SerialNumber=73 [ 95.613968][ T70] usb 4-1: Product: syz [ 95.618175][ T70] usb 4-1: Manufacturer: syz [ 95.622778][ T70] usb 4-1: SerialNumber: syz [ 95.665777][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.673410][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 95.689962][ T4095] mxuport 2-1:0.0: Direct firmware load for moxa/moxa-1251.fw failed with error -2 [ 95.699608][ T4095] mxuport 2-1:0.0: Firmware moxa/moxa-1251.fw not found [ 95.706718][ T4095] mxuport 2-1:0.0: Using device firmware version v69.cb.f1 [ 95.714167][ T4095] mxuport 2-1:0.0: required endpoints missing [ 95.795841][ T18] usb 3-1: config 228 has too many interfaces: 91, using maximum allowed: 32 [ 95.804684][ T18] usb 3-1: config 228 has an invalid descriptor of length 148, skipping remainder of the config [ 95.815253][ T18] usb 3-1: config 228 has 0 interfaces, different from the descriptor's value: 91 [ 95.824499][ T18] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 95.833653][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.841714][ T3855] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.881214][ T3919] usb 2-1: USB disconnect, device number 9 [ 95.887340][ T4150] UDC core: couldn't find an available UDC or it's busy: -16 [ 95.894790][ T4150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.904428][ T3989] usb 4-1: USB disconnect, device number 6 [ 95.913971][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 96.035935][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 96.125952][ T3855] usb 1-1: device descriptor read/64, error 18 [ 96.132308][ T18] usb 3-1: string descriptor 0 read error: -71 [ 96.140331][ T18] usb 3-1: USB disconnect, device number 9 07:02:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x22, 0xec, 0x40, 0x40, 0x5050, 0x104, 0x3a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0xec, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "94b9f329", "01a8ea44"}}, 0x0}, &(0x7f0000001040)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x5e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x6af8, 0x6, 0x1, {0x22, 0x375}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x40, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7f, 0x1f, 0x8, 0x40, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7f, 0x9, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0xc4, 0x3c, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x1, 0x3ff}]}, 0x1, [{0x79, &(0x7f0000000100)=@string={0x79, 0x3, "23c23a2e7f852300eb8c30e7a0b35b8b5e77fe70a5fc4ea88a3d23c72fd8c2e3d8d59676c133bd6711e1bf7f94de6363073e3078a85d110fc74f16916af86f954b0cd28ce2c2c056c3edf10809ac67cbd866c26ac4c38a16c6b67a3fe7f234a54c765975ac16c83daa22bcfedfaab87ee502691e504a15"}}]}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x5, 0x1b, {0x1b, 0x8, "03ecd44b549671b852b2505ac005eefeaee96e0cb865c0c214"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x81, 0x1000}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xfc, 0x9, "1c4887bf", "3052d418"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x60, 0x80, 0x1, 0x48, 0x5, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x17, 0xcf, "93bc012c448072fcc2b210d9b2312a80d3a1f0f5b59fd536aea8b9aac1d9976b10b6bb45389bc3f6be67a371ce6111594d966454ff59d59596f59ebd1ae981fab85083a52c376c83f40c20d533aec6c6ef9a51e672bae5581cf648640d8c2364b86b94ff3274a08f839daf5c0dc709cfb813034e91bb714df671bc68e986558ca9f94478db3e7caa06fbf43ee58487a58b50fca1ba3e5f0e4446abb8289f6f227b27b923103734d6f608f8c9e59f60a2da2866d1857115e3c393b4222da29024f6c16eda803b925d3779113d423809"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x40, 0x4, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x79}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "10c1"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="fe11920529a7"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "91f0"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xea98}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xbf}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x7}}) [ 96.226145][ T4095] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.275885][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.285075][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.293154][ T23] usb 5-1: Product: syz [ 96.325951][ T23] usb 5-1: can't set config #1, error -71 [ 96.333009][ T23] usb 5-1: USB disconnect, device number 9 [ 96.465768][ T4095] usb 6-1: Using ep0 maxpacket: 8 [ 96.505821][ T3989] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.545745][ T3855] usb 1-1: device descriptor read/64, error 18 [ 96.586154][ T4095] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.655786][ T3919] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.676331][ T4095] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 96.685533][ T4095] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 96.693672][ T4095] usb 6-1: Manufacturer: syz [ 96.715379][ T4095] usb 6-1: config 0 descriptor?? [ 96.725780][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.765913][ T70] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 96.785776][ T3989] usb 4-1: Using ep0 maxpacket: 8 [ 96.825756][ T3855] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 96.915898][ T3989] usb 4-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 96.926273][ T3989] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 07:02:40 executing program 5: syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x103400) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000040)={0x20, 0x7, 0x98, 0x4}) syz_open_dev$hiddev(&(0x7f0000000640), 0x3, 0x80001) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1c5041) write$hidraw(r1, &(0x7f0000000200)="5560106c6403baa7051d63a665c9cd8963396275ac669e4f77d7ad39abc3350cf03cdc7303ef759eeaa153b91be2431d0cae4c5ce6a8e0551f5f515213635f11ec75ce9007bf9aa729321fb9b88227483f0f36d77d3362335a0c0aedbd3535e11486444ee10fa859b92d9c2e3d73ad10f80d030af0e3dfc0af1a50bbc6654096d95bcb488781ed874590ad4347080683acd07509f15514fa2dc54466a1693c77e1944b5d3f7283a1dbfa2bbf88100dde3827fe71b33faa2a0640458183e6c4fa03af10c7337262da9985c705958ec0eab2fa30031271296ce4e0a18e16b1905027c139b623cb2121ebba388ed811", 0xee) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000002505a8a440000102030109021b00010100000009040000000701"], 0x0) syz_usb_connect$uac1(0x3, 0xe0, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902ce00030105a0080904000000010100000a24010100000201020b24080380007f987b5a170c24020201020608090009010924030507030301040c240201050205090600801f09240303ff01030585090401000001020000090401010101020000122402023f0007002fe5bf8810a2a761753b072401010903000f24020100030193aea8ec3a6ecb3c09050109df03ffbb020725010000030009040a24020202000300089b082402018104090409058209ff038002cd07250182800700"/224], &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x50, 0x2, 0x8, 0x40, 0xde}, 0x103, &(0x7f0000000400)={0x5, 0xf, 0x103, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xb, 0xf7f7}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x1, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x7, 0x400}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x6, 0xff00, 0x2, [0x0, 0x0, 0xff3ff0, 0xffffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1f, 0x20, 0x1}, @generic={0xc3, 0x10, 0x1, "ef6714f12dbd84cc245ee2197b171ff70146897eed144a854f27c7fe316684c7b2a7c10f9fc8f07585c142ee0a8c2490d996242427a2acc1b8f857fe8ed7bf929ce3f5478103a1ab31d9ac4433763c8dddf2759e3b95d4de5296331428b6feb9bc689dc5d7c8b881c2e45d403050c746636bcbaee031c5ac4d7f385f07a07303ec783006619f7ad971f8c16091caaea192a21263677d2d00f50235aa10817581f30929d0be85fb4b4a218838e20e9f3badc9893f4fad6cff41c2d70e0ba4d332"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x420}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "08346ce8dd73fc3be21a1a7f8ff04d099badcd189f4ac874eeaddab3298753edcfafe96ad6ccd0dd9ed51d062ef7efd74ec4c11c73ed695f75e40d5f910ae5f7f451d247b37e39559a4d2dfc3812f9058da0a681b16cfd258c62845d2555531737ae3bc451b512e4270321745a36df1f1a382595ff17119137558cb31568990c04cea4faa5a6a1971c414c7047e90446f6400391647e4db659e00eef5174122832b55d18f4fec18c9b99e094aad383002a0b4e2d4ab54f2a0989685f0b8bf66a53f995d9621f0bb8971c2c8fe95b53e071dcd6f3676cdd2afcee43d6fd6bf07b8f5ef338eff7e9c09eea13af"}}]}) [ 96.957021][ T4161] UDC core: couldn't find an available UDC or it's busy: -16 [ 96.964556][ T4161] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.005894][ T4095] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 97.012939][ T4095] usb 6-1: No valid video chain found. [ 97.021302][ T4095] usb 6-1: USB disconnect, device number 5 [ 97.056346][ T3919] usb 2-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice= 3.8a [ 97.065432][ T3919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.076710][ T3919] usb 2-1: config 0 descriptor?? [ 97.086587][ T3989] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice=5c.00 [ 97.095967][ T3989] usb 4-1: New USB device strings: Mfr=158, Product=242, SerialNumber=73 [ 97.104381][ T3989] usb 4-1: Product: syz [ 97.108571][ T3989] usb 4-1: Manufacturer: syz [ 97.113159][ T3989] usb 4-1: SerialNumber: syz [ 97.118134][ T3855] usb 1-1: device descriptor read/64, error 18 [ 97.124602][ T23] usb 5-1: New USB device found, idVendor=5050, idProduct=0104, bcdDevice= 3.a6 [ 97.133837][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.143401][ T23] usb 5-1: config 0 descriptor?? [ 97.187111][ T23] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 97.206330][ T70] usb 3-1: config 228 has too many interfaces: 91, using maximum allowed: 32 [ 97.215117][ T70] usb 3-1: config 228 has an invalid descriptor of length 148, skipping remainder of the config [ 97.225651][ T70] usb 3-1: config 228 has 0 interfaces, different from the descriptor's value: 91 [ 97.234892][ T70] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 97.243994][ T70] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.396145][ T3989] usb 4-1: USB disconnect, device number 7 [ 97.406027][ T4095] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.411081][ T23] usb 5-1: Detected FT8U232AM [ 97.423094][ T23] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 97.436575][ T3919] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) 07:02:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c2", 0xa02400) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800002, "ed105400000000083e00"}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x8) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x40) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000180)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x42, 0xfffffffffffffffe) [ 97.445019][ T3919] mxuport: probe of 2-1:0.0 failed with error -5 [ 97.481797][ T3919] usb 2-1: USB disconnect, device number 10 [ 97.516020][ T3855] usb 1-1: device descriptor read/64, error 18 [ 97.610515][ T7] usb 5-1: USB disconnect, device number 10 [ 97.621679][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.632777][ T7] ftdi_sio 5-1:0.0: device disconnected [ 97.636429][ T3855] usb usb1-port1: attempt power cycle [ 97.665877][ T4095] usb 6-1: Using ep0 maxpacket: 8 [ 97.716641][ T4152] UDC core: couldn't find an available UDC or it's busy: -16 [ 97.724050][ T4152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.732403][ T4152] UDC core: couldn't find an available UDC or it's busy: -16 [ 97.739882][ T4152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.777129][ T70] usb 3-1: USB disconnect, device number 10 [ 97.805844][ T4095] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 97.816342][ T4095] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.825416][ T4095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 97.836820][ T4095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 97.847913][ T4095] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.857206][ T4095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.896283][ T4163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 97.917078][ T4095] hub 6-1:1.0: bad descriptor, ignoring hub [ 97.923018][ T4095] hub: probe of 6-1:1.0 failed with error -5 [ 97.931870][ T4095] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 97.938102][ T3919] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.045752][ T3855] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 98.175831][ T3989] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.216034][ T3855] usb 1-1: device descriptor read/8, error -61 [ 98.385837][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.415983][ T3989] usb 4-1: Using ep0 maxpacket: 8 [ 98.485940][ T3855] usb 1-1: device descriptor read/8, error -61 [ 98.525813][ T3919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.535051][ T3919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.536100][ T3989] usb 4-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 98.543112][ T3919] usb 2-1: Product: syz [ 98.543134][ T3919] usb 2-1: Manufacturer: syz [ 98.553397][ T3989] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 98.557612][ T3919] usb 2-1: SerialNumber: syz [ 98.576610][ T70] usb 3-1: new high-speed USB device number 11 using dummy_hcd 07:02:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000922010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="00009e0000009e0b48bdc366cf9a550be2ad30e6e17f155e0608e234c68b042a63d23a82a2b3f403b1be2c07ad89cf8180abd60e2cab1bd54debc99dff30c276b9d40d42d553591891e5b35c5a6fe81d7807565f62ccb03b1239ee247d1476ffa0da90c6862d028e4edf79e904411cf67a816517fe0efecea557a7cb7f4ee8a6cf1b0bf7b52a15742a45f5daf50b2d7971fb4129b8a9a11888b85a6170df366a54d757bd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 98.586856][ T4163] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 98.666829][ T3919] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 07:02:42 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(r0, &(0x7f0000000540)="d621e1c0f64b35f9d1c102fb6d33bd4708cc14493dccc72bdebac41369ba0f2c84061f11e823bc64d90927114cdb37508439959e288fff6d8f2e15fe3789581cbb4f90706d1820d11a476fb44ecebb25bad115b92b703151d5ea119bff511c96f78394d1334463f5ef21c4d2d536bff00b6285cab804c2185e8450a0d7309ad417efc4acb07f6dcb95d46226b536a2928b029713d04ec279a0c661c81022a7f4b0c51ee8ea80c9bfac5ddfe085afb13b2a76016bb522970fbbc46e84da8fa28437e9e2963a0fae91b6ff266ecc79aade8bcc73", 0xd3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x52, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x2, 0x0, 0xfff7, {0xec}, 0x0, 0x0}}) syz_open_dev$hidraw(&(0x7f0000000400), 0x5c42, 0x20800) syz_open_dev$hidraw(&(0x7f0000000200), 0x200, 0x40001) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000440)={0x0, 0x2, 0x806, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000004c0)={0x51, 0x3, 0x0, {0x1, 0x6}, {0x1, 0x3f}, @period={0x58, 0xcb23, 0x5, 0x6, 0x0, {0x0, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x0, 0x2, 0xfffb, 0x9, 0x2, 0x1, 0xb, 0x5, 0x11d, 0x7ffd]}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "0100c600000000000018e9d8eb7fc800800000f4ffffff00"}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x2, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c307000000058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000480)) write$hidraw(r2, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) [ 98.745917][ T23] usb 5-1: New USB device found, idVendor=5050, idProduct=0104, bcdDevice= 3.a6 [ 98.755204][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.763655][ T3989] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice=5c.00 [ 98.772848][ T3989] usb 4-1: New USB device strings: Mfr=158, Product=242, SerialNumber=73 [ 98.781342][ T3989] usb 4-1: Product: syz [ 98.785516][ T3989] usb 4-1: Manufacturer: syz [ 98.800359][ T23] usb 5-1: config 0 descriptor?? [ 98.805547][ T24] audit: type=1800 audit(1637910162.442:12): pid=4172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1194 res=0 errno=0 [ 98.845916][ T3989] usb 4-1: can't set config #1, error -71 [ 98.853290][ T23] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 98.862882][ T3989] usb 4-1: USB disconnect, device number 8 [ 98.868993][ T4163] usb 6-1: Using ep0 maxpacket: 8 [ 98.876985][ T70] usb 3-1: Using ep0 maxpacket: 8 07:02:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x38, 0x86, 0x64, 0x40, 0x411, 0x6e, 0x9f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xf2, 0x4f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0025970000009704ff5a11cfbe98c1755144e223093529dc1cc599c46dac6b54490c9044f8cb463ddae5b67d1d972a57ef1eda95f0f51e74895be693a98b96d27ed09f9494027025e96e51aedaec1484357d3c9830f0a1f65116f2f778a92a7a0c0072ed175f5b09d9584c0dc81216dc4fe748b21f462a9be708f38638e72a255db5560526fe0794666e2e57042e38c9a4382f08667e91648a5af8578f"], &(0x7f00000000c0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "9ce2331c706e27207e1aa4963a54139cf2b1"}}, &(0x7f0000000100)={0x0, 0x22, 0x1a, {[@global, @global=@item_012={0x2, 0x1, 0x0, "0ec6"}, @global=@item_4={0x3, 0x1, 0x6, "ffd127c8"}, @main=@item_012={0x1, 0x0, 0x6, "84"}, @local, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0x5, "c2e36b66"}, @global=@item_4={0x3, 0x1, 0xb, "6693a991"}, @global=@item_012={0x2, 0x1, 0x960ff26652ac7c60, "70d2"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x22e}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x3, 0xcb, "0f18a58e04e8d5cef79e02a58c12c23dcde3938e7b7e37b7e4e660d46ccce331184be955ce3c332d849bb48b2b8772083411da036592cbf912413a8f1d69449839ea8eb92e2bf83690bc8239e739f9b222f9f91f5e92005f3bae70aeccc90575ccc30492d347e026cb48da083989aee851eb888ed832c73d232d5b392d9ee5fc2cbe37a45effc973c4cba00625304620aa268ddb8795258c9be78f4f995f997e9d8e8ea215af8e290f1ac8de5b6830df57b5a60e12790cf61c79cc3f2206bbefc2c0e77760cf398a6e3a8c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x1, 0x54, "c8f30f8b717106fd5663e5bd35c3ea762d5b692456915731c2ab6d9c23ba632fc0cd93ea6b091985d4acdc235c0d91515aa25d715b40cb43aff9aefd03d4c98c2fc310a8609f0ff524ca16d27439570c24e6bae6"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xd}}) [ 98.975822][ T3855] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 98.983138][ T4168] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 98.991579][ T24] audit: type=1800 audit(1637910162.632:13): pid=4173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1194 res=0 errno=0 [ 99.047432][ T70] usb 3-1: config 228 has too many interfaces: 91, using maximum allowed: 32 [ 99.056334][ T70] usb 3-1: config 228 has an invalid descriptor of length 148, skipping remainder of the config [ 99.066793][ T70] usb 3-1: config 228 has 0 interfaces, different from the descriptor's value: 91 [ 99.075824][ T3855] usb 1-1: Using ep0 maxpacket: 8 [ 99.076052][ T70] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 99.090177][ T70] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.105766][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 99.112397][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 99.126272][ T23] usb 5-1: Detected FT8U232AM [ 99.135015][ T23] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 07:02:42 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x4c142) write$hidraw(r0, &(0x7f0000000000)="c2", 0xa00000) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) read$hidraw(r1, &(0x7f0000000200)=""/4096, 0x800000) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000200)=""/4096, 0x800000) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) read$hidraw(r3, &(0x7f0000000200)=""/4096, 0x800000) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) read$hidraw(r4, &(0x7f0000000200)=""/4096, 0x800000) read$hidraw(r1, &(0x7f0000000040)=""/102, 0x66) [ 99.153312][ T23] usb 5-1: USB disconnect, device number 11 [ 99.162749][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.165755][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 99.174410][ T23] ftdi_sio 5-1:0.0: device disconnected [ 99.178662][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes 07:02:42 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x5f3, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0xc9, 0xab, 0x5, 0xff, 0x10c4, 0x815e, 0x9efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e1, 0x1, 0x7, 0xff, 0x0, 0x1f, [{{0x9, 0x4, 0x60, 0x7, 0xf, 0x8a, 0xb9, 0x87, 0x80, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x0, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @generic={0x62, 0xa, "670920e8a753a23a3e318e64704b57e093d2eee3b8f87eff3bf02178d6b88de0e63507129e9eb494fb2ef75f21f7421643f8b037230e46c8d4d67ebc944c9bb97c205a2d105d4e9ae35bb302df9f181d0c0aa570f95c4510cf187701dd6c7700"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x23, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x66, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x143, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x20}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x1d, 0x6, 0x5, [@generic={0x43, 0x23, "1c7485af14d8962511aca8a225f0d69d2bf0b2e33b71ad0daa46d857175a63bb8bc193bd385eb5c4331e0f7df4dead366484c395adc8d259481e46444b584a56dc"}, @generic={0x9c, 0x0, "4d77cea7401bd72c68357858e4fa1e212a92031ec0c5807b3c7380aac44e7a99599e68dce90a9a8849d9e17729fd90985fecdcf712f0596354b9eb939ede92f35fadbc2f051e87247237a629a13132915dc37cde307a2d8a4af973313f0a2b577047a8d35f55af1cfe1bbf4108de26a9b19e97d8efc797f1c3ca27788c2ef74f19fd3bd12c29092bce1f9f4ac4580bd77fd0e6b92d495ecd28ab"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0x18, 0x81, [@generic={0x18, 0x9, "223ead2fa30480b4340bc028a8aba78e2c8252c0d906"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x4b, 0x3, 0x9}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x8, 0xc1, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x81, 0x8}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x3, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x6}]}}, {{0x9, 0x5, 0x80, 0x13, 0x40, 0x6, 0x20, 0x6, [@generic={0xc9, 0x11, "2dc33c093549b875d0782b28b15954881d328a3e72d3e6b6bdad3377fff63d41651c815d88af21f7e8b740b4591cb6f53dfb80bcf17738157bf8c85647d97194336b9f6d8a4c0ed33916e97d5d1f72076171edff8f44d01a016ae8036483a73ed8a5b2e9be78bfca0814bbcb84893532242504cf24a8cc5e8261d50e2defc2516a0337a5b94e4d1ce93b60cd0bcc8e990e181a8a8afffbbd12b258c5eca3b9bfe3bf9fe8a435424dbab624fb15774f917449d835935e1540b6d6b151bcfa518465a7c0a04bf180"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xff}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x7, 0x7, 0x8, [@generic={0xb8, 0x22, "acf7833d82d9de3612739397d16fcb1a2fdefb560da867f2c0a21c1eaf95beb835c1ede3f18ed95c802ac45de0b0e0da695f2ff1dea2e58a1227446163ffb49dac6fbcbe88c339d3c467cc87aaa008f9958a7d8e6e28fd36d65b4bff62b927ad10b1827d49a56f69b7998e686681515a77ebfa128be21b5a60451104804211f915cbf0a0340a3262841451fc43be92f66bcfc36d12d6fac68647cb1124304467ffd178b1d91158c0f8a5cc4998375705fbc79b3118b0"}, @generic={0x75, 0x23, "61d6bb198960bb614714527aa71c5d569cdbce585dc858eac709b6a0a71ba9ce1efc76b6e6a422d255c87eed2d72dfc7484c198c6ca8292f898adb65ad0e86e3dafc6dc55f81977ee81a165575f54773cce2eae45998f52409849c91a709b36e1d4af86659c34516e99fc4cd7147eaf6b94bf2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x20, 0x81, 0x1, [@generic={0x101, 0x21, "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"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x44, 0xfa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1355}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}, @generic={0xc0, 0x9, "31f8b1e6aac041842e4d361f8b2bcc56d2084a253fa4980177cd1d86622fdb691e7a491f70237b516f28ac16f4f3f38955100fd0b38b6625ed89881dfd7f3e1aa1575ee7782b587a73244d09af3b90e7378146488983abb41d8df3d7fed16c36bb641cb8b836d587e4e3c1779f5d221fbc84383239e3e3703033140f52a088745a68938c15f57e1448dbac81d70f8e70685d73f44fa235fc38343bd4dfe7987dc733f4b93e37237109928c4791127d53f026f76ad719c710a6ccd6efa6a0"}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3f, 0x40, 0x7, 0xff, 0x22}, 0xc0, &(0x7f0000000180)={0x5, 0xf, 0xc0, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0xa, 0x81}, @generic={0xb4, 0x10, 0x4, "c68d320419ae31e45a97ea1dd7a6f3a36d7a491e7394c931dac1a8786e2fe931da79f2fbd0cee0c7ea0d847155663769ceda70174cd62867ed40101e6c7e30cadc709069a0016646c1d3c75221dee3ff98c4451d3eb45dfff0a552e7146137ebcea5cc2d900dffe57737cec72576cdae109c57e6bef1f18840312719197bc61e7a8ef2a33c2490d660938a007fe9c374e98b53d3ac92a67620ead5183627e52eccc2fe7eefec32cbca576dc17a5387b269"}]}, 0x5, [{0x102, &(0x7f0000000a40)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xc09}}, {0x5a, &(0x7f0000000240)=@string={0x5a, 0x3, "137840f80b0c76a75b41c2d3b096e7e2492cdb254058492aae3c77734d39d954c640c65716ad181f70f20b9105e6b5d2ad775e0afc4f05763306ac56123bc75ef33d36e942609dd9e68884674262d1b45155db084f290b68"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x449}}, {0x6f, &(0x7f0000000bc0)=@string={0x6f, 0x3, "e3611ba4cc1fe0d0d4e52c92f98a383717a1b3206c5ef8b304aa3a2ebece99eecb1e9ef68186bd77f09e3259b894c97290bd72ee5148c5c6abf517c74706c9e33286d3cc4e640d9c212e69d892d6a8fd62c1fe4754800975c5cf90c1ee9a2826757de496f1078ab43da8e5ff7c"}}]}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x2}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r2, 0x40305839, &(0x7f0000000080)) read$hidraw(r2, &(0x7f00000000c0)=""/162, 0xa2) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) write$hidraw(r1, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x770, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000d00)=""/180) [ 99.210384][ T3855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.221454][ T3855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.231286][ T3855] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 99.231999][ T70] usb 3-1: can't set config #228, error -71 [ 99.240413][ T3855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.256020][ T4163] UDC core: couldn't find an available UDC or it's busy: -16 [ 99.263424][ T4163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.288834][ T3855] usb 1-1: config 0 descriptor?? [ 99.309003][ T70] usb 3-1: USB disconnect, device number 11 [ 99.355344][ T24] audit: type=1804 audit(1637910162.992:14): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.444881][ T24] audit: type=1804 audit(1637910163.082:15): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.475014][ T3989] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.527062][ T24] audit: type=1804 audit(1637910163.172:16): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.558976][ T3919] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.583005][ T24] audit: type=1804 audit(1637910163.222:17): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.625791][ T3855] usbhid 1-1:0.0: can't add hid device: -71 [ 99.631864][ T3855] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.641065][ T3855] usb 1-1: USB disconnect, device number 12 [ 99.685847][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.695311][ T24] audit: type=1804 audit(1637910163.332:18): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.725090][ T24] audit: type=1804 audit(1637910163.362:19): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.767275][ T70] usb 2-1: USB disconnect, device number 11 [ 99.805735][ T24] audit: type=1804 audit(1637910163.412:20): pid=4186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 07:02:43 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x20, 0x22, 0x15, {0x15, 0x39, "5222b2e3ba521771219f451266422afa0436f1"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x0, 0x9, 0x31, "63d88ddb74c4b910fd21c9e86c7817d9acc2d291920689a3de4c390b78c399ce79cf197c7b0d38a863cbeb48f96c86b452"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3b}}) r0 = syz_usb_connect$cdc_ecm(0x0, 0xfed9, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x20, 0x21, 0x81, {0x81, 0x11, "11a752af40c6a0144f6950f818df57c50b99d00300a4e77e825b644d051f6dd98ca3f1957c3434173cb13c7641e99746428df5de8f72e102c7e33d9c58ad562a15f3791728caea22b9e620eb26d2780b962f0a229bb4c9607a69cec7a401741def361a8dcb3a0f106bea05bd5c04ca38e148c4221dfa7a95741740036cb264"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000340)={0x20, 0xb, 0xe0, "65938f2e7aaf8c1c84061fd8f44a6a2a7de2b3d5253209f36382714c3e6f0017c445cea7fe6cf13059f4b2039cd9b80c4dc19c84403b66ec25113053165007df027204f4743c2bbc40931ede78e4b47dea581090de0225fc9bef1d808c38f5a2033247fd70e3a3d4c7144cb00271e5b57ef8fcbc5a5c3a9c908f91f7fbcb1ecf670754505eafc353f093ddf444dabbe1207f0ed3101fb083285f8396a684b984acdc34f388b08b7330d9639a58e0166b213f572d98e305f171447ac3f150f592869e9bf17832540c07b6a71f9bbb0b913ee1c28c71be01bcb2398bc21fa184f1"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1}}) [ 99.835908][ T24] audit: type=1804 audit(1637910163.422:21): pid=4185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723636393235373636302F73797A6B616C6C65722E3644745241552F352F48C7C060 dev="sda1" ino=1194 res=1 errno=0 [ 99.835977][ T3989] usb 4-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice= 9.f7 [ 99.874710][ T3989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.896634][ T3989] usb 4-1: config 0 descriptor?? [ 99.925766][ T23] usb 5-1: Invalid ep0 maxpacket: 512 [ 100.076501][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 100.145834][ T3989] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 100.235771][ T3855] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.243470][ T18] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 100.325735][ T23] usb 5-1: Invalid ep0 maxpacket: 512 [ 100.331366][ T23] usb usb5-port1: attempt power cycle [ 100.355778][ T3989] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 100.365826][ T3989] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 100.376909][ T3989] asix: probe of 4-1:0.0 failed with error -71 [ 100.386143][ T3989] usb 4-1: USB disconnect, device number 9 [ 100.505728][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 100.510954][ T3855] usb 1-1: Using ep0 maxpacket: 16 [ 100.636047][ T3855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.645747][ T3919] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 100.647012][ T3855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.655253][ T3919] ath9k_htc: Failed to initialize the device [ 100.663620][ T3855] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 100.671112][ T70] usb 2-1: ath9k_htc: USB layer deinitialized [ 100.678661][ T3855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.693179][ T18] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 100.704066][ T18] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 100.714021][ T18] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 1296, setting to 1024 [ 100.725055][ T18] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 100.735113][ T18] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.743533][ T3855] usb 1-1: config 0 descriptor?? [ 100.775817][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd 07:02:44 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x840, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x0, 0x0, {0xe19, 0x2}, {0x0, 0xfffc}, @rumble={0x0, 0x3}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x4c142) write$hidraw(r2, &(0x7f0000000000)="c2", 0xa00000) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x0) read$hidraw(r2, &(0x7f0000000100)=""/218, 0xda) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14e801) write$hidraw(r3, &(0x7f0000001800)="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", 0xfffffeb0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x127b42) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r4, 0x40086602, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000100), 0xffff, 0x20483) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1cceba69c3c89b4f8c071ced2a4a805787a08149ef3dc3152f571a4516a733a33e1738c9d2f80f4a07011579fefefc79b01e28df5bbe552b96b3a1f40f67706c7c65930a40dbfb1905cbe29c3fed7043000000000000000000000001000000", 0x5f) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_open_dev$hidraw(&(0x7f00000000c0), 0x3ff, 0x10002) write$hidraw(0xffffffffffffffff, &(0x7f0000000280)="b764ac9ab768181462ca58f0ea4502d1f3089b73458d34d61120024ce69b1cba4be0e95d4932969f29b4eb7dfa895664d28b10e579ea0ee9a4dcd6855d20a0ad3ff4153f5444620c09711f514c4d84389e329449289d0fa39e4b4d6b49279647ae6f68e6c4ebd9435ec1a233741b8ffc2ce398ad", 0x74) [ 100.891174][ T23] usb 5-1: Invalid ep0 maxpacket: 512 [ 100.935969][ T18] usb 3-1: New USB device found, idVendor=0525, idProduct=aca1, bcdDevice= 0.40 [ 100.945134][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.953223][ T18] usb 3-1: Product: syz [ 100.957436][ T18] usb 3-1: Manufacturer: syz [ 100.962069][ T18] usb 3-1: SerialNumber: syz [ 100.996230][ T4189] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 101.003195][ T4189] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 101.045799][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd 07:02:44 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109025c0002010000000904000001020d00a33b64afcbd5ab00052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905820200000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x2b, &(0x7f00000000c0)={0x5, 0xf, 0x2b, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x20}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x4, 0x0, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xba, 0x0, 0x0, [0x0]}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$cdc_ncm(0x6, 0xa9, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0xf9, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e13cd5063239"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x7, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x30}, [@country_functional={0xe, 0x24, 0x7, 0x8, 0xfdb, [0x5, 0x1000, 0x2, 0x8]}, @country_functional={0x12, 0x24, 0x7, 0x8, 0x0, [0x9, 0x400, 0x3, 0x3, 0x7f, 0x8]}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x0, 0x6}, @dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x50, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x1, 0x27}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xc3, 0x3}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x40, 0x19, 0x0, 0x10, 0x6}, 0x2c, &(0x7f00000001c0)={0x5, 0xf, 0x2c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xd, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x82, 0xf00, 0x7, [0xc03f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x9, 0x4d, 0x5}, @ptm_cap={0x3}]}, 0x3, [{0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="70c98d59f11a220325ae6416f887f29da1eb008861cbe492f50f7410a68eed5bc9e2ad4f6d8dbdf1"]}, {0x4c, &(0x7f0000000280)=@string={0x4c, 0x3, "e753d617e799068d16e6f2da4540594302239cc16d05997f183e3053b231040daea56160532175f0ded0ba3412228d7889396c17c500bad22d0c759c97a788a88d72bfb73dad8f1a4d92"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}]}) [ 101.115728][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 101.146139][ T23] usb 5-1: Invalid ep0 maxpacket: 512 [ 101.152300][ T23] usb usb5-port1: unable to enumerate USB device [ 101.228924][ T4189] UDC core: couldn't find an available UDC or it's busy: -16 [ 101.236921][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.248653][ T3855] hid (null): unknown global tag 0xe [ 101.254068][ T3855] hid (null): unknown global tag 0xc [ 101.263185][ T3855] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input8 [ 101.276923][ T3855] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input9 [ 101.407754][ T3855] kye 0003:0458:5019.0003: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 101.450748][ T3855] usb 1-1: USB disconnect, device number 13 [ 101.476045][ T7] usb 4-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice= 9.f7 [ 101.485118][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.495809][ T23] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 101.515571][ T7] usb 4-1: config 0 descriptor?? [ 101.557358][ T18] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 101.566951][ T18] usb 3-1: USB disconnect, device number 12 [ 101.786285][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 101.812805][ T7] asix: probe of 4-1:0.0 failed with error -71 07:02:45 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004fddfa40480b0320e97c0000000109021200010000000009040000004c36d60090daad93c3fd76062f51163b585fe32174a8d30b721735dd7847a09e81000000bebb7c3cfec2ed263d35f267959217409df950a0ef0e17246cdf7b7f57"], 0x0) r0 = syz_usb_connect(0x0, 0x52c, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0xed, 0x5f, 0x14, 0x40, 0x438, 0xb002, 0x86ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51a, 0x2, 0x9, 0x8, 0x40, 0x81, [{{0x9, 0x4, 0xce, 0x2d, 0xc, 0x47, 0xf7, 0xf1, 0x1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a7fb"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x16, 0x1, 0x0, 0x4}, @country_functional={0x8, 0x24, 0x7, 0xcb, 0x3, [0x20]}]}], [{{0x9, 0x5, 0x80, 0x1, 0x400, 0xd4, 0x2, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x4, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x1, 0x3f}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x3d}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x20, 0x2, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xedb03b58b500926c, 0x1, 0x7aa1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x0, 0x3, 0x8, [@generic={0x48, 0xd, "69a6ceeeff2e92b09465c9975ca043a8c3da4d0d454fe33d4440e1e9c9be06be725b655eab571ee78001132fdf70fc59724894ee11f3f1cfbebf1a744be2248423a6ce22e731"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x81, 0x2, 0x5, [@generic={0xfd, 0x1, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xc0, 0x9, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x7f, 0x5, 0x1}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x6, 0x5, 0x0, [@generic={0x73, 0x7, "059ebbba76d5a519e0c4d270341cdc80801822e9dc223a3caed2dffec2da2ea01e026def2bdab043ac51ae37223352d3fc878525d03ab42bebd9516198462a253263d872776e0631a3204e4ddc974c8b5cb78871fbe96e869b651d00f2c9b4ea0949b505076ed0454597a68a4f9a452106"}]}}, {{0x9, 0x5, 0xc, 0x0, 0xe99b2001b88c4a96, 0x1, 0xf8}}]}}, {{0x9, 0x4, 0xd8, 0x20, 0x8, 0x2b, 0x7c, 0x62, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x8, 0x9, "b408", "a9e57b"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x80, 0x0, "501495a8869510a973"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x6, "f7", "14b4b7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x24}]}, @hid_hid={0x9, 0x21, 0xffff, 0x4, 0x1, {0x22, 0x5ff}}], [{{0x9, 0x5, 0xd, 0xfd5c630f1e9e3635, 0x40, 0x20, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x3f, 0x0, 0xc2}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xb5, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4b, 0x9, 0x7, [@generic={0x9f, 0x23, "1d675284fe7b918466aef19190352cffb465138848bc670ccb43dc6def4ec06d38fc2a5cb6fb926f66ad76760d2027483625d498f9c5464c510c902ea8bab64577dd0be39a3d89e46f20d25a03d8f3f2ddf2b52e8af1f45471e7d0b3a15671d3cb64972594549b8f91f2babeb955e76900e6e28ed7cc4c71522d72526df25c0fa6cd41bc10cae91317a974e03fef93c380239d744fd9f0c3d420e7817f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xf7, 0x7, 0x8b, [@generic={0xfd, 0xe, "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"}, @generic={0x14, 0x24, "7f0aa733a25f3c55c519e37fa724c4d49c2e"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x6, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf7, 0x70}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x1, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe7, 0xec}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x1f, 0x8, 0x9, [@generic={0x41, 0xf, "d51af8872f977d3c32bb24f12897cd0c1bb93522001a1a552f3f1f847f9a6ee82dc0d58c7a9b1ecba0fdca02f787c23c015a80a21105b1439fe59f1a736f66"}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x250, 0x98, 0xca, 0x0, 0x40, 0x2}, 0x1d9, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x841}}, {0xa0, &(0x7f0000001380)=@string={0xa0, 0x3, "341bb3b465113bebda4b3d87ac0614a9b4a3b720e0ef673ecea63460b62acae586f6420cacdde34e4397250efe1245df90b70bae91bb3728e47468cad0b37d534a002be1efff82ddb36187012a73d1594b055dfa835d87c8f91a73e67652ca7f84289a6dc05eeb8a14e90519990f38baecbff7ae27fcc7e422649d83398826380a5e485ac912022bc80ebf76511a55ca24a4ea3dee58efd1352ccacaa188"}}, {0xbe, &(0x7f0000001440)=@string={0xbe, 0x3, "ab36a67ee62031c8089d505704c514134b0f7180db05d8d6f66539f387c4eded265fd78fe811866f883a04cfda53acb338809b870cfb6b759fc2e82686eac0b79a164280b6d50ee2ed78b5ad22607ef5dd62de356c380fa3c79ce369afdfc19dd873e317a721d57b8f25b2d0147a0326290acc74caf9293d22551e6147d4bc901cf7ca5af4be61a77d361b67070b7003fb6018451e632589e9f9ca5a890704da2ea58809fd36228cf300b877317d110527d4e3e7ff5f987e7e5da7ab"}}, {0xd8, &(0x7f0000001840)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x81, 0x7, 0x1, {0x22, 0x8fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x3, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9, 0x7, 0xf}}]}}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x81, 0x7f, 0x45, 0x8, 0x3}, 0x2f, &(0x7f0000000240)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7ff, 0x9e8f, 0x56e, [0x0, 0x5dae04858b10d4fe, 0x3fc0, 0xff00f0, 0xff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0xff, 0x80}]}, 0x1, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$cdc_ncm(0x3, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x4, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "80df"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfffd, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x81, 0x4, 0xff, 0x9, 0x9d}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x3, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x7, 0xc5, 0x20, 0x1ff, 0x1f}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x1, [0x20, 0x4, 0xffff, 0x5]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x45, 0x4e, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x7, 0x5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x4, 0x5, 0xff, 0x9}, 0x19, &(0x7f0000001500)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x85, "6e17aa18ff3f20fe03957cb6a3708dc4"}]}, 0x3, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "c56f3ef655d047baa95badb395e4d48867748f5961f8b752a4fee5998610879cdec51d8a7116afc5024a13b52daa1fc7513e696a6349165a19b54a57a9bc80"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2c01}}, {0x61, &(0x7f0000000300)=@string={0x61, 0x3, "8a2a84780a75f1b8f48bfba9007cfe6ea38257e30a4226e1c2481387ad8a6b58185e4bb573f813c07d6510ed11da0833bd623b15dbe7935be7df0b2666d14c5da7cf9a7690398420f3f70e1d24a8a922681015368ccfd0aaa3fd61c1744f9d"}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x11, 0x2d, {0x2d, 0x10, "b272a0398e6cb77f427bf13dd0d850aa69b35377ce8701931c2271d5d6c88e0fceba13ea8ea68ba8b45e72"}}, &(0x7f0000000400)={0x0, 0x3, 0x68, @string={0x68, 0x3, "3a5f734499cb58cca3632b13d4e46eaafd954573ea94112d7b7cf4fd321d69e2b639322207163827d1d0c96bcb795f3f58084de4d3684f1a18513e1cc2723f771b1243d05a3d6eacf9b22b7be4c090f91b5e8e632de88fdb3391a983888cea0a0c1b78472305"}}, &(0x7f0000000480)={0x0, 0xf, 0xe7, {0x5, 0xf, 0xe7, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x4, 0xf000, 0x8, [0x804000, 0xc0]}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8c, 0x3, 0x1f, 0xf, 0x7fff, [0xff0000, 0xff00c0, 0xc000]}, @generic={0x94, 0x10, 0x2, "a1cfb24547a2cc355d0add6375276c27470bd5b24fcb4b87fefb8cf607668faf26bb4780333f553f09e6b2e8e83751b29c31dd397f32093ae2b156603292633c965fbe0b48afa713ad6715eb538497e1e3a662217cb0fc6d3445da55367bc98ea6ca3cb9113e0004c53f447519985e43b468ab6975558d57026e5136f22a6f50856abe4f5316e3a305e35ddd156e85aec1"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e3273f4a5f9e0d9343e78c7da4efc5b1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0x8c, 0xe7d, 0x5}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1e, 0x80, 0x5, 0x9, "95b8ba7e", "2f2764a6"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x4, 0x9, 0x3, 0x9, 0x55c7, 0xfff9}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x20, 0xc, 0xf6, "2eebe0d9b69c97e5a6ca266c97a014cf1ab3559e57e7fe6171f7c81e7407225d3f2f3efaf382a6b0db9601a419502a31e215747fd852d2216519878b8d12039962e9de13b981d4bddfae8da9ad4a518f39e75f2be615c992d50eff88032704cf5d1c09db239c088e60a9b1aa36c33ba8510e217b66eac712b0e0f323895819c0efc4e6644b8bfb35f49a61726c66b545ba14b855e96f6824f1ece93572a1d1d1601e1c3b70b253d3ab9d78cda01fa24a1f9e57094c378959d5a0961aa26b8bfa1abee1c48b6f5c5e5f14485d90c99a900b021dc0b10ea0add811d21042361cf4e1a40499861f0fb3582380c271ca5c46bfa64efbea93"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1968, 0x2}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000880)={0x40, 0x9, 0x1}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "cf49"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x17, 0x6}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "f637"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x37ca}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x58}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000016c0)={0x14, &(0x7f0000001540)={0x20, 0x3, 0x5f, {0x5f, 0x0, "f7b874c1f9b0f058f5b376cc4ea389bb8b24c6b63957640549def3b51375c5c98ff4ddbbfc9825a58d93785b3bf2b952794506b66b4ee2202678eaaa82a50fadf7f6feef05453e27a75003d9f1f7fbae30d2efcbad5866a494a59dffb2"}}, &(0x7f00000015c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b00)={0x44, &(0x7f0000001700)={0x20, 0x0, 0x51, "40589878695beda020d7aa33fc51f390573168fb8cd67d8493829e67e2e3a0fa082cccb3bf89d7d7971e3c8cded74de0939a5d071e6c368cc3cb964070f3558a36bb0e3478a6e1db61ddde48fa6ffc6c5c"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x5b}, &(0x7f00000019c0)={0x20, 0x80, 0x1c, {0x4, 0x5, 0x1, 0x1, 0x1, 0x8000, 0x1, 0x3, 0x4, 0x6, 0x3, 0x111}}, &(0x7f0000001a00)={0x20, 0x85, 0x4, 0x600}, &(0x7f0000001a40)={0x20, 0x83, 0x2}, &(0x7f0000001a80)={0x20, 0x87, 0x2}, &(0x7f0000001ac0)={0x20, 0x89, 0x2}}) [ 101.852825][ T7] usb 4-1: USB disconnect, device number 10 [ 102.125904][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 102.133627][ T23] usb 2-1: can't read configurations, error -71 [ 102.215852][ T18] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.225735][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 102.233392][ T70] usb 3-1: new high-speed USB device number 13 using dummy_hcd 07:02:45 executing program 4: syz_open_dev$hidraw(0x0, 0x82e, 0x6e8380) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040047090300", @ANYRES32=r0], 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r2, &(0x7f0000000000)="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", 0x800000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x40000000001004, 0x100) ioctl$HIDIOCGRAWNAME(r3, 0x6628, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/8, 0x8) write$hidraw(r3, &(0x7f0000002f40)="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", 0xfde) write$hidraw(r1, 0x0, 0x0) read$hidraw(r1, &(0x7f0000001340)=""/4096, 0x20002340) write$hidraw(r2, &(0x7f00000005c0)="966d92d3371ba913fc888ddb19780f3a793e1d09abfb6ae345da34ff810de8d24639046880cc423cb3fb52ce005c071f024e3111ff52c4a88eaaa1832b8839e35d3d48861c59969e0cd291a34cc7aacb73930f8b5af46c1c8a051c7fad7ee5df83eece7bb7310d7ca698da5953bc7900660716021b3efceba0198e574060e6496a3bd3cb780e46c82fdffda7be0657ff41f270dc372a0ac10df89c6ac1d88c3ccca69502", 0xa4) r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x641) write$hidraw(r4, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000580)) write$hidraw(0xffffffffffffffff, &(0x7f0000002340)="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", 0xbd1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="4001570006005730c96cc9a2727de838a5e03c94fff6da064b2772e652e2c4330578ede155231252df68bff1f04a85a1d362c0afd2cadfa1bc5d1772a16ee0ad7aa447a1d4f58eed9ec79128bc803cf666ddeba402455c5fba94799ae3b43170f1011ef200c599b57283214daf5be3f6a666385445e23fb6b2fa0bb32c54c352ebc4f4d4e56dc876d36c62bb79fc355a445b409cd6b509000000abb480b99cb365cec8126900"/180], &(0x7f0000000240)=ANY=[], &(0x7f0000000440)=ANY=[@ANYBLOB="00221f0a735fc16ffd891c524300000000000000000000000000005ae97f8d621a6e39fa84595df490924e02f090848eba46274187ddeb5fe9414fa60bfa76654c"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x76, 0x1, {0x22, 0xcc4}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, 0x0, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x9}}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/8) [ 102.475888][ T70] usb 3-1: Using ep0 maxpacket: 16 [ 102.485766][ T18] usb 1-1: Using ep0 maxpacket: 8 [ 102.595884][ T7] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7c.e9 [ 102.604975][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.614088][ T70] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 102.624615][ T70] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 102.626064][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.634508][ T70] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 1296, setting to 1024 [ 102.645354][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.656332][ T70] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 102.666050][ T18] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 102.675927][ T70] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.685022][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.702701][ T18] usb 1-1: config 0 descriptor?? [ 102.708087][ T7] usb 4-1: config 0 descriptor?? [ 102.757521][ T7] ttusbir 4-1:0.0: cannot find expected altsetting [ 102.765613][ T3919] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 102.785845][ T18] usb 1-1: can't set config #0, error -71 [ 102.810069][ T18] usb 1-1: USB disconnect, device number 14 [ 102.825980][ T23] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 102.905889][ T70] usb 3-1: New USB device found, idVendor=0525, idProduct=aca1, bcdDevice= 0.40 [ 102.914938][ T70] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.922974][ T70] usb 3-1: Product: syz [ 102.927165][ T70] usb 3-1: Manufacturer: syz [ 102.931747][ T70] usb 3-1: SerialNumber: syz [ 102.961072][ T4198] UDC core: couldn't find an available UDC or it's busy: -16 [ 102.966131][ T70] usb 3-1: can't set config #1, error -71 [ 102.968623][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.985477][ T70] usb 3-1: USB disconnect, device number 13 [ 103.001445][ T4198] UDC core: couldn't find an available UDC or it's busy: -16 [ 103.008935][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.125788][ T3919] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 103.136455][ T3919] usb 5-1: config 0 interface 0 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 103.149431][ T3919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.156072][ T3919] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 103.165087][ T3919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.178851][ T3919] usb 5-1: config 0 descriptor?? [ 103.217810][ T4198] UDC core: couldn't find an available UDC or it's busy: -16 [ 103.218342][ T3919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 103.225259][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.248988][ T18] usb 4-1: USB disconnect, device number 11 [ 103.365837][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 103.373440][ T23] usb 2-1: can't read configurations, error -71 [ 103.380000][ T23] usb usb2-port1: attempt power cycle [ 103.639626][ T18] usb 5-1: USB disconnect, device number 16 07:02:47 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) write$hidraw(r0, &(0x7f0000001180)='=', 0x3b000) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x2, 0x167f42) ioctl$HIDIOCGRAWNAME(r1, 0x40086602, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000200)='L', 0x1) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167101) write$hidraw(r2, &(0x7f0000000000)="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", 0x300000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r3, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$hidraw(0x0, 0x0, 0x0) 07:02:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x8, 0x40) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000009c0)=""/129) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000780)=0x2) r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090538000000000000070589cf51c10f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000b73000000730d9eb53817b872737bf51e498ae60200cc89694239bf54b08d60fa23b99576c5feae1e164df4fc7d05f20c72dc4ccbe28bb564e4a1ad6e0f318b9343e8320d7d7c25b7aa752e67648c7d789b6b036257f2ad49862d2140519a2d678ba0c70c62b221f055a2f4f9cb00"/121], &(0x7f00000000c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "f5f1e5153bbdf69d7c20d019688f7c27593a6966781a36e99749b6988c8ed17526e43c67"}}, &(0x7f0000000900)={0x0, 0xf, 0x96, {0x5, 0xf, 0x96, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c1af19eacfa26ff05eabb9f45305f87b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x40, 0xff, 0x101}, @generic={0x66, 0x10, 0x1, "3b7d84bebeed49b5a8b7fafeb154b6b6a83dead264a67988c30b26486b03306459ec8175bda850abf4a368165d618e0dca57760a22a0a3c77e8fed0279d7945a58c1135808198c5346704a16650550f168a132eb3f2353667fb9ad9cf749d57d66409b"}, @ptm_cap={0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x8, 0x1f, "32d2fb1c", "769d5a2f"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4d, 0x0, 0x9d, 0x1, 0x1f, 0x7, 0x3}}}, &(0x7f00000006c0)={0x84, &(0x7f00000007c0)={0x40, 0x16, 0xfc, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000240)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf0f0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "259d"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x36}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "061c"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x66}, &(0x7f0000000200)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) r2 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8a440) ioctl$EVIOCGKEYCODE_V2(r2, 0x80086603, &(0x7f0000000140)=""/117) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/32) r3 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8a440) ioctl$EVIOCGKEYCODE_V2(r3, 0x80086603, &(0x7f0000000140)=""/117) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000280)={0x1, 0x8, 0x5, 0x0, 0xffffffff, 0x5}) 07:02:47 executing program 1: r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902080000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:02:47 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="200100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xcb06}}, 0x0, 0x0, 0x0, 0x0}) [ 103.746004][ T4095] usb 6-1: USB disconnect, device number 6 [ 103.917255][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 103.917271][ T24] audit: type=1804 audit(1637910167.562:28): pid=4211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F382F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 103.953150][ T24] audit: type=1804 audit(1637910167.562:29): pid=4211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F382F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 104.055735][ T3855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 104.055854][ T3919] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 104.133540][ T24] audit: type=1804 audit(1637910167.772:30): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F382F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 104.184992][ T24] audit: type=1804 audit(1637910167.822:31): pid=4214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F382F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 104.275827][ T4095] usb 6-1: new high-speed USB device number 7 using dummy_hcd 07:02:48 executing program 1: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0x93, 0x7b, 0x40, 0x2040, 0xd300, 0x474e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0xc0, 0x2, 0x0, 0xc9, 0xeb, 0xf4}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_ep_write(r1, 0xb, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x7e, {0x7e, 0x11, "35ee207b98a8396c6738cfc7bf3d057aa3343603893c330ea6fee0ebcfa43a327950cc510d590a8942e9b801bb64dc011a803621ab573a7597173d8be96b81172845d401746d0f011362f34ec7a8b795c32d664c43b29f2d9fa2a935ab2f2a4c3d54e1d45769cbb621795121f730c66a1d702f9965708cba4f9b72f5"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f00000007c0)={0x0, 0xf, 0x15c, {0x5, 0xf, 0x15c, 0x6, [@generic={0x82, 0x10, 0xb, "ba5643f1d2e3d67225faa5452a90ff897fc5ece704131e5545730aaef46556232a7c82b0e4fefd20b653ad1f4cde55a3f634b24073bbc4cdade5becf30948d00babdda9a1580a910f551c475d244fe353ac19f81ef2098ed6bfb01bc0c0923fa0191fb93c5c4f9979b44a38c76f691a62602ed7707460ce06bdc96b135292e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x7f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d53784eb89ceceb7659ad127072721f9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x6, 0x1822}, @generic={0xa6, 0x10, 0x3, "aaaa901fee0d74c8164a27071cc7e87cf935657e8b5bff5a81a0f722de11dbb8e44793fb75ddfb28ce864d050373d99146a9b0e220ad8e17b68f6b38c6df6549a2ba1c95ea5556488bd3211ab7fff2c944f933321c50790f775b78e02adbd2fd1c0981696ad898f02b215999ee311e77b135d8760d482efe1df6e7c5015f571f0f157407e7fb3c454788bcd7de0895a6a7ba0910ca102918734f5c9f4b1b5cce3c3b2f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x7f, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x5, "3a041471", "c3dc3bbd"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x81, 0x4, 0xaf, 0x8, 0x7}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x20, 0x13, 0xb6, "b4ce078e7007ce44b85b3c04d424f89112da909fcd700df439b3b8f1ce1c2bb9ad93bb17bfe4341082667e3822cd890ccb96e66dbcc289f8ff7d36034c67f553d39d9c63fee93ecacb316f8b3f4a474c0197827a0d23ba730ae5dd6f48cd4c9b5034da58f41414d8eb9fd74c2ab7d4422d91350f194d128c3ccec64da9bfe31cb3fbed2d13bfbf757f3b9ecbdf502f195aeff38edd1537681c6bbe283ed8affd59a328b427b4eb539842f69f3143f652355e0b8a4f79"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x100, 0x4, [0xf0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xf28}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "d234"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @random="8346113f5a4e"}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "e626"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x72, {0x72, 0xc, "0b546e32332f3b61644d4b5c6e1a805fdff00d6b18486a7f740f24d59f362d127223150a10c83af521a3e3b9178da8743656ec189df1e2aec53d95616a5aea243de3b5be895495d2cd8ea66592ed59a54fd592c899e3c5df9f57c6edd82b7a559eb9462083cd975d197acdaffccc2504"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x80, 0x3, 0x3, "c7a1aad1", "24381930"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x41, 0x9, 0x2, 0x6e65, 0x9}}}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0x3, 0x36, "9aad8619ad4b5e4c7385b78602f5f9ddeecf83fa8933a4a7608aed7a427ef657c9fb929f2f742aa185875269096cf007b97084df6ff1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x400, 0x4, [0xf00]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0x6b}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "81dc"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000440)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "ebd1"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x39}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x3}}) 07:02:48 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x418400) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000090581"], 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000200)=""/192, 0xc0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r3, 0x82, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r3, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x20, 0x11, 0x52, {0x52, 0x22, "84936a3bdf5b4a0a295863967d573523dfa044b6dbf6b7e12c057bc64b161e6f4ff8298d504c6150dfb9b2dddbcdca4c215241066f0cc6e87a3eea3e9cb809f0f7dbe8fa57e2ae514d9ad918dce5d5d5"}}, &(0x7f0000000380)={0x0, 0x3, 0xe, @string={0xe, 0x3, "a1d7472ad24bda90111b44e2"}}, &(0x7f00000003c0)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x2, 0x0, 0x20, [0xffc03f, 0xc0, 0x30, 0xfffff0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x0, 0x1, 0x8, 0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0x0, 0x81, "df1da350", "496e36f1"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x93, 0x9, 0x5, 0x4, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0xf, 0xe2, "6d30e24ce6ec79aea4fc6d9723e3e0ce3849260bf859ef1461a8a268ac641fbb02a7e9409a02526ff6ca962d0e39990d601732388e8b96c47805134cb55e92f84fd5f45f0473d7fd8c3aefb2ec3f500d73b2823d53f8406a5e7d6567941c4eb25418368c2d7680db03fa7db4dad56af9b84a22cdac40c1a272ce861eb6fdc0c5448dfc7751aba682699a6ac00d2a1b415ba226094be5e0984a70648a702da70b0110d4584602dfe75b0e7c6521c64b3fda701b438021fa0ef8e79ac78bc3e1464f5802e245cdbdcb20ca0e1c1ee43d849ec4e831e5fbba9b4b7590fc784c939fbe71"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "5383"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "78c3"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) [ 104.446027][ T3919] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x38, skipping [ 104.456631][ T3919] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.469644][ T3919] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 104.478735][ T3919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.486876][ T70] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 104.496188][ T3855] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7c.e9 [ 104.505304][ T3855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.527486][ T3919] usb 3-1: config 0 descriptor?? [ 104.529077][ T3855] usb 4-1: config 0 descriptor?? [ 104.532512][ T24] audit: type=1800 audit(1637910168.172:32): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=1184 res=0 errno=0 [ 104.558720][ T24] audit: type=1804 audit(1637910168.182:33): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F392F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 104.598005][ T3855] ttusbir 4-1:0.0: cannot find expected altsetting [ 104.637473][ T3919] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.658861][ T3919] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.685746][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 104.706101][ T4095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.717072][ T4095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.742147][ T4095] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.752093][ T4095] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.761955][ T4095] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.771662][ T4095] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 07:02:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0x14, 0x53, 0x20, 0x403, 0xbca0, 0xcd81, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x76, 0x0, 0x1, 0x5c, 0x3c, 0x82, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x20}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xcd, 0xf7}}]}}]}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x22, 0x8b, {0x8b, 0x0, "69cfb8a3eebbc977a1974b0a12db08d52d19802dd0db90680e71dc43662d727d3d6facba4873d5756c2261a240f92e4b867b359444a431a8591d0428829e7167e8494aeb012d5905d5af5a9623d42c49c09871445233482d1d643f3f9fa2542f82ec6e2ae9daa24a7891fdf4854f574879b37e86554e2bdfa2475efb61e8b9561885c4091de6118aea"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x31, 0xdf, "5b8158f64eba917d15233122ca6e773b3c476894d443c40d025df16b3920d50c34f29c1a740a56d39538fae31672dbe1bdc5ebda44f60bc5be21c08a98205a83a81d9db4dd7866570018dce5e4d13030cd291ffb2736d7a9291452e6ba0140f24d4ecdeed47fc7aa10a4ee2c34f9fdacf47d53114964d7df5bc19b91ea37d113eaa0fa561c215565ac94ca29b5a91928d7f474dd287e91c58252aa51b116aaf7fdaaf3beb21471a07924a7b9efb238047de7335d92b5a3e214fca5218fa8b40f86152ee15764682cfd2cae93205a72af3c44f2604b621ffecaf82d2029ada6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_disconnect(r0) [ 104.808279][ T4198] UDC core: couldn't find an available UDC or it's busy: -16 [ 104.815819][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.825334][ T3919] usb 4-1: USB disconnect, device number 12 [ 104.925874][ T70] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 104.936390][ T7] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 104.943968][ T4095] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.953188][ T4095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.961207][ T4095] usb 6-1: Product: syz [ 104.965352][ T4095] usb 6-1: Manufacturer: syz [ 104.969985][ T4095] usb 6-1: SerialNumber: syz [ 104.974915][ T70] usb 5-1: config 0 interface 0 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 104.988002][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.994615][ T70] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 105.003680][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.026642][ T70] usb 5-1: config 0 descriptor?? [ 105.068542][ T70] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 105.085902][ T23] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 105.094148][ T23] usb 2-1: config 0 has no interface number 0 [ 105.100636][ T23] usb 2-1: config 0 interface 192 has no altsetting 0 [ 105.107495][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=47.4e [ 105.116539][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.126167][ T23] usb 2-1: config 0 descriptor?? [ 105.203886][ T23] msi2500 2-1:0.192: Registered as swradio0 [ 105.209878][ T23] msi2500 2-1:0.192: SDR API is still slightly experimental and functionality changes may follow [ 105.275855][ T3919] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 105.313673][ T24] audit: type=1800 audit(1637910168.952:34): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name=48C7C060 dev="sda1" ino=1169 res=0 errno=0 [ 105.326071][ T7] usb 1-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config [ 105.333901][ T24] audit: type=1800 audit(1637910168.952:35): pid=4201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=1169 res=0 errno=0 [ 105.344012][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.386521][ T4218] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.394072][ T4218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.420051][ T4218] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.427601][ T4218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.457506][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1343, setting to 8 [ 105.466752][ T4210] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.468772][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.475994][ T4210] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.484967][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:02:49 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000100000000090400c8cb72fba1680003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) read$char_usb(r1, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 105.521358][ T70] usb 5-1: USB disconnect, device number 17 [ 105.533377][ T4221] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 105.546075][ T3919] usb 4-1: Using ep0 maxpacket: 32 [ 105.567118][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 105.573049][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 105.580965][ T7] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 105.666277][ T3919] usb 4-1: config 0 has an invalid interface number: 118 but max is 1 [ 105.674513][ T3919] usb 4-1: config 0 has no interface number 1 [ 105.689215][ T3919] usb 4-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=cd.81 [ 105.698344][ T3919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.716261][ T3919] usb 4-1: config 0 descriptor?? [ 105.757336][ T3919] ftdi_sio 4-1:0.118: FTDI USB Serial Device converter detected [ 105.774733][ T3919] usb 4-1: Detected FT2232C [ 105.786326][ T24] audit: type=1804 audit(1637910169.432:36): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723839383130393431342F73797A6B616C6C65722E7833486763632F392F48C7C060 dev="sda1" ino=1184 res=1 errno=0 [ 105.905972][ T7] usb 1-1: USB disconnect, device number 15 [ 105.925710][ T70] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 105.957409][ T4225] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.964906][ T4225] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.175759][ T70] usb 5-1: Using ep0 maxpacket: 8 [ 106.265725][ T7] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 106.295932][ T70] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.306429][ T70] usb 5-1: too many endpoints for config 0 interface 0 altsetting 200: 203, using maximum allowed: 30 [ 106.317618][ T70] usb 5-1: config 0 interface 0 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 106.330892][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.338052][ T70] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.347112][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.377069][ T3919] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 106.383953][ T4095] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 106.392427][ T70] usb 5-1: config 0 descriptor?? [ 106.397715][ T3919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 106.405387][ T3919] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.425292][ T3919] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 106.435519][ T3919] usb 4-1: USB disconnect, device number 13 [ 106.441734][ T4095] cdc_ncm 6-1:1.0: bind() failure [ 106.452491][ T4095] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 106.459436][ T4095] cdc_ncm 6-1:1.1: bind() failure [ 106.465315][ T3919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.478201][ T3919] ftdi_sio 4-1:0.118: device disconnected [ 106.491634][ T4095] usb 6-1: USB disconnect, device number 7 [ 106.625812][ T7] usb 1-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config [ 106.636095][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.645099][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1343, setting to 8 [ 106.656017][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 106.665198][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.706164][ T4220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 106.726651][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 106.732565][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 106.741386][ T7] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 106.747590][ T70] usb 5-1: string descriptor 0 read error: -71 [ 106.775820][ T70] usb 5-1: USB disconnect, device number 18 07:02:50 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x40086602, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x1, 0x0, {}, {}, @rumble={0x0, 0xc}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x400e02) write$hidraw(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000300)="03", 0x1) ioctl$HIDIOCGRAWNAME(r2, 0x40305829, &(0x7f0000000080)) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x8a440) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) syz_open_dev$hidraw(&(0x7f0000000380), 0x5, 0x101242) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0xc0045878, 0x0) write$hidraw(r5, &(0x7f0000000200), 0x0) write$hidraw(r3, &(0x7f0000000200)="59a00cec6ffe23831d941de6fa1feb2d3047f77d6cccb20f9b9a1d4f1175d10cdd12d7d8f778e5c997de2f36d2b566a4c06be72d6335677e0def33d7788b5c3c5c95f1a1c78537652c3201e51387fc3697949a1c8cf912c514eb07e1201d43090af0b27d4b6826c3ef513da858793dcf716f9d54e6a207473d2417dea8258ae18945b956f614047d4948f80921688970bdd3", 0x92) r6 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x80000000000007, 0x0) ioctl$HIDIOCGFEATURE(r6, 0x6611, 0x0) [ 106.822327][ T7] usb 3-1: USB disconnect, device number 14 [ 106.838376][ T7] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 106.873546][ T24] audit: type=1800 audit(1637910170.512:37): pid=4234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=1189 res=0 errno=0 [ 106.942660][ T4220] UDC core: couldn't find an available UDC or it's busy: -16 [ 106.950090][ T4220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:02:50 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610015c4c0eddca4780bfc03000000000000000109022d0001000000000b04000003fe030100f5048d1f000200001ed61b71b045f890339c7909aa13d038e3f3e5520000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000040)={0x0, 0x0, 0x4a, "e653a962bc1496dd7d1f0151d2558e9da97f1eb07fdb1098e375df2e4d781cc4103ecc3af018f695718a22280f80c0c667000000000000002cef546cf93085581354e45880139be92f4b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3ffffffffffff) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) [ 107.145840][ T3919] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.165737][ T4095] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 107.295876][ T70] usb 1-1: USB disconnect, device number 16 07:02:51 executing program 1: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0x93, 0x7b, 0x40, 0x2040, 0xd300, 0x474e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0xc0, 0x2, 0x0, 0xc9, 0xeb, 0xf4}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_ep_write(r1, 0xb, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x7e, {0x7e, 0x11, "35ee207b98a8396c6738cfc7bf3d057aa3343603893c330ea6fee0ebcfa43a327950cc510d590a8942e9b801bb64dc011a803621ab573a7597173d8be96b81172845d401746d0f011362f34ec7a8b795c32d664c43b29f2d9fa2a935ab2f2a4c3d54e1d45769cbb621795121f730c66a1d702f9965708cba4f9b72f5"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f00000007c0)={0x0, 0xf, 0x15c, {0x5, 0xf, 0x15c, 0x6, [@generic={0x82, 0x10, 0xb, "ba5643f1d2e3d67225faa5452a90ff897fc5ece704131e5545730aaef46556232a7c82b0e4fefd20b653ad1f4cde55a3f634b24073bbc4cdade5becf30948d00babdda9a1580a910f551c475d244fe353ac19f81ef2098ed6bfb01bc0c0923fa0191fb93c5c4f9979b44a38c76f691a62602ed7707460ce06bdc96b135292e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x7f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d53784eb89ceceb7659ad127072721f9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x6, 0x1822}, @generic={0xa6, 0x10, 0x3, "aaaa901fee0d74c8164a27071cc7e87cf935657e8b5bff5a81a0f722de11dbb8e44793fb75ddfb28ce864d050373d99146a9b0e220ad8e17b68f6b38c6df6549a2ba1c95ea5556488bd3211ab7fff2c944f933321c50790f775b78e02adbd2fd1c0981696ad898f02b215999ee311e77b135d8760d482efe1df6e7c5015f571f0f157407e7fb3c454788bcd7de0895a6a7ba0910ca102918734f5c9f4b1b5cce3c3b2f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x7f, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x5, "3a041471", "c3dc3bbd"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x81, 0x4, 0xaf, 0x8, 0x7}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x20, 0x13, 0xb6, "b4ce078e7007ce44b85b3c04d424f89112da909fcd700df439b3b8f1ce1c2bb9ad93bb17bfe4341082667e3822cd890ccb96e66dbcc289f8ff7d36034c67f553d39d9c63fee93ecacb316f8b3f4a474c0197827a0d23ba730ae5dd6f48cd4c9b5034da58f41414d8eb9fd74c2ab7d4422d91350f194d128c3ccec64da9bfe31cb3fbed2d13bfbf757f3b9ecbdf502f195aeff38edd1537681c6bbe283ed8affd59a328b427b4eb539842f69f3143f652355e0b8a4f79"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x100, 0x4, [0xf0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xf28}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "d234"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @random="8346113f5a4e"}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "e626"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x72, {0x72, 0xc, "0b546e32332f3b61644d4b5c6e1a805fdff00d6b18486a7f740f24d59f362d127223150a10c83af521a3e3b9178da8743656ec189df1e2aec53d95616a5aea243de3b5be895495d2cd8ea66592ed59a54fd592c899e3c5df9f57c6edd82b7a559eb9462083cd975d197acdaffccc2504"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x80, 0x3, 0x3, "c7a1aad1", "24381930"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x41, 0x9, 0x2, 0x6e65, 0x9}}}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0x3, 0x36, "9aad8619ad4b5e4c7385b78602f5f9ddeecf83fa8933a4a7608aed7a427ef657c9fb929f2f742aa185875269096cf007b97084df6ff1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x400, 0x4, [0xf00]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0x6b}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "81dc"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000440)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "ebd1"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x39}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x3}}) [ 107.385771][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 107.405589][ T3855] usb 2-1: USB disconnect, device number 15 [ 107.421153][ T4095] usb 4-1: Using ep0 maxpacket: 32 [ 107.440566][ T3855] [ 107.442912][ T3855] ========================= [ 107.447404][ T3855] WARNING: held lock freed! [ 107.451900][ T3855] 5.16.0-rc1-syzkaller #0 Not tainted [ 107.457266][ T3855] ------------------------- [ 107.461755][ T3855] kworker/1:3/3855 is freeing memory ffff888102bfa000-ffff888102bfafff, with a lock still held there! [ 107.472774][ T3855] ffff888102bfa660 (&ctlr->add_lock){+.+.}-{3:3}, at: spi_unregister_controller+0x57/0x3b0 [ 107.482850][ T3855] 8 locks held by kworker/1:3/3855: [ 107.488052][ T3855] #0: ffff888103d97538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 107.498896][ T3855] #1: ffffc900016f7db0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 107.510216][ T3855] #2: ffff88810d022220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 107.515798][ T3919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.519073][ T3855] #3: ffff88810fef8220 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x78e [ 107.529996][ T3919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.539456][ T3855] #4: ffff88810fefd1a8 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 [ 107.550586][ T3919] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.558782][ T3855] #5: ffff888102bf8d30 (&dev->vb_queue_lock){+.+.}-{3:3}, at: msi2500_disconnect+0x5d/0x160 [ 107.568576][ T3919] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 107.578651][ T3855] #6: ffff888102bf8ca0 (&dev->v4l2_lock){+.+.}-{3:3}, at: msi2500_disconnect+0x67/0x160 [ 107.578709][ T3855] #7: ffff888102bfa660 [ 107.588603][ T3919] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.598347][ T3855] (&ctlr->add_lock){+.+.}-{3:3}, at: spi_unregister_controller+0x57/0x3b0 [ 107.602510][ T3919] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 107.612118][ T3855] [ 107.612118][ T3855] stack backtrace: [ 107.612125][ T3855] CPU: 1 PID: 3855 Comm: kworker/1:3 Not tainted 5.16.0-rc1-syzkaller #0 [ 107.621162][ T4095] usb 4-1: config 0 has an invalid interface number: 118 but max is 1 [ 107.630496][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.630513][ T3855] Workqueue: usb_hub_wq hub_event [ 107.630538][ T3855] Call Trace: [ 107.630545][ T3855] [ 107.630553][ T3855] dump_stack_lvl+0xcd/0x134 [ 107.636455][ T4095] usb 4-1: config 0 has no interface number 1 [ 107.644802][ T3855] debug_check_no_locks_freed.cold+0x9d/0xa9 [ 107.654353][ T4095] usb 4-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=cd.81 [ 107.663057][ T3855] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 107.663086][ T3855] ? device_release+0x9f/0x240 [ 107.668150][ T4095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.671361][ T3855] kfree+0xc4/0x470 [ 107.686888][ T4095] usb 4-1: config 0 descriptor?? [ 107.690853][ T3855] ? device_del+0x963/0xd60 [ 107.690882][ T3855] ? spi_device_messages_show+0x80/0x80 [ 107.700000][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 107.706091][ T3855] device_release+0x9f/0x240 [ 107.706119][ T3855] kobject_put+0x1c8/0x540 [ 107.706147][ T3855] put_device+0x1b/0x30 [ 107.745744][ T7] usb 3-1: too many configurations: 192, using maximum allowed: 8 [ 107.747263][ T3855] spi_unregister_controller+0x2a8/0x3b0 [ 107.756928][ T4095] ftdi_sio 4-1:0.118: FTDI USB Serial Device converter detected [ 107.763638][ T3855] ? device_unregister+0x31/0xc0 [ 107.781798][ T3855] msi2500_disconnect+0xd2/0x160 [ 107.786762][ T3855] usb_unbind_interface+0x1d8/0x8e0 [ 107.791994][ T3855] ? up_write+0x148/0x470 [ 107.796331][ T3855] ? kernfs_remove_by_name_ns+0x60/0xa0 [ 107.801904][ T3855] ? usb_unbind_device+0x1a0/0x1a0 [ 107.807026][ T3855] __device_release_driver+0x5d7/0x700 [ 107.808004][ T4095] usb 4-1: Detected FT2232C [ 107.812502][ T3855] device_release_driver+0x26/0x40 [ 107.812533][ T3855] bus_remove_device+0x2eb/0x5a0 [ 107.827022][ T3855] device_del+0x502/0xd60 [ 107.831358][ T3855] ? fw_devlink_purge_absent_suppliers+0x50/0x50 [ 107.837697][ T3855] ? mutex_lock_io_nested+0x1150/0x1150 [ 107.843275][ T3855] usb_disable_device+0x35b/0x7b0 [ 107.848314][ T3855] usb_disconnect.cold+0x27a/0x78e [ 107.853435][ T3855] hub_event+0x1c9c/0x4330 [ 107.857866][ T3855] ? hub_port_debounce+0x3c0/0x3c0 [ 107.862996][ T3855] ? lock_release+0x720/0x720 [ 107.867681][ T3855] ? lock_downgrade+0x6e0/0x6e0 [ 107.872537][ T3855] ? do_raw_spin_lock+0x120/0x2b0 [ 107.875994][ T7] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.877566][ T3855] process_one_work+0x9b2/0x1690 [ 107.885117][ T7] usb 3-1: can't read configurations, error -61 [ 107.890023][ T3855] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 107.890048][ T3855] ? rwlock_bug.part.0+0x90/0x90 [ 107.906560][ T3855] ? _raw_spin_lock_irq+0x41/0x50 [ 107.911596][ T3855] worker_thread+0x658/0x11f0 [ 107.915804][ T3919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.916277][ T3855] ? process_one_work+0x1690/0x1690 [ 107.925317][ T3919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.930467][ T3855] kthread+0x40b/0x500 07:02:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x30, 0x2, {0x2, 0x21}}, &(0x7f00000000c0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "ee2ad0539b0ed667347c06faccb4be20313d4b"}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "7f717dbc"}, @global=@item_4={0x3, 0x1, 0x1, "e476a3e0"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x5, 0x1, {0x22, 0x4ca}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x72, "7865a0fbd50f49754e5fea73541524ec32786d69deced952a027645c9e9d9ff88caf8568dc2e30540cbe6bdbf096641d5b9d04f165933d1a56581ff87593ed52497bfc3a1db9bb6081bb987a11033c025d88441276c1d2f0f5366ab815d03dbb921e0221f5ed7f22e2fc0431640a7c227a86"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x1, 0xb3, "b186951d299f56aa132c5e054c9d2ba7615a2cd85bd54866d8bd5ead296bfbc13fb2174e936924e42aa3478eb5e2749395e56b6e019aff17c2ac35f9ce363f623dcaadf109fe84dba72264fcc87e5dcfb0de5133fb2333a649ca19763b7c5f54df78476cfd240ff34d77aeaf7c4aea37f405db118fe03788f03dadf4d4d95a19e77032a1edc6c1371445a5dc8e2100c67158732202633c560a13beaa34ecc3392025661f1bad1ab5b90b34608b7ceae0c7d763"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x6, "2c9bcaf7a10a"}, 0x0, 0x0}) [ 107.930489][ T3855] ? set_kthread_struct+0x130/0x130 [ 107.930509][ T3855] ret_from_fork+0x1f/0x30 [ 107.952144][ T3855] [ 107.965686][ T23] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 107.975995][ T3919] usb 6-1: can't set config #1, error -71 [ 107.984797][ T3855] ================================================================== [ 107.992870][ T3855] BUG: KASAN: use-after-free in __mutex_unlock_slowpath+0xa6/0x5e0 [ 107.996330][ T4095] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 108.000778][ T3855] Read of size 8 at addr ffff888102bfa5f8 by task kworker/1:3/3855 [ 108.000798][ T3855] [ 108.000804][ T3855] CPU: 1 PID: 3855 Comm: kworker/1:3 Not tainted 5.16.0-rc1-syzkaller #0 [ 108.013281][ T3919] usb 6-1: USB disconnect, device number 8 [ 108.015433][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.015451][ T3855] Workqueue: usb_hub_wq hub_event [ 108.046353][ T4095] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 108.047040][ T3855] Call Trace: [ 108.047049][ T3855] [ 108.056718][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 108.057305][ T3855] dump_stack_lvl+0xcd/0x134 [ 108.064167][ T4095] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 108.067747][ T3855] print_address_description.constprop.0.cold+0x8d/0x320 [ 108.067789][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 108.088866][ T4095] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 108.092897][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 108.105472][ T3855] kasan_report.cold+0x83/0xdf [ 108.110283][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 108.115851][ T3855] kasan_check_range+0x13d/0x180 [ 108.120818][ T3855] __mutex_unlock_slowpath+0xa6/0x5e0 [ 108.126210][ T3855] ? radix_tree_lookup+0x20/0x20 [ 108.128217][ T4095] usb 4-1: USB disconnect, device number 14 [ 108.131151][ T3855] ? wait_for_completion_io+0x270/0x270 [ 108.131186][ T3855] ? kfree_const+0x51/0x60 [ 108.147335][ T3855] ? kobject_put+0x1f3/0x540 [ 108.151944][ T3855] ? spi_unregister_controller+0x285/0x3b0 [ 108.152066][ T4095] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.157761][ T3855] msi2500_disconnect+0xd2/0x160 [ 108.157793][ T3855] usb_unbind_interface+0x1d8/0x8e0 [ 108.157816][ T3855] ? up_write+0x148/0x470 [ 108.177183][ T4095] ftdi_sio 4-1:0.118: device disconnected [ 108.181484][ T3855] ? kernfs_remove_by_name_ns+0x60/0xa0 [ 108.192743][ T3855] ? usb_unbind_device+0x1a0/0x1a0 [ 108.197867][ T3855] __device_release_driver+0x5d7/0x700 [ 108.203341][ T3855] device_release_driver+0x26/0x40 [ 108.208470][ T3855] bus_remove_device+0x2eb/0x5a0 [ 108.213427][ T3855] device_del+0x502/0xd60 [ 108.217792][ T3855] ? fw_devlink_purge_absent_suppliers+0x50/0x50 [ 108.224143][ T3855] ? mutex_lock_io_nested+0x1150/0x1150 [ 108.229729][ T3855] usb_disable_device+0x35b/0x7b0 [ 108.234759][ T3855] usb_disconnect.cold+0x27a/0x78e [ 108.239862][ T3855] hub_event+0x1c9c/0x4330 [ 108.244271][ T3855] ? hub_port_debounce+0x3c0/0x3c0 [ 108.249371][ T3855] ? lock_release+0x720/0x720 [ 108.254035][ T3855] ? lock_downgrade+0x6e0/0x6e0 [ 108.258869][ T3855] ? do_raw_spin_lock+0x120/0x2b0 [ 108.263878][ T3855] process_one_work+0x9b2/0x1690 [ 108.268807][ T3855] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 108.274167][ T3855] ? rwlock_bug.part.0+0x90/0x90 [ 108.279091][ T3855] ? _raw_spin_lock_irq+0x41/0x50 [ 108.284098][ T3855] worker_thread+0x658/0x11f0 [ 108.288759][ T3855] ? process_one_work+0x1690/0x1690 [ 108.293939][ T3855] kthread+0x40b/0x500 [ 108.295671][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 108.297990][ T3855] ? set_kthread_struct+0x130/0x130 [ 108.298016][ T3855] ret_from_fork+0x1f/0x30 [ 108.312572][ T3855] [ 108.315571][ T3855] [ 108.317875][ T3855] Allocated by task 23: [ 108.322005][ T3855] kasan_save_stack+0x1e/0x50 [ 108.326667][ T3855] __kasan_kmalloc+0x81/0xa0 [ 108.331246][ T3855] __spi_alloc_controller+0x35/0x310 [ 108.335997][ T7] usb 3-1: too many configurations: 192, using maximum allowed: 8 [ 108.336516][ T3855] msi2500_probe+0x679/0xbf0 [ 108.348871][ T3855] usb_probe_interface+0x315/0x7f0 [ 108.353966][ T3855] really_probe+0x245/0xcc0 [ 108.358458][ T3855] __driver_probe_device+0x338/0x4d0 [ 108.363828][ T3855] driver_probe_device+0x4c/0x1a0 [ 108.368850][ T3855] __device_attach_driver+0x20b/0x2f0 [ 108.374216][ T3855] bus_for_each_drv+0x15f/0x1e0 [ 108.379055][ T3855] __device_attach+0x228/0x4a0 [ 108.383915][ T3855] bus_probe_device+0x1e4/0x290 [ 108.388887][ T3855] device_add+0xc17/0x1ee0 [ 108.393291][ T3855] usb_set_configuration+0x101e/0x1900 [ 108.398740][ T3855] usb_generic_driver_probe+0xba/0x100 [ 108.404231][ T3855] usb_probe_device+0xd9/0x2c0 [ 108.409005][ T3855] really_probe+0x245/0xcc0 [ 108.413500][ T3855] __driver_probe_device+0x338/0x4d0 [ 108.418773][ T3855] driver_probe_device+0x4c/0x1a0 [ 108.423801][ T3855] __device_attach_driver+0x20b/0x2f0 [ 108.429158][ T3855] bus_for_each_drv+0x15f/0x1e0 [ 108.434001][ T3855] __device_attach+0x228/0x4a0 [ 108.438761][ T3855] bus_probe_device+0x1e4/0x290 [ 108.443596][ T3855] device_add+0xc17/0x1ee0 [ 108.447995][ T3855] usb_new_device.cold+0x63f/0x108e [ 108.453173][ T3855] hub_event+0x2357/0x4330 [ 108.455984][ T7] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.457573][ T3855] process_one_work+0x9b2/0x1690 [ 108.465139][ T7] usb 3-1: can't read configurations, error -61 [ 108.470304][ T3855] worker_thread+0x658/0x11f0 [ 108.470328][ T3855] kthread+0x40b/0x500 [ 108.470345][ T3855] ret_from_fork+0x1f/0x30 [ 108.470364][ T3855] [ 108.470368][ T3855] Freed by task 3855: [ 108.478837][ T7] usb usb3-port1: attempt power cycle [ 108.481233][ T3855] kasan_save_stack+0x1e/0x50 [ 108.505968][ T3855] kasan_set_track+0x21/0x30 [ 108.510543][ T3855] kasan_set_free_info+0x20/0x30 [ 108.515475][ T3855] __kasan_slab_free+0xe0/0x110 [ 108.520329][ T3855] kfree+0xdc/0x470 [ 108.524118][ T3855] device_release+0x9f/0x240 [ 108.528688][ T3855] kobject_put+0x1c8/0x540 [ 108.533083][ T3855] put_device+0x1b/0x30 [ 108.537225][ T3855] spi_unregister_controller+0x2a8/0x3b0 [ 108.542935][ T3855] msi2500_disconnect+0xd2/0x160 [ 108.547861][ T3855] usb_unbind_interface+0x1d8/0x8e0 [ 108.553067][ T3855] __device_release_driver+0x5d7/0x700 [ 108.558537][ T3855] device_release_driver+0x26/0x40 [ 108.563675][ T3855] bus_remove_device+0x2eb/0x5a0 [ 108.568609][ T3855] device_del+0x502/0xd60 [ 108.572944][ T3855] usb_disable_device+0x35b/0x7b0 [ 108.576065][ T3919] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 108.577971][ T3855] usb_disconnect.cold+0x27a/0x78e [ 108.577996][ T3855] hub_event+0x1c9c/0x4330 07:02:52 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xaf, 0xb2, 0xaf, 0x40, 0x19d2, 0xff83, 0xdffb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000200)={0x40, 0x4, 0x19, {0x19, 0xa, "45c193afc003f187cae401f6c7ad5e791aadcf016f5326"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000280)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x8, "af86d746"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x20, 0x1, {0x22, 0x186}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x0, 0x30, 0xa7, "1426507ce49247e8e5b11ffbc57f9dfa577ea4cb6ed37d9b41a8a12723df262ea021b6ee9881690d7d9c168e0680b8af7dcaa86e871ac4546f1dc536bd1b2866e3f5eda5126f30cfb3126f59f83ff4f4b46a912863bc08b12d3495c6a3a224e6f020eb971167434390349400884a0123e347b20f265f3bd2de6b8b5f4db99f3c4645bfc2dc91cea524fa006a70a5de4c979a657214e09222bf5ba54476d11fbda9733c458bc743"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x1, 0xb5, "e39416ef419c3c9f92cb2db3090f668f7f97ce1f84d9301930b8b873fecbb1415ee99293fde0091cfd33a76badbfa44c4a696a7792de44a02649210f45cf76f496dc00dc50e4838309a5834cd80f64143d7b5931ea505af8bf068687cfed9b7a0b9d694e0e19f08fe8880e9f873249a95c13296afc9d6ed4519dd0b45c7d078293bdbbd16833c3be3e7147cc48bb07902a56be9834c6077c73f39e31de4a71172a7a56333816dc4440b08f45af77ed037c82e9581d"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0x2, 0xdf, {0xdf, 0x8, "8ec0385c07dbce1e58ad2c538fabbd569fb65d56f424a7a2924b6dc39b84ad67325ede3d5f232153113314e191682a2d5af0e99c4a2888b93f36affcf5213f5912628cdf6fc9cf593c4aba3d52688bc042edeab22ad2fca80e9a3ca9b5a1201b0ace4857971f016a7670d155ed3e4fd578928ac6d97e3098e2ca6477d908b7d0a74bf606ce211f73fcfe5b26d1a596b2fd81f6b7a15080819d07234f714cc360d00c74290f4011d01d8054c113a687359e9d565fcea59dbe84bcae0f46212a46e479c786596b7665eefa764820b067ee8e8b094c9d758d8941722409ae"}}, &(0x7f0000000440)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "ad1cac8bfa3a767f485e7c1cc8d6a9b84caf6cca544d72af479fbe2a123d367ce593f8d4f36000672b2069af41b1b82f7459c966d3812303e85b125d44ab22be5554d87be21e92317ec67c2f4d1ff7f0d0cc8ea8e9e8ff064bdc2997310d60e1c4b6ebaf3524db6da0888fcbca3cbbd461d333efd2451f0bda7b2bec90b236c0ce80a3315cb0e6b7803c26c4037983a9219f3d006de34542ff894a1af6c78bb1947c5764326be99707504e9a8bf6d6dbb225904dc0b3e63eb16b59fd31851342169465431f03983ac5b0ed4d1d2d925159b2c7d0b5ce590fab7a9a9a2dd8a19a3e4334f9d3c3fa6cf4723d6d94feb3b3b05e73911190"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4]}}, &(0x7f0000000040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0xf6, 0x1, {0x22, 0x942}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x82, "a7a1a2893db87557a4b6e0175231e8f093b52e10fa33cf6cff56b5e0a651336a65528f660cd4aaf8a091fac78e8b200420f9493978d1b6429af480386dca415dbee9ce9866ea4cd7500d78c97bdbb72369ddc5900a6c58fcf43069af020e2af24b5f6a27e94330699416c3a54ad4effc547b1cc1d32b35d761e781c25f547f165a23"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xd5, "fc728df39e5962ba22ee60a7fcfda07b03d3e5be746ffdf4416662ec2d9ed5e47b510d6827fcdaa9f0d2c83b2b3e2a6598b8ea70a66a2b6017c16492b58d5ee4ce7bf43d3b49a9b97e8093050e8eb1d59dc492234b4d761cf3003e56c1efe1995fa9182f42560d3c20d1fc8af24b4d12c44b420c34c22c1f2ceaac72607f70b7e7c3b4849cee1e2b0f4b8eb720e267dbd5de78e8c25b754bf42a6e3092a58f6f0129b03e3452a5bc3e85c2c9019f4c7f7666014e7b6f8f49614a8cba3cf0a55ea7f9aaa320c9bce3054cbcdbdb1e4f8a4774d1bb24"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xfa}}) [ 108.594923][ T3855] process_one_work+0x9b2/0x1690 [ 108.599874][ T3855] worker_thread+0x658/0x11f0 [ 108.604556][ T3855] kthread+0x40b/0x500 [ 108.608625][ T3855] ret_from_fork+0x1f/0x30 [ 108.613047][ T3855] [ 108.615364][ T3855] The buggy address belongs to the object at ffff888102bfa000 [ 108.615364][ T3855] which belongs to the cache kmalloc-4k of size 4096 [ 108.629424][ T3855] The buggy address is located 1528 bytes inside of [ 108.629424][ T3855] 4096-byte region [ffff888102bfa000, ffff888102bfb000) [ 108.642874][ T3855] The buggy address belongs to the page: [ 108.648512][ T3855] page:ffffea00040afe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102bf8 [ 108.658839][ T3855] head:ffffea00040afe00 order:3 compound_mapcount:0 compound_pincount:0 [ 108.667150][ T3855] flags: 0x200000000010200(slab|head|node=0|zone=2) [ 108.673733][ T3855] raw: 0200000000010200 0000000000000000 dead000000000122 ffff888100042140 [ 108.682296][ T3855] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 108.690859][ T3855] page dumped because: kasan: bad access detected [ 108.697272][ T3855] page_owner tracks the page as allocated [ 108.702967][ T3855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 23, ts 105177644011, free_ts 101544696309 [ 108.723540][ T3855] get_page_from_freelist+0x122d/0x2940 [ 108.729099][ T3855] __alloc_pages+0x1b2/0x500 [ 108.733759][ T3855] alloc_pages+0x1a7/0x300 [ 108.738153][ T3855] new_slab+0x32d/0x4a0 [ 108.742298][ T3855] ___slab_alloc+0x8b4/0xfa0 [ 108.746875][ T3855] __slab_alloc.constprop.0+0x4d/0xa0 [ 108.752234][ T3855] kmem_cache_alloc_trace+0x278/0x290 [ 108.757674][ T3855] msi2500_probe+0x4b/0xbf0 [ 108.762165][ T3855] usb_probe_interface+0x315/0x7f0 [ 108.767347][ T3855] really_probe+0x245/0xcc0 [ 108.771850][ T3855] __driver_probe_device+0x338/0x4d0 [ 108.777130][ T3855] driver_probe_device+0x4c/0x1a0 [ 108.782140][ T3855] __device_attach_driver+0x20b/0x2f0 [ 108.787496][ T3855] bus_for_each_drv+0x15f/0x1e0 [ 108.792342][ T3855] __device_attach+0x228/0x4a0 [ 108.797091][ T3855] bus_probe_device+0x1e4/0x290 [ 108.801941][ T3855] page last free stack trace: [ 108.806597][ T3855] free_pcp_prepare+0x361/0x760 [ 108.811439][ T3855] free_unref_page+0x19/0x580 [ 108.816095][ T3855] __unfreeze_partials+0x343/0x360 [ 108.821187][ T3855] qlist_free_all+0x5a/0xc0 [ 108.825671][ T3855] kasan_quarantine_reduce+0x180/0x200 [ 108.831197][ T3855] __kasan_slab_alloc+0x78/0x80 [ 108.836048][ T3855] kmem_cache_alloc+0x1d2/0x370 [ 108.840896][ T3855] getname_flags.part.0+0x50/0x4f0 [ 108.845987][ T3855] getname_flags+0x9a/0xe0 [ 108.850383][ T3855] user_path_at_empty+0x2b/0x60 [ 108.855218][ T3855] vfs_statx+0x142/0x390 [ 108.859522][ T3855] __do_sys_newfstatat+0x96/0x120 [ 108.864801][ T3855] do_syscall_64+0x35/0xb0 [ 108.869294][ T3855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 108.875173][ T3855] [ 108.877535][ T3855] Memory state around the buggy address: [ 108.883232][ T3855] ffff888102bfa480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.885816][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 108.891273][ T3855] ffff888102bfa500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.906841][ T3855] >ffff888102bfa580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.914890][ T3855] ^ [ 108.922851][ T3855] ffff888102bfa600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.931003][ T3855] ffff888102bfa680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.935751][ T3919] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 108.939041][ T3855] ================================================================== [ 108.939227][ T3855] Kernel panic - not syncing: panic_on_warn set ... [ 108.948122][ T3919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.956138][ T3855] CPU: 1 PID: 3855 Comm: kworker/1:3 Tainted: G B 5.16.0-rc1-syzkaller #0 [ 108.956164][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.976503][ T3919] usb 6-1: config 0 descriptor?? [ 108.980471][ T3855] Workqueue: usb_hub_wq hub_event [ 108.980500][ T3855] Call Trace: [ 109.003902][ T3855] [ 109.006829][ T3855] dump_stack_lvl+0xcd/0x134 [ 109.011433][ T3855] panic+0x2b0/0x6dd [ 109.015340][ T3855] ? __warn_printk+0xf3/0xf3 [ 109.015954][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 109.019960][ T3855] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 109.031104][ T3855] ? trace_hardirqs_on+0x38/0x1c0 [ 109.036137][ T3855] ? trace_hardirqs_on+0x51/0x1c0 [ 109.041169][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 109.046815][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 109.052382][ T3855] end_report.cold+0x63/0x6f [ 109.055929][ T7] usb 3-1: too many configurations: 192, using maximum allowed: 8 [ 109.056975][ T3855] kasan_report.cold+0x71/0xdf [ 109.057004][ T3855] ? __mutex_unlock_slowpath+0xa6/0x5e0 [ 109.075060][ T3855] kasan_check_range+0x13d/0x180 [ 109.080002][ T3855] __mutex_unlock_slowpath+0xa6/0x5e0 [ 109.085391][ T3855] ? radix_tree_lookup+0x20/0x20 [ 109.090337][ T3855] ? wait_for_completion_io+0x270/0x270 [ 109.095880][ T3855] ? kfree_const+0x51/0x60 [ 109.100289][ T3855] ? kobject_put+0x1f3/0x540 [ 109.104879][ T3855] ? spi_unregister_controller+0x285/0x3b0 [ 109.110680][ T3855] msi2500_disconnect+0xd2/0x160 [ 109.115610][ T3855] usb_unbind_interface+0x1d8/0x8e0 [ 109.120803][ T3855] ? up_write+0x148/0x470 [ 109.125129][ T3855] ? kernfs_remove_by_name_ns+0x60/0xa0 [ 109.130677][ T3855] ? usb_unbind_device+0x1a0/0x1a0 [ 109.135781][ T3855] __device_release_driver+0x5d7/0x700 [ 109.141239][ T3855] device_release_driver+0x26/0x40 [ 109.146345][ T3855] bus_remove_device+0x2eb/0x5a0 [ 109.151283][ T3855] device_del+0x502/0xd60 [ 109.155608][ T3855] ? fw_devlink_purge_absent_suppliers+0x50/0x50 [ 109.161939][ T3855] ? mutex_lock_io_nested+0x1150/0x1150 [ 109.167495][ T3855] usb_disable_device+0x35b/0x7b0 [ 109.172527][ T3855] usb_disconnect.cold+0x27a/0x78e [ 109.177643][ T3855] hub_event+0x1c9c/0x4330 [ 109.182063][ T3855] ? hub_port_debounce+0x3c0/0x3c0 [ 109.187262][ T3855] ? lock_release+0x720/0x720 [ 109.191934][ T3855] ? lock_downgrade+0x6e0/0x6e0 [ 109.196779][ T3855] ? do_raw_spin_lock+0x120/0x2b0 [ 109.201816][ T3855] process_one_work+0x9b2/0x1690 [ 109.206756][ T3855] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 109.212122][ T3855] ? rwlock_bug.part.0+0x90/0x90 [ 109.217148][ T3855] ? _raw_spin_lock_irq+0x41/0x50 [ 109.222256][ T3855] worker_thread+0x658/0x11f0 [ 109.226960][ T3855] ? process_one_work+0x1690/0x1690 [ 109.232165][ T3855] kthread+0x40b/0x500 [ 109.236231][ T3855] ? set_kthread_struct+0x130/0x130 [ 109.241420][ T3855] ret_from_fork+0x1f/0x30 [ 109.245841][ T3855] [ 109.249123][ T3855] Kernel Offset: disabled [ 109.253621][ T3855] Rebooting in 86400 seconds..