c5850c4367d04ed3d79ead598bc1c366ce26f13e6973bcf429e87ee0763f6556a478511af84a6aa60899e04ddc0cabd45c3b60d202ab26e2736aa74f5d29c1aaa3ee6dd30463604ba6268a40d5c73995887c8dde83f782ff8f830bed428b2bc6dd4d285f4e7dc9703deb3b2bf45d6e4b7ed1d1ebae9b86ff240c06be4e63405df6f4e8ebd217603db3110c2d5e52cedfa2fc20844"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0xf0) 00:21:20 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x698400) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/225) 00:21:20 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3244.965823][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3244.983846][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3244.993023][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.020167][T28967] usb 5-1: USB disconnect, device number 127 [ 3245.026459][T18032] usb 6-1: new high-speed USB device number 104 using dummy_hcd 00:21:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0xf0) 00:21:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x191401) 00:21:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0xf0) 00:21:20 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x1f000000, 0x0}]}) 00:21:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001040), 0x2, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/4109) 00:21:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0xf0) [ 3245.258329][ T1499] usb 3-1: USB disconnect, device number 58 [ 3245.355814][T32516] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3245.445775][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3245.455695][T28967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3245.656498][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3245.665638][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.673696][T18032] usb 6-1: Product: syz [ 3245.677964][T18032] usb 6-1: Manufacturer: syz [ 3245.682561][T18032] usb 6-1: SerialNumber: syz [ 3245.735847][T32516] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3245.736337][ T1499] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3245.855717][T28967] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3245.865441][T28967] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3245.875148][T28967] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3245.888013][T28967] usb 5-1: config 1 interface 0 has no altsetting 0 00:21:21 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0xf0) [ 3245.916151][T32516] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3245.925542][T32516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.933742][T32516] usb 2-1: Product: syz [ 3245.938071][T32516] usb 2-1: Manufacturer: syz [ 3245.942670][T32516] usb 2-1: SerialNumber: syz [ 3246.039236][T18032] usb 6-1: USB disconnect, device number 104 [ 3246.046582][T28967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3246.055720][T28967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3246.063725][T28967] usb 5-1: Product: syz [ 3246.067998][T28967] usb 5-1: Manufacturer: syz [ 3246.072605][T28967] usb 5-1: SerialNumber: syz [ 3246.155708][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3246.165648][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3246.175283][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:21:21 executing program 0: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x3, 0x8, 0x4, 0xa59, 0x3}) 00:21:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0xf0) 00:21:21 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:21 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xf0) [ 3246.289201][T32516] usb 2-1: USB disconnect, device number 5 [ 3246.373441][T28967] usb 5-1: USB disconnect, device number 2 00:21:21 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/23) 00:21:21 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0xf0) 00:21:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0xf0) [ 3246.427800][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3246.435362][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3246.435651][T18032] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 3246.444634][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:21:22 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000080)={0x19d, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:22 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xf6ffffff, 0x0}]}) 00:21:22 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x300, &(0x7f0000000080)={[{0x6b, 0x4e00, "69c066cee363696d6e5454a6d9868b4c73c5ca4946e17f37acd43a705edc97c5e3a2ec3b09f2c3d748342841a8a3c2346310c22db6faa357a435526415d59cac8628d959a2c87381921cffeb9bb7346b9768950645d9c04d103b2927c19062cfd3c8f74566714a8666dff6"}, {0xe8, 0x4e00, "3f7f271f90ef1abcb67393a67865706bbbe8203c194c77d544b9de30154a1884e5a192810737c0e379911d58713b1535df52df077bd62894a3d4e3ccb3a663aa6caadf7762fcfb0a2c6ab929bde3a8e71830cca6886be89c02fbdc79ad8c58e387e92ae092ed16d1d0dded0439a12a3b3419d2ef95e5c5ba071097a960df0247a561ea8b3f8f126da6a23b4d82c7a35f13fdb391fdf74560e546758cbe75eaacb8937119a12f8672fa6a1c506c0898ed12af6a441237d224e438f59fc445616473d5b5517c1f6caef98b609a169f9a3d9eb59224e578978731c1ebc77a2a386f52d330cbebd73f05"}, {0xbb, 0x4e00, "45bd6059ce91d4d9490dc7a88dcdb4161cf3b7ceb6db57d5b9b059ab1c3005fbaa3c0e3afe29b3e8d5cedc2fcc57b2689ced6794ff05da6c1a84d659c215c924ef09489d956d7212ebcc5bc0f7ce9d099c29d37a4e2ffdabaa30cbb1532c81e14dcea24b6280e0d88d4f8b499436d96e084118c4469f3d827752b837f08e4763857a7e8b4c22a1ccade0eeb318c83ff71498792e74c756df57b8cdc62bfcbec173ff4d6d3c75e1fee9b26828ce8a9c9e9a6b0c56ef561c80d18517"}, {0xdf, 0x4e00, "21f8e825293e7dbbc0906f818e375c183fe2edaaddbb50eeccf2f21eb9d3cf594927c06906629a2a8e516d047859c1d77ece94d319adb59ee1b5b93a47afa587dba5807dc9aa4a722226bd3df031b9baa26f29299a110733551c214c0fd811ee6f4cebc2f12e272d93721db85b9d95b40ef4dd44df644fe2a1ece74be59109e6c6fb0a0dd13fcca9d4a287f2435d2ffc8a894ab70c0933394ca1ddaa54626105d08fea1ad853fb3bde92cd7f72281118c57708472dc40a34a2ff07f81d3fa5054aaa6c1581a6893002885ebf909e2f0d344725939bc4960f32c3344db518af"}]}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3246.757600][T28967] usb 3-1: USB disconnect, device number 59 [ 3246.875804][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3247.065705][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3247.074812][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.082852][T18032] usb 6-1: Product: syz [ 3247.087076][T18032] usb 6-1: Manufacturer: syz [ 3247.091671][T18032] usb 6-1: SerialNumber: syz [ 3247.095545][ T1499] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3247.096361][T32516] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3247.175535][T28967] usb 3-1: new high-speed USB device number 60 using dummy_hcd 00:21:22 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x18, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000, 0x410000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/4096) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/201) 00:21:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9626000000000000, 0xf0) 00:21:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0xf0) 00:21:22 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x7, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "5f413994", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_ep_write(r0, 0x0, 0xe5, &(0x7f0000000000)="3a7d6229c1a5869ccdaed78f11b644955f98d5a22523a11aa9c0dcc1b8589bfc5863fdfe0223fe1082cb251c4012af380b8ab86d36ff67bffeeb91773d575063369f89f54704842d5d0c18660674df51a0c57200be10571ebc3802dc31a8ac8db96fe1efcaf711e57200ff66d516162c4e2938f0050f302071a1e172c394f5473fd5f99d1c2a989f377343d352629ad51acebfd0c459aec71a8e8b9b1a3d378c9ee60e5401891863d648a9edee908a769fa3e01e17125dabee95b065035421b593b200a953f0f5e4a5f9d92ef177b5ba5b6bd9a98eba8b62ad2f49f4a727c08e606343b14d") r1 = syz_usb_connect$uac1(0x4, 0xab, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x1f, 0x10, 0x3b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xa, 0x24, 0x5, 0x3, 0x0, "849509dc5f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x0, 0x7, "c4db3d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x2, 0x2, 0x9, "371792"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x53, 0x7, 0x8, {0x7, 0x25, 0x1, 0x42, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x6, "a2b5d486434c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x4, 0x3, 0x0, "bc8895"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3f, 0x0, 0x9, {0x7, 0x25, 0x1, 0x80, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x20, 0x4, 0x65, 0x8a, 0x40, 0x9}, 0x2b, &(0x7f00000005c0)={0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xfe, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x2, 0xf, 0x8, [0x0, 0xc0, 0x3f08, 0xff0000]}]}, 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x42d}}, {0xb2, &(0x7f00000009c0)=@string={0xb2, 0x3, "4d06514c4251ecaf438e70328b9f6c13ea5bb3fd0cecded28bb0878941367c22978e5d72a0b7fcc5164a32137e01eae2eedf885c71db55d417b2e6f5f8e52d38345fec74279b020e597f00c0fda56b5ed384f67a56004de9ce696b50b0240af8c6274d9dff56de45f5d7aab3df2a05b35a84d1a521e5a8f072db237a875922213ff44c42de3bb11bd7ec7f1140d2594c3917511b69b5763abc521ed788c3628201b7ff996279175b9e3a46c6f08b9dc4"}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "403790766620bf2e573feef7268e1e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000c00)={0x14, &(0x7f0000000b80)={0x40, 0x21, 0x14, {0x14, 0x23, "3244a3e02a0714d30395d9be8b7c6e69029e"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5e74}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x0, 0x1c, 0xa5, "19398cf3e1593fbb833947d146428b1be5bfa1d4367c073785672e221f769c95374a5591a8bdc8a02e51fdc5a5ca434cbf77e58bf4db3a1d6b9ed6e1968bfa5eac9314aa8a52337ff01de729cded1839ee69caf58af0a9ab0f94b9d6a3316723e3ab9f5b43ce258aa682c205f74ba6466266c64dcaec176bdc124b4f770783f8b1b138cb527aa8df5484a983bf85f745e7b356e4704d9713186f69546d65edee432821b6f7"}, &(0x7f0000000d00)={0x0, 0xa, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xe1}, &(0x7f0000000d80)={0x20, 0x81, 0x1, 'q'}, &(0x7f0000000dc0)={0x20, 0x82, 0x2, "c7fe"}, &(0x7f0000000e00)={0x20, 0x83, 0x2, "da86"}, &(0x7f0000000e40)={0x20, 0x84, 0x2, 'hw'}, &(0x7f0000000e80)={0x20, 0x85, 0x3, "5f8abd"}}) syz_usb_control_io$uac1(r1, &(0x7f0000001040)={0x14, &(0x7f0000000f40)={0x40, 0xc, 0x91, {0x91, 0xe, "7f56babc59bbbeb6d33d72b1beeb34fcb1200a576638c5c8e6c7c4b89429efd588d5d3d4e8a38a147125a72dbcc08ea25e8a89a55887a63e1940cbf3669642e18b6aaef0c291da196a90383381bd74ade67dfd0ac5fb589da0c2309f4617217e061db04cb69cb97b993761ad893e32aeade6175d17d90ffe8c3c5a4bf385fe4b04e003ad4e5dd18784b8ae57a42a26"}}, &(0x7f0000001000)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "f66c8eef639697d860dc3775e4b118c6489a633c97a22253266952"}}}, &(0x7f00000012c0)={0x44, &(0x7f0000001080)={0x20, 0x30, 0x6e, "530cd2d366c74f5380e9e4b37d01cfefae27c00ac5ecdf1dede0b3f24336128118a7248d71e80970160c043bf680fe93aaf7fcda50540b4beb4512314cc68553a482f69a66e8985a9a5c5339c61a490db1d656b5785a6a84c4eba66ee06fd33af8f12fd7dddb281f2a6ace9e8671"}, &(0x7f0000001100)={0x0, 0xa, 0x1}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xe1}, &(0x7f0000001180)={0x20, 0x81, 0x1, "1a"}, &(0x7f00000011c0)={0x20, 0x82, 0x3, "889ad1"}, &(0x7f0000001200)={0x20, 0x83, 0x1, "df"}, &(0x7f0000001240)={0x20, 0x84, 0x4, "0f72666b"}, &(0x7f0000001280)={0x20, 0x85, 0x3, "18c10f"}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) [ 3247.432644][T18032] usb 6-1: USB disconnect, device number 105 [ 3247.476282][T32516] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3247.486013][T32516] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3247.495724][T32516] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3247.508577][T32516] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3247.517064][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 00:21:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xf0) 00:21:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0xf0) [ 3247.526776][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3247.536592][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3247.549503][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 00:21:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xf0) [ 3247.626256][T28967] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3247.636203][T28967] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3247.645921][T28967] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:21:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0xf0) [ 3247.676284][T32516] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3247.685502][T32516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.693505][T32516] usb 2-1: Product: syz [ 3247.697747][T32516] usb 2-1: Manufacturer: syz [ 3247.702355][T32516] usb 2-1: SerialNumber: syz [ 3247.766219][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3247.775821][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.783808][ T1499] usb 5-1: Product: syz [ 3247.788024][ T1499] usb 5-1: Manufacturer: syz [ 3247.792797][ T1499] usb 5-1: SerialNumber: syz [ 3247.815497][T18032] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3247.865591][T28575] usb 1-1: new high-speed USB device number 29 using dummy_hcd 00:21:23 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xf0) [ 3247.986111][T28967] usb 3-1: string descriptor 0 read error: -22 [ 3247.990790][T32516] usb 2-1: USB disconnect, device number 6 [ 3247.996287][T28967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3248.007385][T28967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3248.109710][ T1499] usb 5-1: USB disconnect, device number 3 [ 3248.115676][T28575] usb 1-1: Using ep0 maxpacket: 8 [ 3248.185555][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3248.245549][T28575] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3248.258422][T28575] usb 1-1: config 1 interface 0 has no altsetting 0 00:21:23 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xfeffffff, 0x0}]}) 00:21:23 executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x20000) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/157) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4200f0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x121001) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000180)=""/44) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x2]) r6 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f00000001c0)=""/16) [ 3248.299133][T28967] usb 3-1: USB disconnect, device number 60 [ 3248.355601][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3248.364697][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3248.373062][T18032] usb 6-1: Product: syz [ 3248.377301][T18032] usb 6-1: Manufacturer: syz [ 3248.381952][T18032] usb 6-1: SerialNumber: syz [ 3248.435614][T28575] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3248.444867][T28575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3248.453534][T28575] usb 1-1: Product: syz [ 3248.457889][T28575] usb 1-1: Manufacturer: syz [ 3248.462537][T28575] usb 1-1: SerialNumber: syz [ 3248.487045][T20914] raw-gadget gadget: fail, usb_ep_enable returned -22 00:21:24 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0xf, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xf0) 00:21:24 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x56, 0x1, 0xf14, {0x7fff, 0x9df}, {0x3, 0x7fff}, @ramp={0x9, 0x100, {0x30, 0x6, 0x9b, 0x20}}}) syz_open_dev$hidraw(&(0x7f0000000040), 0x9, 0x2b8800) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x1df, 0x288000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001100)=""/226) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0xffd, &(0x7f00000000c0)=""/4093) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000080), 0x3, 0x84002) 00:21:24 executing program 3: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x1, 0xffffffff, 0xffffffff}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0xb0900, 0x400]) [ 3248.725604][T18032] usb 6-1: USB disconnect, device number 106 00:21:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10000) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/78) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/202) 00:21:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0xf0) 00:21:24 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/81) 00:21:24 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x10, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3248.776675][T28967] usb 3-1: new high-speed USB device number 61 using dummy_hcd 00:21:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:24 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0xf, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3248.870948][T28575] usb 1-1: USB disconnect, device number 29 [ 3249.015413][ T1499] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3249.185482][T28967] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3249.195153][T28967] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3249.205087][T28967] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3249.245446][T19170] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3249.415469][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3249.425131][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3249.434918][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3249.447821][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3249.535443][T28967] usb 3-1: string descriptor 0 read error: -22 [ 3249.541694][T28967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3249.550888][T28967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.655601][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3249.664688][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.672884][ T1499] usb 5-1: Product: syz [ 3249.677154][ T1499] usb 5-1: Manufacturer: syz [ 3249.681989][ T1499] usb 5-1: SerialNumber: syz 00:21:25 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xff000000, 0x0}]}) 00:21:25 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eefe313e", {0x3, 0x101, 0x0, 0x7d, 0x4, 0x15, 0x1}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x7ffe, 0xf6ffffff) 00:21:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0xd0d8, 0x2f83542291ce6b56) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/65) 00:21:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) [ 3249.817895][T18032] usb 3-1: USB disconnect, device number 61 [ 3249.840616][T19170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3249.849964][T19170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.858280][T19170] usb 6-1: Product: syz [ 3249.862457][T19170] usb 6-1: Manufacturer: syz [ 3249.867330][T19170] usb 6-1: SerialNumber: syz 00:21:25 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="10611dd983f4c262db26b60f53b5909b3db90bb938ff591053f401f123e2d0b6c13bd4ff4ff0688123a126153f", 0x2d) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:25 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0xffffffffffffff1b, &(0x7f0000001740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:21:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xd3, 0x412100) 00:21:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3250.009887][ T1499] usb 5-1: USB disconnect, device number 4 00:21:25 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e60003090400060207010000090501020000f51e7030720831f782ad10009543fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:21:25 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x10, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3250.189772][T19170] usb 6-1: USB disconnect, device number 107 [ 3250.225398][T18032] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3250.515258][ T1499] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3250.585792][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3250.595488][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3250.605144][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3250.865717][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3250.871932][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3250.875938][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3250.881028][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.890623][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3250.908298][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3250.921165][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 00:21:26 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xfffffff6, 0x0}]}) 00:21:26 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x200b0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x40c280) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/36) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/29) 00:21:26 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:26 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x0, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:26 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x2a, 0x1, 0x3f, {0x1}, {0x7, 0x8000}, @const={0x9, {0x4, 0x0, 0x92, 0x2}}}) [ 3251.135395][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3251.144490][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3251.152559][ T1499] usb 5-1: Product: syz [ 3251.156876][ T1499] usb 5-1: Manufacturer: syz [ 3251.161477][ T1499] usb 5-1: SerialNumber: syz [ 3251.165249][T18032] usb 3-1: USB disconnect, device number 62 00:21:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x1) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/30) 00:21:26 executing program 0: r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8001, 0x42) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000240)) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) read$hiddev(r0, &(0x7f0000000100)=""/252, 0xfc) syz_open_dev$evdev(0xfffffffffffffffc, 0xff, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x30642) r3 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000280)=0x1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/163) 00:21:26 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xfeffffff, 0x0}]}) 00:21:26 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xf6bffbfd) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001080)={0x51, 0xcbf, 0xfffb, {0x4, 0x4}, {0x7}, @cond=[{0x3f, 0x0, 0x1, 0x2, 0x1, 0xe000}, {0x44, 0x7, 0x20, 0x10e1, 0x1}]}) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001040), 0x6, 0x400001) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/4096) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x0, 0x3]) 00:21:26 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000100000000000004ee131686b13f4acdf5e02ba09050043000000000000006d56f7ca1b"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:26 executing program 3: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/87) 00:21:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffc1, 0xf6ffdeff) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/225) [ 3251.469802][ T1499] usb 5-1: USB disconnect, device number 5 [ 3251.525199][T32516] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3251.625197][T18032] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3251.645678][ T2641] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3251.955282][T32516] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3251.965829][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3252.025290][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3252.035864][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3252.046052][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3252.095287][ T2641] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3252.105134][ T2641] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3252.114782][ T2641] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3252.205299][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3252.214677][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.222740][T32516] usb 6-1: Product: syz [ 3252.226960][T32516] usb 6-1: Manufacturer: syz [ 3252.231573][T32516] usb 6-1: SerialNumber: syz [ 3252.355227][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3252.361565][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3252.370698][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.395313][ T2641] usb 2-1: string descriptor 0 read error: -22 [ 3252.401588][ T2641] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3252.410758][ T2641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.518871][T32516] usb 6-1: USB disconnect, device number 108 00:21:28 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0xfffffffe, 0x0}]}) 00:21:28 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xc1, 0xff5, &(0x7f0000000740)=""/4085) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffc, 0xf6fff9ff) 00:21:28 executing program 3: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe, &(0x7f0000000000)=@generic={0x2, 0x0, 0x6, "5b2c1f8a", "111e82bfba32"}) syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffb, 0x101002) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/148) 00:21:28 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x2, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3252.630719][ T2641] usb 3-1: USB disconnect, device number 63 00:21:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6f9f9ff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x98, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/48) 00:21:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/81) [ 3252.763527][T19170] usb 2-1: USB disconnect, device number 7 00:21:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x7fff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/220) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/11) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/224) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0xf6800) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)=[0xfffffbff, 0x81]) 00:21:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/81) 00:21:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/118) 00:21:28 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/81) 00:21:28 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4a, 0x48100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/48) [ 3252.985065][ T1499] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3253.075077][T32516] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3253.115172][ T2641] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3253.385081][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3253.394876][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3253.404729][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3253.417664][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3253.455775][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3253.505168][ T2641] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3253.515082][ T2641] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3253.524920][ T2641] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3253.595524][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3253.604707][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.612760][ T1499] usb 5-1: Product: syz [ 3253.617033][ T1499] usb 5-1: Manufacturer: syz [ 3253.621632][ T1499] usb 5-1: SerialNumber: syz [ 3253.655542][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3253.664847][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.673128][T32516] usb 6-1: Product: syz [ 3253.677365][T32516] usb 6-1: Manufacturer: syz [ 3253.682048][T32516] usb 6-1: SerialNumber: syz [ 3253.825098][ T2641] usb 3-1: string descriptor 0 read error: -22 [ 3253.831335][ T2641] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3253.840422][ T2641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.909143][ T1499] usb 5-1: USB disconnect, device number 6 [ 3253.978924][T32516] usb 6-1: USB disconnect, device number 109 00:21:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x440001) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) 00:21:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xd81) 00:21:29 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000240)=0x4) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/218) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0xed2) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/202) 00:21:29 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e60003c8f6538811426e6d25101ce1423909040006"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:29 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x3, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3254.096214][T19170] usb 3-1: USB disconnect, device number 64 00:21:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x84201) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0xde, 0x8, 0x8, 0x6, "24fa694df8a204ad2c6ac9f6a2d4d760747491cf44779005cfe0e6042877b0b8"}) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x13, 0x34, &(0x7f0000000000)="a2866f6d734ae71f0fb91bae00675b4fcbd24c482fc827eb8c6cfcfd203c5408fa1a8b53318c10cdc873546557acdd838e3c92f0"}) 00:21:29 executing program 1: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) 00:21:29 executing program 3: r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000000)={{0x3, 0x2, 0x9, 0x4, 0x51f, 0x9}, 0x2a4, [0x10001, 0x2, 0x9316, 0x8, 0xfffffbff, 0x7, 0xab, 0x1e, 0x4, 0x30, 0x67e1, 0xfd1, 0x7f, 0x8, 0x7fff, 0x3, 0x80, 0x0, 0x3, 0x1f, 0x40, 0x7, 0x0, 0xc3, 0xed, 0xb64, 0x800, 0xc12, 0x80, 0x0, 0x9, 0x4, 0x34c, 0x1ff, 0x800, 0x2, 0x4, 0x942, 0x0, 0x1000, 0x1, 0x1, 0x7fffffff, 0x0, 0xfffffffc, 0x7, 0xa7f, 0x7, 0x6, 0x0, 0xc6, 0xfff, 0x558, 0x4cce719b, 0x1, 0x5f, 0x2, 0x18000, 0x232, 0x1ff, 0x21d, 0xfffffff9, 0xfffff53a, 0x4, 0x0, 0x4, 0xffff8001, 0x1, 0x1, 0x3, 0x8, 0xd5, 0x2, 0x8001, 0x2, 0x7f, 0x95f, 0x401, 0x1, 0x7, 0x2, 0xa2c, 0x5, 0x8, 0x1, 0x1, 0x7fffffff, 0x2, 0x80, 0x401, 0x7, 0x1, 0x6, 0x401, 0x81, 0x7, 0x5, 0x3, 0x80, 0x1, 0x7, 0xa, 0x8, 0x3, 0x40, 0x5, 0xffffffff, 0x2, 0x7fffffff, 0xfffeffff, 0xd28f, 0x1, 0x31, 0x33, 0x1, 0x3ff, 0x1, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2, 0x7, 0x19f4, 0x2, 0x10001, 0x8, 0x5, 0xff, 0x8265, 0xf1b, 0x8, 0x7fffffff, 0x401, 0x3, 0x101, 0x2, 0x200, 0xe6, 0x1, 0xd5000, 0x1, 0x0, 0x0, 0x2, 0x5, 0x2, 0x401, 0x6, 0xa6d, 0x4, 0x0, 0x4, 0x3, 0x81, 0x1ff, 0x3f, 0xfffffffd, 0x6, 0xfff, 0x68, 0x3, 0xb1e, 0x81, 0x4, 0x1, 0x1, 0x7, 0xfffffffe, 0x16dc, 0x2, 0x0, 0x5, 0x5, 0x9, 0x6, 0x40, 0x9, 0x0, 0x2e8, 0x200, 0x8, 0x0, 0x80, 0x9, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x100, 0x2, 0x8, 0x2, 0x3, 0xd320, 0x8, 0x9, 0x9, 0x8001, 0x80000001, 0x4d6, 0x6000000, 0xffffcc7c, 0x4b5b, 0xe9, 0x9, 0x30, 0x4, 0x9, 0x878, 0x2, 0xe9, 0x1, 0x0, 0x0, 0x101, 0xe5, 0x4, 0x1, 0xfffff5ce, 0x3, 0x7e000000, 0x8, 0x6, 0x8, 0xdeb, 0x3, 0x7, 0x6, 0x8, 0x0, 0x5, 0x4, 0x4, 0x0, 0x2bf, 0x469, 0x7, 0x8, 0x767b4fac, 0x3, 0x4, 0x7ef4, 0x1, 0x1d7987b1, 0x7fffffff, 0xae9, 0x6, 0x6, 0x7f, 0x4, 0xb09, 0x7, 0xffff7fff, 0x9, 0x5, 0x7, 0x8, 0x8, 0x7f, 0x5e5, 0x8001, 0xac, 0x8, 0x9, 0xc15, 0x9, 0xbc, 0x10000, 0x0, 0x10001, 0x2, 0x2b7602bc, 0x18, 0x7fff, 0x4, 0x100, 0x8, 0x7fff, 0x1, 0xf989, 0x2, 0x7, 0x1, 0xffff, 0x1, 0x5, 0xb7, 0x18000, 0x234caed2, 0x57, 0xfffff646, 0x10000, 0xfffffffa, 0x8, 0x5, 0x4, 0x0, 0x1ff, 0x9, 0x100, 0x3, 0x55, 0x2, 0x101, 0x6, 0xfff, 0x1, 0x1, 0x401, 0xffff, 0x4, 0x3, 0x80000001, 0x7fffffff, 0x12d55e95, 0x0, 0x4, 0x8000, 0xfff, 0x8, 0x1, 0x200, 0x5, 0x4da, 0x2, 0x8, 0x9, 0x6, 0xcd8, 0x0, 0x9, 0x9, 0x4, 0x6, 0x3, 0x9, 0x10000, 0x3, 0xfffffffe, 0x7d, 0x3, 0x7, 0x1, 0x1, 0x56, 0x81, 0x9, 0x6, 0x0, 0xfffeffff, 0x401, 0xdae9, 0xef, 0x7fff, 0xbdac, 0xe58b, 0x4, 0x5, 0x0, 0x0, 0x1f, 0x3, 0xb15c, 0x10000, 0x7fffffff, 0x4, 0x40, 0x3, 0x1, 0x9, 0x180, 0x1f, 0xa03f, 0x7, 0x4, 0x6, 0x8, 0x5, 0x7, 0x7, 0x8, 0x7, 0x5, 0x140d, 0x7, 0x5, 0x24, 0x4, 0x100, 0x800, 0x8035, 0x69, 0x7, 0xffff, 0x8, 0x80000001, 0x1f, 0x9, 0x80, 0x6, 0x3, 0x6, 0x8, 0x1be, 0x7, 0x2, 0x8, 0x2, 0x10001, 0xa2e, 0x6d, 0x43c61d18, 0x3, 0xb9b, 0x7, 0x6, 0xa2, 0x7ff, 0x20, 0x2, 0x1, 0x4, 0x6, 0x1, 0x3, 0x4, 0x80000001, 0x97, 0x100, 0x4, 0xfffffffd, 0x7, 0x1ff, 0xb2c4, 0x80000001, 0xfffffffe, 0x7ff, 0x5, 0x8, 0x2, 0x2, 0x4, 0x9, 0x5, 0x3, 0xfffffffe, 0x4, 0x2, 0x7, 0x9, 0x0, 0x1, 0x10001, 0x356, 0x800, 0x8, 0x4, 0x400, 0xffff7fff, 0x95a, 0x1000, 0x2, 0x4, 0x9, 0x5c, 0x6, 0x7fffffff, 0x4, 0x6, 0x800, 0x4, 0x2, 0x200, 0x5, 0x80000001, 0x8, 0x401, 0x5, 0x7fff, 0x5392c8c1, 0x5, 0x7fff, 0x0, 0x8, 0x9, 0x7fffffff, 0x7, 0xec, 0x3d5a, 0x40, 0x4, 0x5, 0x28a61a71, 0x5, 0x1, 0x7fff, 0xa7, 0xffffff01, 0x91d, 0x0, 0x7, 0x0, 0x8, 0x8, 0x46, 0x6, 0x7, 0xffff, 0x4c9, 0x3, 0x1, 0x31a, 0x1, 0x6, 0x5, 0x7, 0x8000, 0x7, 0x7fff, 0x6, 0x0, 0xfffffffc, 0x20, 0x6033, 0x101, 0x10001, 0x80000000, 0x3cd90518, 0x40, 0xfffffff9, 0x3, 0x5, 0x7f, 0x6, 0x9, 0x36029182, 0x4, 0xde6, 0x5, 0x8, 0xffff0001, 0x10000, 0x5f43, 0x80000001, 0x3f, 0x3, 0x70, 0x0, 0x6, 0x3f, 0x6, 0x5, 0xa1, 0x1, 0x20, 0x3, 0x80000000, 0x3f, 0x0, 0x5, 0x7, 0x3, 0x8, 0x1000, 0x5d, 0x3, 0x3, 0x2, 0x3, 0x5, 0x6, 0x1ff, 0x0, 0x6, 0x4, 0x1, 0x19, 0x0, 0x100, 0x5, 0x200, 0x6, 0x10001, 0x7fff, 0x400, 0x8, 0x3, 0x2, 0x6, 0x1f, 0xe761, 0x10000, 0x9, 0x0, 0x8000, 0x0, 0x3, 0x8, 0x8, 0x2e39, 0x4, 0x5, 0x0, 0x1, 0x5, 0x8000, 0x0, 0x10000, 0x7f, 0xfff, 0x5, 0x6, 0x0, 0x8, 0x1, 0x3, 0x40, 0xffffffff, 0x2, 0x4, 0x9, 0x80000000, 0xffff, 0x1, 0x0, 0x0, 0x100, 0x3777, 0x7, 0x8b, 0x8, 0x5, 0xffffffff, 0x87, 0x4, 0x8, 0x913f, 0x10000, 0x0, 0xfffffffc, 0x5, 0x0, 0x3ff, 0x4, 0xbf8e, 0x6, 0x0, 0x100000, 0xfffffffa, 0x101, 0x3f, 0x8, 0xf2d1, 0x1, 0x9, 0x3, 0x8000, 0x707, 0x9, 0x1, 0x80000000, 0x3, 0xfff, 0x4d, 0x5b36, 0x5, 0x10000, 0x7f, 0x7, 0x8, 0x100, 0x7ff, 0x44, 0x20, 0x8a000000, 0x8, 0x4, 0x800, 0xd959d0b, 0x6, 0x6e, 0x7, 0x22f57c9e, 0x4, 0xcf, 0x401, 0x8, 0xfffff027, 0x8cc4, 0x1ff, 0x8, 0x100, 0x333d, 0x4, 0x5, 0x5, 0x1000, 0x7f, 0x100, 0xffff, 0x97a1, 0x6, 0xfc, 0x8001, 0xb74, 0x81, 0x9, 0x1, 0x3, 0x80000000, 0x20, 0x7, 0x3dbc0, 0x10001, 0x4, 0x1, 0x2, 0x7fff, 0x8, 0x200, 0x5, 0x20, 0x3, 0x101, 0x10000, 0x81, 0x7, 0x7, 0xa907, 0xc42, 0x7f, 0x7f, 0x3, 0x8, 0x81e2, 0x6672, 0x6, 0x3f, 0x5, 0x2, 0x8001, 0x2, 0x3, 0xe1, 0x7ff, 0x401, 0x7, 0x634, 0x7, 0x401, 0x9, 0x80000001, 0x80000000, 0x6, 0x5418, 0x2, 0x9, 0xffff04db, 0x401, 0x0, 0x7, 0x4, 0x3, 0x81, 0x1, 0x8, 0xff, 0x2, 0x2, 0x7fffffff, 0x8, 0x1, 0x0, 0x40, 0xffffffff, 0x5, 0x3, 0x0, 0x3, 0x7f, 0xab3f, 0x1ff, 0x7, 0x7fff, 0x3, 0x7, 0x9, 0x100, 0x2, 0x7f, 0x20, 0x3ff, 0x4, 0x1, 0x5, 0xfffffffa, 0x4, 0x7, 0x8, 0x3, 0x600, 0x1, 0x3, 0x101, 0x3, 0xb5000000, 0xffff, 0x0, 0x7, 0x1, 0x0, 0x20, 0x1000, 0x7, 0x80000001, 0x8, 0x401, 0x4, 0x7, 0x1ff, 0x7fff, 0xffffff7c, 0x0, 0x9, 0x3, 0x3, 0x0, 0x1, 0x5, 0x4, 0x5, 0x6, 0x5, 0x8, 0x6, 0x10000, 0x0, 0x3, 0x800, 0x80000001, 0x9, 0x5, 0x2, 0x5f08, 0xfffffffd, 0x40000, 0x6, 0x5, 0x400, 0x3, 0x9, 0x800000, 0x7, 0x1, 0x3, 0x4, 0x1ff, 0x80, 0x101, 0xfffffff7, 0x5, 0x0, 0x534, 0x6, 0x80000001, 0xb0b9, 0x9, 0x4, 0x5, 0x8, 0x8, 0x7f, 0xfff, 0xeca0, 0x3f, 0x0, 0x213e, 0xf0a, 0x7, 0x9, 0x15, 0x7, 0x4, 0x9a10, 0x0, 0x5, 0xfff, 0x1, 0x7, 0x5, 0x66, 0x7, 0x33, 0xffff0001, 0x2, 0x9fa7, 0x1c, 0x200, 0xc964, 0x7ff, 0x3, 0x0, 0x2, 0x494, 0x2, 0x4, 0x10000, 0x47b8, 0x0, 0xb75, 0x15, 0x7ff, 0x8, 0x4, 0x155c, 0x3ff, 0x9, 0x0, 0x9, 0x100, 0x6, 0x20, 0x6, 0x8, 0xd2e0, 0x9, 0x7, 0x0, 0x4, 0xfa, 0x4, 0x4, 0x9, 0x10001, 0x3, 0x7fffffff, 0x0, 0x1, 0x3ff, 0x9, 0x8, 0x8, 0x3, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x4, 0x3, 0x1, 0x8, 0x6, 0x9, 0x608, 0x0, 0x10000, 0x4, 0x3, 0xa93, 0x80000001, 0xffff, 0x3ff, 0x10000, 0x1000, 0x2, 0x3, 0xef, 0x2257, 0x1f, 0x3, 0x9, 0x6, 0x7f, 0xfff, 0x81, 0x7f, 0x5, 0x1ff, 0x7f, 0x7, 0x0, 0x10, 0x9, 0x1, 0x5da2, 0x800, 0xf1, 0x7, 0x8, 0x8660, 0x9, 0x1, 0x2, 0x3, 0x9, 0x5, 0x800, 0x8001, 0xfffffff9, 0x800, 0x3, 0x8, 0x93, 0xffff, 0x28, 0x10000, 0x2, 0x4cb798d2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0x9, 0xfffff801, 0x9, 0x3ff, 0x5, 0x7, 0x3]}) r1 = syz_open_dev$hiddev(&(0x7f0000001040), 0x0, 0x800) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000001080)={0x1, 0x3, 0x5, 0x7, 0x3, 0x8a2, 0x65, 0x81, 0x6, 0xfffffffb, 0x1, 0x3ff, 0x1, 0x80000000}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x4f, {0x4f, 0x2, "d10fa976968a934fc63ac2434adfe415778470019187f2758afd3da8213122da5986fc2f7a96843bc0eb9f6a6b3f271a941ad76932fbf0e4cd2556b0d8a2c23547af747cadf4711b40fc71d98a"}}, &(0x7f0000000100)={0x0, 0x3, 0xac, @string={0xac, 0x3, "041acb4f6482044c635b96d7f01b1904fed4ecb4182f8f189ba9b271ea81ddd0478c1c512cbed57ef8573078427f3149eed064e72a69b01c1a527392d7e1aded810e33fca1981d71283d364425f3154b327396509e1d46807a47f6bc7c5ba25da2ffb3c7560462ce8d9091ea20e0547225231df360c78e748e1fa1f2df0d891808dae12928efbaf0cafd6c9c5503318ed7c761937dbca5dc4bb657f20910acba66b9a96830b1bf714e07"}}, &(0x7f0000000240)={0x0, 0xf, 0x1a2, {0x5, 0xf, 0x1a2, 0x5, [@generic={0xf7, 0x10, 0x3, "2f6b01172726e703a343420be9b08ed2d5260a56326491d599c7909c038f5a0209b2f90391b7382105937a15190e59f32c09d9f3e6494f1abf6b4323e19f3063abd82e1ec34f454ea897389be5a94d4959992640b104d6538a63b94af9ddf0cf5f671ab00c18e5e8c1e688de1a5706b38f4e27bf9cbb789a50ef71fbc87ad8efb7a2d5122b3619c5a7e05555d87e36df8de9698077689ce14bc75f7dbc5bf890f4df77559da081839f6040d9ee5741546e3e7c059ba09717ed976aa4e3446b28b04adadac8d25303cbbd35354ef5b6c2d59b898cfa0c26bc083f79db250845c0fb57c9422238cba220f7676c8d399ccba7209d02"}, @ptm_cap={0x3}, @generic={0x85, 0x10, 0x4, "8d8f45cfdd3204dfcc7720c98e7947dc2a8919f58b55fe129a799d35545db25370e43352ebf054cfe32bdb96920ffe9f9ccc6710e6013e813935b236432b4d7da4623d43059ebba21cf9ce242dc92d2b500b94f315e717556b2dbdb97aa7e2117c33e09920d3e883fbe3bb6901e82a4c8b64e244ea6557582d4a07c21a6d840e95ee"}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x9, 0xf00, 0x7fff, [0x30, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x48, 0x8001}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x7, 0x26, "b2dce02c", "df6e9ffd"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x5, 0x5, 0x8, 0x5, 0x3}}}, &(0x7f00000019c0)={0x84, &(0x7f0000000480)={0x0, 0x5, 0x62, "4a32acc09470b798001e019f6af91ee9e18300e31db48d58aabf6c658d349a0d230ddcba513c7f81dfc720e7c501304a23b5c34df5d92c3fc2e3fd9207260d92ee0277ecc3d8603bb71d8dd68706613bfff42c0e3e3c6fd000fb869092a04f0907a3"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x140, 0x8, [0xf00f]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x9, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "2797"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "c630"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0xb4}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x6f, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:29 executing program 1: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) 00:21:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/129) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5, 0x3c, &(0x7f00000000c0)="1e86d928d1c1e329a2b886c75dc971a1a83df6245e21c83d94399ed1fa2092639110fdb2f596ed705d9222d881d9b2203eb0be29cc5bdf898e71c120"}) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x7) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x2b, 0x7, 0x2, {0x2, 0x1}, {0x2, 0x3}, @const={0xfff, {0x9, 0x0, 0x2}}}) 00:21:29 executing program 1: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) 00:21:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x1, 0x6, 0x2, 0xfff, 0x4, 0xb}) 00:21:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xf6efebff) 00:21:29 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) [ 3254.444974][ T1499] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3254.554936][T32516] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3254.674947][T19170] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3254.805002][ T1499] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 3254.815313][ T1499] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3254.914943][T19170] usb 3-1: Using ep0 maxpacket: 16 [ 3254.925810][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3254.975840][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3254.984921][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3254.992934][ T1499] usb 5-1: Product: syz [ 3254.997200][ T1499] usb 5-1: Manufacturer: syz [ 3255.001856][ T1499] usb 5-1: SerialNumber: syz [ 3255.055018][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3255.064704][T19170] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3255.074482][T19170] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3255.105067][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3255.114214][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.122247][T32516] usb 6-1: Product: syz [ 3255.126532][T32516] usb 6-1: Manufacturer: syz [ 3255.131124][T32516] usb 6-1: SerialNumber: syz 00:21:30 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="0f71a6a560f004630a7be00d1eb5d0d91e3b00512f7e368ec49da899e5f94c343ba7ab30ff7acb50a69a8d457980803e694c97dcda4a8eda") write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12a8a440000102030109021b800000000003090400060207010000090501020000f5fe00000000000000000000191f9a2de12e72fac384eb5f7ca5a99c0cf8d49d49b06ca81b6dd35335fb0501a9a5496421cfd6ba68de33d2f7c2c0189a49"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3255.316614][ T1499] usb 5-1: USB disconnect, device number 7 00:21:30 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x4, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:30 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x181800) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/42) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/40) 00:21:30 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) 00:21:30 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x9, 0x4, 0x200, 0x1, 0x5b3a11a5, 0x400}) [ 3255.385061][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3255.409368][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3255.419870][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.421660][T32516] usb 6-1: USB disconnect, device number 110 [ 3255.694844][ T1499] usb 5-1: new high-speed USB device number 8 using dummy_hcd 00:21:31 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x22, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0xf3985cc, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000bc3f402505a8a440000102030109021b000200030701020000f5fe480000000000bbf3856a0ffaf044709598239a916dd3f59664ec50fef31cdf9f784734ae2062ccd76ac1b867691b0bfa3ba5f9fa20966cdd70210657b83bf829ca30646900102056c655f33fa9b7d9a4255eaed90177d3a1f4f7f747ea79f1670f92f83d87860e9e55967d6e2f44438592c78bad2bf4a5cb213284e53d094846e7d426343cf3295137881af8f6a8c50cfc1a159ce8a7ff68ec140a9393c4ebbe27d420e439a6cdc79c487b522a2ba26b9cf52a8403663e9ede"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:31 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) 00:21:31 executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_open_dev$char_usb(0xc, 0xb4, 0x401) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/90, 0x5a) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/192) syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xf6bf9bff) 00:21:31 executing program 3: ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/4096) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001000)={0x7, 0x0, 0x6, 0x1ff, "0a06a66d4d00809705697f72e076cb5f1a3cde3068ac4811e900ab2de6868b30"}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000001040)=""/66) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) [ 3255.799613][T19170] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 00:21:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc7, 0x400102) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x55, 0x0, 0xffff, {0x2, 0x4b}, {0x6, 0x7}, @period={0x58, 0xffff, 0x0, 0x9, 0xf6b7, {0x1, 0x8, 0x0, 0x100}, 0xa, &(0x7f0000000040)=[0x8000, 0x1000, 0x200, 0x36, 0x3, 0x1, 0x641, 0x1, 0x0, 0x4]}}) 00:21:31 executing program 3: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x5, 0xff, &(0x7f0000000000)="731d9cadf21e98174f79c8350c11570200000000000000caa8409f62645462877fafe99b96ab97827c72587ae82263c473d33ece6d5ac91b3f7a524fffd651532ebffb01339082ef850c42f791dd1615d5fde32cfa7e296132a7fd150aca7416f521c31ab8657697314fcf091b1369818a4a000000d8479d0d982dca589cf215ca781b838a4fc27c05a9181f365e60d9564b6ba6a61b2b70a5daeed80c2849ba5f4316e2e6378e38deb5203fa4c0828438e47bb4a35992a9de2e8966610a408ecc4d4475e18456b58ce4af59a0cbd38f4debc5cac8a80e0fb2a1c28c83fc40213e422329c72209e6a960cc2a748cc99b047912ad6a00e64e64c40bda237c99"}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/26) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/242) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) [ 3255.846041][T19170] usb 3-1: USB disconnect, device number 65 [ 3255.874842][T32516] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3255.888678][T19170] usblp0: removed [ 3255.964953][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3256.274809][T19170] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3256.324846][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3256.354794][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3256.535461][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3256.544535][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3256.552712][T32516] usb 6-1: Product: syz [ 3256.556940][T32516] usb 6-1: Manufacturer: syz [ 3256.561562][T32516] usb 6-1: SerialNumber: syz [ 3256.624853][ T1499] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3256.635413][T19170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3256.645592][T19170] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 3256.858086][T32516] usb 6-1: USB disconnect, device number 111 [ 3256.885273][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3256.891596][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3256.900865][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3256.908952][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3256.916664][T19170] usb 3-1: config 0 descriptor?? [ 3257.166572][T32516] usb 3-1: USB disconnect, device number 66 [ 3257.304717][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3257.424848][ T1499] usb usb5-port1: attempt power cycle [ 3257.854665][ T1499] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3258.025128][ T1499] usb 5-1: device descriptor read/8, error -61 00:21:33 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a44000010203011a021b000101e60003090400060207010000090501890000f5fe80"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:33 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffff7f) 00:21:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) 00:21:33 executing program 3: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x101}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:33 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x5, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:33 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x2, 0x1, 0x1f, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ba4e"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1f, 0x2, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x2e}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x0, 0x20, 0x80, 0x42, 0x81}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xffdf, 0x4d, 0x96, 0x4, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3f, 0x3f, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xb2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0xe8, 0x1f}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x9, 0x42, 0x62, 0x20}, 0x55, &(0x7f0000000140)={0x5, 0xf, 0x55, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x6, 0xfff0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x20, 0xfff}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x800, 0xf, 0xa7, [0x3fc0, 0xff0000, 0xc0, 0xff0030, 0xf]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x8000, 0x0, 0x7ff, [0x3f3f, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x20, 0x20, 0xb84d, 0x5}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}, {0xc, &(0x7f0000000300)=@string={0xc, 0x3, "a191de549396954f144c"}}, {0x6a, &(0x7f0000000340)=@string={0x6a, 0x3, "179cc11c900e7550a882fe7b23ed7e536482e9e3b2e3b1fc74f5a1147821137befe19dc16e46b2826c4b1e74a6cf5f74cb3d2c7b46b064165fa0fcd0b14698e89659d25b47fe989a3fca0b55a94308a8d35cfe51023472868af31ed5f1068cbd7ad729b79872176e"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000550cd2000200"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3258.300834][ T1499] usb 5-1: device descriptor read/8, error -71 00:21:33 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001100)=[0x3, 0x800]) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000010c0)=""/16) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x3, 0x4]) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x1) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000001080)={0x40, 0x88000000, 0x3, 0x7, 0x1, 0x1}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x9) 00:21:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) 00:21:33 executing program 0: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000)) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:33 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 00:21:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x5452, &(0x7f0000000180)=""/22) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x580) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/176) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)) 00:21:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/109) [ 3258.624718][T19170] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3258.645199][T28967] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3258.794627][ T1499] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3258.865066][T19170] usb 3-1: Using ep0 maxpacket: 32 [ 3259.015607][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3259.028598][ T1499] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 3259.036233][ T1499] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3259.084691][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 3259.095825][T19170] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 3259.105695][T19170] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3259.214727][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3259.223831][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.231891][ T1499] usb 5-1: Product: syz [ 3259.236261][ T1499] usb 5-1: Manufacturer: syz [ 3259.240938][ T1499] usb 5-1: SerialNumber: syz [ 3259.245683][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3259.254799][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.262790][T28967] usb 6-1: Product: syz [ 3259.267207][T28967] usb 6-1: Manufacturer: syz [ 3259.271809][T28967] usb 6-1: SerialNumber: syz [ 3259.315097][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3259.324237][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.332417][T19170] usb 3-1: Product: 䐊 [ 3259.336640][T19170] usb 3-1: Manufacturer: К [ 3259.341149][T19170] usb 3-1: SerialNumber: 醡哞隓侕䰔 [ 3259.348924][T19170] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 3259.357837][T19170] usb 3-1: no configuration chosen from 1 choice 00:21:34 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x408000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) 00:21:34 executing program 0: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0xf82, 0xfffffffd, 0x80000000, 0x8, 0x8, 0x80}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6efa1ff) 00:21:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x40) 00:21:34 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/109) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/81) 00:21:34 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0xf, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3259.587494][ T1499] usb 5-1: USB disconnect, device number 11 [ 3259.608652][T28967] usb 6-1: USB disconnect, device number 112 00:21:36 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e680030904000002fe4853d77135efa5f7280c9870b74856af0edb009640cab85ccdbbb64b957820936e3000"/78], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:36 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/184, 0xb8) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:36 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4400b0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/57) 00:21:36 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0xf0) 00:21:36 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x10, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:36 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/221) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x393, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x65, 0xd0, 0x43, 0xff, 0x12d1, 0x141a, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x381, 0x2, 0x2, 0x0, 0xa0, 0x80, [{{0x9, 0x4, 0xe1, 0xb6, 0x3, 0x58, 0x4, 0xb, 0x4, [], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0x80, 0xe1, 0x9}}, {{0x9, 0x5, 0x8, 0x7, 0x20, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xff}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x9, 0x8, 0x3}}]}}, {{0x9, 0x4, 0xb0, 0x0, 0x3, 0x98, 0x8e, 0xf1, 0x81, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x47, 0x800}, @generic={0x35, 0x30, "5979c792153e38386cd2d2f40190723671bc7547e3fb6e3c4193f9c1506270b40a32d0fc7c2f08b608cd0c010885982065b084"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x30, 0x7, 0x1, [@generic={0x3c, 0x11, "8d706b6891ae3f583dc3c7120fafdfb7fed27a26f75c616645fdc18658e09e386e72bec33dd7069ccb6598d2f3d866437ae807b9633d2db5878b"}, @generic={0xc0, 0xd, "c500f440af4f151f3aaab521a1ff0dde87b57efc90a64132ec82e23d07a4a46fd8948881e11ffd5c8f5b44d67129bcb1d96502563a4cbf5ebafc329493bc47cd26119b74b8a6271a7c28bae7fdfeae97851afda93fbd0b32d6f9a170bf956fd223d1d786c57ef3343dca7619f73a8f4b6dbec0269e82090535f8d95019ffc08de70801e8c38e8c1921095f525952dc75917dbb7788fd22acdd076ba372d6a0dfde4b1c6ca2bd6eaabb2b27058a60bb0435bfb1f3597b5dc53236b8b8b50a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x7, 0x3, 0x0, [@generic={0xec, 0x22, "4cc7af944fc12ae2d1247ca21527f614589403d3d24250bd547e041aaf29243d028985d947592c998d5999e1169e621158a0d60651651e6e592f072755cd5b731781b05b83bd1956dff3557158e71c6acf3d1310b048f9503870692be16ef9a265fa93e5cf68bd768e0422d6d393ed7b0679238335db9955c2e8b017031a6a305a963528666b5164c34fecda095ec1b13066a8576524144e104bc80d05c0a76e87066e99e4fb96d608926964730165d4706474ac87bf72d91ac40a62e451799fcbff475f6f79f4140eec1c2ea07b0128e39856f7d0180e88523481b4ba6f19638498de6d5fbab3f52458"}, @generic={0xfe, 0x30, "b7b3c0ec00a840b43cc30f7143bd1811625382a40b0acf6d6b7ebb7d9c5ef64dcf352d6f26da67c76ab5eac05bb38054296702bead0978c48a9429482150cd7b27ed607da7b29d32255ebf842bd27dc0318546a9a2e2356b3fb6060dcc2eee3d780cbcea031618654c351090568f28927beb174c145fe80b64419225e8e2aa1e5ed01285ef4967c8815fce1411e740076e643285f1b9906d9dd2b9022849b8101532b90dac8350453129e1ad023089c4ef2938842170dd6c909f7f2f7c5947ec09c5d431baf59104c5fef82f4833fa8200e8652ee78c55427ff260e2ff1125e6fcf09f2c8426ea088d8ded35ead44cb46fdcbc4e0b42c61caa9aabf4"}]}}]}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x4, 0xff, 0x81, 0x40, 0x1}, 0x34, &(0x7f0000000580)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7, 0xf, 0x1, [0xffc0, 0x7, 0x30]}, @ssp_cap={0xc, 0x10, 0xa, 0xb2, 0x0, 0x7ff, 0xff00, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xf2, 0x8, 0x3339, 0x3}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x446}}, {0x31, &(0x7f0000000600)=@string={0x31, 0x3, "18d16e9dd5a07232d459e14797710d78d1e254dad1d82d91a848f9b3da9991e5aa4eac1e0635c4ff83a974065a820c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x4c1b}}]}) syz_usb_control_io(r2, &(0x7f0000001940)={0x2c, &(0x7f0000001800)={0x0, 0x30, 0x6, {0x6, 0x2f560ecb9b88b1ea, "99f4c521"}}, &(0x7f0000001840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000001880)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "f53c53d094d5a403057889f2ba001394"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x2, 0x529}]}}, &(0x7f00000018c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x8, 0x5, "55c69227", "02da82e5"}}, &(0x7f0000001900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0xf8, 0x12, 0x81, 0x20, 0xfff}}}, &(0x7f0000001e00)={0x84, &(0x7f00000019c0)={0x40, 0x6, 0x6a, "6a6c3329b6284e9b006c43657c43752783f3ea7cf0c3dbc71a688d4064e988ecec8691bd6545882a97f55b7c00b2abe45e1dda0f117a13a9aea2cceb551b8239bab6b9131712d813853514cb6abe8dc8700874e18da700c445eddf6fdf2a1d445822417a881e2ea9dfd8"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001ac0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x160, 0x4}}, &(0x7f0000001b40)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001b80)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000001bc0)={0x40, 0xb, 0x2, "fd1d"}, &(0x7f0000001c00)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000001c40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001c80)={0x40, 0x17, 0x6, @random="d54644185df6"}, &(0x7f0000001cc0)={0x40, 0x19, 0x2, "d58c"}, &(0x7f0000001d00)={0x40, 0x1a, 0x2, 0xfa0c}, &(0x7f0000001d40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001d80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001dc0)={0x40, 0x21, 0x1, 0xac}}) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000000)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3261.319943][T28967] usb 3-1: USB disconnect, device number 67 00:21:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4003, 0x10000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) 00:21:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x8a81) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/44) syz_open_dev$evdev(0xfffffffffffffffc, 0x47e85a76, 0x0) 00:21:36 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xf0) 00:21:36 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x6f, {0x6f, 0x31, "9af7635c9f3e938affa4980575f5dd53eef70980462671d555845016b3ce9832351ef79d1c6ac037e1b8ce8ecb8dfe93edfd86ed1437e7ba4309e5417571a6829f01c41814fcabe6937359267ecaa856c733bce9e827ff010cd385dbda5e6e2237be38e468f84ffaa64c993b3c"}}, &(0x7f0000000140)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "e29886292c082e74b9449b77a195b36f37907977d4583ffb728d1bd157b1a0b088a3c19804bc7c923dc654f7d302117581f39a0f8725e84d276ea4ffadd0bd766b2fb995b82b1eb04a2ef34c42dab22b9f4f61156f8d9d2a276bbcb5df8772274b2f33d24125c59bd4ec4327540c7e3cae8b3bbff940dd62bd8d66efec80e5485098d2222e0ef0e97651cf1b3689ed9f4b0b43c594ced0ee18eed5021d483700a7e372e16e0e95f6d98a8239375eba848e0ceb86029e9b7b55e6fd4c59dd07a411be83e3d65b108e8f130f72a462ccbe99e66d6a045839b488be30906dbed8c0a61cb451185532"}}, &(0x7f0000000240)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x15, 0x0, 0x4, 0xf00f, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x75, 0xfb, 0x400, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x6, 0x1, 0x9, 0x6}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0xb4, 0x2, "f9454424", "2b09d4f1"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x80, 0x1, 0x5, 0x81, 0x5, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x0, 0xab, "f630da0849e45833ed1e501e566dc91016cb7c6d63259158633f6fd03d3cf6afa087aabf0c193c5401b2d8193fb38a2a48e930d730ac4d682facfeedf7ccb8e959b2ef2fc567a27448330e7f3fbb03931b0327144b4a07b63c1d465b47db17facb30d1f01de96e74cb3e9f1d2c90673c0bbe1257af3446255861ecfdf16330f3fd16a1d45c1178446292e4752a60c950bec34a064bd41e53dbcbebc79045aa1364be3785936fa1aa2efc49"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x40, 0xae, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "fb83"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5b91"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7d}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x20001) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffe, 0xffffff01]) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/5) 00:21:37 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0xf0) 00:21:37 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x40) [ 3261.704465][ T1499] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3261.714478][T32516] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3261.874372][T28967] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3261.964302][ T1499] usb 5-1: Invalid ep0 maxpacket: 512 [ 3262.084868][T32516] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x10, skipping [ 3262.095502][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3262.114374][ T1499] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3262.244354][T28967] usb 3-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 3262.254819][T28967] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3262.334345][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3262.343626][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.351965][T32516] usb 6-1: Product: syz [ 3262.354281][ T1499] usb 5-1: Invalid ep0 maxpacket: 512 [ 3262.356170][T32516] usb 6-1: Manufacturer: syz [ 3262.362069][ T1499] usb usb5-port1: attempt power cycle [ 3262.366176][T32516] usb 6-1: SerialNumber: syz [ 3262.504330][T28967] usb 3-1: string descriptor 0 read error: -22 [ 3262.511373][T28967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3262.520507][T28967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.677897][T32516] usb 6-1: USB disconnect, device number 113 00:21:38 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x6, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x9, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x200, 0x2, "1c798a"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x40, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x2, 0x25, "ec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x1, 0x5, {0x7, 0x25, 0x1, 0x81, 0x6, 0x3240}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xf4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xf9, 0x6, 0x5}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9e, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x5, 0x7f, {0x7, 0x25, 0x1, 0x80, 0x4, 0x8}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0x3, 0x5, 0xff, 0xfa}, 0x59, &(0x7f0000000140)={0x5, 0xf, 0x59, 0x2, [@generic={0x51, 0x10, 0x2, "e1db8fc55a97349e1a0e808c8f554b5ec1d65393882fc54a23a942140b5f4a5c122a623a95936362d31191a905d024e8487a73c7d688359e57ee6881226f380c57624a80d9a69f324a477555aaa4"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0xcf, &(0x7f0000000280)=@string={0xcf, 0x3, "fd6dfb716c923f24814e23b082b6990dd2f4793a639dffd4c43774eec755b029e421eae23bac90b170bf3e3ed6b0e70b08e981641b9e5f427fbc706662b83a332fe0bf103022abfc74fba6a2a45ef528ad076a9c153a776669f6428fa696396c5b38feef61bec9c15da4ae606b6b2669576e7ed510584d0de3b58cd78258a7d9c370627670c4063df4c6977c0144ed38b4bada2502c7e178030e45a6974e69466155fd0aaa576f5c268af7f90ec9ad880328651efccb13a84a47d662ce4977ec233de98e51127c1f8becac4397"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x809}}, {0x4c, &(0x7f00000003c0)=@string={0x4c, 0x3, "84992acc074b5901f28d677a6898b7c21dfc2c99b9ddaed86539a6ef7936b424896328e8d579b6d5246f8e3309850e42199ee59de74da617f5c226dfb3f4d1d8d7752deb97b9ffe7dcef"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0xdc, &(0x7f0000000480)=@string={0xdc, 0x3, "ebe30ef467ccfa84222c3baa6e60aa32b86ffc60da388d75b507342fcb6a5689a54057861f4ed72c6624a6bca3937989ce80ed2ef2c9f224c8eb33ea7720d7d189c8d9eaf35437d843cf14345e4ee202c510f98b1a8d4c830c3f21e8f045e9cbb7efed5a09942f792a305a103a6ba470f5806e185eb13fab62a41a41bb8a234891933380cea8170a19d3fd48b7ce4daba042eb0c608879ae495a816813489fbdba4a94772878beef97de2f1e9836a9da1fcdd12c97ba5af126d4c2cbdf9a0115bb3f7d160bcd7645be2ccb09cadb867bd6e756c414f472d054c5"}}]}) 00:21:38 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 00:21:38 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x40) 00:21:38 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2dee, 0x1c5140) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/95) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x4f3) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000100)=""/141) 00:21:38 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x3, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3262.775728][ T2641] usb 3-1: USB disconnect, device number 68 [ 3262.784474][ T1499] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3262.884879][ T1499] usb 5-1: Invalid ep0 maxpacket: 512 [ 3263.044240][ T1499] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3263.134853][ T1499] usb 5-1: Invalid ep0 maxpacket: 512 [ 3263.140380][ T1499] usb usb5-port1: unable to enumerate USB device [ 3263.224236][T32516] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 3263.584688][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3263.754687][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3263.763853][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3263.771926][T32516] usb 6-1: Product: syz [ 3263.776172][T32516] usb 6-1: Manufacturer: syz [ 3263.780763][T32516] usb 6-1: SerialNumber: syz [ 3264.067507][T32516] usb 6-1: USB disconnect, device number 114 00:21:39 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x92, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0xfd, {0x9, 0x21, 0xdc, 0x80, 0x1, {0x22, 0xf1c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x81, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x40, 0xff, 0x81, 0x20, 0x7}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x8, 0x5}]}, 0x3, [{0x7f, &(0x7f0000000100)=@string={0x7f, 0x3, "06320da0e1bc0400d6759381d3b5dc4531168d4895746e6a62ef1255d3d4e526a075c7670a55915c45cb700e33f5e5eb9f116a146e41c95a6a1a315519df399298c8cbc5b93b1898f6ad444b64ed64fb7b3030d352a1b6998b0141afb0b17d28e4ecfed64d4438d08462cb5ceb46f287e61afd00324591c4781bd82cdb"}}, {0xe, &(0x7f0000000180)=@string={0xe, 0x3, "5aca517ca6153949446f252f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000240)={0x0, 0xa, 0x6c, {0x6c, 0x30, "70855084af620d4c7a4f9e233795a1b71608ebe1684a4a27317d2dbbb3302aac4e1c26140c105459c62c6b86ef60e3049bee9907fc5c436609ecb8a40e0ed788ebfad9ae1557840f6a82046e2b1804b094069f05d4f62040e6f2abd9a0c0d2fd87f347368ac6587899ce"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000300)={0x0, 0x22, 0x19, {[@global=@item_012={0x2, 0x1, 0x9, "31cb"}, @main=@item_4={0x3, 0x0, 0x8, "488148ab"}, @global=@item_4={0x3, 0x1, 0x3, "927b2301"}, @main=@item_012={0x2, 0x0, 0x9, "dbf6"}, @local=@item_012={0x2, 0x2, 0x7, "67d6"}, @local=@item_4={0x3, 0x2, 0x3, "91a805c2"}, @global]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x40, 0x1, {0x22, 0xb20}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0xf, 0x38, "a9c684f85ea186f54d76cc66f6e88c125bcb662f79eedfc98a33e9c4275937c2858ef99179fc6aa464402eed0c2a37ab627dd49bda0c9100"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="2001820000001244dab40c064d29e89936d01e21302ed3806ee9caac6eb29d199289d1ed2b37e9cbec7a658b725d7fe661f3476946af9dcb897408b8e5e49354256c29d01122f6a87bdd102a6125643242f1a0f3311eedf114148a8444e036eab7f7c9a1c35591130c68f46402dcb32e669aced4ed3fe4f863f66dd34000ec1feb16d7ac27154faa"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:39 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_usb_connect(0x3, 0x182, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0xbb, 0xc8, 0x13, 0x10, 0x41e, 0x401d, 0xed37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x170, 0x1, 0x3, 0x1f, 0xa0, 0x6, [{{0x9, 0x4, 0x8e, 0x7, 0x7, 0x49, 0xc, 0xc6, 0x7, [], [{{0x9, 0x5, 0xf, 0x4, 0x20, 0x3, 0x8, 0x1, [@generic={0x7a, 0x11, "c80d10844a30ba82feef6b7fbd0ad5d4db31a1f61839b9d10a995a8a3599d1fc563e37f4ebcbf864940e04d99ee983f6d5d3f5b61537eec758818c07bcbd22d39fd8d11085324f7f01a0d3141578cdb41a535501c3ea50285eeb7f2932f03ee4fc10c1558366107bd01d804e080b0071ff658e778cfc57b3"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8b, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x80, 0xe0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xff, 0x64, 0x5}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x3, 0x21, 0x1, [@generic={0x7a, 0x9, "8e6556b385305b1bba835be8e2c0b6964ea4e90f8ff0d91bffc9cb95b4e8d7b8a6101e3f2e7cdeb683e852ee1899081713b350e60d615a852d6e3670e03d46681fc6ede0935b34cec3e3b2826e7b2b2092a1b2630a244f6f8b93136a4b07a2e13a9965642409f540215b0f4745f80cf8a3dea01efdc52066"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1f, 0x0, 0x3}}, {{0x9, 0x5, 0x8, 0x1, 0x7e7, 0x9, 0x5, 0x2, [@generic={0x24, 0x30, "48b2cdf4b28a9519d8f76656a5f98c1582326e230122152675c10bb3a1214120beb9"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x44, 0x39, 0x6, 0x8, 0x80}, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x0, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x5, 0xffff}]}, 0x3, [{0xe, &(0x7f0000000140)=@string={0xe, 0x3, "590fd5eea5b56a1421e4e28f"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_ep_read(r0, 0x46, 0x73, &(0x7f0000000480)=""/115) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x68, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7d38, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x0, 0xffffffff, 0x8, 0x401, 0x2, 0x8}) 00:21:39 executing program 0: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={{0x3, 0x0, 0x6, 0x80000001, 0x8001, 0x1}, 0x355, [0x7fff, 0x401, 0x0, 0x6c8a1a4, 0x0, 0x7, 0x4, 0x1, 0x5, 0x8, 0x20, 0x8, 0xf1c3, 0x8000, 0x101, 0xbba37b, 0x0, 0xfff, 0x6, 0xb22e, 0x400, 0x5, 0x6, 0x2, 0x200, 0x7, 0x200, 0x5, 0x663, 0x2, 0x9, 0xb0, 0x8, 0x1ff, 0x6, 0x7, 0x4, 0x0, 0x4, 0x5, 0x4, 0x9, 0x8, 0x4, 0x6, 0x9, 0x3f, 0x2, 0x8, 0x80000001, 0x8, 0x8, 0x8001, 0xfffffff8, 0x1f, 0x6, 0x9, 0x3, 0x49e, 0x4, 0x4, 0xffff, 0x1, 0x6, 0x4, 0x2, 0x1000, 0x5, 0x8001, 0x100, 0x100, 0x1000, 0x10001, 0xac46, 0x0, 0x7, 0xdd, 0x7fff, 0xfffffe01, 0x48, 0x9, 0x6, 0x4, 0x7, 0x2, 0x10001, 0x0, 0x1, 0x6, 0x0, 0x0, 0x69, 0x100, 0x0, 0x0, 0x6, 0x7, 0x80000000, 0x400000, 0x5, 0x0, 0x9, 0x7, 0x6, 0x627b4d6e, 0x10000, 0x2, 0x5, 0x7, 0x119f, 0x5, 0x7, 0x80, 0x3, 0x41b, 0x800, 0x100, 0x7, 0x80000000, 0x5, 0xfffffffb, 0x0, 0x0, 0x3, 0x1, 0x5, 0x5cd, 0x32c, 0x0, 0x9, 0x6, 0x9, 0x7fff, 0x10000, 0x28000, 0xfffff001, 0x4, 0x2, 0x9, 0x4, 0x7, 0x3, 0x4, 0xffffffff, 0xba, 0x7, 0x4, 0x4, 0x2, 0x40, 0x5, 0x5, 0x1, 0x6, 0x5820caed, 0x1, 0x0, 0x7925, 0x0, 0x10001, 0x9, 0x3, 0x1f, 0x7, 0x8, 0x0, 0xd9, 0x4, 0x6, 0x8, 0x9, 0x2, 0x5a3168b1, 0x80, 0x0, 0x5, 0xe8, 0x0, 0x7, 0x183, 0x6, 0x10000, 0x9, 0x7c51, 0x5, 0x3, 0x80000001, 0x4, 0xcb, 0x1, 0x10000, 0x0, 0x2, 0x0, 0x8001, 0x5, 0xfffffffd, 0x3, 0x6, 0x480000, 0x3, 0x0, 0x10001, 0xff, 0x7ea, 0x7ff, 0x8, 0x8, 0x30ef, 0x7fff, 0x200, 0x8fe8, 0x0, 0x8, 0xd28, 0x3, 0x3, 0x6, 0x3, 0x2, 0x40, 0x6, 0x7, 0x80000000, 0x5, 0x9, 0x4e44, 0x9, 0x0, 0x0, 0x5c6de721, 0x0, 0x7, 0x63c, 0x7, 0x9, 0x6, 0x200, 0x6, 0x4, 0x401, 0x0, 0x200cfbbc, 0x775, 0xff, 0x10001, 0x8, 0x200, 0x0, 0x8, 0x1f, 0x1, 0x1318, 0x6, 0x1, 0x8, 0x8, 0x4, 0x3, 0x20, 0x74, 0x9, 0x100, 0x3ff, 0x401, 0x7, 0x2, 0x386, 0xf23, 0x93ac, 0x1, 0x3, 0x8, 0x5, 0x40, 0x5, 0x7, 0xff, 0x2, 0xb8c, 0xf, 0x4, 0xfffffffd, 0x1f, 0x9, 0x2, 0x9, 0x10001, 0xffff0001, 0x7352, 0xfffffb98, 0x8, 0x5, 0x7cbb, 0xffff0001, 0x101, 0x2, 0x1, 0x80000001, 0x9a67, 0x9, 0x1, 0x80, 0x1, 0x5, 0x3f, 0x7ff, 0x6, 0x7, 0x7f, 0xffffffff, 0x7, 0x7, 0x2d2e, 0xfffffffc, 0x5, 0x8000, 0x3, 0x1, 0x0, 0x6, 0x8000, 0xa0000, 0x8, 0x7ff, 0x1c000, 0x10000, 0xfff, 0x3, 0x80000001, 0x1000, 0x98, 0x4, 0x7fffffff, 0x7, 0x20, 0x6, 0xd9fd, 0x9, 0x1, 0x80, 0x6, 0x2907, 0x3, 0x5, 0x3ff, 0x0, 0xfffffffb, 0x1000, 0x26d, 0x6, 0x4, 0x5, 0x58, 0x1, 0x1000, 0x1000, 0x6, 0xfffffffd, 0x7, 0x5, 0x379, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x3e, 0x1ff, 0x3fc, 0x6, 0x401, 0x81, 0x9, 0x40, 0x40, 0x1, 0x7fff, 0x7, 0x2, 0x5, 0x1, 0x1, 0x40, 0x4, 0x4, 0x543e, 0x8000, 0x7fffffff, 0x101, 0x1, 0x8, 0xff, 0xfffffffc, 0x6, 0xffffffff, 0x493, 0x6, 0x8, 0x6, 0x6, 0x3f, 0x0, 0x8000, 0x7fff, 0x3f, 0x7, 0x3f, 0x5, 0x80000001, 0x6, 0xffffffff, 0x0, 0x8, 0x5, 0x2, 0x0, 0xc229, 0x10001, 0x5, 0x0, 0x2, 0x80, 0x8, 0x2, 0x3f, 0x1, 0x3, 0x20, 0x1a281da8, 0x39fb, 0x61f, 0x79192f7a, 0x7fffffff, 0x0, 0x8, 0x8, 0xd4, 0xbe, 0x0, 0x4, 0x7, 0x9, 0x4, 0x40, 0xc189, 0x81, 0x5, 0xa14b, 0x9, 0xf6, 0x9, 0x6, 0x81, 0x1, 0x3, 0x4, 0x32e, 0x7f, 0x101, 0x400, 0x4c4, 0xb, 0x5, 0x7, 0x800, 0x400, 0x9, 0x0, 0x6, 0x1, 0x3, 0x5, 0x8, 0x9, 0x8, 0x1f, 0x7f, 0xffffffff, 0x4, 0x1, 0x20, 0xfffffffd, 0x0, 0x80000001, 0x9, 0x5, 0xffff, 0x5, 0x7fff, 0x5, 0x0, 0x6, 0xfff, 0x7, 0x80000001, 0x6, 0x4, 0x800, 0xec, 0x7, 0x7, 0x400, 0x8, 0x68e7, 0xb5c3, 0xde7d, 0x80000000, 0x401, 0x4, 0xc64, 0xfffffff8, 0x8, 0xffffffff, 0x8, 0x1, 0x9, 0x5659, 0x5, 0x9, 0x7f, 0x9, 0x1, 0x7, 0x9, 0x80000000, 0xffffffff, 0x81, 0x3, 0x7f, 0x800, 0x85e0, 0x200, 0x4, 0x7fff, 0x20, 0x3, 0x9, 0x8001, 0x800000, 0x2c, 0x1, 0x80000000, 0x8, 0x7fffffff, 0x63, 0x81, 0x2, 0x4ed, 0x7, 0x2, 0x8, 0x1cc0, 0x5, 0x5e5, 0x8e15, 0xffff, 0x10000, 0x1f, 0x400, 0x0, 0x1, 0x4, 0x7, 0x100, 0x6, 0xff, 0x6, 0x8, 0x8, 0x2, 0x9, 0x721, 0x8000, 0x8, 0x5, 0xfffffffe, 0x40, 0x7, 0x8, 0x5, 0x6, 0xc8, 0x3, 0x0, 0x5454cfcb, 0x0, 0x690f, 0x0, 0x1, 0xffff8000, 0x2d8, 0x7, 0x7, 0x2, 0x8b3, 0x5, 0x4, 0xff, 0x200, 0x3, 0x0, 0x3, 0x400, 0x3f1, 0x316, 0x5, 0xe49, 0xffff, 0x8, 0x1000, 0x7, 0x8, 0x5, 0x9, 0x40, 0x4, 0x1000, 0xc83, 0x80000001, 0x7, 0x9, 0x73caf240, 0x8, 0xfff, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0x9362, 0x1, 0x400000, 0x0, 0x5, 0x3, 0x1, 0x2, 0x7f, 0x6ae, 0xfffffff8, 0x7, 0x401, 0x9, 0xffff, 0x101, 0x1, 0x3, 0x8e, 0x1, 0x400, 0xe3, 0x5, 0x5, 0x5, 0x7f, 0x8000, 0x1, 0x9, 0x1, 0x80, 0xf9f0, 0x1, 0x10001, 0x9, 0x0, 0x3, 0x6, 0x6, 0x5, 0x7f, 0xd7d, 0x800, 0x0, 0x6, 0x6, 0x2, 0x9, 0x8001, 0xfffffffe, 0x13800, 0x5, 0x7, 0x3f, 0x8, 0x20, 0x1, 0x5, 0x3, 0x7ff, 0x3ff, 0x7, 0x2, 0x3, 0x1, 0x7fff, 0x0, 0xde13, 0x0, 0x580, 0x8df, 0x6, 0x7f, 0x80000001, 0xfffffffd, 0x18, 0xde, 0xffffffff, 0x5, 0x4ebd, 0x10000, 0x6, 0x8, 0x5, 0x1, 0x3, 0x998, 0xc2f, 0x6, 0x3, 0x1ff, 0x6, 0x3, 0x200, 0x7ff, 0x7, 0x1ff, 0x3, 0x3f, 0x100, 0x3, 0x8, 0x2, 0xff, 0x10000, 0x1000, 0x6, 0x80, 0x9, 0x80000000, 0x36aa, 0xde, 0x8, 0x0, 0x7, 0x1, 0x20, 0x10000, 0x3, 0xaf, 0x7f, 0x2, 0x8, 0xffffff00, 0x77, 0xc5, 0x1e9, 0x4, 0x4e3c, 0x400, 0xd9, 0x80000001, 0x200, 0x4, 0x1, 0x11, 0x3, 0x3, 0x2, 0x401, 0x20, 0x2, 0x9de86de, 0x3, 0x9, 0x4, 0x678d, 0x3ff, 0x7, 0x40, 0x5, 0x10000, 0x5, 0x8, 0x3, 0x0, 0x3, 0x5146, 0xfffffeff, 0x3, 0x48, 0x26, 0x9, 0x7, 0x9, 0x1ff, 0x2, 0x401, 0x7, 0x6, 0x80, 0x5, 0x6, 0xc8de, 0x0, 0x2fb, 0x8, 0x6, 0x8, 0xfffffffd, 0x3ff, 0x5, 0x5, 0x5a, 0x2, 0x5, 0x0, 0x1, 0x7, 0x400, 0x6ae, 0x7f, 0x0, 0x3, 0x1000, 0xd0, 0x9, 0x8, 0x9, 0x3, 0xffffc2f3, 0x80, 0xffff0000, 0x1, 0xe07d, 0x0, 0xf, 0x7, 0x6, 0x7, 0x3c9, 0x7f, 0xd999, 0xac, 0x0, 0x0, 0x7, 0x7f, 0xffffffff, 0x400, 0x371, 0x5, 0x9, 0x6, 0x6, 0x1000, 0x40, 0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0x7ffd, 0x8001, 0x0, 0x4, 0xffffff80, 0x100, 0xc68, 0x101, 0x20, 0x7, 0xfffff001, 0x0, 0x3, 0xf880, 0xc0000000, 0x4, 0xe8, 0x4, 0x7, 0x6, 0x8, 0xffffffff, 0x1, 0x5, 0x10000, 0x8, 0x7, 0xc5e, 0x1, 0x80000001, 0x9, 0x401, 0xffffffff, 0x73c, 0x1, 0x2, 0xfffffff9, 0x33e, 0x800, 0x7dea, 0x8, 0x5, 0x1, 0x2, 0x9a, 0x100, 0x7fff, 0x80, 0x6, 0x9, 0x9, 0x80, 0x9, 0x8, 0x1, 0x1, 0xc4b, 0x8, 0xfffffffb, 0x1, 0x4, 0x3927, 0x6, 0x1000, 0x7fff, 0x10000, 0x7, 0x8, 0x81, 0x400, 0x10000, 0x1000, 0x8eaa, 0x9, 0x9, 0x9, 0x80000001, 0x20c7533a, 0x9, 0x8, 0x4, 0x2, 0x0, 0x7ff, 0xfff, 0x5, 0x80, 0x7f, 0x1, 0x800, 0xfff, 0x5c5b, 0xfffffffa, 0x9, 0x7ff, 0xfffffffd, 0x400, 0x5, 0x5, 0x8, 0xb6f0, 0x3ff, 0x1ff, 0x4, 0x8001, 0x3, 0xfffffeff, 0x52f, 0x1f, 0xfffffff9, 0xfff, 0x6, 0x59cfcc85, 0xfffffff7, 0x0, 0x10001, 0x7, 0x7, 0x4, 0x3, 0x9, 0x0, 0xff, 0x7, 0x1dd7, 0x7fff, 0x513c, 0x8001, 0x3ff, 0x600, 0x7, 0x4, 0x6, 0x9, 0x72, 0x0, 0x0, 0x8001, 0x200, 0xcba0, 0xff, 0x5, 0x100, 0x993, 0x1, 0x1000, 0xffffffc8, 0xfffffc01, 0x8, 0x8, 0x0, 0x1f, 0x6, 0x6, 0x6, 0x0, 0x5, 0x26c16522, 0xfffffbff, 0x5, 0xe0000000, 0x3]}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000001040)=0x2) 00:21:39 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="0a7d17b58100903f257ac0e9fd4053c718f7df42053f4f1bb87384fd9ea342e39434054f3162bb26544c32993b22984898a610cab73d35d8cf3dc42802ecde", 0x3f) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x201) write$hidraw(r0, &(0x7f0000000080)="861a40330c64b482516e59135b287adf6aca6ec6f343d035809bfc5fc4b6f727450d701765d392f41ea8267016954eb3869258466fe16840f330f8fb1353f92d390c35bffe63ebaf275ef112b11f819c", 0x50) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:39 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x40) 00:21:39 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x4, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x4, 0x14, &(0x7f0000000000)="d93323ca11e7cc6738028552e1425ce9146a4fa1"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x140) 00:21:39 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/33) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/221) 00:21:39 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1, 0x40) 00:21:40 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40) 00:21:40 executing program 0: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fffffff, 0x1f]) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:40 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x100000001, 0x4000) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x10001, 0x222000) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000100)) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x1, 0x2}) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/204) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000240)={0x982, "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"}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) [ 3264.687803][T18032] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3264.695486][ T2641] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3264.824088][T32516] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3264.954095][T18032] usb 3-1: Using ep0 maxpacket: 16 [ 3265.054220][ T2641] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3265.067149][T32516] usb 5-1: Using ep0 maxpacket: 32 [ 3265.154197][T18032] usb 3-1: config 3 has an invalid interface number: 142 but max is 0 [ 3265.162423][T18032] usb 3-1: config 3 has no interface number 0 [ 3265.169832][T18032] usb 3-1: config 3 interface 142 altsetting 7 endpoint 0x4 has an invalid bInterval 139, changing to 7 [ 3265.181152][T18032] usb 3-1: config 3 interface 142 altsetting 7 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 3265.192416][T18032] usb 3-1: config 3 interface 142 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 3265.203255][T18032] usb 3-1: config 3 interface 142 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 3265.214373][T18032] usb 3-1: config 3 interface 142 altsetting 7 endpoint 0x8 has invalid maxpacket 2023, setting to 1024 [ 3265.225545][T18032] usb 3-1: config 3 interface 142 has no altsetting 0 [ 3265.264229][ T2641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3265.273355][ T2641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3265.281393][ T2641] usb 6-1: Product: syz [ 3265.285616][ T2641] usb 6-1: Manufacturer: syz [ 3265.290206][ T2641] usb 6-1: SerialNumber: syz [ 3265.344178][T32516] usb 5-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3265.355479][T32516] usb 5-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3265.368485][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3265.454133][T18032] usb 3-1: Dual-Role OTG device on HNP port [ 3265.474158][T18032] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=ed.37 [ 3265.483271][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3265.491334][T18032] usb 3-1: Product: ш [ 3265.495548][T18032] usb 3-1: Manufacturer: 㠊 [ 3265.500142][T18032] usb 3-1: SerialNumber: syz [ 3265.544290][T32516] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 3265.553460][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3265.561560][T32516] usb 5-1: Product: ࠇ [ 3265.565777][T32516] usb 5-1: Manufacturer: 쩚籑ᖦ䤹潄⼥ [ 3265.571692][T32516] usb 5-1: SerialNumber: syz [ 3265.597739][ T2641] usb 6-1: USB disconnect, device number 115 00:21:41 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_open_dev$hidraw(&(0x7f0000000000), 0x80, 0x881) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:41 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40) 00:21:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xac3e, 0x22d71) 00:21:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="b78074e88665232cdfe4ec9dd9d7139f13b005d322545626867bb0aae51374d7e934a5adff8621009e7ecc017ac97139185a17d7b2e936f1a57a996d387a4024da3ee1706442af02dcca3805057e8bf690ce3a9fe11d5bd9822c546c5cd09d58bf7eb0002084f4117ab0246c02000000000000002f97bded638a6ac36266ebadb6b0", 0x82) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x426000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/94) 00:21:41 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x5, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:41 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400002d135100000"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3265.845933][T18032] gspca_main: spca505-2.14.0 probing 041e:401d [ 3265.890099][T18032] gspca_spca505: reg write: error -71 [ 3265.895791][T18032] spca505: probe of 3-1:3.142 failed with error -5 00:21:41 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3265.953520][T18032] usb 3-1: USB disconnect, device number 69 00:21:41 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000019c0)="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", 0x1000) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000100)=""/155) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000001c0)={0x5, "c3fc5e5e55eb9caf7604fa0fb46896c428ca726faf7665be8564d1395bd0a7484c8c46ae62348b7cb51d3fed478789ca6443310e3000cb68b33d2d68cee796dd"}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:41 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x79, 0x3, 0x8, 0x3ff, "6f0ea26c35443720bc00b93be99cc1761c7c563627b1f57e2d1c2231d69afee5"}) [ 3265.994148][T32516] usbhid 5-1:1.0: can't add hid device: -71 [ 3266.000148][T32516] usbhid: probe of 5-1:1.0 failed with error -71 00:21:41 executing program 0: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17}) syz_open_dev$evdev(0xfffffffffffffffc, 0xff, 0xf6fffbff) [ 3266.049246][T32516] usb 5-1: USB disconnect, device number 16 00:21:41 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:21:41 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xe272, 0xf6fdbebe) 00:21:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) 00:21:41 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:21:41 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x50e) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7fff, 0x400000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000300)=""/235) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/242) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5, 0xbe, &(0x7f0000000040)="d4bd66f53b9141f9f45acf39b40b75c6fabee608c6ac9316643419a6f5c84d702e4e40b428f7651523dd4986d34b2a974cb7ad631cf9851498fc2df5f54067d2d1c378da5feb27a8bdde22b8a4affbbda080771a1d0d4536a9b2a2ebf2059f55e29c08c4bfd9c3ef493485b7eda70f0f177fd74de8e1ec8719803d102b1116517116498e43c73acb079372a47d0e383390970da921c0a41050dbd8d7c5518669f4bcb33a886b1ccc071781c9478691367b5b46ca05820d6c1413e5370060"}) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x8000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000280)=0x12) 00:21:41 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="239cc4391a6c49680df0ec44", 0xc) [ 3266.354045][ T2641] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3266.374516][T18032] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3266.483986][T32516] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3266.724912][ T2641] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3266.744768][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3266.754664][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3266.764475][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3266.777772][T32516] usb 5-1: device descriptor read/64, error 18 [ 3266.894029][ T2641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3266.903320][ T2641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3266.911545][ T2641] usb 6-1: Product: syz [ 3266.915857][ T2641] usb 6-1: Manufacturer: syz [ 3266.920458][ T2641] usb 6-1: SerialNumber: syz [ 3267.073963][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3267.081279][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3267.090402][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:21:42 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x6, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3267.217986][ T2641] usb 6-1: USB disconnect, device number 116 [ 3267.224478][T32516] usb 5-1: device descriptor read/64, error 18 00:21:42 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) 00:21:42 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x800) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/206) [ 3267.346045][T18032] usb 3-1: USB disconnect, device number 70 [ 3267.493919][T32516] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3267.584031][ T2641] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 3267.763855][T32516] usb 5-1: device descriptor read/64, error 18 [ 3267.944693][ T2641] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3268.124281][ T2641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3268.133382][ T2641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3268.141446][ T2641] usb 6-1: Product: syz [ 3268.145687][ T2641] usb 6-1: Manufacturer: syz [ 3268.150292][ T2641] usb 6-1: SerialNumber: syz [ 3268.155007][T32516] usb 5-1: device descriptor read/64, error 18 [ 3268.273943][T32516] usb usb5-port1: attempt power cycle [ 3268.456804][ T2641] usb 6-1: USB disconnect, device number 117 [ 3268.683790][T32516] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3268.854218][T32516] usb 5-1: device descriptor read/8, error -61 00:21:44 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000040)) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000240)={0x391, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x8}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/105) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/125) 00:21:44 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/54) 00:21:44 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400002d135100000"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:44 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x600300) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0x349, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x80000001, 0x900) write$hidraw(r1, &(0x7f0000000080)="4d9faec4cd647db6be71415b8ef97fbe3ed578eef011840851620ac0e04f66c7f57eba7ce92bfd5bdaddc13282f5a78a36153b67e2a96934510c0042a2b4856d32d228ea4c0136fdd918528efff34efa0c814f950d5447c5b88566bf2513ae3d7b5badae9da58331c7933a56c2f06004306b6176754944cb8339a0f2791ddf51f5f2fc", 0x83) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x96, {0x96, 0x9, "826ab6a480a76e2d1ffcbd6627f12119eb02d5d4f89311e444751bb0e65d823a4d33b9b834c1c5a23cd871ab33b59169205b2e6e0f7bc1d27c81c719a4d32b8b3c28563ccea18c53e19df06e78cf0d96413c23d42c42fc26322ca566c5f88ee8522ba4121d2ee83c763e395fe25e067e1cc1aceacc484b1eced1d0405cb8177e46fa6588133c199a6dad67a45fdbcd0b7f1a982a"}}, &(0x7f0000000600)=ANY=[@ANYBLOB="00035800000058037bff0aca20ce7885ed825bdcf2b3d8206ab3c92c4bcf9455acac9f6cf1731ef1278d1702da19e3c62963ad7b30c67691613cb6b1fd224e36bd20671589baddfc03d85edb3374d1942888c79bf36df9847246fe4d087e118d436237141f355dc1453adc70e3"]}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0xc0, 0xf, 0x37, "ef0b861f46ea8c2dd20aad0cf8cd8486a5da9d33c8764f69410b6cb3609186c9931218bf8af652c303cad1abe4e85bf77b3014219ccc1a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)=ANY=[@ANYBLOB="15858f000000008d591854e9ee0df28f5978b47ff310fd6495abf7d8aa2bd67e9bf53d4259c9f830252724d567b56f7f8442894901b7182d310600000014d87bdd1ee375c1723c6ffeb534a80a7d369bb4db95b85fb2e32e947f1e918c2f9c453aedd5383decc67c4beca15dcf1d3303707a03eaa8328f32831c11829858b83f1853bfff3818d89c221d06171080e94e"], &(0x7f0000000440)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x2}}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000680)=""/77) r2 = syz_open_dev$hidraw(&(0x7f0000000500), 0x8, 0x20300) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000540)=""/123) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000200)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010001000000402505a8a440000102030109021b000101e60003090400060207010000090501020000f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:44 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x7, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3269.103810][T32516] usb 5-1: device descriptor read/8, error -71 00:21:44 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) syz_open_dev$evdev(&(0x7f0000000080), 0x7ffffffffc, 0x141281) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x200601) 00:21:44 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/4096) 00:21:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/251) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:44 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0xffff07c2}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6f5f3fd) 00:21:44 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000280)=0x8000) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000001c0)=0x2) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/149) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x288800) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/72) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000340)=""/49) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000300)=0x9c9) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/236) 00:21:44 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x2048f0) [ 3269.423766][ T2641] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 3269.431507][T30893] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3269.439197][T18032] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3269.623685][T32516] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3269.814946][ T2641] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3269.834555][T30893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3269.844481][T30893] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3269.854223][T30893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3269.867488][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3269.877229][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3269.887167][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3269.900147][T32516] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3269.909955][T32516] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3269.919684][T32516] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3269.932515][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3270.063985][ T2641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3270.073247][ T2641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3270.081264][ T2641] usb 6-1: Product: syz [ 3270.085565][ T2641] usb 6-1: Manufacturer: syz [ 3270.090162][ T2641] usb 6-1: SerialNumber: syz [ 3270.134389][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3270.143449][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3270.151471][T32516] usb 5-1: Product: syz [ 3270.155779][T32516] usb 5-1: Manufacturer: syz [ 3270.160510][T32516] usb 5-1: SerialNumber: syz [ 3270.223862][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3270.230168][T30893] usb 2-1: string descriptor 0 read error: -22 [ 3270.236740][T30893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3270.246280][T30893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3270.254418][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3270.263613][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3270.305660][T21653] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3270.427309][ T2641] usb 6-1: USB disconnect, device number 118 [ 3270.497238][T32516] usb 5-1: USB disconnect, device number 20 00:21:46 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000240)={0x20, 0x11, 0xd0, {0xd0, 0xc, "fc94201446fd9739f07cd1db65da48da9afc49c7f3365c32eeb4e7c81836b22a290e7bcccc4a2d3b0b041f66804b5e60d38bb82f185d535834284f88bff8b7124c96dcbde117940dd60e672b64d4e9b3817c5d73814f51565acb4dd7a0afb5c29eec27a433a33869154b772a0d9813e947df7798035c83df4cc096145631168a2b17f79aa36ee913fb994345fc8a8dd6f81cf84acf86635bee580b5743106ad106ed57843874393bbd4f56dfd940515fb08be124233830e90b56c201641ad08e0434b05d1e3191c5d2f1b42657d6"}}, &(0x7f0000000000)={0x0, 0x3, 0x86, @string={0x86, 0x3, "9bdb5769976ecd12b9eddf44c1b3aaab5003900c52876a29861661b641f5677955cbf220d0b1b4e51094fb8e6b2486ce3c16fc13a7be0b1da2e8ee55ce8a822f1672cbb9f19154ce16000b4146c21327b1799c77bdea34f8daffe30c326d03e118031a78a04aa5a93399828a3f8f12e009aeb7e66b48879375dd0465b952fc0492ae1a95"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x20, 0x16, 0x97, "ccbc68411ae748a4361f3e1dbe023f3c9042da62596bc002dd3e92466c88fad723776f7493044760a26c55ef5f357082ca99e1b60198c60398ff8a9ab5872c2a66cf19c02862b9878c4f0dd2d4bbf6feba3d3fb37ab0080d00e79911e32b5e08be36e2d6cfd50520bfcbf6aefb95408cf4de0887a94e1589e7303c0976dbe87b9ad223caf7bd9ce70e4a522d2c27263ee999f5d57ccd0d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x2, "b4eb"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "1e73cd"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "f0a8e8"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "a0"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "930c16"}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:46 executing program 0: syz_usb_connect$uac1(0x2, 0xc6, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x1, 0xb0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f, 0x7}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x9, 0xa, 0x6, 0x7], 0x43}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x2, 0x36, 0x1, 0xff, 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x5, "f9a7f9285d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x808, 0x3f, 0x47, "84aea1419295307232"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1a, 0x1, 0x2, {0x7, 0x25, 0x1, 0x2, 0x40, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x64, 0x3, 0x9, 0x2c, "75b65b"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xf}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x5, {0x7, 0x25, 0x1, 0x83, 0x20, 0x5}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xe9, 0x81, 0x4, 0x20, 0x6d}, 0xbe, &(0x7f0000000140)={0x5, 0xf, 0xbe, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0xf000, 0xfffa, [0xc0, 0xff3f00, 0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x20, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x5, 0x9}, @ptm_cap={0x3}, @generic={0x79, 0x10, 0xa, "c5e516b0f5b8c3b24b6419f8f680e228b12c16fdebcb93b3ceea51f502f1dafe507a40b152810a116ae92fba91d8ffbac2fd44598be188d687fa7fc2881be24d1df826d876d79d253b4a37a86dbfb7f072ce2eff64acf3a54d5acbf66a6b8e45373c24fe71288b071091be928046a2c28479e9a26ab4"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "dd3224659223c5a95bada9a623cf4617"}]}, 0x1, [{0x32, &(0x7f0000000200)=@string={0x32, 0x3, "701a5a32b3e2d80b87547a99071a262c0bc711fd0e7fabb859698705ae5fb178b5c3ba70289c6170413bf7b985ff8d5c"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:46 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="8edaf1c21e031aa7fdeee14f4d1d703878bd46037e340591c5af315b5d7b7ab91173ded76588230905ba8b2fd6527614866ea6e033eb3be35840e726affcd9bd8043b2a7d358fa869c008c887054c8cde388b37d13e85b5fe2f33f485dcb535490c1a225aeed735928eaf834ee72a7a5c2b21914f0a02e59e5d0a761047c9f396bc806b4eaff571ca98ae64c") 00:21:46 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x8, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:46 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2, 0xffffffff}) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0xb67, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x5, 0x602000) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3}) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x800) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000140)={0x3, 0x2, 0x2}) 00:21:46 executing program 1: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x600300) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0x349, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x80000001, 0x900) write$hidraw(r1, &(0x7f0000000080)="4d9faec4cd647db6be71415b8ef97fbe3ed578eef011840851620ac0e04f66c7f57eba7ce92bfd5bdaddc13282f5a78a36153b67e2a96934510c0042a2b4856d32d228ea4c0136fdd918528efff34efa0c814f950d5447c5b88566bf2513ae3d7b5badae9da58331c7933a56c2f06004306b6176754944cb8339a0f2791ddf51f5f2fc", 0x83) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x96, {0x96, 0x9, "826ab6a480a76e2d1ffcbd6627f12119eb02d5d4f89311e444751bb0e65d823a4d33b9b834c1c5a23cd871ab33b59169205b2e6e0f7bc1d27c81c719a4d32b8b3c28563ccea18c53e19df06e78cf0d96413c23d42c42fc26322ca566c5f88ee8522ba4121d2ee83c763e395fe25e067e1cc1aceacc484b1eced1d0405cb8177e46fa6588133c199a6dad67a45fdbcd0b7f1a982a"}}, &(0x7f0000000600)=ANY=[@ANYBLOB="00035800000058037bff0aca20ce7885ed825bdcf2b3d8206ab3c92c4bcf9455acac9f6cf1731ef1278d1702da19e3c62963ad7b30c67691613cb6b1fd224e36bd20671589baddfc03d85edb3374d1942888c79bf36df9847246fe4d087e118d436237141f355dc1453adc70e3"]}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0xc0, 0xf, 0x37, "ef0b861f46ea8c2dd20aad0cf8cd8486a5da9d33c8764f69410b6cb3609186c9931218bf8af652c303cad1abe4e85bf77b3014219ccc1a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)=ANY=[@ANYBLOB="15858f000000008d591854e9ee0df28f5978b47ff310fd6495abf7d8aa2bd67e9bf53d4259c9f830252724d567b56f7f8442894901b7182d310600000014d87bdd1ee375c1723c6ffeb534a80a7d369bb4db95b85fb2e32e947f1e918c2f9c453aedd5383decc67c4beca15dcf1d3303707a03eaa8328f32831c11829858b83f1853bfff3818d89c221d06171080e94e"], &(0x7f0000000440)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x2}}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000680)=""/77) r2 = syz_open_dev$hidraw(&(0x7f0000000500), 0x8, 0x20300) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000540)=""/123) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000200)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010001000000402505a8a440000102030109021b000101e60003090400060207010000090501020000f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3270.560483][ T1499] usb 2-1: USB disconnect, device number 8 [ 3270.568380][T30893] usb 3-1: USB disconnect, device number 71 00:21:46 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x53, 0x40, 0x1, {0xfff, 0xff}, {0xbbb, 0x3}, @const={0x1f, {0x3, 0x0, 0x9, 0x8001}}}) 00:21:46 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0xf, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:46 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x2, 0x13, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x150, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="3a33f627a5eba9552754162d68f6f5d4905be1ee07412a1fa8b2e1c592b39f372955174e152b31d5") 00:21:46 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000000000402505a8a4400001f3020109021b000101e68003090400000207010000090501020000f5fe484ccf28a3345b5454662489a5077418fb1b8302382eca9bc902000000000000002379b9c2c32b4fb9c903000000000000001fd7b5c9bceeeb5f6b792a43a0"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002020000ff2505a1a44000010203010902470001010130f70904000502951303acaf743984b76649ad020600000a240600006b0e52d125052400d20a0d240f01050000c60000008f04072414f8ff0300090582029b507f030209050302ff03081f817b4d2a9ff6654bc2a601797f48e4904bcf4471c2be0aff8f0cda15bf0d8b35e886949847fa2a3f65a6f56912e4595754edebd97e54245351e848b40ae934ae67f3051dbf"], &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x20, 0x2d, 0x20, 0x2}, 0x10c, &(0x7f0000000240)={0x5, 0xf, 0x10c, 0x6, [@generic={0xe2, 0x10, 0x1, "adce661b1d68767fa08cbac300742bd1d3dac56ad1069bf3716f07aaea5ec22eb67073bfab06d648f49069c79c425bf9c9c7afa1da62df4fb2f5154a382817190d6683513329eae1076442cbf44ac4ed44d39fd7d26e9614f7a51c8f2d3a37e7697257a0f03002581cc61deda06649a70285eb0dbb38e3acbdc92e06ab65b2108349ce1aee75f4578cb9f4df775cb893b09c08d9061f6145afd65fe6c0b62ff843184f298b9fa46f57847bf15a3bf0420c34f659c2de8cb96485b3530a7c0abeafea61bd7991ff42f6f29f2b6221fe685eaa79548dc1000000000000000000"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x81, 0x1f, 0x9e1, 0x55}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x82, 0x3}, @ptm_cap={0x3}]}, 0x6, [{0x6e, &(0x7f0000000100)=@string={0x6e, 0x3, "cbc76f0bd5fee7179fbf68aa0c40b9f594e2f1a55fd4bc00a9103239ea27121ae65242b7e37589fe9ad292909e84b21a34b2f94aa2e6d0ca4e2be9132177e693a9fc6fd6fc8f7db0ab27f026f7da772a0be280ec68117d80353e973cbdb6bdceffe3a9abb01ff60c168b03de"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x5c39}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c01}}, {0xf9, &(0x7f00000003c0)=@string={0xaf, 0x3, "de7478499a5d4e2fbe0db2edcd25fcc21b722018dd9087c88340c3a486e62cf1def81ae7d7c1e9f23f630b2315cb3381b64230f87afb7f6cf83feeec1ce71fb03743115e092365a8a0af44089637f796bf1cddb0f6ab13b2b99a4c1e382eea51ca6ee43d663931fcc9e453a9b3c81ee5e13a326437b4b91567af14efc729f96af58fd31dcde175dcf4ad1b2a9ceb83cd4d32bc27de2aaccd73b994561d7733ae826a7a17cd2c5b961ac5d0b105"}}, {0x2a, &(0x7f0000000480)=@string={0x2a, 0x3, "46d969d893151be1d0f554436cad7f6b298ec962d36dfbdee22487ef09f50001df51db08ff3eb9f6"}}, {0x31, &(0x7f00000004c0)=@string={0x31, 0x3, "e51d5708ad2e50b45bff6411f8defefa859db1d9ceca4bebc21ae3568ef997779770a1c9c47fa241c7f1a822dcc965"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0xe, 0x6, {0xfd81, 0xb, "b1906777"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000640)={0x40, 0x2, 0xe6, "b3f69204662d1a5c0d56e69f50fe7770c6332f31f950de797215d01bdb13e21492026cbd99957aed885e473fd2f513715c32efdadf1e4fcf9913bad686ed498c205d3eb00ac591cca98c61021c38c9fdc3f8f8e19efeeaddaba699bf920905cf203c845e68df71456d943e3454b60f90705d14fbb5a59adcde699b3f4d4c1aabf72691a8a3d828c45ca4a36006f72485d396cc6f4d9034b0918827889d0864a938c34eedfa86d62194c0698a5d1bc1f5d39ce7a58c1996ad8e2d8a41985563cf4252a6c8db5388f92070446a6d4efd05f7cddca031e06742e69c8bdce5f789d471ed18f8d959"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7f}}) 00:21:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="239cc4391a6c49680df0ec44", 0xc) 00:21:46 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/219) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:46 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="239cc4391a6c49680df0ec44", 0xc) [ 3270.953594][T28967] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 3271.113565][ T1499] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3271.113565][T30893] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3271.353680][T28967] usb 1-1: not running at top speed; connect to a high speed hub [ 3271.453712][T28967] usb 1-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 3271.464111][T28967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3271.493612][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3271.503282][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3271.513078][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3271.533650][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3271.643671][T28967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3271.652742][T28967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3271.660781][T28967] usb 1-1: Product: syz [ 3271.665006][T28967] usb 1-1: Manufacturer: syz [ 3271.669693][T28967] usb 1-1: SerialNumber: syz [ 3271.713643][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3271.722735][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3271.730983][T30893] usb 6-1: Product: syz [ 3271.735227][T30893] usb 6-1: Manufacturer: syz [ 3271.740010][T30893] usb 6-1: SerialNumber: syz [ 3271.823683][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3271.829941][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3271.839134][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=243, SerialNumber=2 00:21:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1000000006, 0x791900) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/238) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0xd77, 0x800, 0x1, 0x9, 0x80000000}) 00:21:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)) r2 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000140)=""/85) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0xffffffff) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x14, 0x99, &(0x7f0000000040)="60b032fcaa6e48a375dea0d706ba5ba1a4d865c36be3987b43444a391d34a9367049314ea9fe49f59f670bbd6ed09b52785f26992e8f29d7de981671d30db28995365a3ce864419c498262a9e328b06daedf8763ee4e4c93bd27867c11ceee9da31f26dab80b6cc85e65d9b0ba13ef9a5e58989dbf5771e0ee64c456d02685ccaaf6a3b0c1351b20bc76f966e69ef86d05d578d512293a1d4a"}) 00:21:47 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40) 00:21:47 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0xffffffffffffff01, 0x3, 0x820}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}]}) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000440)=""/161) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) syz_usb_connect(0x5, 0x638, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x39, 0x2, 0x3, 0x20, 0x4}, 0x72, &(0x7f00000001c0)={0x5, 0xf, 0x72, 0x6, [@generic={0x48, 0x10, 0x4, "232ea86f5c3f73c441c4014bff9b7c2da29bcc6dd9904fc9a8f9f0f5df1251402c311f2b27a79da9e0d0d122e04aa4cf04f44429fedabc7e35705c262a1607daad0ecd04bd"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x0, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xbb, 0xff80}, @wireless={0xb, 0x10, 0x1, 0x9047e5bd7d9fcb8f, 0x0, 0x8, 0x7, 0x7, 0x80}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0x7c, &(0x7f0000000280)=@string={0x7c, 0x3, "f8410b1e1ae645ff8139a173e96ea5bb8f2335144a6140590880bb96b5c381637e50455906868c5d1373fe93ca98e9ae2ae69bebaa5ec63f426f345a4270d8d3f40ac0103b865d01741026e1221ed3bbc9748e508af76d347cb8a9858bb64303520b574947b372ba6dfe3ec0efeca662badf0e0516fa60391033"}}]}) read$hidraw(r0, &(0x7f0000000380)=""/133, 0x85) 00:21:47 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x10, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3272.068051][T30893] usb 6-1: USB disconnect, device number 119 [ 3272.083808][T28967] usb 1-1: 0:2 : does not exist 00:21:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x81, 0xf, 0x20, 0x8000, "d3df6b2cc0fa5c84d7aba5297d791481697f630102e5b0838b3f8ee44620aa39"}) 00:21:47 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000140)={0x55, 0x8001, 0x1, {0x8000, 0x1f}, {0x3, 0x6}, @rumble={0xfffb, 0x6}}) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/100) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x3ff, 0x7f]) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/146) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x7, 0x3, 0x1d, 0x80, "0507e41e944d052e18ec5755ee00"}) [ 3272.113575][T28967] usb 1-1: USB disconnect, device number 30 00:21:47 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/33) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/221) 00:21:47 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4300020000000200adf552cc831a8db6ac44e7804e9cf51f2ded3d196504f34162ebd8c5755a7ffdd3461066cf057f1ec4e2076150d7ac0925c7201bbc56c0fe77ac762b98d111072d2213933fb83f93"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x89, {0x89, 0x24, "2af3d9c5fb1a985b6b7a6f8f7905992deec20b6941cefbd90a038e679761912513debdd1842dc924928324a6d0d92438fe6fe10596dcb355ca4bc3c1b991853cffc39a5a92c263a8aab89ba682b34892a4899fe3a326bca785d73896295ac74fa5678637b0b43610c0194e1f6fd598c75da2639c4801410d26be04e2a425df09fe4711f4329405"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x23, "5f40f7bb2cfb1926f15fbf1b8120848388e51860b5dfdbbbb8c92331efd9642f7a63b2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x40}}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:47 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x5, 0x113a00) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000010c0)=""/184) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/4096) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001040)={0xc6, 0x6, 0x6, 0x9, 0x80000000, 0x4}) [ 3272.222719][ T1499] usb 3-1: USB disconnect, device number 72 00:21:47 executing program 0: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x800, 0x9, 0x9}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) [ 3272.313804][T32516] usb 5-1: new high-speed USB device number 21 using dummy_hcd 00:21:47 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) syz_open_dev$evdev(&(0x7f0000000040), 0xe79, 0x515001) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101102) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)=[0x10001, 0x8000]) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000002c0)={0x400, 0x6, 0x8001, 0x6, 0x1, 0x28d0}) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x400000000000000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/52) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x1f, 0xd2, &(0x7f0000000140)="d2d5306a2eeac0b0c2fe9a0de3246f0d72183aa0058fd43174572752e6a7ccd153b4cd51844bdec3fdd34df7cc1569c00eca6716d051abf7878d2cad7a1d1baba855466b5d68b1d684a9d4c1feb8ab4612807e6458f99cc5c61084bce5084ec925c80135b8029d43cac6955899a982f30f4f6a229877108b3e4f1d44526521b693c7dbd30f9994ede886bbb01ec3680a045792c03b22af5a0c06899a95f54f0224959621582fe01af44712cfdc2da8ab6036f27ccb4c93524fb8e517fff426da55b1ab9491cd18199a70dad15a96521a8130"}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x244601) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xea]) 00:21:47 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000080)={0x0, 0x200, 0x2}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x8001, 0xfa7, 0x1}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100, 0xa8}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:47 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0xf0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/156) 00:21:47 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/33) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/221) [ 3272.553499][T30893] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 3272.584218][T32516] usb 5-1: device descriptor read/64, error 18 [ 3272.943508][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3272.963428][ T1499] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3272.983450][T32516] usb 5-1: device descriptor read/64, error 18 [ 3273.123875][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3273.132947][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3273.141036][T30893] usb 6-1: Product: syz [ 3273.145263][T30893] usb 6-1: Manufacturer: syz [ 3273.149995][T30893] usb 6-1: SerialNumber: syz [ 3273.253463][T32516] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3273.373464][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3273.383246][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3273.392957][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3273.437561][T30893] usb 6-1: USB disconnect, device number 120 [ 3273.523393][T32516] usb 5-1: device descriptor read/64, error 18 [ 3273.673371][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3273.680083][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3273.689339][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3273.943326][T32516] usb 5-1: device descriptor read/64, error 18 [ 3273.950454][T30893] usb 3-1: USB disconnect, device number 73 [ 3274.063874][T32516] usb usb5-port1: attempt power cycle [ 3274.473270][T32516] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3274.643745][T32516] usb 5-1: device descriptor read/8, error -61 [ 3274.913703][T32516] usb 5-1: device descriptor read/8, error -61 00:21:50 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x6, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "3c452f10"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x6, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0xc8, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x1, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3, 0xb3ad}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x220, 0x7f, 0x1, 0x51}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x40, 0x6, 0xd7, 0x40, 0x4}, 0xf3, &(0x7f0000000100)=ANY=[@ANYBLOB="050ff30003071002146b000003100be41002b88d9dee1cf55857474fe0d7cdc0017cbbdf205013b52bcdbd9628ceda1959fbe7f3fbeacf4438268b52d0c9705eeec380c5481f072ebf31395e4ae951ccd45ec65eba5ffe48f2ed1403fce7199780d7fcc6f80651ca1017efd9e5ac315ba684ec641ea8adde8ea40300000000000000a33656e4060fcaf279b46f880d3872a595a43d2eced7fabb8f384aa96c72e618b1d1d741318db8c96fb2eedc17b337ea2ce69ee00b683ff720de02e5090a634f83314f3269dd283b551b70b3c86925e593107385ff8be1fcb5d79c6446df5cc1fdcea761fa13f67d2c38e243479c5e2423"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}, {0x12, &(0x7f0000000240)=@string={0x12, 0x3, "331155911027bdcdb17dfdafdfa0023f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2001}}, {0x101, &(0x7f00000002c0)=@string={0x101, 0x3, "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"}}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000014c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xa8, 0x3f, 0x1}}}}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x250, 0x3f, 0x92, 0x4, 0x20, 0x6}, 0x129, &(0x7f0000001540)={0x5, 0xf, 0x129, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xfff, 0xf0f, 0x3f, [0x3fcf, 0xff00c0, 0x30, 0xff0000]}, @generic={0x79, 0x10, 0xb, "09b02f25961fd60ba443c32463d4eebb0f67d360ff4a3a4d5154283930c0c54fb869d09296ac08a16543c01f4850e4fe94cedab93274af6bbb9b94a1801aaaedb485066ff73d2fcd943f3031610a45dc6a0dfde2f73d4bde030ee442f52b2ef7ff93c5e694a459c3af154fc8be6beeb6d0eead76512f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0xb, 0x3f}, @ptm_cap={0x3}, @generic={0x85, 0x10, 0x4, "347d2153fdbdd3e5677dedec0447b9a1cdf63af708f350111144b2c7209ba53f45f54c5ba024ebc805d79ca033671b4788cb03b0980acd4a79e1db07e013a12d7226adf75f40c8508d6e30616f3a56ccb67433eed1a00be2ced0095d1ca466799c82f88051f4e30eaf7aedee68735a90caf027d8bde65cc2c6598b6deac3c919cd0d"}]}, 0x6, [{0x4, &(0x7f0000001680)=@lang_id={0x4e, 0x3, 0xc1a}}, {0xbf, &(0x7f0000001780)=@string={0xbf, 0x3, "79e0622d27d8d5077ed599977d8ad484f1189799a0c7a205c631d1ed220eeb0adcb554240d21e62c4f022269b5cb98c92446bcec6e4b426b7e3d557eae929fc4ef8a07badc5e45b7bc29ea7bcf5708b77ac4fa502a8bb08a27acf9e6d0a17bf454cd18dfeb9b85ee9bd7b2d81606fc2b109293086ccdc262a13f577dc18f29cb70c6593a88df4840d875d01b53634bf68f4e4ee353e0a03ad315e543a15bbddc06c6aca324ed2b4880b972f3399a236ace69c10c644933fd3cad460503"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x421}}, {0xf9, &(0x7f0000001840)=@string={0xf9, 0x3, "6fb674296a8af8740c06d61187641b1450dbd6ebe9a24e9e5eaa89c8ed68abb3e317a31857696f14ed770685c1ede3002c73c4cf700448b298a127d730eb799d21e96d1adfe1291cf8d8cb18b702e408f05cd15703321d9ce4cc20b4d2c47d490a96dd9ef3059ed2ee59e7805a0d65efdc7e28b9898cd63c0de76a20c05c0652d2529d54c8e9dff11818c4387ba1adfe218cbc8127d7f96dfb3be342a00f89445801652c5a7f0d3690e96f99f995893973a247a91546d3906b41c4f512b2aa2c6f9f214ebb0d6e2dda55094e65b6d747d39e5c65c0ac27fb0cdf170c4f41977029808c3672aee45299b19c6ae712821fe5175682f88ac1"}}, {0x88, &(0x7f00000019c0)=@string={0x88, 0x3, "0c1ae8a453fa4f2f0d04d0754cb9b27566f0c798a3d73461166fd2b215d9fc100890576c25611f89b30a3ef4dea3a0d6238e8d967be9ef3fb98bd08a5c76430a3559f8b14aa5549fd65118e9df0bc8d4cf8f2c42edae579e7c4e1b80e9af4dfe0688a2f0ebbf2cdab51fd78315814f193424b96058ba10cb8d5b78f862b9490f5818f4c2b2a3"}}, {0x100, &(0x7f0000001a80)=@string={0x100, 0x3, "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"}}]}) syz_usb_ep_read(r0, 0x80, 0x100e, &(0x7f0000000480)=""/4110) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000001700)) syz_usb_connect$uac1(0x6, 0xf0, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x3f, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x9}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x3, 0x7, "2905f9"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x3, 0x4, 0xfa}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x0, 0x6, "d4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x51, 0xff, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x7, "", 'm'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x80, 0x20, "5806f40a"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x200, 0x0, "8490e64459b57f"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff, 0x100, 0x5, "7b338de3be81"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x3, 0x9d, "2bdc30867e4a43674b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x5c7, 0x6, 0x7, 0x0, {0x7, 0x25, 0x1, 0x0, 0x20, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0xff7f, 0x7, "e33386e0fa9b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3f, 0x8001, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x9, 0x8, {0x7, 0x25, 0x1, 0x83, 0x0, 0x7}}}}}}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x201, 0x40, 0x8, 0x20, 0x8, 0x81}, 0x5, &(0x7f0000001d00)={0x5, 0xf, 0x5}, 0x3, [{0x6f, &(0x7f0000001d40)=@string={0x6f, 0x3, "626b09b36097926c2fce9552febb2183b10603cbfdcb0479da4e0b43425ca59e5fe2ac5f5553ad6d42e47198e0fa9ba017f9b579d0e52fc32dbfabfa161b8770906d219c773d150b4abbf8b7552136ca0e235d6ad474d6a05a633b5a6ed99f84550e1892986320e114e47d9a95"}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x83e}}, {0x75, &(0x7f0000001e00)=@string={0x75, 0x3, "339e92307909a6ba9c6dcb2c8f9ad9dbff96a631b2fbb0f0df95029b984fb1f96cbfc141a927508007b965d24702294424727f11fe8a414b23a59419c6544e8b82eeff6d29e6592beff54fd8e0ab53d74421c2a6fe2828e186a34019e976ae07a03faccc64498c22901d10111af99087f50c1b"}}]}) 00:21:50 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4804b2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x268301) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/215) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/127) 00:21:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6fffffe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/245) 00:21:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/33) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/221) 00:21:50 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:50 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 00:21:50 executing program 3: syz_usb_connect(0x2, 0xb58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x81, 0x76, 0xff, 0xbda, 0x8178, 0x626, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb46, 0x4, 0x7f, 0x7d, 0x40, 0x3, [{{0x9, 0x4, 0x38, 0x6, 0xc, 0xff, 0xff, 0xff, 0x9, [@hid_hid={0x9, 0x21, 0x3f, 0x8, 0x1, {0x22, 0x332}}, @generic={0x3e, 0x21, "af580864f316d5eae1a3ad6b50e473d6c2d2b3da896e7dc836a6dabec4f9b44c4bce455917303eb6bfed085636507f39165b0379a21318f189527dc5"}], [{{0x9, 0x5, 0xb, 0xc, 0x40, 0xff, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xfffc}]}}, {{0x9, 0x5, 0xa, 0x10, 0xbf2bd67309f865ab, 0x3, 0x1, 0x80, [@generic={0xa2, 0x31, "943515708152d88bbe833eb2b041137eb4ba21d9d7e80998af6ed6ae9bf187ed25171cec696e12412db2ab6c5178a29b299037e1a9bcea09e1cfa46d450082d6416ad3fa0decce10f9981c63944ffc74a5e4c32c704acf5b109e93725b00f48dad55571e530a5c6ebe46401466cd57272230c841d3303a476ff06ee345da3522b8d84fbe6e5e53a7eef7f8d9082764b8448eada6e1ef03c0bcb559aa17738e3b"}, @generic={0x89, 0xf, "d834ac4b4b5c8fa002b1e5238d5d5e9336f329c138c7b82eb1287c29a63624507b29f0736a1156cba7bb32c7757854fc27d810cd7b60576ebeb35659645e289e0672d8fce18e9c8db7e0e4222c1cce0fffc93c8b69f44945b581d7d7d9be113fa5dc6fc963007ad6855908062239d0550b67a33796bdeb4d48ab868098e8866f9162c32ca4611c"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x2, 0x9, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0xef, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @generic={0x4f, 0xb, "4fd71fc5f0be291920220d2f427a8b1f62ebc4033852fbecde0d8495fd87c959badf65232ca7b2796fad806d59444acf4bb9ffcbd2c2f7bc1513ab0ee379aef263c2e3a0feda1d16640ac5d77d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3, 0xb, 0x1}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x7, 0x2, 0x7f, [@generic={0x5b, 0x35, "0a7ee8c99a598e297eb6e55c592e143a90521c77eac44ac84c2df915ccb20c80c9b7cda36d5e06f5940fda9b49b41cc84073fc4beeeaeed140f2f87179dd28f88741ccf3f075db7a11885dc258fb2d3c06d15596e1e5fb5ef2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0x8c, 0x35, 0x10, 0x6, 0xf9, 0x5d}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0xa6, 0xc4, 0xa2}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x8, 0xff, 0x40}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x4, 0x3f}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3e, 0x3, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x7f0}]}}, {{0x9, 0x5, 0x1, 0x8, 0x228, 0x8, 0x0, 0x2, [@generic={0xf9, 0x2, "7fe4e771f3ec8b68358ebee2e6d39c298cd1a410995538863b1642734f4af6f5a24ca78a6ff0dce0654f1eb3075739f595ad4a479ee1c39c5a56890df733b7827889f3115d0195f1cdedf45e42aa9da82ce5c815b4912345d686398f4f27b67a846762f46b447294b217989e1a744f00f2a422ae70b2c707111aaa0c39c5617cd25a0db9c4c4a6e6bcb499fbc32c7d506d0900b1464343b680fe775cc64279613132244f8c8640d2f0723e0d585a759e0cf22a2ba1411a377be59816db94ca1859d867a8f8427b0d5cd7c377622e2d4bdf1fc5b3925f78b75c7d78333ee47d544e697e52c974703661ab38bfaf9f661262fedd1e76b8a0"}]}}]}}, {{0x9, 0x4, 0x84, 0x0, 0x7, 0xfb, 0xf, 0x5a, 0xac, [], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x3, 0x7f, 0x3f, [@generic={0x49, 0x22, "248ed01ea2507a5aec9fbd0e106c2cbe6e738543c4d53facba97148b71003736a2f57047c48f60f779c7a962a602701183f2126ad78d4d6afd1466a9ca601bd891454a94a175ed"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0x3f, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x0, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x38b56599aa9ec8b3, 0x3, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0xa4, 0x5}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0xfa, 0x7f, 0x7, [@generic={0x3b, 0x21, "f1ff5a0fc7689b46bee1a4101b8e0a8c2801111469c1b055de2a0bbf20f4d1f016fbc5c00975fe76afffe80ba1a18502b82cbff768df52a7ef"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0x2, 0x1f, [@generic={0xe0, 0x6, "b283bf392364528e8ccb85c5141658415ec6ddba25cbe02e32c31043d6b7df47b90d8c97c3df15c6dc605bedaee55e5f63b42fced9f341490cb2e67f159350de17d9dc740e2262d5b2295a4ee25a81ec6c7e850a9d49dc5b1fbd95523353b07b78bec9af73b18aa22b880fd00aa5ebe094004162a6f3eb4c352efddea90f2d80266e88d0b2b5c6dc6880ed8b3423fa44b5e2ad96bcc3cc4a984929280007eb1d16ba6080194d046158ede5df53e64b5ff9ca8564ae8f717899910ffef583ac206f42905f806c29f815fa88c8d75e985acdb17545fd7ed353c26d96524075"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xcbb}]}}]}}, {{0x9, 0x4, 0xfe, 0x0, 0xc, 0xff, 0xff, 0xff, 0x9, [@generic={0x64, 0x3, "08057d6c2b560745d451b2da3b578a165d441c3c60d02b90b314857240c6b6e11bfbe79f14f4592fc113f92b55d2ef82f39acecf72f2aa349e106ec6e3656441814354dbf05d58e03e0e52a41d70c96445c3ac4c604c320e3ad77c9a7047143c76f7"}], [{{0x9, 0x5, 0x0, 0x3, 0x8e0247c4a2a9bc28, 0x1, 0x4, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x2, 0xa1, 0xe, [@generic={0xe9, 0x7, "f63c068b0c6bd86dd39c6caf86624687b57193b895b38a7fdbae37a2ec38cd7ff7a31e19d15732ddc619da7eb5e5320fcf330bc09602d42488babdf9ac9e2a20fa2d07fbe0953f3334fe7ee232c7388c9e833abffbcaf0443dad2f771f50d2d94d11decc8a8fb5740cf2a2a4f8eac37e04f31c2b3e13e776d7b5926816817f3c96c32b82c8570b991a8efdbc0aed899335fb0ac5774a9eef763d040776ad3a68f71e069490c693ebb45c15796a5e35cad7f86651730b64fd4876086fff552fca89c163b88e90d41891a166517546ff873b26927c0fae33f48dd037d90ec628ab96341486b753a9"}]}}, {{0x9, 0x5, 0x0, 0xd8da346798d2d878, 0x20, 0x7f, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x50, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x57, 0x9, 0xe3, [@generic={0x1a, 0x1b, "6bf26a851ef49475a9ec3da0efb9e1e1d743948aecfad245"}, @generic={0x5c, 0x30, "47dc52b5860bc45cbcd43366bbd8ef158fd7393f202b112226fd67b62d2df0c60f1252c5992d7ec0f6ec4b40708e4af568999dd728100194775c8f3e337364b237034e6e97475d16d884cd93865c9a4c07ea918e4942a5598ad1"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x8, 0x80, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5c, 0x2, 0x0, [@generic={0xe4, 0x23, "b36813e5b5a76d25bafdd016e890922d90e08e8623f1a4e908734521fdcc292ef0d5a3dd904f85415ff165233c1ffdd1e58a12698fffaa0038a9747024e18e29d9bd38d985f65d65e21ed8995eae0b14b2ce1db47e539ce8b75a304c1779cee004e6f9e94297d31ad5605e4521a5e09a7d66b98f4a49d14e8f8a72bc6e26646b914267980646652867dd850d871a008729f6f268a6532f8c817ebe34cb6bece31505993110336c5ae654dbc0e8888e7209bc2577e2311592364ac0396a24ea18d4966a5814819db7854e4117740f54be8adeb2ce8fa2b266e1dee6e00fecd9cf6ed9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xf50}]}}, {{0x9, 0x5, 0xf, 0xe, 0x0, 0x1, 0x8, 0x3f}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1, 0x1, 0xff, [@generic={0x6a, 0x451ad15e9ebda972, "2d50663318eeb8b8d55aa2349bdbeb9195031325eb3a42e4778aec12250012936c28242532852581b4cff04324ff1ca9abc7542473243edc9ad152223923599ae6e69d950d413945f808b59846da7a08ffd1a8bc041a28084a728d85f77702be4f3ebca0f9833489"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x2}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x81, 0x3f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0xe10}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x7, 0x5, 0x3, [@generic={0xb7, 0xd, "b31560940eb8e55e243d3ee85efcf52ebfc217a45be046c29f11a95cbf631579bdd8b8bac4f4e8c8c9cb9169b8e9de78493d32913e0dae389b14242cb40899b79523fd38d5a0115d4daa343900b470fbd28108a5fb996bb3c2c08de2e1bf0fc893f1f3d7e0d58eb6ed5dbfdb6448ede33d98a89ee9bc235989cd7e5b838639337279dd8a22f69d0eb7911957dac0a44d946ad2748b777e2357373d016a93c76c72c02a51c09465c53a363ab6720375fb87fbf3c779"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x623}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x65, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x213f}]}}]}}, {{0x9, 0x4, 0xd3, 0x3f, 0x4, 0x47, 0xe7, 0x43, 0x81, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4b, 0x1, 0x6, 0x40, "a7ec7cc2b99c72"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xbe, 0x1006}]}], [{{0x9, 0x5, 0x80, 0xc, 0x10, 0xe1, 0x9}}, {{0x9, 0x5, 0x6, 0x14, 0x200, 0x3, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xacbe89a201c44ad1, 0x2, 0x1}, @generic={0x34, 0x3, "81298fa58e868cbf41ca7cbcbc0e9765d4fa7a445e2af77bdf211cc41cd708e3d1cf33e332731939381c9a04ccb351b636c3"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x38}, @generic={0xb2, 0x8, "515da7246f1cf8ba9c8004d733b04074278e1d0c9a890b3952f1516b14d6554b9a8e18c26cde4cebd3ce8a948a3b8d34a6efb72b286243dd71488abca3373756e67e405c4d54fa45f0a4b76b82cd2d9f1af9cc49aed54c527dd44780ea7e1105c5cb6c94d952a0d2883387dead1fe5f531db3885a6e435efa7739c0502c0ac124f3bdc4529df8204cc7904cbf6007f620498f760f3bd3a9f801e62c3cb93654ba9ed9b50cfdf4721240604b3f772819b"}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x1, 0xfb, 0x0, 0x10, 0x85}, 0xc, &(0x7f0000000bc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x7, 0x8f8f}]}, 0x1, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_connect$uac1(0x0, 0xef, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x2, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3f}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x1, 0x1, "47a8164af58e"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x3, 'd'}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x5, 0x3, [0x1, 0x1, 0x8], 0x8}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x81, "8af86acfbe"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x51, 0x9, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x8, 0x7, "cec7c26a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x85, 0x20, "207c31efc681"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x20, 0x1, 0x70, 0x1, "", "ea"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x5, 0x2, '8L2', "85af"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x566, 0x3f, 0x4, "7d78a6a5eb63"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x3, 0x9, {0x7, 0x25, 0x1, 0x3, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0xe0, "debfa6f3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x2, 0x7, {0x7, 0x25, 0x1, 0x81, 0x28}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x310, 0x3a, 0x5, 0x1, 0x40, 0x5}, 0xbc, &(0x7f0000000dc0)={0x5, 0xf, 0xbc, 0x1, [@generic={0xb7, 0x10, 0x4, "177db051ca19891eb39edc1dee5598358ae1bb5de94e29b459ec110c13d9dcf24650809e01595778dd116562ad99158ec4f3a92db5013882c040a621a2c2350263a3f16d00ebcae5d281c2da1677b900578a8e28c592214d0bd96162b31e76afb53e2c812c4bef40e1d4359196efec39fad7f37c0f75d1d6dace61bf6b2718e6dffe6b4e88fb9b04bb3f9e4173f1ffcdab81e0dde081f36e799de9aa038d6dcf42dafc6956b4064cd1cb7378b2c6617965d9c74b"}]}, 0x1, [{0x43, &(0x7f0000000e80)=@string={0x43, 0x3, "b0d4111979b684de86d6f1e980c62b2658813a3a06a4494365b17f28f1d90ef3dd790525702dd739812b78beb222fb7fa65831b4259a369b4e76fe0825d9d8ec52"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x410000) 00:21:50 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6aaabff) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/179) 00:21:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000240)=""/33) 00:21:50 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "71588fde"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0xcdb, 0x6}, [@obex={0x5}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x1388, 0xa0, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x54, 0x20, 0xdc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x18, 0x9, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0xac, 0x15, 0x40, 0x3f}, 0x41, &(0x7f0000000200)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0xa, 0x7fff}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0xd, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e7d7cb642d65d2be53c7c7396e11f6a6"}]}, 0xa, [{0xe0, &(0x7f0000000240)=@string={0xe0, 0x3, "fdd90743f3fed420174767070fe844ec7cb5f2be7115d1593ec5a5486ca051234e5cd06c7b4fe83a4c725c0b72abca273182e764287fe9c0b228c19ec3a50ce3b70bc80e5d585c61684fa9d1879f780e4ed638ee2429e0eb90229f863256c214b6a847d027bd96dba3c6583181806a17faa9de53d108d47c64802e40e53f5d1f0b8cc3ef0252388f7cd85e89a54bc942237f248b8fc20de91fb827c52d02e6b7b607a4355d317b37ed7970898b0be1a3dfc5d68680f82374183f4d5f5beae01ef14ff5b6070adf60a186d0661c470bb4981563d3f2534da142e89957c547"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "4d14e116bc762c4b77e51b02da577e33c71c3e296f42c7e5911376dac9c1ba3ab920ff79e59a93d4df4d6caf26a89381d83fb3535f5c001ae600e17eaa84e873b8adebc065385dd299b75f3a1061891c22b61009b0d4e64f690202679611c9a26ba2397f480531353151e1a9d6afc991f1ca613513f76a173c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1809}}, {0xf5, &(0x7f0000000480)=@string={0xf5, 0x3, "a6d5ff11daf433f2ed396cede66795bffedc232223d8a6edab3ef45740fff3209a09d20436568100333be72d530c60ba35b33f34bcc935c37481a6a0f82a6e8a4efb8fbcf81dfcdca07b1f82b1057f551618421a0deab9b1120a347cda1c9725a9700d5f798d492d6a35b1a7cccdba0f9651be6d12090c2d751f58bbf8b7bd5386b8ad4448aa20bad7041683e1421b6f6ede6a47f06d66c16543cafb9f05923831c1334a9b27c002b90016e51f2780fad79f963512cd2cae595ececbd424031345e288c09b4422b86bd0171f72aeed871ecd8df62afe9f3605748eeeefe00ad7d1e943f8460f85c616532b359f45aa7c7346da"}}, {0x6d, &(0x7f0000000580)=@string={0x6d, 0x3, "b9bff4b50ea6bc20a7280bb716306cd06f50f5be3a5e4d503e649903941f694ffae87dc6e3d54c9945b1504ad80e4bc8017df266336c06005287d2b4f67b2a444ede5e942ac5de68bcf5cb43ba57a0713fb20b916b60bf762e5e21e5367c5be3d2271fec"}}, {0x9a, &(0x7f0000000600)=@string={0x9a, 0x3, "975167538766df8727fba89cdc52ecd2d3b5fef3ca4cf2469f585ea78dcb31d15a77060f71ff5bf3b1b833e532c11aaa45e3e5ba62a619a2ef6602de6030bac51c5023e9eceffa49403ca194eb22f8261e000ccb7d348a53ec2aec3878fa678374a0a92238d5388604ad13bbc2222a0de2d06b653353c5a9fe4b1804db4601798e83a7550b2e0a7a1a98ced40bbcea4f87d18de5569fbe90"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_connect$hid(0x9b92e70738b3abb9, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x4, 0xff, {0x9, 0x21, 0x1f, 0x9, 0x1, {0x22, 0xab5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xfb, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x3f, 0xff}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x151, 0x2, 0x9, 0x1, 0x40, 0x9a}, 0x137, &(0x7f0000000880)={0x5, 0xf, 0x137, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x1, 0x81}, @ssp_cap={0xc, 0x10, 0xa, 0x5b, 0x0, 0x7, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x70, "e811c7143f6b9dc98382b092fb25c53f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xe0, 0x8, 0x3, 0x8}, @generic={0x100, 0x10, 0x3, "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"}]}, 0x3, [{0xa9, &(0x7f00000009c0)=@string={0xa9, 0x3, "51ea5c1f5f49c3fbecc27274d52adc3840117104b391ab5fa8ecdbd12da414ed1060c1a70738deffbf2d83b3948fb1bb93cab12b5668713cdb9cbf2efd5f779802ada26d1fea77ca15c234eed2eb0c689eddc6c8ebd739f40c85646f8fb7872619a54c05c8e0f8cfec5f9c36a040ddd4bf2e16defbacc39c2bb378c2081dc3ea5819a9846ca816ae2cdfd71cec9f9a54bc3cb2884a8f7298eff0ace41b98110b1cf9d77583df48"}}, {0x20, &(0x7f0000000a80)=@string={0x20, 0x3, "14f70303dc574eac4c35016b25b9cf325a1b293850caf3a97f895b4714e8"}}, {0x2b, &(0x7f0000000ac0)=@string={0x2b, 0x3, "0dde2006cb0f1b72220816e20c2826abc240bec7da8fc4df853a4e0b70bf21e29e8fcc0ac351bd74de"}}]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000106d0486c040000102030109022d00010106803f0904000101030103fc09210200310122a50b0905090502032000403f35"], &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xb3, 0x5, 0x6, 0x20}, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="050f30000314100400273d32e0feb1faacc3bf0c41e40bbf46807661f86a5819c8b7c100"/48], 0x1, [{0x37, &(0x7f00000000c0)=@string={0x37, 0x3, "80fe9957deb68776ab74e3b6400d018d6f1ecf3aba9068d45f6d30f573f8f494a6a0aaac77839c122e35aec8bf9276ae06410687ca"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) 00:21:50 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/79) [ 3275.353229][ T1499] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3275.373231][T30893] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3275.403210][T32516] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 3275.433212][T28967] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 3275.493278][ T2641] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 3275.654228][T32516] usb 5-1: not running at top speed; connect to a high speed hub [ 3275.723644][T28967] usb 4-1: Invalid ep0 maxpacket: 512 [ 3275.733284][T30893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3275.742975][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3275.752878][T30893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3275.765783][ T2641] usb 1-1: Using ep0 maxpacket: 32 [ 3275.770985][T32516] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 3275.773256][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3275.781786][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3275.883177][T28967] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 3275.954468][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3275.963683][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3275.971663][ T1499] usb 6-1: Product: syz [ 3275.975885][ T1499] usb 6-1: Manufacturer: syz [ 3275.980480][ T1499] usb 6-1: SerialNumber: syz [ 3275.984587][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3275.994265][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3276.002259][T32516] usb 5-1: Product: С [ 3276.006408][T32516] usb 5-1: Manufacturer: ⵢߕ핾鞙詽蓔ᣱ馗잠֢㇆ย૫뗜⑔ℍ⳦ɏ椢쮵즘䘤䭮歂㵾繕銮쒟諯먇廜띅⦼篪埏뜈쑺僺謪誰갧ꇐ쵔鯫힛ؖ⯼鈐࢓쵬拂㾡絗迁쬩왰㩙䁈痘ᯐ捓亏㪠ᗓ䏥审옆ꎬ䠫릀騹樣槎ು䥤ﴳ괼Ն [ 3276.033658][T32516] usb 5-1: SerialNumber: 뙯⥴詪瓸،ᇖ撇ᐛꋩ鹎꩞좉棭뎫៣ᢣ楗ᑯ短蔆ã猬쿄Ѱ뉈ꆘ휧鵹ᩭᰩᣋʷࣤ峰埑㈃鰝쳤될쓒䥽阊黝׳튞姮胧൚络뤨貉㳖峀分勒咝᠘㣄ꅻﺭ谡膼휧淹㯻䋣ྠ䒉Řⱥ罚㘍饯闹㦉ꉳꥇ䘕郓䅫눒Ⲫ齯両ර⵮嗚三뙥䟗黓敜곀ﬧగ䅏炗耩㚌깲勤놙檜ዧᾂ៥艖諸 [ 3276.069307][ T2641] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 24 [ 3276.079291][ T2641] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3276.092394][ T2641] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3276.124618][T21871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3276.131859][T28967] usb 4-1: Invalid ep0 maxpacket: 512 [ 3276.138713][T28967] usb usb4-port1: attempt power cycle [ 3276.153370][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3276.159935][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3276.169060][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3276.286792][ T1499] usb 6-1: USB disconnect, device number 121 [ 3276.313427][ T2641] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3276.322581][ T2641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3276.330654][ T2641] usb 1-1: Product: С 00:21:51 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e6000309040006020701000009050000f5fe000000"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:51 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) 00:21:51 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x2, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3276.335115][ T2641] usb 1-1: Manufacturer: Р [ 3276.339610][ T2641] usb 1-1: SerialNumber: ᑍᛡ皼䬬ț埚㍾᳇⤾䉯᎑쇉㪺₹秿髥풓䷟꽬ꠦ膓㿘厳屟ᨀæ绡蒪珨궸샫㡥퉝랙㩟愐Ᲊ똢ऐ풰俦ɩ朂ᆖꋉꉫ缹Ո㔱儱ꧡ꿖釉쫱㕡ᝪ [ 3276.385395][T21884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3276.392705][T21884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3276.421309][T32516] usb 5-1: USB disconnect, device number 24 00:21:51 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:51 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) r0 = syz_usb_connect$cdc_ncm(0x1, 0x15d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14b, 0x2, 0x1, 0xff, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b76583"}, {0x5, 0x24, 0x0, 0x88}, {0xd, 0x24, 0xf, 0x1, 0x16, 0x4, 0xec0, 0x7f}, {0x6, 0x24, 0x1a, 0xffff, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x4000, 0x5835}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x6}, @mdlm_detail={0xc0, 0x24, 0x13, 0x2, "b5f7260cc3df3824227cb28d4a819c185f7d6e15b657ede63dd2150a08752ec20d195a9b0c24f1d34aa30a8512304b46d71368f492a2c2dc58281a0b1adf1f989c5c570a0189db9ed9b5a40d06b59965b26b0a4ed0b51deed42e7072414af7f54435228a85e39addd49e3f7073918fbf2d336e7b556e922eb001b1e9119cf388dae30a145a7108cff6b1ef740b8433f271cf17ee7221a064c67c93eb97d64719005ac707e22a7c3d1df8c1c6eae3b17f78861cb16e8eed41f8e17349"}, @obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0xadd9}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1f, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf7, 0x7, 0xf7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x1, 0x3f, 0xff, 0x1}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0xe3, &(0x7f00000004c0)=@string={0xe3, 0x3, "d07b94b0197ba7bbe5b9cd27ed4068a2be3e5ec602c0f64a6a7f5c37400dc5ea0393f64f449a7c22563d1028237e1c7d31f7d36838ebb0c7e2c93ad529f101d6ab8e71bce748465d810b4ee36f4fc3ce26b23227a5b9c1e442705999124779874acb135c1dcfd29a94b51cc507000000000000004de624ef2e6e0b0e9e6d83fe43d51b0cf7577295085ab9cd6f72c97419b288cc71265d285e9762752c8ef26722ad6045a5d92e227010ce0ebc23d656872f514d61a64547a78dc7a3dbafb9f2e4f312c1a1f18b63fd3930086945541c3479a0bbab76c66e4742f528a2767842ea"}}, {0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="3203d5f6039f167fbe6b44673e2836482c39ec41e0b2a278eb036b5409840d55cd168ea6dd38aa8ce499abf8d3385526ce7eaba47c8d1377d81aeb395929d339ee02727638ba86e763cc12aefa23f6"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}]}) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000019c0)={0x5bd, "5e25dcecf06f7d61a5a821b5c12b5a9e40268b5ba4a6f744403a2ec67dc138fe6f078c9014b472ba0aec99f1c233412655bb819e8d252da825c4458e641e2a3b7508f00a242ccf46af31af1e0922681111d6cd3bbc301e08c8260f536b5d5991a9f8cd3765f57c9b20c552a427a875081ccc416be4b3edf878b6c0f5b31354423f1c9b0eb7eff6f8572afb76424ea7405011b8576e68ac7659f6d5dd9a5329d9d272a7443091c5c20717504ca82fb4d5b27191935bc854245643c287e434bd5aa35a7bd9d66ce44beb77afe832f9a72c4180ba457ba78b0faef2e8b941a5ab181dd52f0479f43d4038891f5f249c7c8e0856ae872ffaeef7913d3ae021b387086b10473cfe65b12992f184e8f46f7e73e461c5f26bafdbc1c8e4d058fe066446df21d92dd48fa9639849bf3b1c4bd8c7a44c3f371cf94d1eb3dd25ee1874b2669cbe200d7d29a0a495e6a0253391b66534b079e701682009d977b0e2963319f3ec4d0d9e508c163ca4418deb94b0f07e1630453fae25567e551bcdb23b704d2346968a6f9a88023139b46ba9f95cf73a04c3b91b37027b352c625763f162dd10aaceab44655c763aef45ef10cbfabc8b8820e1b638867dd445dc9adfee8119822df9f8ac86ce87ae752b530002c772eae03406114e28b13020f233bd08fff42e141d5971d87659c7ffd3bf13f5da0f7a0124a7fac77b05092604d517d2eb88031c07bb2797b9d40f62db11457afe3b64b0dcaec870816e609da4fb8c8f4a056fbc6cf524371edcc25b9eb5263f48fd8743bdf513a93085c2295e5c143f23086362cf5e6a5379f5d53ccd51c20abbb91c22e96e9f9ab68d24feac23b823d17e148b109d6a567ec9c6b2fa2d710df1d15a1a77a9b14448d05777d3070aaccdaf6086a2c059f321df606aee0d90e67d96a3dec7341795c83127f67f43d0c823986c43f4cdde4806492a66dc8060855a73efe7780a677584653e60fe995a6d258c6583565746abb4219e9a9881c187638a364f6e64dc5f74c7ff65352007135609b1067c43bd014520095a1b69750cb03f4540cd74c8d985ecb3bed4b15a661fb3e2eca969d78b8d3d0c2077517e4786c13b74ad9b17f0ebdd2a522563f5793758debf2bb5843455cd5ad84c8c2d86367747f076b170ccc22e8bb54357f7ccea611b5d73c16e07e770bd4b49bd81b1bcb111ba10568e644170861277ae737691c4252d6a266c044cdf1f1582951727a14463765003091a314092aa82522c787237b17bf3a57d41eeab69a1360f2355849453acc5d9dd52413f923e90dd250498e33361fed4b241356dc60d97a576617f88cc1dbddbcf46691022a216be17949f4e603df4175af48cc00a7feee92d0b5ea4a295c896066c023277b9684abd31d586d0cdd9deff6561a600b4d0df1a640b910d75c0987ac07c7a4d6bb27e5bd7eac1ea13eb12da2450bfdcf8ade57d5523aa3c03cd60a15e096283e9ba563fff6108ee346c5a22e577995256a62565bcec213913c53d04ade686ed4d0b0a952c7b658b644ae88ae6258a2d5f75574dd1dc656340046e89e90df096c220618f6d3abfce187638ee473851d36223bd2871b1f67401dc3297ee72ac7dc3110f24622d1100d06c743a27f6f49b3060a9927576fa7b6e71074eadc6b0d5c7fd4b4e465ee8f7220b302c5748167c608f52e7e1bdb5061cd09d6f69ce5a6b72304fc848df9414dcbb28324d102fc21dd087cc0866fa68d8e7a65ba2c5e338dd86f996fababe2a44562289274b639d65c7f8303ac879659702f173c896899c80f7a1a83dfc77d502439ee18109a6e12aeb1304b54bdaa8621e53875e8a8e20da920752a2e2882e925a140b5580a7fc1b6a7bdea28998575c9949ba96ad76fe8877ad39bcc69d28b656833e4acdefe109b68017456cc0a559d912c210d3d8480210d0be6c85bf520da9dcfa172719110d139ea8152e75347cb48d28d92563a4f9c519365fc990b5a0b76167ecbccc84ca4f3f955bd974017681dd40fd5582aadf8857767dd79157ee30df0f351e83fb1f847efc0bf86fa2077999946ec8ce29f30e02c978"}) syz_usb_disconnect(r0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000400)=""/20, 0x14) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3276.490979][T19170] usb 3-1: USB disconnect, device number 74 00:21:51 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) [ 3276.563139][T28967] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 3276.653616][T28967] usb 4-1: Invalid ep0 maxpacket: 512 [ 3276.714061][ T2641] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 3276.726034][ T2641] usb 1-1: USB disconnect, device number 31 [ 3276.803116][T28967] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 3276.843138][T30893] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3276.883172][T32516] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3276.894114][T28967] usb 4-1: Invalid ep0 maxpacket: 512 [ 3276.899698][T28967] usb usb4-port1: unable to enumerate USB device [ 3276.973090][T19170] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 3277.213053][T19170] usb 3-1: Invalid ep0 maxpacket: 16 [ 3277.273974][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3277.323186][T32516] usb 5-1: config 1 interface 0 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 3277.333741][T32516] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3277.346777][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3277.373811][T19170] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 3277.473171][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3277.482448][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3277.490692][T30893] usb 6-1: Product: syz [ 3277.494927][T30893] usb 6-1: Manufacturer: syz [ 3277.499540][T30893] usb 6-1: SerialNumber: syz [ 3277.524628][T21934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3277.543285][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3277.552390][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3277.560857][T32516] usb 5-1: Product: syz [ 3277.565198][T32516] usb 5-1: Manufacturer: syz [ 3277.569970][T32516] usb 5-1: SerialNumber: syz [ 3277.613061][T19170] usb 3-1: Invalid ep0 maxpacket: 16 [ 3277.618552][T19170] usb usb3-port1: attempt power cycle [ 3277.796683][T30893] usb 6-1: USB disconnect, device number 122 [ 3277.856735][T32516] usb 5-1: USB disconnect, device number 25 [ 3278.063028][T19170] usb 3-1: new low-speed USB device number 77 using dummy_hcd 00:21:53 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x404001) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/47) 00:21:53 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) 00:21:53 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/236) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/197) 00:21:53 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x4, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:53 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) syz_open_dev$hidraw(&(0x7f0000000340), 0x200000, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000300)={0x2, 0x200, 0x323b, 0xad, 0x3f, 0x2}) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000140)={0x3, 0xffffffff, 0xffffffff, 0xfffffff9, 0xffff3af4, 0x3, 0x6, 0x401, 0xffffffff, 0x4, 0x101, 0x8, 0x6, 0xc2}) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0x0, "5de88b7fd07838eef002dc2ae2e28b8ce923f354c919b468916f54a74f73341150408d4d7e0179ce7563c00aca944fe3f319903bd0a8fb0d67a71b7298676765"}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000180)) r3 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f00000002c0)) read$hidraw(r0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) read$hidraw(r0, &(0x7f00000001c0)=""/212, 0xd4) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201c9a4400ab65eb46b2f02030109021b000101e6040099002100000092e8000000000000000000"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3278.164661][T19170] usb 3-1: Invalid ep0 maxpacket: 16 00:21:53 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x24, 0x100, 0x0, 0x2, 0x1, 0x2a4}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x9000000000000, 0x240800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/19) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x200, 0x3, 0x2, 0x3, 0x1, 0x1f}) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x6ba6, 0x10d000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000080)=0x1) 00:21:53 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x8000, 0x401, {0x3, 0xd2}, {0xfff8, 0x6}, @cond=[{0x20, 0x800, 0x2, 0x2, 0x2, 0x8}, {0x7ff, 0x4, 0x1, 0x3, 0xf97f, 0x7}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/59) 00:21:53 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) 00:21:53 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/49) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x0, 0x6]) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x7, 0x1, 0xb4, 0x6, 0x7fff, 0x8}) 00:21:53 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x605040) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x80, "7beaa3d6ac45acce60bb68adf038162eb339561414cfaa76c328cf083c718a3f85ee4c06189dca32a20f564683fe96aaa67a3058dd8ebe81f87b654faefa2fe4"}) [ 3278.323035][T19170] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 3278.433069][T19170] usb 3-1: Invalid ep0 maxpacket: 16 [ 3278.439120][T19170] usb usb3-port1: unable to enumerate USB device [ 3278.443023][T32516] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3278.463117][T30893] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 3278.723592][T32516] usb 5-1: device descriptor read/64, error 18 [ 3278.822986][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3278.993476][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3279.002897][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3279.011066][T30893] usb 6-1: Product: syz [ 3279.015448][T30893] usb 6-1: Manufacturer: syz [ 3279.020045][T30893] usb 6-1: SerialNumber: syz [ 3279.044540][T21978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3279.112941][T32516] usb 5-1: device descriptor read/64, error 18 [ 3279.306714][T30893] usb 6-1: USB disconnect, device number 123 [ 3279.382910][T32516] usb 5-1: new high-speed USB device number 27 using dummy_hcd 00:21:54 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "973ecf85", {0x1, 0x6, 0x9, 0x0, 0x8}}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:54 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) 00:21:54 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/164) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x904, 0x40002) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x9, 0x2, 0x7, 0x1, 0x20, 0x6}) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/74) 00:21:54 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x50401) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x2, 0x2, 0x4d87}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:54 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x5, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:55 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) [ 3279.653036][T32516] usb 5-1: device descriptor read/64, error 18 [ 3279.893191][T28967] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3280.042836][T32516] usb 5-1: device descriptor read/64, error 18 [ 3280.042848][T19170] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3280.172973][T32516] usb usb5-port1: attempt power cycle [ 3280.253340][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3280.413268][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3280.423078][T19170] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3280.433035][T19170] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3280.445939][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3280.455106][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.463259][T28967] usb 6-1: Product: syz [ 3280.467434][T28967] usb 6-1: Manufacturer: syz [ 3280.472124][T28967] usb 6-1: SerialNumber: syz [ 3280.494310][T22021] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3280.612865][T32516] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3280.703381][T32516] usb 5-1: Invalid ep0 maxpacket: 94 [ 3280.712841][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3280.719244][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3280.728504][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.760294][T28967] usb 6-1: USB disconnect, device number 124 [ 3280.852871][T32516] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3280.943280][T32516] usb 5-1: Invalid ep0 maxpacket: 94 [ 3280.948784][T32516] usb usb5-port1: unable to enumerate USB device [ 3280.994700][T28967] usb 3-1: USB disconnect, device number 79 00:21:56 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x9, "327d6e5aaa6b8fa65b7a43c463d96a1a59c2f7cd8160684f9f6af2dc350c0c327d005edefc814b51b165d9434f6ef3a44e148b681d97448116e7a032a1365ab2"}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:56 executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x13, {0x13, 0x22, "e752b665ed25dd0a6a1c94780f4c2339d3"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x6778143baf376b94}}}, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x8, 0x8b, "40e2022045ebb02d64306c217aa8b14f3afcac2908bdd8cd58fc451576a430cea5382f5930abdeed1ea26f0c0980ba828923bbecee44bdc85008d658b6996dc85e617cf8217777d53b9d3a3b35d7d302eb0a48735801b3823e8b15e2eecc7aafc172666004750a7b641e9fc0e529f19f84eb282cfcd43189a47f86d1e945caa3e58387562cc1916a66a86e"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000200)={0x20, 0x81, 0x3, "49b499"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "a414da"}, &(0x7f0000000280)={0x20, 0x83, 0x1, '6'}, &(0x7f00000002c0)={0x20, 0x84, 0x4, "4980bc28"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "ddf101"}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) 00:21:56 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x1, 0x2000a3) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)="6bad33bc401dac2bfc96acfd7152e496f28761e7849b52047866ee93d6ebf376b3467ce6e8bfbe4aaca4f01d314955b5b6920fbe0813a4fdbd379e532baa9fc1adaed3e83f026a05dcef7c2fc8ffb5f6c29c83fba2928af57c52844355349acd8c9c0ac97b84eaa208f9dbfed6d670fdb9fa1395") syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:21:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) 00:21:56 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x6, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:56 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000002c0)={0x40, 0x0, 0x102, {0x102, 0x0, "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"}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "063256af", {0x1, 0x1, 0x7fff, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xcc, 0x480800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/108) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000280)=""/59) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000400)=""/171) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000ff1f04c9ec2655197e032a1f0109021b000101e6800309040000020701fe00090501020004f8fe3f4e344aa2739e61965be8a399666d738dd810fb594325c73f8514fd75ee9853"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:56 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/57) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x100) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/194) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x86842) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0x8]) 00:21:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) 00:21:56 executing program 3: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000400)=""/120) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x4b, {0x4b, 0x23, "de48adb8c644377d3d5b46e13373bcf9753d749420a97bae0fc0356d6ac3ed27d53c6b762de2d84b447e454b85bcf7428f386199584dd7800e4828ef1ba1265d78d2abae218b8595ad"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0xa, 0x8b, "98ca873a786238f430ace54b1346e09e87f75001359b76189a6f41b6287629e47c1f72035dfd585815104c8b5fff2fcb1b5e08cdd3d04dc34b259a759349d39815b9b9e2619983cc1571586d44a1d13979be3d9adb9d813afa97969312d4ab3f4a0a029401cb54e7837736392e3fb2eb763419e07f1bb76f4e9cf4387283f383a9e4ff07675023a8a3556a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xc7}, &(0x7f0000000240)={0x20, 0x81, 0x2, "7f21"}, &(0x7f0000000280)={0x20, 0x82, 0x2, "b28c"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'P'}, &(0x7f0000000300)=ANY=[@ANYBLOB="2084230000b4048a44"], &(0x7f0000000340)={0x20, 0x85, 0x3, "6a0266"}}) 00:21:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) 00:21:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) 00:21:56 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) [ 3281.472831][T32516] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3281.582688][T28967] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3281.632697][T19170] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3281.822664][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3281.833610][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3281.973121][T28967] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3281.993577][T19170] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3282.003300][T19170] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3282.013056][T19170] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3282.023328][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3282.025981][T19170] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3282.035028][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3282.049735][T32516] usb 6-1: Product: syz [ 3282.054053][T32516] usb 6-1: Manufacturer: syz [ 3282.058744][T32516] usb 6-1: SerialNumber: syz [ 3282.083685][T22060] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3282.193356][T19170] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3282.202538][T19170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3282.210636][T19170] usb 5-1: Product: syz [ 3282.214867][T19170] usb 5-1: Manufacturer: syz [ 3282.219636][T19170] usb 5-1: SerialNumber: syz [ 3282.254066][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3282.259655][T28967] usb usb3-port1: attempt power cycle [ 3282.345967][T32516] usb 6-1: USB disconnect, device number 125 00:21:57 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x402) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="855076e2e896057355dac652066f98ce68543b8dc4e6dc10e5102441bbd7534fc662da393b67a7b4abc8edf25ca1635493cda7c3e5ee36c42e92dfc390a682919bdbc69b384ce7254dac5a509a8c8a7f1943b0a4cc51eff69994db85953ba3f97a6731a5bb2d2ad3950e84369d2f65645937f607f8f5a83bafb8c44366d3e840e6d910f2273ad6c8538139ee41fd560594f858397be3e3e169ce5e79f6e7ac") 00:21:57 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) 00:21:57 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x200000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/84) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x8000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/134) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/156) 00:21:57 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x9, 0x100, {0x1, 0xff}, {0x9, 0x4}, @period={0x5b, 0x24, 0x6, 0x38e, 0x5, {0x80cd, 0xfffd, 0x20, 0xeb9c}, 0x2, &(0x7f0000000000)=[0xb97, 0x5]}}) 00:21:57 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x7, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3282.547293][T19170] usb 5-1: USB disconnect, device number 30 [ 3282.702750][T28967] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3282.803136][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3282.902617][T32516] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3282.952636][T28967] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3283.043141][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3283.048647][T28967] usb usb3-port1: unable to enumerate USB device [ 3283.273067][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3283.443074][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3283.452877][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.460871][T32516] usb 6-1: Product: syz [ 3283.465078][T32516] usb 6-1: Manufacturer: syz [ 3283.469663][T32516] usb 6-1: SerialNumber: syz [ 3283.494130][T22101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3283.756143][T32516] usb 6-1: USB disconnect, device number 126 00:21:59 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:21:59 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) 00:21:59 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/46) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/175) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0xe6, 0xe0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf5, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x43, 0x80, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x2f8528d2c301cd56}}, {0x0, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x457}}, {0x0, &(0x7f0000000240)=@string={0x0, 0x3, "13c6"}}, {0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "fe605715e043228fa56317cb621e6a56ebf0332d6ef24336f0d8c3aad0fde9e28f799e8dc08eaed091a78fa2d5e2313617b3c88e2717ea0db48e44251b232a6b3f54e789d560a80ad627c48f23c5be4a4d5762a93aa1ae58"}}]}) 00:21:59 executing program 0: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000001040)={0x1, 0x3, 0x20, 0x635, 0x3, 0x3}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x1, 0x100, 0xfffffc00, 0x9, 0x7228}, 0x333, [0x80000000, 0x3ff, 0x7fffffff, 0x3, 0x1, 0x5, 0x5, 0x8, 0x0, 0x9, 0x75718f93, 0x8, 0x3ff, 0x0, 0x8001, 0x81e8, 0x6, 0x2, 0x8, 0x100, 0x8, 0x9, 0x2389, 0x5, 0x2, 0x31fb6f36, 0x7, 0x7e1, 0x8f29c24, 0x0, 0x6, 0x8, 0x9, 0x3f, 0x6, 0x390, 0x1, 0xa000000, 0x3f, 0x7f, 0x6, 0x5, 0x3, 0x1, 0x70000, 0x8, 0x401, 0x9, 0x2, 0x9, 0x3, 0x6, 0x5, 0x7, 0xf8, 0x6, 0x9, 0x80000001, 0x4, 0x7, 0x7, 0x0, 0x0, 0x20, 0xfff, 0x1, 0xf9b, 0x6, 0x7, 0x6, 0xffff, 0x8, 0x81, 0x7, 0x8, 0x2, 0x800, 0x81, 0xfffffffb, 0x9, 0x0, 0xbc, 0x3, 0xcb9f, 0x6e, 0x2, 0x0, 0x80000000, 0x6, 0x1000, 0x3, 0x6, 0x3, 0x6, 0xfffffffb, 0x3a, 0x1ecbd592, 0x0, 0x9d2, 0x8, 0x1f, 0xffffffc1, 0x6, 0x2, 0x52f0, 0x3, 0x6, 0x6b, 0x1000, 0xf, 0xa874, 0x7ff, 0x35d, 0x0, 0x89b, 0x6, 0x7, 0xfffffff7, 0x1000, 0x2, 0x9, 0x1, 0x596, 0x1, 0x7fff, 0x2, 0x5, 0x80, 0x6, 0x7428fdc, 0x71920dd5, 0x5, 0x0, 0x0, 0x9, 0xe313, 0x6, 0x10000, 0x5, 0x91b, 0xffffffff, 0xffff, 0x10001, 0x400, 0x8, 0x100, 0x8, 0x8, 0x8, 0x6, 0xd43, 0x5, 0x3, 0xff, 0xb09, 0x40, 0xfff, 0x3, 0x74, 0xffffff00, 0x1, 0x3, 0x1ff, 0x4, 0xadc, 0x7, 0xfff, 0x6, 0x48b9, 0x1000, 0x8, 0x1000, 0x8000, 0x4, 0x7, 0x10000, 0x503bcbd1, 0x7fffffff, 0xa5, 0x7, 0x6, 0x3, 0x214, 0x125, 0x2, 0x8000, 0x5, 0xffffffff, 0x8, 0xffffffff, 0x0, 0x3, 0x3f, 0x5, 0x101, 0x1d80, 0x0, 0xabf, 0x3, 0x3, 0x5, 0x9, 0x2, 0xc5, 0x4, 0x8, 0x81, 0x401, 0x2, 0x1, 0x4d, 0x5, 0x0, 0x1f, 0x1, 0x7, 0x8, 0x6, 0x0, 0x9, 0x9, 0x1, 0x1, 0x2, 0x3, 0x8000, 0x9, 0x300e, 0x0, 0xfff, 0x9, 0x3f, 0x8, 0x1, 0x2, 0x40, 0x0, 0x81, 0x1, 0x14000000, 0x0, 0x7, 0x20, 0x8, 0x4, 0x5, 0x0, 0x0, 0x1b0, 0x204cd501, 0x5, 0x4, 0x3, 0x4, 0x6, 0x556c7b2a, 0x9, 0x6, 0x2, 0x1, 0x6, 0x4, 0x2, 0x5, 0x9, 0x8000, 0x101, 0x4, 0x1ff, 0x100, 0xfffffe01, 0x3f, 0x7f, 0x95, 0x3, 0x4, 0x8, 0xfffffeff, 0x9, 0x2, 0x9, 0xffffff29, 0x7, 0x0, 0x8, 0x4, 0x0, 0x4e, 0x81e7, 0x4, 0x1, 0x7f, 0x1ff, 0x6, 0x8000, 0x7, 0x1, 0x40, 0x1, 0x8, 0x7f, 0x7, 0x81, 0x800, 0xca, 0x3, 0x0, 0x1b, 0x40, 0x9, 0x2, 0x6, 0x3, 0x24eb, 0x5, 0x7, 0xff, 0x2, 0x1, 0x2, 0x6, 0x1, 0x401, 0x5, 0x8001, 0xfff, 0x251, 0x44, 0x7, 0x0, 0x0, 0x9e6, 0x1, 0x1, 0x4, 0x2, 0x6, 0x6, 0x6, 0x8, 0x1, 0x100, 0x8, 0x8, 0x7, 0x3f, 0xb17, 0x2, 0x9, 0x707, 0x17, 0x9, 0x3, 0x6, 0x9, 0x0, 0x7f, 0x1, 0x1, 0x6, 0x9, 0x0, 0x5a, 0x6, 0x4, 0x7fffffff, 0x101, 0xffff, 0xfff, 0x8202, 0x4, 0xfffffffb, 0x401, 0x2, 0x7, 0x2, 0x6, 0x20, 0x8, 0x8, 0x1, 0x6, 0x5, 0x100, 0x49, 0x20, 0x9, 0x800, 0x4, 0xc36a, 0x101, 0x7, 0x800, 0x3, 0x0, 0x9, 0x0, 0x5, 0x10000, 0x4, 0x10, 0x2, 0x9, 0xff, 0x9, 0x4, 0x5, 0xfffffffd, 0x2, 0x3, 0xfffffffc, 0xce6, 0x7, 0x40, 0x7ff, 0x5, 0x9, 0x1b74, 0x8, 0x6, 0x8, 0x2, 0x7f, 0x0, 0x3, 0x10000, 0x591, 0x0, 0x81, 0x4, 0x8, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x5, 0x5, 0x0, 0x200, 0x10000, 0x800, 0x9, 0x9c, 0x1, 0x529e, 0x100, 0x5, 0x52, 0xd040, 0x9, 0xfffffffa, 0x0, 0x0, 0x20, 0x6, 0x8001, 0x80000001, 0x4, 0x65b, 0x9, 0x7fffffff, 0x6, 0x1, 0x1f, 0x47af7bcc, 0x5, 0x5, 0x4, 0x0, 0x200, 0x4da3, 0xff, 0xa8, 0x9, 0x80000000, 0x0, 0x1, 0x5, 0x9, 0x981, 0x6, 0x3, 0x7fff, 0x1ff, 0xfc000000, 0x7, 0x8, 0x401, 0x2, 0x9, 0x1, 0x20, 0x3f, 0x1, 0x200, 0xffffffff, 0x7, 0x0, 0x1, 0x8, 0x8001, 0x6a5, 0x6, 0x0, 0xffffff00, 0x5, 0x6, 0x8001, 0x4e715345, 0x4, 0x5, 0x6, 0x6, 0x6, 0xab, 0x4db, 0x5, 0x9, 0x7f, 0x9, 0x6, 0x40, 0x6, 0x7, 0x49b, 0x3, 0x20000000, 0x100, 0x100, 0x2, 0x1, 0x4, 0x8ec, 0x8, 0x7, 0xffff8000, 0x6, 0x7, 0x2, 0x9, 0x4, 0x0, 0x9, 0x1f, 0x8001, 0xff, 0x3, 0x3, 0x8, 0x4, 0xef0, 0x2, 0xcb6, 0x8000, 0x8000, 0x8, 0x981, 0x1d, 0xc37, 0x8001, 0xb26, 0x6, 0x2, 0x400, 0x9, 0x0, 0x1, 0x40000, 0x9, 0x8, 0x17, 0x64549d0f, 0x4e47, 0xb39, 0x8, 0x8, 0x85af, 0x9, 0x9, 0x2, 0x0, 0x1, 0x9, 0x1, 0x0, 0x1, 0x7fff, 0xfffffffe, 0x3, 0xffffff15, 0x80000000, 0x951c, 0x80, 0x3, 0x3, 0x98, 0x9000000, 0x8, 0x3, 0xdc7, 0x3, 0x1, 0x6, 0x9, 0x1, 0x5, 0x1ff, 0x0, 0x1, 0x1, 0x1f, 0x3ff, 0x1, 0xffffffe2, 0x523, 0x9, 0x7, 0x4, 0x1, 0xfff, 0x0, 0x7fffffff, 0x400, 0x5, 0xfb, 0x7, 0x80000000, 0x4, 0x5d5, 0x9, 0x0, 0x0, 0x6, 0x8000, 0x1, 0x5, 0x3f, 0xc706, 0xfd, 0x9, 0x8001, 0x8, 0x0, 0x401, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x9, 0x5, 0x10000, 0xffff, 0x1000, 0xf2, 0x5, 0xd3, 0xfff, 0x0, 0x1, 0x200, 0x2, 0x5, 0x5, 0x4, 0x5, 0x7, 0x3, 0x0, 0x80000000, 0x2, 0x81, 0x241, 0x3ff, 0x8, 0x10000, 0x5, 0x0, 0xfffffffb, 0xb20000, 0xffff, 0x2, 0x853, 0xbdd, 0x0, 0x5e7, 0x1, 0xfffff6a2, 0xffff, 0x2, 0x7, 0x5, 0x0, 0x5, 0x6c, 0x0, 0x39b, 0x3aec, 0x1, 0xffffffff, 0x3, 0xfffffff7, 0x20, 0x7, 0x80, 0x200, 0x7, 0x8, 0x7, 0x7051, 0x47b8, 0x80000001, 0x3, 0x57, 0x205e, 0x5, 0x1, 0x8, 0x8, 0x5, 0x26, 0xbc, 0x2, 0x0, 0x7, 0x1, 0x6, 0x2, 0x5, 0x7fff, 0x7fff, 0x7, 0x1, 0x6, 0x40, 0x1f, 0x26e, 0x6, 0x3, 0xfffffff8, 0x6, 0x13, 0x6, 0x400, 0x3ff, 0x2, 0x100, 0x4, 0xb4, 0x7b42, 0x800, 0x80000001, 0xfff, 0x0, 0x0, 0x7, 0x3, 0x4, 0x4, 0xf3, 0x100, 0x1ff, 0x2, 0x1f, 0x3f, 0x0, 0x4, 0xffffffff, 0x4d12, 0x2, 0x80, 0x5, 0x8, 0x5, 0xfffffce0, 0x81, 0x1, 0x8001, 0x3ff, 0x0, 0x6, 0x0, 0xec, 0x80000000, 0x0, 0x4, 0x5, 0x9, 0x5, 0x5, 0x6, 0x200, 0x0, 0x9, 0xff, 0x20, 0x8, 0x4, 0x9, 0x4, 0x100, 0x5, 0x8001, 0xffff3298, 0x4, 0x1ff, 0x95, 0x7f, 0x6, 0xffff, 0x3, 0x80, 0x1b35, 0x5, 0x2, 0x7fff, 0x0, 0x6, 0x4, 0x3, 0x1000, 0xbf1, 0x3f, 0x7, 0x10000000, 0x7, 0x80000001, 0x4, 0x0, 0x3f, 0x0, 0x1ff, 0x80, 0x0, 0x6, 0x1, 0x800, 0xffffffff, 0x16ff, 0x8, 0x9, 0xfffffff7, 0x1f, 0x26, 0x6, 0x4f, 0x2, 0x5, 0xd5, 0x67d7, 0x80000001, 0x5, 0x401, 0x7, 0x3, 0x73, 0x4, 0x6, 0x0, 0x5, 0x8000, 0xfc0000, 0x9, 0x40, 0xa1, 0x9, 0x100, 0x2, 0x4, 0x7fffffff, 0x7fff, 0x200, 0x401, 0x1, 0xfff, 0x200, 0x32a, 0x1ff, 0x100, 0x7, 0x80000000, 0x2, 0x1, 0x10001, 0xcaf, 0x5, 0x1, 0xff, 0x5, 0x99e4, 0x2, 0x0, 0x2, 0x0, 0x3, 0x7, 0x6, 0x7ff, 0x0, 0xfff, 0x1, 0xf0, 0x4e4, 0x100, 0x4, 0x2, 0x0, 0x7fffffff, 0x1, 0x4, 0x5, 0xb877, 0x6, 0x7, 0x0, 0x8b, 0x287, 0x4, 0x800, 0xff8, 0xff, 0x40, 0x8000, 0x3f, 0x4, 0x7, 0x9e6, 0x7fffffff, 0xff, 0x1f, 0xb945, 0x1, 0x9, 0x5, 0x1d53, 0x0, 0x9, 0x81, 0x800, 0x4, 0x5, 0x5, 0x100, 0x4, 0xffff, 0x0, 0x70, 0x2, 0x3, 0x1000, 0x879, 0x6, 0x80, 0x1, 0x2, 0x0, 0x8, 0x1, 0x4, 0x200, 0x96, 0x0, 0x1, 0x1, 0x401, 0x5, 0xcb55, 0x8, 0x60, 0x20000, 0x7, 0x401, 0xfffffffd, 0x1eb, 0x8, 0x5, 0x3, 0x7, 0x5, 0xfff, 0x2, 0x10001, 0x8, 0x370a, 0xe7c, 0x1, 0x3, 0x3, 0x8001, 0x3, 0x8, 0x0, 0x7, 0xa0, 0x7, 0xfffffffb, 0x1, 0x5, 0x80000000, 0xff, 0x4, 0x5, 0xffffffff, 0x4, 0x50, 0x80000000, 0x0, 0xa0000000, 0x8001, 0x80, 0x80, 0x8000000, 0x8e, 0x1ff, 0x4, 0x9, 0x5, 0x7ff, 0x7, 0x2e5, 0x401, 0x5e, 0x6, 0x9]}) r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) read$hiddev(r0, &(0x7f0000001180)=""/41, 0x29) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001080)=""/224) 00:21:59 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/138) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x400, 0x40000) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0xfffffffffffffffd, 0x80000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000280)=""/244) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0x1, 0x4]) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/235) 00:21:59 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:21:59 executing program 0: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/3) 00:21:59 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x6f1) 00:21:59 executing program 3: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x3f, 0x5, 0xaa, 0xa068, "01b868d6a91d2c6206e06dde03aa7d02df8e21a628548a2c0f5b7ca16f7f12c0"}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x9010f0) 00:21:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6ffffff) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/4096) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/81) 00:21:59 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:21:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf6aba6ff) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001080), 0x2, 0x2000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000010c0)={0xfffffffb, 0x89aa, 0x1, 0x9, 0xffffff98, 0x3f}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xf16) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x90a, 0x10006) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/4096) [ 3284.492470][T28967] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3284.542583][T30893] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3284.662472][T32516] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 3284.883131][T28967] usb 5-1: config index 0 descriptor too short (expected 66, got 36) [ 3284.891423][T28967] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 3284.901132][T28967] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 3284.904176][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3284.911009][T28967] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3285.042541][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3285.052311][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3285.062132][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3285.112555][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3285.113572][T28967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3285.121656][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.130697][T28967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.130722][T28967] usb 5-1: Product: syz [ 3285.138728][T30893] usb 6-1: Product: syz [ 3285.138747][T30893] usb 6-1: Manufacturer: syz [ 3285.146811][T28967] usb 5-1: Manufacturer: syz [ 3285.150903][T30893] usb 6-1: SerialNumber: syz [ 3285.155077][T28967] usb 5-1: SerialNumber: syz [ 3285.184372][T22141] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3285.203948][T22134] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3285.211293][T22134] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3285.352464][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3285.359430][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3285.368672][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.469356][T30893] usb 6-1: USB disconnect, device number 127 [ 3285.566144][T28967] usb 5-1: USB disconnect, device number 31 00:22:01 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x280c00) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000100)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="1201000000000040010203010902cf6b0101e68003090400000207010000090501020000f5fe48"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x500) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000040)) 00:22:01 executing program 3: syz_usb_connect$cdc_ecm(0x4, 0x75, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102020000202505a1a44000010101366e470904000302020600a60b24060000bcc400eeac6efeffff0000090006ff001c070080060005241500100c241b751edaef040068e13c3b80090581030004613f810905820210000706ec09050302200004001f000000000000000000001f1630b5bbd40b163cadcfcbb97f89fc95f02aa8633444535c5e24beb7fe7a39e9a1fafb285d5ed37e7a2d5e58b00000000000000000000000fffb"], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0x6, 0x40, 0xff}, 0x143, &(0x7f0000000180)={0x5, 0xf, 0x143, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x61, "745e57db6424fc03a8f2b12e5f5cc039"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "672496fcc10ac2160f58b3fcee461e12"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xafa9, 0x0, 0x5, [0xff3f00, 0x38, 0x0, 0x0, 0x0]}, @generic={0xf0, 0x10, 0x1, "9157e32a45cc2e9ea1b8ec39231cddbf75d3e7caf386748ae7f34f8b5fd4d513b1b6a1fabb8e5f40a3a27258cbd8e71f707e2570204dfadc4b13f86e8e12ec698e0d7ba96648a6a6173fec816b5213b4969ad2564f02757329375aed7a8a169c1b7d7bed6314f7f8b37de7b4ceaa4808e98b0bb88a51f97c8ad840a1b7996600ce52fe0c1939dc6033284e2198682ffa4cfc0e56b7c2e704b7715140a6727fc1099a40d620fdc0629bf289c7de6186a1f3b2b318c683606aec93d721e6d1f9c3593473b8870168da058c5dff2a2e48214a3a4a87bb73d533aab7d8da56b00e1293bb1dd1cb4e1b294162c5c89b"}]}, 0x3, [{0xa6, &(0x7f0000000300)=ANY=[@ANYBLOB="a603aca129823c4d0570c1c8b75c27dd0372c289ad3d3a4fb81e838938e1e8d93e93a34483ebefe91285bc1f2c000ff9b1b87c72d9ab0ef751423ec253ea9c5f85752309bab4fa1ea2ea4316751d6ed7a794171556b4ae003119563ba07d2fa9f8047ec1fe91935e6578a269198d82e9da615cdb3603d96b8d5056aad606e48590ca6e8fe0d8b9a9020f5be4094c3bca132c9d50bf02234804ee937100"/166]}, {0x4, &(0x7f00000003c0)=@lang_id={0xffa5, 0x3, 0x401}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "142ac9728347b487c07a5062201e3a4c8052ef8a8f9621fb3707008bce713d2c2b43095f965384cfb0568d81fa93cf7c4c00fc"}}]}) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x36d, 0x1c1241) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8001, 0x4, 0x2, 0x4, 0x85, 0x3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0xff, 0xe0, 0x2, 0x6, 0xffff, 0xdc12}) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000080)=""/32) 00:22:01 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:01 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x88802) 00:22:01 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x18, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:01 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x2) write$hidraw(r0, &(0x7f0000000080)="ee", 0x20000081) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x80) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x7, "110bd64006b358d151f0129b8679bafcfd3170212795a920e5040a69144af199c88e0885a7978a46b8d27359fc7001cb7ed5f8c533aacefc68110ad2d8ab897a"}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000180)={0x81, "cb5d8231d7a28e59d0cf07bf99a92a7488de53e0737d7d3043e0c83ca66ad6115b1c35cf5697b9e716c62017c1f54db634d4318d428d1a2fbd62485b029dac37"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="120100000000e53f2505a8a4400001020301090213000101e600030904000602070100ec080501020001f5fe00"], &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x40d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}]}) [ 3285.623806][T19170] usb 3-1: USB disconnect, device number 84 00:22:01 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x300, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:01 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/138) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x400, 0x40000) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0xfffffffffffffffd, 0x80000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000280)=""/244) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0x1, 0x4]) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/235) 00:22:01 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b00)={0x24, &(0x7f00000019c0)={0x0, 0xd, 0xb1, {0xb1, 0x22, "6fa049f988735cbb40c2f029083ab9c0a31857c9c307c64866c01397e284020637f03edf512b47128dabc58a57614817dede84523bc0f66a67de8ccda3c55ff314c97491202b34a407e649e12a9c60a738cea86712c4631182deedf4a548914b81794c1eeae7404908bd24d74361a8361ed6f4a66a1abf0c9174143630a43c1e372a134b0b545e69985e6fa093dffea3053848f1b90b20d7efb239847c56b2d07eb6df16f92552e7c5da2529f76857"}}, &(0x7f0000001940)={0x0, 0x3, 0x39, @string={0x39, 0x3, "09e3daa576b96239ac210f6023a87b08b366c9d7e01444b2b094b5a2794ca5599b13abdb3e60ddcacc77a55dacd8134ec5b916fed70570"}}, &(0x7f0000001a80)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x8, "8ece9e84"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x1, 0x0, 0xc, "be"}, @local=@item_4={0x3, 0x2, 0x0, "60184dc4"}, @local=@item_012={0x2, 0x2, 0x2, 'Z0'}, @main=@item_4={0x3, 0x0, 0x0, "080fcdf4"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000001ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xea7, 0x80, 0x1, {0x22, 0xceb}}}}, &(0x7f0000001d40)={0x2c, &(0x7f0000001b40)={0x40, 0x17, 0xba, "8989ace0f19271dffdb516f302212158e4174703a2fe0b7666ab1c5ef26b79d1c7ca4f0551c75cda9b9029f267460d1ae69b8d03ac4b9067e8e1654124791dbd479f253f82ff619e7aa1293e005595573dbd728c8d9d9e42c2f7412ef10f225ebee7e2e77fc3d3ff8a302809a09faf07059a0af59fbbfc791f933ddc7d8c69d68b98d5c1d3da199714a59346981adb027f068d6f9bf18a7adba365eb4f3585a9534eefe4f8356a21f80448d42b2a28139ddb43fac524df7b976b"}, &(0x7f0000001c00)={0x0, 0xa, 0x1}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001c80)={0x20, 0x1, 0x48, "3e1cac0614f088f08fff94b6b07a007e37d7e9124d11a3b98ec11fbe68e3a07742d02bfe4ac1ae3b45aef89c623fb7f1f7ce8797e0e42c9dfe9b2a1d3f7b379f1965ef148279b3b5"}, &(0x7f0000001d00)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xb, 0xb7, {0xb7, 0xd, "f7edbd07bdae46651b507043fb4682a5db07b6b22e5aa2ba1babebc78b80766ddf13e5c72d818ef85af999dcef2ff349743b92be5898a3d070719d5451557309a7cd8ab9557aec085c6202787551c799e68662435b4b7a2be365b6e0cb3ba8ad33c3f560456e03effc12e5ed0a4b89cd2423c3afb30202764f7db79c859f4d49ee9969225f3e6a121e6aedb886a1966c75af87b00c4dd84f7b8081393c5ab63e1397b6aca9895bf6ed8c7aaeafab3ce647d15cc451"}}, &(0x7f0000000100)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "c3116ceedacbeee9f51045dcfcb56516a8d4ea0be5ee9adbaed32649f76211a0c8bf93e49ce1eb211be64b"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0x1c, 0xd9, "180b25a54c63cda5f0f4ba03ce19a1f927abbacaa5c8a522cb10ce321c7d200f2f368610d3135855398235b0055730b83f91e664f13ba9b2002ad34e28cbef14936b660e6ef60068fd1f77e6935b2e9c975598824242c4c1d9953baa10e87e636c9ba5d2682a7cbb3298a21b8b79d9a61da95b0c11ba9506e04cc26683f16227cbf68fe4a4cd0892fd5f12566401af88902dab2fae443f2b340507001bc61978cfed8ea05c9dc28e8772cc5df0f1b8b82e22f82a4ab6e093c4485adefabd2412818b710d6345d139643ada55bb4d7bdafcf7d4744d707513f8"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)={0x20, 0x0, 0xab, {0xa9, "d082ac470da8edbba9afba6028c0f0a3be7748a36df4bdfc3a0bb89de21c00692082f465f280e4a4b4999b55d12a8df36e9b683ceac397ba0f30f8841c86044fc6ce0076fd516706515ff6a9ad8e8e1e0de532269b3e6a4216e32e1f20981979514bdee0950c5d4bb899322287cbf5bf317269678b48eca45404dee85e933505d5dcbd4febef35159af5488c84d56882be1818886a8cbe6e4b2aea046cb32fe3d07bb5aff82df4e523"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0xfa}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x0, 0x4, 0x56, {0x56, 0x7, "ae740a23b4ae187390fb1a47c8c580ce93e4ac1fe1e8c2358d7483b2c289d6e9d9289ea9e7e5fd5b363e876bdb63cc7f3bb62ed2cb21ce5476f7a68726e5f6882b39ea5aa55f9965330bb14db53b9f526ab32eeb"}}, &(0x7f0000000580)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "c547b412df11d60f5cbf53db76f4ea909551bbe8d262de798057d6c6726ae058275b95bc4fc4e2ab6ae2611f6c4d5176f947d1b20df45f64f924db745ac075c2413492fced59765a7d147ccf2569705ee696ef2dbbe979344083098570975e1faaa78d815e45d307f93b70fb1e6c9baac95be5d90feab86e1e70b922cc5055b01c25ae1eb459b61ea3819e0cc15f4c32fd29b57d3cc65e3448e28fa8678fda67ebdafccd80d7de5367b61865b917"}}}, &(0x7f0000001900)={0x34, &(0x7f0000000680)={0x0, 0xf, 0x61, "cad257747fa1b6b04ea912423417d50e46acde511a32428c45bfe9e9403d294e317713a88be582c6960f68d47f567c484b9a0f5df4d2946916ae58c2e51b2aa312d38191907ec191e07983fa31647153fec1dcf35ada0a19ee761aec2bcaa93b2e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000017c0)={0x20, 0x0, 0x97, {0x95, "0e9b8a3765cdbf520820478ff2788b4edb16fd0cd72208c256cb6ba7086619987195cb2d60245192660edb6abf6f946074d9030cb3b8c07d202a85e1712b47a03f7fc757a3c72d92d02513d47ef68cd70170cb925477ea74f81dd0ea95baaf2365e33484cf3cbec89806a594ff398dfc5879f97e5485f4ab3c6e39c89cd42b7b4cbb94b84f496e31d255b39ca353a64d7b540da98a"}}, &(0x7f0000001880)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000018c0)={0x20, 0x0, 0x1, 0x1}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:01 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffffffffffeffff, 0x400) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000003c0)=""/94) read$hidraw(r0, &(0x7f0000000080)=""/88, 0x58) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xcd, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x3, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x20}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x4, 0x6, 0x80}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x79, "8e7a7ea1"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x7f, "6b287f6a3b"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x8, "0a5b9cffeb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff9, 0x8, 0x4, "55e6e2e4fd"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x0, "921d91", "281f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfa20, 0x8, 0x7, "75ad732a93d4fe94a9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x8, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x64, 0x7, "", ']'}]}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0x0, 0x6, 0x9, {0x7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x81, 0xff, 0x81, 0xff, 0x1f}, 0xbd, &(0x7f0000000200)={0x5, 0xf, 0xbd, 0x5, [@generic={0x79, 0x10, 0x1, "3f760452c2b4cd6878948eb106170b1d4e8b747cab222b1304318d9c40a1a4a32c37620ff2e8790cf08c6f7b80c283ffd6dfc1fa7b8422f6c80b487bdfde122a4ce7230c7bcfb1c069749deaa73c15b6e0e68b321b9ea06647ab9e715796ca20dbe727980495f38307442fc22ea141a942fe7e43bfea"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x5, 0x8000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "753916236d75d93d7851577af9c7ad1c"}, @generic={0x21, 0x10, 0xb, "fce2ebc78e232ad6efbabcfe2bbf1ecce71f75037f556dff661407d62a83"}]}, 0x1, [{0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "b9a8a02d04323917d98efae35b8f5562159eaa893ea7f8479b60cc0a2b457f1897e4e6feea3086cc509fd27b11955419a526b799d5c1f08c1194de6ccfbfdff2fb64d66eee8745d2c77eb4e0efa8b74a30e89243f765204a"}}]}) 00:22:01 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) 00:22:01 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_usb_connect(0x5, 0x688, &(0x7f00000019c0)={{0x12, 0x1, 0x250, 0xab, 0x22, 0xe2, 0xff, 0x19d2, 0x20, 0x73ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x676, 0x3, 0x4, 0x7, 0x20, 0x6d, [{{0x9, 0x4, 0xbc, 0x5, 0x2, 0xff, 0xff, 0xff, 0x1, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "0f152c1632"}, {0x5, 0x24, 0x0, 0x47f}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0x4, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4, 0x9}, @dmm={0x7, 0x24, 0x14, 0xf3ed, 0x7f}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b806cf9ecc"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9f6f, 0x9, 0x7f, 0x81}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xab}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3ff, 0x5, 0x7, 0x8, 0x8}]}], [{{0x9, 0x5, 0xd, 0x2, 0x200, 0x20, 0x20, 0x3f}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x0, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x7}, @generic={0x43, 0xc, "a5029482ff713dda317992dc0a1e7d862a43c115097403c24e993da0593abb680370f8c1f99b97a2e7102f88274417a86490840173e9ab6e3300db326760f7aa1f"}]}}]}}, {{0x9, 0x4, 0x3, 0x80, 0x0, 0x1b, 0x20, 0x95, 0x5}}, {{0x9, 0x4, 0xf1, 0x80, 0xd, 0x86, 0x6e, 0xe7, 0x5f, [], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x20, 0x80, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xfd, 0x20, 0x4, [@generic={0x8b, 0x7, "c6db953d3dda7e2809b3f00e43284af3f913e63709a7794ea796e2b0065d4f314dff4491e794ebec1ae81ce1a856992061068b1e3461bafbcf5d11d3c7acd541dea7b4f91a23fcf45646f841169780ae49134eabcce0bbb36564249b8ba77205453be689c5cf741f878ee25be0733ece21a9159e109ede1bca359efb09ff46593a3e193590834b9316"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x5, 0x2, [@generic={0xa9, 0x1, "ff27a509fbe1f39f52c0ba18087da286edee5baaf31885a0f3a6dce132b03cbab692877555cdf209d74c11cdf072c3863b5b62e8757e44df05db97ad50d22f430c98fab86b782ebe36df99b05f8d9779822f5a61a63297d3f01fc1ad0dacc7e1c688137e33bd5fab22eb5281f9a3b5db3895ce70f9035a5ab3a0830b3e85db57be9dbfd7afd1e30dd113755f1dcff74959c5d10e608c38a2945d224147e3584fd32459c2dbd060"}, @generic={0x102, 0x10, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x94, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xa5, 0x1, 0x1f, [@generic={0x6a, 0xf, "8ec9370f802113f3dd278751d8b12c72ad9d3a20d1ae945f8ea883b773a77597c1ffe5f6c6f05fdb03c85aed6f08d79e1f451439d10eaf352df15fdc2654bdc6b73f5d868be3efbf9d904aa50f7df38126e01ee15904b3c62c85e4e455276d2ad21b2b32894fd2b2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x0, 0x8, 0x4, [@generic={0xd3, 0x6, "d49ae2d27ae3ec10e64d6a5d3ed9f57a7c8045c2f02d00e8ff4233898a6f95ffbe8fd3b908783f84de66310d96cfaa007639c71ba1950bb9e570c04e7122ff3e89426b42202b37f48007c75245923a0687ecd15346d6053487a9d74dca788ff9f05fe23f3381328037b75d8894175da422322b6d086fa562582fedfcbf72b5f5e10d265656b43d07b5fd2f7ad32a57c13dd64a742fd3e012dda35122feb7f9eaed2f5b3167b5caf0c8516d4374ea83dfc03a80914b3edff4807019348b0b3acbfc27ac3a6f9b50dc59dc8b7cf0451db831"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x7d, 0x8, 0x5, [@generic={0x14, 0x31, "7f0d08838def7a77bdb1aa0588bef83b616b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x4, 0x40, [@generic={0xff, 0x21, "fb32cc13d78a163b86a541fdd557bcfd34b9235840ec08dd67662dd0e9261b7bee4fae4c77340a3a548b7b364cc910d5a84464b407abc6d1c0ce537f88cb515c9712e6284db934093daec1163eec733ecda65ceb020d1c927995680442fe4cde342c9d5daf7e392279c676ea09d7aa0e8b021d8f3f4b6caa9957d41bf45fc70d14c39576833a69ab89352465f3f9571aa552f50b97d39d6108e224f00c662d0e53545cbace2a8acf30f1e342c6741adb7073b7357c943595299a241f2e1daca6431c6d144914b1218da5488e544fc0e1fbb64ea7744eebc9f3ac94b3728e2f64acd1d37c7077d68a6da34e62cf9665cb85038e35fb4c72e01f0fb79025"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x8, 0x2, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa4, 0xa800}]}}, {{0x9, 0x5, 0xefb205113e05b599, 0x8, 0x200, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0xae4a}, @generic={0x2c, 0x3, "fd6b6b119efc531e3d23172b1cbff0705d09a39d3615d88c528e67e31ca8df0b67a59caa57e0afbdaf99"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf7, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x98ee}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x0, 0x5, 0x3}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7f, 0x6, 0x16, 0xff, 0x1}, 0xe1, &(0x7f0000000240)={0x5, 0xf, 0xe1, 0x5, [@generic={0x86, 0x10, 0x1, "c9159de6ed69eb78a8ab73879769d8f8efe88838fc77812020cfb3703b3afbe20c309a28fa0db31b7f70fd18139454b2c49db0a35239f8f692496a193c9e60df8a48052fadeafda4a310f22d3f07beda4a347be64741b7d244cfddfddd8e44efe6d4f4face27bfb5a0479cec5957a021a6910fe924870ba9b2a74a5c78a1d27cca8494"}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x7fff800, 0xf000, 0x7ff, [0xff00, 0xc03f, 0x30, 0xc03f, 0xf0, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf7, 0xac, 0x400}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x2, 0xf00, 0xfffb, [0xff0000, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "31d13fab5941c64752fce2cc17646a34"}]}, 0x1, [{0x102, &(0x7f0000000340)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000100)={0x20, 0x1, 0xb7, {0xb7, 0xd, "bb6f6f327f1d635f7cea9c65b63dfda0bbad69b107d9cedc94f04f169995e71e52c20a84c7ef01c9b6b76bb17608b820f067cd3d6cadf11967842657fdd9fa590049ef3bb52fa8e0dc2018bf2033bd2d32d84477b1079c0276c684117568086ca42727e453f7ae157ac9b78c69f778b14ccab244fef0cce22ce57d70e4b3e68c2907688ae54e7201025a29b053ef3348bc5ca488174447290d1fb4495f1e9113cb8384f7cbef6dd321f78a7408e5d650c641cf9b19"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001780)={0x44, &(0x7f00000004c0)={0x20, 0xd, 0x51, "6d5c7915b39838b01b259b56f9a432a0ab4ed24fd830e050e8e06aa0d0a26c9cfae3fcda1309e80374eebab40cb6024d9acb13575a58f4dbdafbab6651bf7c102672d26942cb41e996128ce16458248d9e"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x1f, 0x7f, 0x4, 0x0, 0x5, 0x2, 0x0, 0x8000, 0x7, 0x800}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) syz_usb_connect(0x1, 0xa00, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x9e, 0xf8, 0x9f, 0x40, 0x489, 0xe02c, 0x8641, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ee, 0x4, 0x7a, 0x1, 0x28, 0x1f, [{{0x9, 0x4, 0xdf, 0x6, 0x5, 0x5c, 0xbd, 0x5, 0x20, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "9a710ce65584"}, {0x5, 0x24, 0x0, 0x3bf3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x40, 0x28}}], [{{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x4, 0xfd, 0x6, [@generic={0xe5, 0x6, "70b0a9323bf3301ccdcca825a197a152eafdd107b70f9a7ed381fec3e6df33c555b139a0ecba839301b428c96deb5901d4e3ca9de2f3aa0263b4a382163d0577e1497dbff107fda65df9d7da227e27ad37f4644dcf195c7d622231fb97cd1fb9dabc0e056295ad6c2759944baec10c7767c17f9ede7a48c1328bcbef03268ff69e216bf6e194644fe0edb2be934f1f11f3ebd6cab9f2f3731e93e86e9901e0c5bdbb021b8a306ed8568f92811ceecaaaf0eacaaa95ac874c06aa314568afdac37975713ad221c7b19ffc36ff9208b47af6d41e9b4ab60fb11ba730346812ef53fe755e"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x6, 0x8, 0x7, [@generic={0xcc, 0xf, "7bbe8290d90526f0c2fe4b1af0105bf8048acc60fc1db5898f416743bf86f7b4049123a467d6f6ec7d9beceac7a34c05b34414dc88dd8f2374d43d187ee50a3d704c3676434c4bb60ef8a25e9b6fe79c1e20040986ac935065ce577716c3f2e02300119902e441ae9bdc60f1724b7a8972ecc847638a1d8788ffcc294a9ba62174c0685b707c664abbbf976941dff60f940b07c1c104d3334585d9aac439e1214aa264c58e8094ce6e01199250fb2e96fe419f5cbb2b369a6da3eebfec211b52d8ef5aecc0f8d45d7b5e"}, @generic={0x72, 0x21, "e19da33d5cc7f170245bd91086748c470e1d8814d829a889a98471c608dfad19010cfaef7b660d1c706894c0b8dd773b7e11caec34b10f2869bdef942aaa262a03551585a7fb5c81987aaf7416cbdfa987bf47d168356518bc58aa4851fd15d772ef2052af6accc56f2f4c815e4a809b"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0xf8, 0x80, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7, 0x6, 0x7f}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x7, 0x8, 0x4}}]}}, {{0x9, 0x4, 0xaf, 0x7, 0x3, 0xea, 0x4c, 0x7e, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x5}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xfffb, 0x1, "171081"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x4, 0x5, 0x200, 0xfa, 0x7}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x80, "eedba2524b"}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "48556cbbce"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x2, 0x7, 0x4], 0x8}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x8, "a6ad5d"}]}, @uac_control={{0xa, 0x24, 0x1, 0xf6, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x4, 0xff, 0x8, 0x9, 0x1}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x81, "38114ee943c4"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x8, "fc7f2d40"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x7, "278c"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x20, 0xf8}}, {{0x9, 0x5, 0x80, 0x8, 0x600, 0x1f, 0x3f, 0x3f, [@generic={0x3f, 0x4, "1375ab296cd59fd5439da8900ce3b73fa1ae5af2d9de82d7e84b277256c539c177538927656944fb28cbb525756ff448b0b316af6759d4ad4b088e75e5"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x420, 0x1f, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x100}]}}]}}, {{0x9, 0x4, 0x5, 0x6, 0x7, 0x73, 0x9b, 0x12, 0x9, [@hid_hid={0x9, 0x21, 0x8001, 0x80, 0x1, {0x22, 0x66f}}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0xb9, 0xcf, 0x1, [@generic={0xde, 0xc, "3cada901596fd9da0ccc01922d0a2a71da7f2e396cff6400358c82772ffdfab783585699171f42687e63ee7163d46468dbb95008263f4f64afb0d96f16d5da9f2a862d42b3857a14aa1d63bebd543ab2cc38aa5a1a52646af86719caf352aa5acb2b5187b8c8ae49b3ca3daa316a26e5119d02929abaa3aa17f769173858cf73a86bb3191d1d2c9bb70baad8846f11270a73e6ee76fdc626dbfc71f8499480d731b7c0b7ec513e31e295e12f00e98cf41f5192a31141e2d13eee078868bd12c0412531d3609855316a4aba7edafd2044f82094c512c6cf6e760ecc18"}]}}, {{0x9, 0x5, 0x87, 0x10, 0x400, 0x1, 0x6, 0x0, [@generic={0x9c, 0xe, "e7184592f3d5eb78848c590c233e5679437ad6fe5c7936e8d77e297f93c903d5f99bacfcbb8a3fab7722b3e0107a41ab0800f72de78b4aae9479a8943035755f1b141b417394dd569ff67663ac6c03922c2511544abd895d443fa8e1c74ec57a87960ec2040a277af18797b58628c1c3d4e07594e22ff57830edc483e9f7e86b451ed1d789b9f260ca4448188e90c311c082fc4dc4704de5114e"}, @generic={0x4f, 0x22, "581d2afbe77a09e7080b5023499a400aceb8ec77be8ceb5fb4d415d4a1606c78ccf380f09ace72819f67b18931be3ebe2bc889ef2c30811524114f5258e6c866471fa8fec44dbb08047225ee6b"}]}}, {{0x9, 0x5, 0x520e49f50892d72f, 0x4, 0x3ff, 0x7, 0x2, 0xcb, [@generic={0x69, 0x3, "a56816417be76f306f6321da7f75ad34b3f04eca9eb46d46829c0a6dd08c543eac57336c40073321d9c99cc9bd1d9be26eb7626bf80891b797746dab544ac049218993d0c12011c5497cfddfeda7da234d8ff9557608195a8d2a9f8d317ebb227e5a28e0c6349a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x1, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x4, 0x6, 0x1, [@generic={0x56, 0xf, "cb0d6da41408d82be5109d1d36857e2c77eb209a59c8b1a4193f86b5520c7e871c5ae3d32f188027fe0cfa3cf63051e933730f7b6074462ac59cbc468fd418e9d12ebba96479f7d9d0284b103ae7eaa4d765e387"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x1f, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x650}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x0, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x53, 0x2, 0x8, 0xd4, 0x1c, 0xba, 0x20, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x9, 0x1, [@generic={0xb1, 0x10, "b8c589abdcfe7e1e0f2172f090491f4b566866b3c3f5d8ea33daafb59f03fde77acd97ba08af325bdbc5ff698a8c6cc7a05bd1be4e66efa791709d52faf47545dd395c3a56bdaabb6a43ff163d5b4831ee88edfea6cf1c16dc45ea59c0c31982bc8751566096a2c55595944fb2cfe377f9c1930929d0b81d73030b753659827b7a490ea36db83f717546a93046830e2a67be02b0b8708d1841685ba42c13929175c65dc7a7ca92a7f3df7248d767ac"}, @generic={0x93, 0x21, "a50513cdcbe6695f483a83a3bf845978bc1d971f8adde50a1e8e5061a2cd05f61002fb221056b55d038014d8a81942d8bbb759cea9a1171fc73ef68adc0b094ee2a3f0390dc1367a07e9b9a76bf5b1880143ea8e9ddb388d67f12ecda30669291eac40a02d120fa3472b1d9c0172957d6eb67fee3ac3d20a08cf22d46d9dd3251053081c67805f454a40087417482acbc6"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x40, 0x20, 0x1, [@generic={0x92, 0x1, "ddf99f01e8ff3c77fbf06b77faafd3d56822f0f580deeeecfc00d09d9a02176f724fb3cc647d82b2e818b4b89f0b46ec8c12e2425190306c62d5060f1a3883ef3c4e797c199dc2aa2e61fc73b9a315fbcd4b494f9ad9bfb0b5e64c91d14b6200a6dba4e4b803f0aa01369bdad27ae402de6a805a41722ef8149e63a4f46d2c254840cad661544fca1403ba9d130bc12f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x82, 0x9, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0x7f, 0x1, [@generic={0x73, 0x10, "4c8dc8ad6bfa3c70b440de68a3adc99875befb770c68349cdda41a547b6b17f0453417009ebdcafef4c4746d99a307eba956cc3076633960422fc34bc63e2d54dca491413aedfd0be4b82dec299fd43f5da482f7b8b649a134bd016b305036008978b24cfa74f94609bf0a01cd70fe594d"}, @generic={0x3e, 0x8, "44440be3a4038f68d259509c4781bc822156edf35b71a8ea72abe18302c0681008d23f5df12b9f852ddfcbff989a3fb7d9b5903328fc1a5dbcf6990f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xc0, 0x6, 0x81}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x3, 0x20, 0x4, [@generic={0xa3, 0x10, "e0afc2efe4ff14f7825196f66db138ae4167d2fc62f679072e8dab4ed1b23b09d575fe1b320c3547b432c1936a3b18397a433f25d038f17cdeac6db4eb96efd8819c09fd9396410741da10b9aad54ddee398a68c6fccc0dd875720a34cd492ad33a23187d230d9c395742bb33dfa9b0b74a16620d2babf2bbc80e3af67ba77f56bd63fa8c1f3000ae7fa4ab96bb140dbdfbe07cf39c4ead190008f386ff452b4b6"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x9, 0x52, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x0, 0x1, 0x4}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x1f, 0x8, 0x9, 0x10}, 0x231, &(0x7f0000002a80)={0x5, 0xf, 0x231, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xb1, 0x9, 0x7, 0x9, 0xf7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0xe, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "fbaf057841f45f9bb3155a9708f59050"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x7fff}, @generic={0xff, 0x10, 0x2, "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"}, @generic={0x100, 0x10, 0xa, "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"}]}, 0x2, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3286.052357][ T1499] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 3286.202339][T19170] usb 5-1: new high-speed USB device number 32 using dummy_hcd 00:22:01 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f0000001040), 0x7, 0x80000) r1 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001000)) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/4096) 00:22:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x8000, 0x401, {0x3, 0xd2}, {0xfff8, 0x6}, @cond=[{0x20, 0x800, 0x2, 0x2, 0x2, 0x8}, {0x7ff, 0x4, 0x1, 0x3, 0xf97f, 0x7}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/59) 00:22:01 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/236) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/197) [ 3286.253199][T28967] usb 3-1: new high-speed USB device number 85 using dummy_hcd 00:22:01 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/236) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/197) 00:22:01 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000240)=""/33) [ 3286.472409][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3286.542318][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3286.622399][T19170] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3286.632152][T19170] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3286.641839][T19170] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3286.654679][T19170] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3286.702439][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3286.711645][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3286.719775][ T1499] usb 6-1: Product: syz [ 3286.724106][ T1499] usb 6-1: Manufacturer: syz [ 3286.728699][ T1499] usb 6-1: SerialNumber: syz [ 3286.733419][T28967] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3286.764308][T22209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3286.872448][T19170] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3286.881604][T19170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3286.889695][T19170] usb 5-1: Product: syz [ 3286.893921][T19170] usb 5-1: Manufacturer: syz [ 3286.898503][T19170] usb 5-1: SerialNumber: syz 00:22:02 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x500, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0x682830) 00:22:02 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/236) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/197) 00:22:02 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x6f1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/130) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/185) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x4, 0x75, &(0x7f00000003c0)="85111f5a0155387535b6bc3ad13342352ff5282ebf90173ca9ed0facd080ad912a68ee3e4477f3b515f8d80aa9deb4c0130a0bb3533e26ac8b36f21194ee76fdb77f35f3beb2fd328ee25ceacdd91e939f449eaa5c5e26af7c8e77ff5f533430db170865eb049c386ebf087c94c82c01822b24a673"}) r4 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/79) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000240)=""/33) [ 3287.022375][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3287.028373][T28967] usb usb3-port1: attempt power cycle [ 3287.059682][ T1499] usb 6-1: USB disconnect, device number 2 00:22:02 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/87) 00:22:02 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3287.197133][T19170] usb 5-1: USB disconnect, device number 32 [ 3287.462237][T28967] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3287.552880][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3287.622251][ T1499] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3287.702221][T28967] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3287.792662][T28967] usb 3-1: Invalid ep0 maxpacket: 512 [ 3287.798172][T28967] usb usb3-port1: unable to enumerate USB device [ 3288.002220][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3288.192601][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3288.201697][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3288.209788][ T1499] usb 6-1: Product: syz [ 3288.214014][ T1499] usb 6-1: Manufacturer: syz [ 3288.218690][ T1499] usb 6-1: SerialNumber: syz [ 3288.253161][T22266] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3288.525672][ T1499] usb 6-1: USB disconnect, device number 3 00:22:04 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0xfffffffffffffffc, 0x101000) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:04 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="7c3725f93c65335b5b7d838c492c67fca247e1670e375bb2e1f2e8469be113119a9c14d1943958b2e5b6c23fc4861fdadcf0dcf123a5f19986ef5339e537a75504bf4ff918dd0d105e2d9cba62117385dc01b354541f3dc4ad1f06ccb350051e9a5a90b6ea5b377c140e7b292f4c9009cf3eb7787e7d00d768ce2263ef63411740581304c8") 00:22:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/236) 00:22:04 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x81, 0xf, 0x20, 0x8000, "d3df6b2cc0fa5c84d7aba5297d791481697f630102e5b0838b3f8ee44620aa39"}) 00:22:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x4, 0xe27, 0x7, 0x8, 0x8, 0x800}) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/56) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:22:04 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x700, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf69bfb7f) 00:22:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:04 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3, 0x3f, 0x80, 0x7fffffff, 0x890, 0x8}) 00:22:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0xf0) 00:22:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:04 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x40, 0x40100) [ 3289.302198][ T1499] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3289.312188][T32516] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3289.432033][T30893] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3289.682644][T32516] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3289.692478][T32516] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3289.702177][T32516] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3289.704457][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3289.715011][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3289.852091][T30893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3289.861788][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3289.871474][T30893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3289.892152][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3289.901433][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.909546][ T1499] usb 6-1: Product: syz [ 3289.913837][ T1499] usb 6-1: Manufacturer: syz [ 3289.918439][ T1499] usb 6-1: SerialNumber: syz [ 3289.922115][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3289.932314][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.940315][T32516] usb 5-1: Product: syz [ 3289.944570][T32516] usb 5-1: Manufacturer: syz [ 3289.949177][T32516] usb 5-1: SerialNumber: syz [ 3289.957482][T22294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3290.162044][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3290.168327][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3290.177531][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.259300][ T1499] usb 6-1: USB disconnect, device number 4 [ 3290.266191][T32516] usb 5-1: USB disconnect, device number 33 00:22:05 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0xff, "3f0f1648f43dfbce40becd58a05eda4c333b98f449f3aa1074ee2ddf78a2b2c1c53d7fbabfa774d61afd3d7ee141972a056fb426da9122883c2f3a9803bb3c25"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="1201000000002505dea20101000000000000010000090501b5"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x80101) 00:22:05 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:05 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3, 0x3f, 0x80, 0x7fffffff, 0x890, 0x8}) 00:22:05 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffd, 0xf0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/157) 00:22:05 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x1800, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/232) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0xff7, &(0x7f0000000740)=""/4087) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4400001020301090224020101e60003090400060207010000090501020000f5fe000905820240003fffbc"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3290.433253][T30893] usb 3-1: USB disconnect, device number 89 00:22:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0xf0) 00:22:06 executing program 1: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000700), 0x1, 0x145242) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xff, 0x250280) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x1, "69cb747fd2dd1315e37412b198afa92ac3ae66250adb08ced3af09b187d5a9c4290457a59c3497f82252380c29926d57b7c88d27728470658ebe9f818932bfcd"}) r1 = syz_usb_connect$uac1(0x4, 0xc8, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x20, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0xec, 0x5, 0x1, 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x5, 0x8, 0xa, 0x6], 0x84}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x5, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x2d, "3cd6b6", "a8"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x6, 0x2, "d59ec5"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x0, 0x8, "89ab16cd598545"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x27, 0xff, 0x4, {0x7, 0x25, 0x1, 0x2, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x7, "4592", ';'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x20, 0x6, {0x7, 0x25, 0x1, 0x82, 0x5, 0xde5c}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x7f, 0x7, 0xc1, 0x8, 0xff}, 0x35, &(0x7f0000000240)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0xffff, 0xf, 0x9a5, [0xc0cf, 0x3f30, 0xff7e00, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "03061180ba156eacf072c1ff62967dd2"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "9e68170d4a57d436db459ba88c65a09b3954b20de4c96e9cfd3e268fe3ead97436f099fbff6551ab8fae3785d72e1b13a40febf4e85d27e02dbadde9b3b9ef4eb5c5014f9a290a9c76b717eef914fa2aecf7415272b4fbcebb1d6031414955681cf0f7563a4db111298c7cb68d771dcba9b3c52dcedcc7ddf026a8d3d6c4c1c5"}}, {0xb1, &(0x7f0000000380)=@string={0xb1, 0x3, "6baedbbed47525371ea63fc7f2421e7bf9911f831205543ec88f634b0117fbdbb7f18de9d5b7cde511ecce29700a4fd69d04425d9ba5f95e1ae50aa91a8648c770ea7dd355d2317c13a2ab3342313415abcf6984bf5fc89d589f81105c9068b40ca6710b5d5ecb3533d56ca30541d36821f06bd3722b1a8e7bc18945c8a94234af212e3d9d28eb3b860fe16b3d9182b0bbf957159e9706b15c23b7e2752b69a9316a16af25801abb53647b5d617cce"}}, {0xcc, &(0x7f0000001840)=ANY=[@ANYBLOB="cc032e745f8bea11c6dec1f0b0bdd18112638fa66695c98748d4fb10ef8e87078f50cd800941f30a399500cba0f49a31661738ec6796a4cfae536ec599f87fb8556da695d622976aa5e1f4d7fa505763e68643e43f70ec6c5e34cd56d1355ab9f36e3c68fb61c289134e5a97f7f9dc9aee8e72cdec0b931675bf54f2a2717d3223566563ffbff5dcc2482031f47e7642f4a9585b81f8cea50a3f95421b07cad938d5f083418415a5310962fd39b7e6dc570cc98c4f4fadec5b8c4fc65c9b8038f84de9e04c7047e607b41d0c10ac8c29"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0xf2, &(0x7f0000000580)=@string={0xf2, 0x3, "25ef664fd2a261c0bc6b33159f52faa404a3f242679dbc7853da53caeeee8c3c90bab78ba83ee0545bd323feb93dfcf20291c80e9a37c77fd4d804abeaefda64d24ce9735d5b94b293bd8656d913b8398011ca26b0eb085a4763bee3d5eb760c6fe28e448e480db06a63362fa53ec8d0527019059fec69c5ff4a2b4804a52b6c053eab0fb5cde9bf58783891a0632d95f95f3a2224351cf1fb40f62fab852a620f5bed760b90ac0aabf4aa560ceea30f3660fb3365b6ab2df0238e5cb0d21cf176ddc08575282581d171354ca7a1a27cce015b2d2e66be25a383cb4116f93bdc50b0a2c52bf90457509de80f6254022a"}}]}) syz_usb_ep_read(r1, 0xb1, 0x76, &(0x7f0000001780)=""/118) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000001800)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:06 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x512930e1, 0x4a0570) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/135) 00:22:06 executing program 0: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000700), 0x1, 0x145242) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xff, 0x250280) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x1, "69cb747fd2dd1315e37412b198afa92ac3ae66250adb08ced3af09b187d5a9c4290457a59c3497f82252380c29926d57b7c88d27728470658ebe9f818932bfcd"}) r1 = syz_usb_connect$uac1(0x4, 0xc8, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x20, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0xec, 0x5, 0x1, 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x5, 0x8, 0xa, 0x6], 0x84}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x5, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x2d, "3cd6b6", "a8"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x6, 0x2, "d59ec5"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x0, 0x8, "89ab16cd598545"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x27, 0xff, 0x4, {0x7, 0x25, 0x1, 0x2, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x7, "4592", ';'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x20, 0x6, {0x7, 0x25, 0x1, 0x82, 0x5, 0xde5c}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x7f, 0x7, 0xc1, 0x8, 0xff}, 0x35, &(0x7f0000000240)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0xffff, 0xf, 0x9a5, [0xc0cf, 0x3f30, 0xff7e00, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "03061180ba156eacf072c1ff62967dd2"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "9e68170d4a57d436db459ba88c65a09b3954b20de4c96e9cfd3e268fe3ead97436f099fbff6551ab8fae3785d72e1b13a40febf4e85d27e02dbadde9b3b9ef4eb5c5014f9a290a9c76b717eef914fa2aecf7415272b4fbcebb1d6031414955681cf0f7563a4db111298c7cb68d771dcba9b3c52dcedcc7ddf026a8d3d6c4c1c5"}}, {0xb1, &(0x7f0000000380)=@string={0xb1, 0x3, "6baedbbed47525371ea63fc7f2421e7bf9911f831205543ec88f634b0117fbdbb7f18de9d5b7cde511ecce29700a4fd69d04425d9ba5f95e1ae50aa91a8648c770ea7dd355d2317c13a2ab3342313415abcf6984bf5fc89d589f81105c9068b40ca6710b5d5ecb3533d56ca30541d36821f06bd3722b1a8e7bc18945c8a94234af212e3d9d28eb3b860fe16b3d9182b0bbf957159e9706b15c23b7e2752b69a9316a16af25801abb53647b5d617cce"}}, {0xcc, &(0x7f0000001840)=ANY=[@ANYBLOB="cc032e745f8bea11c6dec1f0b0bdd18112638fa66695c98748d4fb10ef8e87078f50cd800941f30a399500cba0f49a31661738ec6796a4cfae536ec599f87fb8556da695d622976aa5e1f4d7fa505763e68643e43f70ec6c5e34cd56d1355ab9f36e3c68fb61c289134e5a97f7f9dc9aee8e72cdec0b931675bf54f2a2717d3223566563ffbff5dcc2482031f47e7642f4a9585b81f8cea50a3f95421b07cad938d5f083418415a5310962fd39b7e6dc570cc98c4f4fadec5b8c4fc65c9b8038f84de9e04c7047e607b41d0c10ac8c29"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0xf2, &(0x7f0000000580)=@string={0xf2, 0x3, "25ef664fd2a261c0bc6b33159f52faa404a3f242679dbc7853da53caeeee8c3c90bab78ba83ee0545bd323feb93dfcf20291c80e9a37c77fd4d804abeaefda64d24ce9735d5b94b293bd8656d913b8398011ca26b0eb085a4763bee3d5eb760c6fe28e448e480db06a63362fa53ec8d0527019059fec69c5ff4a2b4804a52b6c053eab0fb5cde9bf58783891a0632d95f95f3a2224351cf1fb40f62fab852a620f5bed760b90ac0aabf4aa560ceea30f3660fb3365b6ab2df0238e5cb0d21cf176ddc08575282581d171354ca7a1a27cce015b2d2e66be25a383cb4116f93bdc50b0a2c52bf90457509de80f6254022a"}}]}) syz_usb_ep_read(r1, 0xb1, 0x76, &(0x7f0000001780)=""/118) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000001800)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:06 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffffffffffff, 0x410040) 00:22:06 executing program 3: syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x6, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x59, 0x81, 0xff, 0x3f}, 0xeb, &(0x7f0000000080)={0x5, 0xf, 0xeb, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x52, 0x7f, 0x5, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x6, 0xf, 0x7f, [0xff0000, 0x3f00, 0xff0030, 0xc0c0, 0x30, 0xc0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x0, 0x0, 0x8, [0x18000, 0x28, 0xffaf, 0xf, 0xff0f]}, @generic={0x91, 0x10, 0xb, "2aec725ac8f304c4d73fb20ad67bbb518c33e29b62b4c104870cf76b71f9f75701a177efe6793f841b1182f62272be8367dc8165a39354e9768c534064bc80525c16bcf7a2dfa73deb9646723a915af93c843c0db0667caac4650a5bd35f98c731c9f6904b4e7608b44bbddfd3e4b1f4aa1d5efa1ab4f930e463206eee51d81d174aa0d7630599c4ef57e6184c3c"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x100000, 0x5110f0) [ 3290.802503][ T1499] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3290.821954][T32516] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3290.941909][ T2641] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3290.949533][T30893] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3291.021979][T18032] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 3291.051931][T28967] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3291.192533][T32516] usb 5-1: config index 0 descriptor too short (expected 548, got 36) [ 3291.200932][T32516] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3291.210677][T32516] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3291.220451][T32516] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 64 [ 3291.222615][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3291.230366][T32516] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3291.249885][T30893] usb 3-1: device descriptor read/64, error 18 [ 3291.332059][ T2641] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3291.341903][T28967] usb 4-1: device descriptor read/64, error 18 [ 3291.341895][ T2641] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3291.341931][ T2641] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3291.371091][ T2641] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3291.412521][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3291.421695][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3291.429734][ T1499] usb 6-1: Product: syz [ 3291.434053][ T1499] usb 6-1: Manufacturer: syz [ 3291.438650][ T1499] usb 6-1: SerialNumber: syz [ 3291.473289][T18032] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3291.483039][T18032] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3291.492795][T18032] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3291.505642][T18032] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3291.512417][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3291.521467][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3291.529533][T32516] usb 5-1: Product: syz [ 3291.533839][T32516] usb 5-1: Manufacturer: syz [ 3291.538543][T32516] usb 5-1: SerialNumber: syz [ 3291.564685][T22352] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3291.632184][ T2641] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3291.641421][ T2641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3291.649504][ T2641] usb 2-1: Product: syz [ 3291.653735][ T2641] usb 2-1: Manufacturer: syz [ 3291.658406][ T2641] usb 2-1: SerialNumber: syz [ 3291.726035][ T1499] usb 6-1: USB disconnect, device number 5 [ 3291.732019][T28967] usb 4-1: device descriptor read/64, error 18 [ 3291.742128][T30893] usb 3-1: device descriptor read/64, error 18 [ 3291.748504][T18032] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3291.757751][T18032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3291.765844][T18032] usb 1-1: Product: syz [ 3291.770185][T18032] usb 1-1: Manufacturer: syz [ 3291.774939][T18032] usb 1-1: SerialNumber: syz [ 3291.866304][T32516] usb 5-1: USB disconnect, device number 34 [ 3291.985916][ T2641] usb 2-1: USB disconnect, device number 9 [ 3292.002053][T28967] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3292.021889][T30893] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3292.096118][T18032] usb 1-1: USB disconnect, device number 32 [ 3292.271816][T28967] usb 4-1: device descriptor read/64, error 18 [ 3292.321860][T30893] usb 3-1: device descriptor read/64, error 18 [ 3292.661821][T28967] usb 4-1: device descriptor read/64, error 18 [ 3292.741795][T30893] usb 3-1: device descriptor read/64, error 18 [ 3292.781897][T28967] usb usb4-port1: attempt power cycle [ 3292.861881][T30893] usb usb3-port1: attempt power cycle [ 3293.191718][T28967] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3293.271778][T30893] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3293.282693][T28967] usb 4-1: Invalid ep0 maxpacket: 0 [ 3293.372183][T30893] usb 3-1: Invalid ep0 maxpacket: 5 [ 3293.441736][T28967] usb 4-1: new high-speed USB device number 96 using dummy_hcd 00:22:08 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x4, 0x6, 0x8, 0x40}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x40, 0x31, 0x4b, {0x4b, 0x21, "fb6915f915e31bf3ef788c6fd3fdaeede179435f3b383384ee931356870b17e7ebe795f39a5d9cc677322eb344f463faed53326c20b1ff9b9bffa6b74900a471dda1cda533c7373b63"}}, &(0x7f00000000c0)={0x0, 0x3, 0xba, @string={0xba, 0x3, "ecbfd2bf5dec99d200c5c2106a5a2f290207e6d1a32041e19eeb2e30b4b755889ddcccde7ff52676ff59cecd62ba24a479e64c8494fe59104028ead8d284c028ad50ff480a4500e635c94fde69321aeea4195e3baa7ec715bf4c849eb1a975ed8fd6ed3359fae6b62c7d887ef46291f9bb8e1bf5bb137f4ed62c5c702f640cabf6902f7b7c5e87c327a80204badeb123c0defa74080d71e86bf76898848347e5d15c768c360a926997392b5f93e3f39b579007f6d3a52086"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0x11, 0x1c, "162b9b43e884c21be587cafca017575f0522883b3f4f6b2ea77f6beb"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x81, 0x2, "1d14"}, &(0x7f0000000380)={0x20, 0x82, 0xfffffe72, ')'}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "ae75"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "a0ab15"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "536ae0"}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0xa, 0x96, {0x96, 0x0, "315f0c5ce8e9f392feef105b24f72e560be5dbb3e19819fa51f29d30bc8a037ff3419ff3ff8b140eeb1d6ef35cb82182b09eb7ea3c12f9dcfd951c1e074967be9d7f6a4432d850fb004641589e435ef8fab64d2265779b5a83db1273ed013185efec6779d04794c5eae408be2fbd95eb9c62071996c51417c9079ad1c1fa7bcaf26ffdabe608d9dae0114bc5455c21bd47d441fd"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f00000005c0)={0x0, 0xf, 0xa0, {0x5, 0xf, 0xa0, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x7, 0xfff9}, @generic={0x91, 0x10, 0x0, "fdc358859071fb2c1be860d49ca2cdad4024ca25249256312b759a1d21bb0c7a75f578b7d774ab75b3089e33c7a66144cf023bfa0cb1cdafa9ffa2466e62cee6d8bcabc139f75511fbcd5bebb416398f4ba62fe8afb6a26849408426ffd0369ba37999b23c393b3391885fec3ebad47bdf7bbfdd0a0935611cc8c22a1bdba654189e36c0a7f7350ed54508e01cec"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x8, 0x3f, 0x1, "999a5ef7", "fbdd7c3d"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x1, 0x7, 0x81, 0x4, 0x1}}}, &(0x7f0000001c00)={0x84, &(0x7f0000001780)={0x40, 0xf, 0x70, "f8d94698c2517dbc2b0d9d911f824d6258ef29c1d88fa6a3c19b276e9d19fb88f25eb41f0b6798f02a2e480835d41266968b53a69d9770036d22ef822a97aae03c22852ab5de6c6ac5054cc83a786528e9ccaa4a8b1f9b395055acdc2c976f0734fa1720a56a5b21294f261c657c5c42"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001840)={0x0, 0x8, 0x1}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000018c0)={0x20, 0x0, 0x4, {0x1, 0x10}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000019c0)={0x40, 0xb, 0x2, 'KY'}, &(0x7f0000001a00)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000001a40)={0x40, 0x13, 0x6, @local}, &(0x7f0000001a80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001ac0)={0x40, 0x19, 0x2, "76ee"}, &(0x7f0000001b00)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001b40)={0x40, 0x1c, 0x1}, &(0x7f0000001b80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001bc0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:08 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x1f00, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:08 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000019c0)="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") 00:22:08 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff, 0x100) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000, 0x4400) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x8500, 0x2, 0x8, 0x2, 0x8, 0x2}) 00:22:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0xf0) [ 3293.522001][T30893] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3293.572643][T28967] usb 4-1: Invalid ep0 maxpacket: 0 [ 3293.578132][T28967] usb usb4-port1: unable to enumerate USB device 00:22:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0xf0) 00:22:09 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0xf0) 00:22:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xf0) 00:22:09 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xf0) 00:22:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0xf0) 00:22:09 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0xf0) 00:22:09 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/115) [ 3293.852777][T18032] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3293.917112][T28967] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3294.021679][T30893] usb 3-1: device not accepting address 93, error -71 [ 3294.028700][T30893] usb usb3-port1: unable to enumerate USB device [ 3294.241730][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3294.302339][T28967] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3294.312057][T28967] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3294.321762][T28967] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3294.334762][T28967] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3294.421715][T30893] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3294.442389][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3294.451454][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3294.459529][T18032] usb 6-1: Product: syz [ 3294.464085][T18032] usb 6-1: Manufacturer: syz [ 3294.468685][T18032] usb 6-1: SerialNumber: syz [ 3294.492320][T28967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3294.501438][T28967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3294.503085][T22428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3294.509532][T28967] usb 5-1: Product: syz [ 3294.520471][T28967] usb 5-1: Manufacturer: syz [ 3294.525125][T28967] usb 5-1: SerialNumber: syz [ 3294.799719][T18032] usb 6-1: USB disconnect, device number 6 [ 3294.806221][T28967] usb 5-1: USB disconnect, device number 35 [ 3294.871712][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3294.881410][T30893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3295.131764][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3295.138003][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3295.147282][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.182646][T22434] raw-gadget gadget: fail, usb_ep_enable returned -22 00:22:10 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_ep_read(0xffffffffffffffff, 0x6, 0x36, &(0x7f0000000000)=""/54) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe2, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xf5, 0xfe, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x20, 0xa4}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:10 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x9626, 0xf0) 00:22:10 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xf0) 00:22:10 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000240)=""/105) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/228) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000040)=""/118) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000001c0)=""/100) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x6) 00:22:10 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x2000, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:10 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x109180) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000180)=""/86) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x0, 0xa, 0xe5, {0xe5, 0xb, "ac91e6568d815fdbb5dbfde1aae79709fce28b19288a46baf314131368dee42bc0d45d91a86b315b29e01f18a954923ae6f9691a58eeffc9b7cba8201ab55f556824821fdedeae7af27be49e101c29aa8a7a9c82514e1aa3ee9b1031898e564c4b5951fb7433afe69ad7f92f1bc9a2f5ea6c42ba8e60fc2ddccbab1f32a3345dec70e87a2fe3e323bf51c0a3a221f75eaf7354c795b2e2bba065b7ed3beaca03af6f15039e11df83a2f4e3a3a6c827bdc509c6707ce2b7d129ba0dbcd4a6913e615942648850e84412618473d3443e5cf8c59621277d926881ef08e3cc48f1c0ed37f1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000300)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "07c8ab32"}, @local=@item_012={0x1, 0x2, 0xa, '}'}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_4={0x3, 0x1, 0xa, "b6b56a77"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x1, 0x2, 0x7, "de"}, @global=@item_012={0x0, 0x1, 0x9}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x5a3}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x6, 0x68, "88667d6f66f5746d17c3ddb3e2405c818eb3f9445dd7f068f9c460f8a8a05310de0ff07398b5950bed91e0752b4bc317f45dee1e74110c3e5c345e0d6bc3d0bb1ba9c7649a64d57ba89cacef972084c963f23fa6eaa1f8204c73c70dc279f93447dae91246d58b5d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x93}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x99, "4b60d72f8ff793d3921e0f03ddcaa2c3fd2ed73d1f4b60719d458cb1fcd44210628b0faacbbcd12afe378f0168afe0dba3fe822046159f3c582c46e07884d61f460b6025abecdfa04430214e754b8422f6e7decced3046777df92407e827d77628dbccc80921c17a4cc22cde3bac38b8ed227ebdb335b01a793fd0c222716c4f678f2e765573f496ee8136b550b4a4e8795857ee628534a29c"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x40}}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000001b00)="f0ee7453b5989d8fe2998875bbdcbf18c9ca83c5d5c2261013959f9b3cc2c904b35b07bb48b511e9411345bf50591e2aaec3b54e187b0590bc65e26c2659b40a6fc418e212c8e0f3d47301a29d768b5f7a6e761c92d794cac7f3f75f31c024d1d30fcb168f6ec6a41af06e4bfcca9052e12a07fd0624ea06e44a7c635dc125cd6ff9b6da3cab926b37442d1d193ca435da979acdbf16ed1b6e09ca92017840697d86f560c6254626211836808e4bbafcb82d983e750218113cf82d5f5a4a6b37d5d33129416ca78a6122048121caadb3d6731a135f1423ada7863b4d624a") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0x5, 0x93, {0x93, 0xa, "fd2f70b0bf54d9c6b593d9fbfe3b9dbb97b8f9b6af5b8567be562bdb51f3f1b021d5fa97212347071fa15c215a6f8c96e28c8e2e556ebea7d5fff2fa1bb57a3378cdc6ac5d524cc074f80f03863f4fe580eefc13f689114b98f98a7f5af9cee07a11d900cce91ca3ed555440eb54d8b99a4bd7d207f2619ce58b38ba0b3593a711391e0886d2098a2801c1cb008a1fd47d"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001780)={0x40, 0x3, 0xcb, "48989d385d5f6f62063fbfb48c35ed8536cf32f647af57aed0d840809855d372987b6e6bc27c033f855a7d09d7528f93cbd991c4c972a56d8cf45a9de4cfc7d8b5071393efc5a3d89964d25879a001e0026d3019ea7edb0135f1a440a74819a86dbba25dbd7b05e9b58c35d165a6579494b65620a7b3a9e2a4a9d6e65dd2799c14f024d49b4147675fc8e4b3ad7a6280c895d39aa17f325ff58fa6ed86d7f6c1cf85e5f06592d14a852009ae3cd7a91564b5d1e62d78974b8e42b44c0a7fb959cd6642c1ef1abfcf4a8916"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001900)={0x20, 0x81, 0x1, "95"}, &(0x7f0000001940)={0x20, 0x82, 0x3, "c0754a"}, &(0x7f00000019c0)={0x20, 0x83, 0x1, "85"}, &(0x7f0000001a00)={0x20, 0x84, 0x2, "2387"}, &(0x7f0000001a40)={0x20, 0x85, 0x3, "df2487"}}) write$hidraw(r0, &(0x7f0000000080)="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", 0xfe) [ 3295.423524][T30893] usb 3-1: USB disconnect, device number 94 00:22:11 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x401, 0x80) r1 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000180)={0x1, 0x200, 0x6}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x8, 0x5842, 0x8001}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x601342) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/172) 00:22:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0xf0) 00:22:11 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0xf0) 00:22:11 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/113) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000280)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/247) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/195) 00:22:11 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2696, 0xf0) 00:22:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0xf0) [ 3295.791706][T28967] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3295.792659][T18032] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3295.951528][T30893] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3296.171578][T18032] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3296.181325][T18032] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3296.191073][T18032] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3296.203944][T18032] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3296.261594][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3296.321599][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 3296.331459][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3296.381680][T18032] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3296.390874][T18032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.399054][T18032] usb 5-1: Product: syz [ 3296.403413][T18032] usb 5-1: Manufacturer: syz [ 3296.408036][T18032] usb 5-1: SerialNumber: syz [ 3296.461601][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3296.470654][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.479066][T28967] usb 6-1: Product: syz [ 3296.483309][T28967] usb 6-1: Manufacturer: syz [ 3296.487916][T28967] usb 6-1: SerialNumber: syz [ 3296.611509][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3296.618305][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3296.627489][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.652968][T22502] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3296.660444][T22502] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3296.715748][T18032] usb 5-1: USB disconnect, device number 36 [ 3296.795169][T28967] usb 6-1: USB disconnect, device number 7 00:22:12 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x22, 0x62, {0x62, 0x21, "84d4dde944405ac91ba011d059f5b6d7cedbff2a802481d7e7ade5f8de7817a4c916f66fdf6340b5c8e89f3f06be53d4f51abf0bcc3647ec636b6602feb607916d9b0f585dc7872f75620bd7f7ec087b951dbe5c94edba41d4f98679c2a4eba7"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x30, 0x11, "edb049d04dc6c500a70a53196736ef3bd5"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x2bd9, 0xcac, 0x8001, 0x623b, 0x4, 0xb6, 0x0, 0x2, 0x19fd, 0x6, 0xf9}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 00:22:12 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0xb282, 0x8002, 0x6, 0x8, 0x0, 0x2}) 00:22:12 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2696, 0xf0) 00:22:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/113) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000280)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/247) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/195) 00:22:12 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x20001) 00:22:12 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0xff00, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3296.893645][ T1499] usb 3-1: USB disconnect, device number 95 00:22:12 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2696, 0xf0) 00:22:12 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:12 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0x1e, 0x9b8, 0x9, "355b601caf7f26fa6994261821b6776252649dfb6b720e766a0d78171dfbbffa"}) 00:22:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4a0a00) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x4, 0x58, &(0x7f0000000040)="275ed29297fbf5511ce28d60c97939ad62e7549c6506d74e6b83b4ba3c7250814a1d1c43383944617b60567f04b78352ed0ee0ded7ba0f2a76153c5311a0b3acb4d61b7116f4a4d953c1af5b521dcf825f5a932b8ea4be31"}) 00:22:12 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0xf0) 00:22:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0xf0) [ 3297.301434][T18032] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3297.421378][T30893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3297.431450][ T1499] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3297.671851][T18032] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3297.681604][T18032] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3297.691233][T18032] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3297.704182][T18032] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3297.781428][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3297.871497][T18032] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3297.872514][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3297.880640][T18032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3297.890270][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3297.890304][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3297.898288][T18032] usb 5-1: Product: syz [ 3297.925140][T18032] usb 5-1: Manufacturer: syz [ 3297.929718][T18032] usb 5-1: SerialNumber: syz [ 3298.011477][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3298.020576][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.028660][T30893] usb 6-1: Product: syz [ 3298.032980][T30893] usb 6-1: Manufacturer: syz [ 3298.037669][T30893] usb 6-1: SerialNumber: syz [ 3298.202006][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3298.208294][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3298.217436][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.218971][T18032] usb 5-1: USB disconnect, device number 37 [ 3298.344995][T30893] usb 6-1: USB disconnect, device number 8 00:22:13 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff7f000000000000"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x8, 0x5, 0x3a740000, 0x0, 0x401, 0x8000}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x5) 00:22:13 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/141) 00:22:13 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0x1e, 0x9b8, 0x9, "355b601caf7f26fa6994261821b6776252649dfb6b720e766a0d78171dfbbffa"}) 00:22:13 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0xf0) 00:22:13 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:13 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x2, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3298.493338][ T1499] usb 3-1: USB disconnect, device number 96 00:22:14 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x80f0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/236) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/231) 00:22:14 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/141) 00:22:14 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0xf0) 00:22:14 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x171403) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x94, 0x5af080) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x410100) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x200) syz_open_dev$evdev(&(0x7f0000000100), 0x98, 0x800) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x101000) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000240)={0x3, 0xffff24e0, 0xfffffffe, 0xffffff57, 0x51, 0xff}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/234) 00:22:14 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x80f0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/236) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/231) 00:22:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xf0) 00:22:14 executing program 3: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/211) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/202) syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x400) syz_open_dev$evdev(&(0x7f0000000240), 0xffffffffffff0001, 0x4100) 00:22:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0xf0) [ 3298.911400][T30893] usb 6-1: new high-speed USB device number 9 using dummy_hcd 00:22:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0xf0) [ 3299.051282][ T1499] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3299.051367][T18032] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3299.301303][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3299.411731][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3299.421523][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3299.431309][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3299.444176][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3299.451465][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3299.461341][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3299.470987][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3299.521403][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3299.530555][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.538695][T30893] usb 6-1: Product: syz [ 3299.542921][T30893] usb 6-1: Manufacturer: syz [ 3299.547646][T30893] usb 6-1: SerialNumber: syz [ 3299.601939][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3299.611367][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.619350][ T1499] usb 5-1: Product: syz [ 3299.623542][ T1499] usb 5-1: Manufacturer: syz [ 3299.628122][ T1499] usb 5-1: SerialNumber: syz [ 3299.822127][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3299.828512][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3299.837721][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.849291][T30893] usb 6-1: USB disconnect, device number 9 00:22:15 executing program 4: read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/161, 0xa1) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="1201000000000040250501a440000102030109021f000101e60003090400060207010000090500000000f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:15 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x4, 0x404080) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/136) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/161) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x2, 0x24, &(0x7f0000000180)="8584344852d6c6940e5e4267e45d6b6a0e5d6731166eaa1056174adbe59094226bc36109"}) 00:22:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0xf0) 00:22:15 executing program 1: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/211) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/202) syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x400) syz_open_dev$evdev(&(0x7f0000000240), 0xffffffffffff0001, 0x4100) [ 3299.936482][ T1499] usb 5-1: USB disconnect, device number 38 00:22:15 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x2, {0xfffffffffffffcc8}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) 00:22:15 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x3, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:15 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0xf0) 00:22:15 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4e5, 0x220000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x8}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x101, 0x4, 0x2, 0x7, 0x32, 0xfffffffe, 0x3, 0x1, 0x6, 0x8, 0x6, 0x7fff}) 00:22:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0xf0) [ 3300.132491][T30893] usb 3-1: USB disconnect, device number 97 00:22:15 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x88, 0x305200) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x8, 0x1, 0xfff, 0x7fffffff, 0x10001, 0x16c3}) 00:22:15 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x4cb, 0x8042) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, &(0x7f0000000600)={0x40, 0x0, 0xc1, {0xc1, 0x11, "3a778de035d7277d4a26a6fdb576e539da48e496864debc0ccea7cfd7cdde312ba752687b77b2769d3cb154b4287430c30e524211b30d20a0525f62981aee38268af4d9f6e5908caadd5f9cffaba1a43770efb7aad19f49598d053e7cc4c965ec3ea3946a74e4727342d224fd71df3563884364a81d7d396824ba6a174a2a98b2b8c0b110cf1058bad6bf434d06c7a1076dbdc9b21e5f9a4fbc28f2bed9a2f71e22df02bb1e8b5254cd302c2970ada8ffdeb39e28cac1d2f49d28d632b6942"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000100)={0x0, 0xe, 0x6c, "7eaa251f998cdc4514a938f1d3b44345e1530026a62522ecb358652b049ef34bd27519b37660ae2233ef47aacd3b5e800bd5575c58a9436ddf384f3fcbd061667dc5f160a1be00418c2d940c926234ba24da7db90bb0a880eb6b6d0fe089704910e821157721fa0296825330"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000340)={0x20, 0x0, 0xdd, {0xdb, "ccd2981ad00ec03141590d1eff14087edf2ccaa9bab0f901005b686c9c24741e1f442eee6e253a05592d99dc27c0dfe3c66c9ca9b7188dcd4f39c706710e3b2fdd455173f650042425deea7d6eb0f6bde91277681245700d3d95a04a19de203bb86e0bbaefbf2de70dcae85f81ad50a682fa2178a88d8851166947c7763a05b195346e016eea492137cfd7b6eb8f11b53ea497171762c8eb348fb82c53b6216135e55cf2acda520dce7e24304569573ba22a4813c414b6397a9171921bd0f91f9c9a561c8ee15957fa99e7bb41765f244230d649e6b1b779083eae"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x9}}) 00:22:15 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4e5, 0x220000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x8}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x101, 0x4, 0x2, 0x7, 0x32, 0xfffffffe, 0x3, 0x1, 0x6, 0x8, 0x6, 0x7fff}) [ 3300.381149][ T1499] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3300.471136][T28967] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3300.751225][ T1499] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 3300.759498][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 3300.770005][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3300.782933][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3300.841241][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3300.941182][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a401, bcdDevice= 0.40 [ 3300.950253][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3300.958339][ T1499] usb 5-1: Product: syz [ 3300.962557][ T1499] usb 5-1: Manufacturer: syz [ 3300.967520][ T1499] usb 5-1: SerialNumber: syz [ 3301.011333][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3301.020404][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3301.028452][T28967] usb 6-1: Product: syz [ 3301.032687][T28967] usb 6-1: Manufacturer: syz [ 3301.037443][T28967] usb 6-1: SerialNumber: syz 00:22:16 executing program 4: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000005c0)) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/69) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x114, &(0x7f0000001780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x8, 0xf0, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0x3, "7311277135"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xfd}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x8, 0x2, 0x1], 0xf7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x2ff, 0x3, 0x3, 0x1}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x4, 0x8}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x3, "99d09139b6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x45, 0x7, "", "a300"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x81}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x452c, 0x800, 0x8c, "ce015f7e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x3f, "27df5218"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x2, 0x9, "e0f972ff31"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd0, 0x0, 0xec, {0x7, 0x25, 0x1, 0x82, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff, 0x0, 0x20, "d99e80db4fd9"}, @as_header={0x7, 0x24, 0x1, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x1, 0xb8, 0x81, "ac5881"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x3, "fafb", "2ad567"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x4, {0x7, 0x25, 0x1, 0x3, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xe7, 0x1, 0x7f, 0x10}, 0x53, &(0x7f00000001c0)={0x5, 0xf, 0x53, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x77, 0x4, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfa, 0x3f, 0x1b64}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6d212054f8a539bf785a1c547dd719e1"}, @ext_cap={0x7, 0x10, 0x2, 0x28, 0x0, 0x0, 0x300}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "115f00"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x80, 0x8, 0x5}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xd8330e8ae372dddd}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0xdb, &(0x7f00000002c0)=@string={0xdb, 0x3, "cd5e318ac1bf63f7d6308e46eaef91c0227e45bd48842b01892c661efa58030f6311a5f56d14636e760e138c977c5a3e404b3645401fa45e5eb287df42d95ba542a5d976e9834f65f78e0734fd83c84b59073ab4ed9e2436dd0e602070c48a45c88ee48ce14c54105236903992034f900ae93500dcb849feaac0a96538e2835f1431990288419c3b29b8ac56f0bec6b59aef3f22df6d43361592719316439aff42609fcb7387587049d81660fe4bf27306455b15692a3f5d7456e5d2fd18ddf9a3c85f591ce5293939dc1950bf445d735079dad548b2b430aa"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0x31, &(0x7f0000000400)=@string={0x31, 0x3, "31508e9bcf55700d3577639ae055212ac6cf234f3c91a0a0c1143fef4f8efabe2619a81af0ccee50676a2ae91751a1"}}, {0xd3, &(0x7f0000000440)=@string={0xd3, 0x3, "54786d4e4ccc21f1da26491a104dfbae3ccf18dffec1eb363dd6a1b6a4b34d5d0b4a0369b0c9309976658a3d77adf96c9b2bed07894d24eefe8ed4e115e37e667a5eb9dc9c2330c776c00475f5f257673c2d801e1eb00f5846478a9427db30db7545fd7b5a1a3f266dd293eef612aad5288da0bf68d33c443220648fc1a241f58f905d123515b43bb7bd69f9876aa7524eaa74f1b2f495ab787a0dbb35ec8b0b1f3797f2e052ea98d12bd926a647c6c11f5744c67912785a6b2c95d2f4f8909bf3b041db1836df6b56559bbdf404b08423"}}]}) 00:22:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0xf0) 00:22:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x4802) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x602100) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/75) 00:22:16 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x88, 0x305200) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x8, 0x1, 0xfff, 0x7fffffff, 0x10001, 0x16c3}) [ 3301.274337][ T1499] usb 5-1: USB disconnect, device number 39 00:22:16 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x4, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0xf0) 00:22:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7fff, 0xf0) [ 3301.386048][T28967] usb 6-1: USB disconnect, device number 10 00:22:16 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x88, 0x305200) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/4096) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x8, 0x1, 0xfff, 0x7fffffff, 0x10001, 0x16c3}) 00:22:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0xf0) 00:22:16 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000, 0xf0) 00:22:17 executing program 3: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x995ab0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/4096) [ 3301.612113][T30893] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3301.791127][ T1499] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3301.861064][T28967] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3301.971070][T30893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3301.980774][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3301.990594][T30893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3302.161548][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3302.171513][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3302.181397][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3302.194256][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3302.231080][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3302.271075][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3302.277385][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3302.286540][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3302.401184][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3302.410371][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3302.418465][ T1499] usb 5-1: Product: syz [ 3302.422736][ T1499] usb 5-1: Manufacturer: syz [ 3302.427333][ T1499] usb 5-1: SerialNumber: syz [ 3302.441129][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3302.450204][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3302.458360][T28967] usb 6-1: Product: syz [ 3302.462765][T28967] usb 6-1: Manufacturer: syz [ 3302.467453][T28967] usb 6-1: SerialNumber: syz [ 3302.543391][T19170] usb 3-1: USB disconnect, device number 98 00:22:18 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0x829, "e9f6174425f5021f80d0924ad2115e16e2f16b65baacbb1f7383d72c42ee794b689e942ece0457f270ed1fbf788fd58d99f4cf31afad834a3c6357fc490ba2e1abf6e854f0edf1835e284ed0e5fce18f8007070c3575b7f730bdb2770dbeecab31917782983d74617ec5c6d6ce4668674aee13ddb3e1cee894c59580a5c4f12ec9386571243f2bcb44355651c714f521c889c56dfe22882550e542a4adf094efbf5586c349b1b23c464d1aa337c48ffee4d28a896f8a855d08c374da163d239ac7826c3ea81787af17f20d81529fabed3d5c702d0fe41ff64b2732f8ba3e1393bd64ac0280b9504caa210f5db15051619a15e18ce49d5c157766e5ef6439a838f75d6c9c77f9437cfb710d4274120cf1832d3f8bee608bfdb36ab174907bff45ec788dc7486ea901b27ebe90c490a122858b623c3b7a5dd90f19af05398f750c11d2d3e61c3985acc89f94d754552575aab28a3db54f598326596d656fd6c52ae0f6f4c577ec7d0fe545afffa625548d230be60e8b3de03f8e62170c924c9361883ecfa880ff5c460a5338ff6de2bc9ab913de4ffaf6d523809db5c9f5dee803bc39924d1c6c0521e8c9642bb0433da700c78e0a5b0e0c473ba75b5c96a91b27aa8557eb393a6e3b9b4221ae371d2c2c24c360aeee19407cdffae78e887d568adc83cef2f6cb60c8f3bcb4befde95c2724f11d00a287eaea2b959a6af428ca7b99d5dbf8218fb28addd9031558c9149f9a15ceec3146be4bf1aa98d2c8bc09a2a091e5dfe46a993ad540f95bb62f41d356fb48053c7ce1eaa5bada73243127067fee5802ad219069f035e3803f68d8abd130da076c15f8d639e0e21a78d5280e6cc2f6af32b86fd954b9a44077ceeda81b4b5cae71330cf192bd72f1ee1f71bd2cb83ab412e32f512dae22909c68da2c56576f7e55044998a96250820b0fc46790a167cf3cec7a334cce6d9ac6d76e690ac445c7c2d36336df9b4071e99def6e39774a2647cf6f8b0d017d29a3fe106516be630acd0823030131c3c772284bf6648a3585ee19e485b2364baea37d9f1f13a2f0cd147ff0b0ad356161ae91d81c7cabb567b255c331374639d22f8327af4d245f4b82a6ecba4e51b419527c64dc2107547604b8f6d53dff2beb7273a946ff11bef4c30360e4610838b399cac2fe3703fec9bf8dc88b0bb4178bc37593c21c617b3da0093608d0d52547b9e7a0cf093dcd5101b092f3474623572d84c7ab3bac4ee510beb52244052e34bc7714d921a812a51d1b35be6f514d36828f41f6488ff4752f6fbc3e6addb45b1f1174ecff293e8cb7dbb011373d39a4d830856f1a1adf1d1e956fa08db934dd718b024f5fff89bdb440e3487c8e9be6973e2a127a1f85d563280ffeee250e1076365f98a4e566e409294e2d56393030a92fc3050943d9307cc33d642267ff418d8b815c58a6ef0d391aa0d979116111a5ec39d9e40ab51075bf9dffd893a3cf7b4aabd235a5109885f1e287fd6f00ec377fa889a082b642904535d5cf258eb369c8fe86c9cd03b5c024cb54a115c7359cf6f1e7f05503a150aa78f421a61f0cb48ef02d98f85a9ccc529314e1d3eb7d11ce863ae5d72aff98bffb839de019eb133626683c208c324faaf88b623d60e463fd4a6ad56aae4f21fe05da784ac47167a996c1e5a192a197bfd9ad744e5df3c4f7bd451cd931aaa2afb1e9f21a57b17a003ff23111ca12d58e6ec35a32faabab5e341d9abbaefbf1c0317605ee808a0609fb57cab5d497b993793cac10b5aa785163b6f01463bce853c2f78fa7bc3c406e9753a77113151cf6f789339002c518fcf48b209e6eb1e19c508075ba834bae945b72502e30fde0e44aaa0056bd46ce8bb0c19198afdda0a8f5e3b8c037731583750c13d608a45b74cae70c1bd3313109e71228ba9a1834b1d5798a027775c675126d93a6bcb6f614dbb03a5b784e90dc3d3e51f744dc42b80de26696ed3df975aba842394e2eb78e953882c9cb8b5fbc7c2679fb155036b08e5a939af1faae26fc826dd3336eddea8a118e90d688e7fa6cb32360de32abcec8a982999517da64c7c683ea2b335a34a3f9301572843541ab7a9e7ff6dbd08bb0b3c98866b622bf3855c6ad60cb16267fa0c75324021a48ff44e6bf2a040776d2e419606cd5bcec3d62e02ea01b979964fa35c94b946dc5ddb16e868e31aa8b968543676d73511a4b548aaa5c23f1c5e5cc0e11a01b8ad9a6d692d5049425efe238d00f66337d2e2454a6f77db906efd64b1de9f0e0a2d8887e50ed06846899d9ec4f0b5c61bdb36540b917c8d333d58b4f8beb141c61004ef77848b732759313b443de2bf4983bae72e36190c9ce24400a51668224bca1ff4c2bf87bde73ed64655e107d35545d4246f37db1d674020530705ad08ef19f0dedd77175841855dfacb8ae9c8b17d72804ac7dfcaa853fe2aa7c6e17a7e6619fac9eade9c4f356b841d9490085bb5ca9e89b2bb24585c91613f02a6cc9b46d2a0dc075fd82ca1c00f8eb8cc58cacb10ae5e57961c2c4e0234732775330cd7a32593c11d943cb498356148c7ac594acb70fc2399864c0194ff0b73d1319d18638e61038a54de4233bebbb8f9ba6248630718b676dbd289f2b8f4885b9de84e0e414680ab3650cc9e666f3d926304f3a2b2fef6302227a60220c7c51d1745db23e86df28c9a970835501090f37c2b1bc739e25a9459717bf3e140a0024f98048fc400b933f3172c308f9cb89d997a732ae1222339cd7533dd570803142af3e3c706b008d96e588497b8f33e7d09703040da09394286b99f4051a0731fc2c67551679fbf05a3f639321484069ab101d9209e1e5eddca153888f3a0aa5d55f42378223e4b17be8f61423a9aee1251bf0b1ef98e1f4e3da6d552d8f89c115ac8718642d45c3ab0c908c89a6e1c88e2e959441b644684534776e42b36c"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) 00:22:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000, 0xf0) 00:22:18 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0xf0) 00:22:18 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/226) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0xaf) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/29) 00:22:18 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3302.717352][ T1499] usb 5-1: USB disconnect, device number 40 00:22:18 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x5, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:18 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:18 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x6, 0x2, 0xd8, 0x8, 0x760, 0x80}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xe05, 0x94200) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000000c0)=""/225) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x800, 0x10000, 0x0, 0x1c5, 0x3, 0x1}) [ 3302.867214][T28967] usb 6-1: USB disconnect, device number 11 00:22:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0xf0) 00:22:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/142) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:22:18 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0x9cf, "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"}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x8000) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x53, 0x482, 0x1, {0x0, 0x80}, {0x76be, 0x3}, @period={0x5d, 0x1, 0xff, 0x5, 0x600f, {0x64, 0xfffe, 0xff, 0x8}, 0x1, &(0x7f0000000040)=[0x0]}}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x240000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x1f, 0x9b, &(0x7f0000000200)="eb81397c0ddb32cedbc4c3da2f33b8074704194e8aa12e819c0856a02f029253606abfda249145b7b33af3ddbd0cac00fca513d2b6d1393027bd32f7dbd4a486252df119d5321960efc72f88f5e4366f0ca3ea3f50a070d9dd1965782836e630c457fc715031c7e734f4fc31f23b6699c801b125239bdfedfd1fbbb546fae51c7e2e2e1acec46e6fde1e48dadced7f591a8d1f4c0b133ed5ffb449"}) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000340)={0x6, 0x1c9c, 0xba4, 0x5, 0xff, 0x2}) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x85ad, 0x0, 0x8001, 0x0, 0x1, 0x3}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)=""/199) 00:22:18 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x6, 0x2, 0xd8, 0x8, 0x760, 0x80}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xe05, 0x94200) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000000c0)=""/225) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x800, 0x10000, 0x0, 0x1c5, 0x3, 0x1}) [ 3303.060966][T19170] usb 3-1: new high-speed USB device number 99 using dummy_hcd 00:22:18 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x1d4, 0x7fff, {0xff, 0x46}, {0x7, 0x15}, @const={0x1, {0x7, 0x20, 0x80, 0x2}}}) 00:22:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0xf0) 00:22:18 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/236) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5d28, 0x109000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0xfffffffa, 0x9a23, 0x6, 0x7, 0x9, 0x8b3}) [ 3303.241029][T30893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3303.340944][T28967] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3303.348711][ T1499] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3303.480992][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3303.490712][T19170] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3303.500441][T19170] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3303.600951][T30893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3303.610672][T30893] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3303.620632][T30893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3303.721085][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3303.780999][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3303.787450][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3303.797160][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3303.806873][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 3303.816754][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3303.823525][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3303.832726][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.871601][T30893] usb 2-1: string descriptor 0 read error: -22 [ 3303.878035][T30893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3303.887947][T30893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.961584][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3303.970956][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.978949][T28967] usb 6-1: Product: syz [ 3303.983246][T28967] usb 6-1: Manufacturer: syz [ 3303.987831][T28967] usb 6-1: SerialNumber: syz [ 3304.031469][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3304.040913][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3304.048893][ T1499] usb 5-1: Product: syz [ 3304.053122][ T1499] usb 5-1: Manufacturer: syz [ 3304.057706][ T1499] usb 5-1: SerialNumber: syz 00:22:19 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000060000000000"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3304.083086][T22822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3304.117302][T19170] usb 3-1: USB disconnect, device number 99 [ 3304.178154][T30893] usb 2-1: USB disconnect, device number 10 00:22:19 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x6, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:19 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x1d4, 0x7fff, {0xff, 0x46}, {0x7, 0x15}, @const={0x1, {0x7, 0x20, 0x80, 0x2}}}) 00:22:19 executing program 3: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/80) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:22:19 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0xf0) 00:22:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x80) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000100)=""/20) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x18b183) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/54) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x12f1a4bc) [ 3304.296264][T28967] usb 6-1: USB disconnect, device number 12 00:22:19 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x1, 0x800) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402501a8a481000102f00009021b0001010400f2a3ad5853a416d0a303090400060207018000"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3304.399231][ T1499] usb 5-1: USB disconnect, device number 41 00:22:19 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x1d4, 0x7fff, {0xff, 0x46}, {0x7, 0x15}, @const={0x1, {0x7, 0x20, 0x80, 0x2}}}) 00:22:19 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x5, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:19 executing program 3: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x402d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0xe1, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x81, 0x4, 0x1, {0x22, 0xef8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x9, 0x3f}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1a, 0xfa, 0x0, 0x10, 0xff}, 0x69, &(0x7f0000000080)={0x5, 0xf, 0x69, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1, 0x1e, 0x74d, [0x0, 0x3f0f, 0x0, 0xffffb1, 0xff0030, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "57ce7df9b1bb4684d83719d824cce2d3"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "dd4bb8413cb58e31a8237dbc14dc6d1c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x2, 0x2ae}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x5}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40d}}, {0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="b603b30966e5a0c1890f10c4957953d93576200e291f78340f49e600a0c9a15e211a3a4d2333fe951ec59db5cea6a1c5990906652c03d5137e402f45b6100c35053966e989d4b4ffe3d7023cd2d7e6e96d7c1b2b53a3e5a5a1880983d29dda2fcebc13bdcf456ec980389a013c9afba229439313fd0688566aaf8ba33f9a7a05f4613ff5996ba2dfeccfc4048dafcc50ddf5d43aef0bf225047febcda96b344f45f3e5929c0e4ac99b52e965299aea375c3b61ad34ef"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81d}}, {0x37, &(0x7f0000000280)=@string={0x37, 0x3, "231963ebf20d6f75b2f78fe6e039629a3866b48f2d183511dafcb583934340386b190b4fce97aeefac47a94539bfa9d67ecb7826b7"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:22:20 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x1d4, 0x7fff, {0xff, 0x46}, {0x7, 0x15}, @const={0x1, {0x7, 0x20, 0x80, 0x2}}}) [ 3304.560819][T19170] usb 3-1: new high-speed USB device number 100 using dummy_hcd 00:22:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3304.820844][T28967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3304.850810][T28575] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3304.910787][ T1499] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3304.950916][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3304.960851][T19170] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3304.970538][T19170] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3305.220885][ T1499] usb 5-1: no configurations [ 3305.225661][ T1499] usb 5-1: can't read configurations, error -22 [ 3305.233772][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3305.247301][T28575] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3305.260206][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3305.266700][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3305.275912][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.410770][ T1499] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3305.440834][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3305.449881][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.458107][T28967] usb 6-1: Product: syz [ 3305.462341][T28967] usb 6-1: Manufacturer: syz [ 3305.466939][T28967] usb 6-1: SerialNumber: syz [ 3305.471683][T28575] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3305.480815][T28575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.489047][T28575] usb 2-1: Product: syz [ 3305.493264][T28575] usb 2-1: Manufacturer: syz [ 3305.497868][T28575] usb 2-1: SerialNumber: syz 00:22:20 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x5, 0x6, {0x6, 0x5, "9ba080a1"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x40, 0x7, 0x54, "9cf830c39291fe436ec12f58b7ba8f4a9e938f3d2dd2f915357b6c4b32a83bf8dbcccfc063c8079d8118c749df33e368f1144672655e116c9d11a97f1a6e3c59d899c8efa6005c489d5516633804e8e843ee52ab"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x9b, 0xffffffff, 0x5, 0xff01, 0x1, 0xffff, 0x7, 0xfffb, 0xffff, 0x20, 0x6}}, &(0x7f00000002c0)={0x20, 0x85, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0xa765}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3305.549308][T19170] usb 3-1: USB disconnect, device number 100 00:22:21 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x7, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000001400)=""/78) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000240)=""/90) [ 3305.740809][ T1499] usb 5-1: no configurations [ 3305.745454][ T1499] usb 5-1: can't read configurations, error -22 [ 3305.767176][ T1499] usb usb5-port1: attempt power cycle [ 3305.804933][T28967] usb 6-1: USB disconnect, device number 13 00:22:21 executing program 1: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x402d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0xe1, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x81, 0x4, 0x1, {0x22, 0xef8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x9, 0x3f}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1a, 0xfa, 0x0, 0x10, 0xff}, 0x69, &(0x7f0000000080)={0x5, 0xf, 0x69, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1, 0x1e, 0x74d, [0x0, 0x3f0f, 0x0, 0xffffb1, 0xff0030, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "57ce7df9b1bb4684d83719d824cce2d3"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "dd4bb8413cb58e31a8237dbc14dc6d1c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x2, 0x2ae}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x5}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40d}}, {0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="b603b30966e5a0c1890f10c4957953d93576200e291f78340f49e600a0c9a15e211a3a4d2333fe951ec59db5cea6a1c5990906652c03d5137e402f45b6100c35053966e989d4b4ffe3d7023cd2d7e6e96d7c1b2b53a3e5a5a1880983d29dda2fcebc13bdcf456ec980389a013c9afba229439313fd0688566aaf8ba33f9a7a05f4613ff5996ba2dfeccfc4048dafcc50ddf5d43aef0bf225047febcda96b344f45f3e5929c0e4ac99b52e965299aea375c3b61ad34ef"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81d}}, {0x37, &(0x7f0000000280)=@string={0x37, 0x3, "231963ebf20d6f75b2f78fe6e039629a3866b48f2d183511dafcb583934340386b190b4fce97aeefac47a94539bfa9d67ecb7826b7"}}]}) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) 00:22:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3305.841884][ T33] audit: type=1800 audit(1629937341.257:8): pid=22944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15071 res=0 errno=0 [ 3305.908597][T28575] usb 2-1: USB disconnect, device number 11 [ 3305.920277][ T33] audit: type=1800 audit(1629937341.327:9): pid=22944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15071 res=0 errno=0 [ 3305.970899][T19170] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3306.200694][ T1499] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3306.240689][T28967] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3306.330790][T19170] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3306.340464][T19170] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3306.350180][T19170] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3306.363129][ T1499] usb 5-1: no configurations [ 3306.367714][ T1499] usb 5-1: can't read configurations, error -22 [ 3306.520661][ T1499] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3306.610694][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3306.624618][T19170] usb 3-1: string descriptor 0 read error: -22 [ 3306.631044][T19170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3306.640258][T19170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.671457][ T1499] usb 5-1: no configurations [ 3306.676091][ T1499] usb 5-1: can't read configurations, error -22 [ 3306.686955][ T1499] usb usb5-port1: unable to enumerate USB device [ 3306.800728][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3306.809868][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.817943][T28967] usb 6-1: Product: syz [ 3306.822196][T28967] usb 6-1: Manufacturer: syz [ 3306.826806][T28967] usb 6-1: SerialNumber: syz [ 3306.894572][ T1499] usb 3-1: USB disconnect, device number 101 [ 3307.113682][T28967] usb 6-1: USB disconnect, device number 14 00:22:22 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/208, 0xd0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b007f000501020000f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 00:22:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x14, 0x65, &(0x7f0000000040)="b6fcdded483f3792261c30197dc7fb28679723c97e3284be8d76b69bb4666c14fe71459ca5237c2492f44505863fa08089f0245af5e363e016fa9ffcd5d2f9260c92e92b85c35bdc7e415ad01ffe1d5d27bd36ed0ecac892a586cd1074e69f619aca0991bd"}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000100)=""/43) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x8001) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/187) 00:22:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:22 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000001400)=""/78) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000240)=""/90) 00:22:22 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a44000010203fd68cd62ea3baa4ac2a850f40f01b52948d04f5a36c09d6bafb38f09021b000101e68003090400000207810000090501020000f5fe48"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:22 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x8, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3307.491404][ T33] audit: type=1800 audit(1629937342.907:10): pid=22995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15691 res=0 errno=0 00:22:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0xf6ffffff) 00:22:23 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x8, 0x7, 0x1, 0xffffffff, 0x401000, 0x5d77}) 00:22:23 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000001400)=""/78) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000240)=""/90) 00:22:23 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:23 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000300)=""/216) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x9, 0x1, 0x6}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xa586, 0x100000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/57) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x200) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/90) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000001c0)=""/173) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x8, 0x2, 0x4, 0x400, 0x4, 0x9}) [ 3307.727325][ T33] audit: type=1800 audit(1629937343.137:11): pid=23016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15697 res=0 errno=0 [ 3307.762946][T18032] usb 6-1: new high-speed USB device number 15 using dummy_hcd 00:22:23 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000001400)=""/78) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000240)=""/90) [ 3307.780621][ T2641] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3307.811375][T30893] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3307.831018][ T33] audit: type=1800 audit(1629937343.237:12): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15697 res=0 errno=0 [ 3307.970588][T32516] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3308.060612][ T2641] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 3308.130622][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3308.180717][T30893] usb 5-1: config 0 has too many interfaces: 127, using maximum allowed: 32 [ 3308.189487][T30893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3308.199755][T30893] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 127 [ 3308.209002][ T2641] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3308.216740][ T2641] usb 3-1: can't read configurations, error -61 [ 3308.340597][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3308.349993][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3308.358068][T18032] usb 6-1: Product: syz [ 3308.362351][T18032] usb 6-1: Manufacturer: syz [ 3308.367008][T18032] usb 6-1: SerialNumber: syz [ 3308.371780][T32516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3308.381511][T32516] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3308.391286][T32516] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3308.404206][ T2641] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3308.450703][T30893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3308.459773][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3308.467977][T30893] usb 5-1: Product: syz [ 3308.472207][T30893] usb 5-1: Manufacturer: syz [ 3308.476819][T30893] usb 5-1: SerialNumber: syz [ 3308.483857][T30893] usb 5-1: config 0 descriptor?? [ 3308.681187][T32516] usb 1-1: string descriptor 0 read error: -22 [ 3308.687443][T32516] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3308.696750][T32516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3308.709184][T18032] usb 6-1: USB disconnect, device number 15 00:22:24 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000080)={0x85, "27d646291203c6e8c94afa4bd5a6d4be9dc12c02114d023d8d80beb52d5a156426f6f3d8d958207c54e0f5c627a8ea1ffc9c51a35872dcc3535ddc7acbd9928f49e6fd844c674103dfada378a787c3318e087daa0c0f7fb553f84ad8767e9f747fc349e6c482adef18e7b191516340073a6a25c24256cde47632f7cea778892052da938ae2"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x30, 0x50, {0x50, 0xc, "0d6806d2c868d22b6332acf1919c3b03030a3d4d9cfa045333241c0c774757ffe3d7e93ae2c9e7e8cda8f06365826f065a696cac8c83a4e322f0e7f722cdda5926fc2bf38479e1e929612822a843"}}, &(0x7f0000000000)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "f1ebb5f8ef8385875c9f6fba9c98c12d7e370356aa82f6b10561"}}, &(0x7f0000000240)={0x0, 0xf, 0x1b8, {0x5, 0xf, 0x1b8, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x3f, 0x5, 0x875e, 0xf00f, 0xff, [0x3f00, 0x30, 0xc030, 0x18, 0xffc000]}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x0, 0xf000, 0x20, [0xfe7f3f, 0xcf, 0x3f3f, 0xc000, 0x0, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x0, 0x1}, @generic={0x72, 0x10, 0x3, "7e9da16d882e03c2a77c55721df502e1fcbb8ad084f4258ce62827393ccd77f9c6cbfe61d45d9881e918df26d4f2ec10ee1e2c5891f7916fe2a33225dd4490c7ee9979b5fe292146595e03803c264d935a7fc86c6ff29cbbf2903611b7a644c2350d678ffa795d299d398a381b1433"}, @generic={0xf6, 0x10, 0xa, "e110dcf5b9947eb5ba2dbc866923186752dc7d72f64c6d55f09aeac45bb8bac929e11c8ee933eb5badbefbce712880a68e8f3e525b91b5d22b7a113dff53f8da558d66d389cc3454bd5c58f8875af36cc4dce79e14d91b338e38ac3f68d3ec26769a85ed794495bf062d28a01b52ba6ba909e416009290754c6c612a47a62098879a6f0dcddf563a0cdb924425f5e2b6746eea7aee69ba8921fa1b0f263bd7dc6b82db873ecd4c65a578f90097398ac6edf4b8548a6be9bf099601cf016c12aa357bee6b134bf1fe6458461e102f7a317438ca8bffcdcea7f64a5ea0d41f6ad5aecafd412670241e706135d9ee699ae52135d3"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0xfa, 0x20, "7f8aea6d", "678777af"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x8, 0x6, 0x8, 0x5, 0x3, 0x5}}}, &(0x7f00000019c0)={0x84, &(0x7f00000004c0)={0x20, 0x5, 0x96, "143d7dce20cd555857a5308e34f8ad85cf4f2c395fd3b544be5bc252bb860fdc4033907195a0fdb370330a53e22408e767357c8076f8814174a5f607b71ab27e77478556c983aabf11aa7b75eacdcc1abe97148c33ddb16ba1601b3a1f2993bf7aae5d754546477a3d6afb4e315b1e91fa5abc7dada9cf6154ec5b6a0a8ab11ab75a1d42a23d4e9c98320e973a3f26483cd1199bb72d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x91}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x5d5}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0xb, 0x2, "dd13"}, &(0x7f0000001780)={0x40, 0xf, 0x2, 0x6c}, &(0x7f00000017c0)={0x40, 0x13, 0x6}, &(0x7f0000001800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001840)={0x40, 0x19, 0x2, "7ca0"}, &(0x7f0000001880)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000018c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x1}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:24 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x1, 0x2) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000100)=""/154) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/135) 00:22:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000001400)=""/78) 00:22:24 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x18, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3308.741392][ T2641] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 3308.782180][T30893] usb 5-1: USB disconnect, device number 46 [ 3308.858388][ T33] audit: type=1800 audit(1629937344.267:13): pid=23049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15694 res=0 errno=0 [ 3308.871367][ T2641] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3308.887247][ T2641] usb 3-1: can't read configurations, error -61 [ 3308.897845][ T2641] usb usb3-port1: attempt power cycle [ 3308.993957][T28967] usb 1-1: USB disconnect, device number 33 [ 3309.190431][T18032] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3309.201074][T30893] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3309.310402][ T2641] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3309.440958][ T2641] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 3309.550442][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3309.564275][ T2641] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3309.572288][ T2641] usb 3-1: can't read configurations, error -61 [ 3309.730488][T30893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3309.739689][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.747739][T30893] usb 5-1: Product: syz [ 3309.752046][T30893] usb 5-1: Manufacturer: syz [ 3309.756646][T30893] usb 5-1: SerialNumber: syz [ 3309.761409][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3309.770724][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.778738][T18032] usb 6-1: Product: syz [ 3309.782944][T18032] usb 6-1: Manufacturer: syz [ 3309.787563][T18032] usb 6-1: SerialNumber: syz [ 3309.792286][ T2641] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3309.851449][T30893] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3309.930569][ T2641] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 3310.071689][ T2641] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3310.079304][ T2641] usb 3-1: can't read configurations, error -61 [ 3310.086698][ T2641] usb usb3-port1: unable to enumerate USB device [ 3310.097609][T18032] usb 6-1: USB disconnect, device number 16 00:22:25 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400002000000020054c1591171d2ecee1868c5425c23f0255df46238ddf62a805df3527f19e1a396d7193d56375ab846b867cc5bc5752a6e71d22deea023aaf49dfcec22f3c1"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000080)) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0xfffffffb, 0x7, 0xffff, 0x4, 0x650, 0x3ff}) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/1) 00:22:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) syz_open_dev$evdev(&(0x7f00000013c0), 0x1b40000000000000, 0x1) 00:22:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7f, 0x20000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/199) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:25 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3310.455088][T30893] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 00:22:25 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3310.491263][ T33] audit: type=1800 audit(1629937345.907:14): pid=23082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14098 res=0 errno=0 00:22:25 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x32, 0x45c3f1) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x2b) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x8000, 0x2, 0x6, 0x28, 0x5, 0x200}) 00:22:26 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/51) [ 3310.627237][ T33] audit: type=1800 audit(1629937346.037:15): pid=23099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14241 res=0 errno=0 00:22:26 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/8) 00:22:26 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="1201007429d4980382d38ca1e562308ac20600000000402505a8a44000017045d5bf3e63cee2f402030109021b"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:26 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x122080) [ 3310.683733][T32516] usb 5-1: USB disconnect, device number 47 [ 3310.726078][ T33] audit: type=1800 audit(1629937346.137:16): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14241 res=0 errno=0 00:22:26 executing program 3: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x8, 0x5, 0xb0, 0x8, 0xfd, 0x9}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/13) [ 3310.779783][T18032] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3310.890300][ T2641] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3310.940264][T28967] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3311.140329][T18032] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3311.260381][ T2641] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3311.310349][T28967] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3311.320028][T28967] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3311.320397][T18032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3311.329735][T28967] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3311.338832][T18032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.359735][T18032] usb 6-1: Product: syz [ 3311.364074][T18032] usb 6-1: Manufacturer: syz [ 3311.368712][T18032] usb 6-1: SerialNumber: syz [ 3311.450359][ T2641] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3311.459617][ T2641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.467720][ T2641] usb 1-1: Product: syz [ 3311.472157][ T2641] usb 1-1: Manufacturer: syz [ 3311.476759][ T2641] usb 1-1: SerialNumber: syz [ 3311.530321][T30893] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3311.537388][T30893] ath9k_htc: Failed to initialize the device [ 3311.545058][T32516] usb 5-1: ath9k_htc: USB layer deinitialized [ 3311.653770][T18032] usb 6-1: USB disconnect, device number 17 [ 3311.680749][T28967] usb 3-1: string descriptor 0 read error: -22 [ 3311.686986][T28967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3311.696137][T28967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.782572][ T2641] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 3311.794439][ T2641] usb 1-1: USB disconnect, device number 34 [ 3311.900374][T32516] usb 5-1: new high-speed USB device number 48 using dummy_hcd 00:22:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xf0) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0xfffffffb, 0x7, 0xffff, 0x4, 0x650, 0x3ff}) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/1) 00:22:27 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0xffffffff, 0x8001, 0x1, 0x0, 0x8c8, 0x21c2}) 00:22:27 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x2, 0x0, 0x0, 0x0}) 00:22:27 executing program 0: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x480880) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3311.971929][T18032] usb 3-1: USB disconnect, device number 106 00:22:27 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_usb_connect(0x4, 0x3ab, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x51, 0xcc, 0x6e, 0x28, 0xcf3, 0x817a, 0x25e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x399, 0x1, 0xff, 0x8, 0xa0, 0xb1, [{{0x9, 0x4, 0xd6, 0x0, 0x9, 0x40, 0x43, 0xeb, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "87b151102f"}, {0x5, 0x24, 0x0, 0xfd58}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x9, 0x2}, [@mdlm_detail={0xc0, 0x24, 0x13, 0x81, "be334f43c1fe83a3bb38451b0b150b332c15be0dbfb0b245ac4a68379a26de8f68d9add2e1d9da092df84ad8f871dd25df1a07359f873fcef34c6a41a64596a7938da61a4434e483f4b86e5a18dc52041583a4428f042d9c32525dd003322c09217dfe226641b1b09bef38af2c25587d6bed023b1821e4d0af7bcf6732966664581380d012e3da9ae8363ccc64cf9719efac5b85eec28c48aae471e8969b03187013b239945390395f546149e6db05f9d372f60e898002ff31c69117"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x8}, @dmm={0x7, 0x24, 0x14, 0x1, 0x200}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xebda}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x9, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x0, 0x400}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xff, 0x80}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x8, 0x6, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3c, 0x3ff}, @generic={0x94, 0x4, "b7c907d8c368b07ca6af482cf08fccad487f18bc2ea4ab503067444424fd29a4adf4cfc27d3aa8fe2cba66404ea40601ab04ebaf095de95e938c8b813e8ee9a24dcedafd8372c602cf020b6cbcfc8aba61db07888fa7c459236d04cdd9a5bf54a47fc478fac583b74c5082c99bef449136156758c71f316c7dc8a9157d5d9e60029affe08098c1a607298f51c6a87f2c3440"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x3, 0x0, [@generic={0x4e, 0x31, "f71d92a9e9a0ff9ed6d8678442aeb7bdebc86d04b16066a14d3a3cdde654387265a8ee2f5450aaf1e2dc34448bbbd3d56fdc36d53e8f6426494a1eca929e9d73bfc6190ec708aa7ff75bb7de"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x2a, 0xfc, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xca, 0xdb2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x81, 0x1f, 0xe0, [@generic={0x4e, 0xc, "b63d516f6aadbe2c956312565aa8be856b10dc2d378b7ed9335246e498a1be1b25d1ed466177b630ace42b5836f0bcd4720e7c639aca614b96b0979b51788b7cd4388a6a9d8128aaeaa5009c"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x8, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa8, 0x8}, @generic={0xec, 0x11, "ae78dba1ea68f66f28a4a34677446a2c16512d9867db6693326908f2c2ba368d4c7c414deeabdee0a0c62d71733104e4daae3a164d738b757e47b89063b5b87f1db6bad95da04733eb1e862603131519d7e7462aeb7f42c5d6cb7d409be1a5cd3bb9d2fc540a032a449c1c8ebb0fa4d4cdbdd54432736bf51abbdd2671da871080ff56b2552d8d16d635b7384074a1ebea994cc206d5db4b2fc00a43bb2d22b941d93d8bae7092ee2a9c9a6356036c93260bd966835dc7312ef6a495aeb87fa65cb9cf35b44ea51260fd63d8ca57f7f8c624521b9fc06572e76b2fcd8a64ee115226b111814ef271ccb9"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x41af}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0x4, 0x4, 0x10, 0x6}, 0x1f, &(0x7f0000000040)={0x5, 0xf, 0x1f, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x4, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3f, 0x80, 0xfc00}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x26b8}}, {0xd, &(0x7f0000000100)=@string={0xd, 0x3, "b16409107d179a047c20eb"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0x6c, &(0x7f0000000600)=@string={0x6c, 0x3, "3a45907cdd9edfd7962b103b909a854078ed8d06c7ea9e9bdbb1b6bc24010ffa231ffeb28c3b2d051adac9e869bbe1ba9118d05d9e527f41862493fd77d56694245ef79c951d328736f07d0ba9321c72d44fff91f6c1ee8e8c58f2489cc28d38bf3e474b5668d6841c17"}}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$printer(r1, &(0x7f0000001c80)={0x14, &(0x7f0000001e40)={0x40, 0x4, 0x76, {0x76, 0x10, "98728f9856f166152e8f034cbbcb7e431177d377d10f841bab772fef753ab7d8046cbc278cff75a0dcec678366ccefd22adbaecf5a1e23402a675e9b31e943d6ccbeb1508430dff729a750bce9240b8163d113908aaa479a164c4d608a13f369749bb336025fa24fa369b248aaf82090c1a3ca66"}}, &(0x7f0000001ec0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "17fda89260f97265184d52f2e00c3cfa821903248e157958b173de5d9bf2a4a7503105f49801f2cd6c2b389503c1d44cea315fcbb97d685fe765"}}}, &(0x7f0000002a80)={0x34, &(0x7f0000001f40)={0x20, 0x10, 0x5a, "1207e59fd150e4d75ac7e59b413fca0bb3fca2e5aca4694e3f0b97e6a30c7a953d91c5598f95322d392d48a2f024d4f175357b5091f110730151a93f95ba24c0037e6769acb631afb45fdfe51476d950f2cb284578543b09d186"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000002040)={0x20, 0x0, 0x8c, {0x8a, "c783d775d39362fe1f84ca1122bec7eb78fdd7fecdae760f56749346ddec4f207665a3ba1056b07e4b4d579be9a3e858f0f1a142e6c4a11e8e39a198f7668d768864ef7f79ad4d1e8999d70af2fead785ac6656dac6cb7477ff217ea5a8527692476ca098add16192412ddd4362240fa4f5690ae18e7bc18d17e443c4a2b85a51921e071760e6d0e35bd"}}, &(0x7f0000002100)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000002140)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001880)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="2021d1000000d10e526915bb3f389bcf07d2cebfbae8ff0c9a05994f05481a17e7b669d1323d4ff643750e77f9a088da698a2e8f95435ab85fe5f8f09388000e86c0ed70ae72400b7c8450615480876fdb06ab08000000725583ac54b11fbdbf0ec03d098f0a88919ebab0b66eae4683bf80bd72ab2cd199d8dca7707b7acf9b494d8097cb8cbc6fd239f52f57030ecbe7edbc13951480d18fd9a4cd9568d3a753135517170accfc2629e747464dc9d83588f5e15609d370fefd3f9aa894b1ecdc29d5905b1e475d0f7495473eeee0018b95f715f03ea3"], &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a00)={0x1c, &(0x7f00000018c0)={0x0, 0x1, 0x53, "8de876d2ce85381195b5717961f1bb19f146049ac3749eba0e31b81810ec00b7692fbdb6787fbfbdebfec4db1ddcc35d750f1fe2f7b8c965fe88a27a477b613345ff1522d6734afae1402a0195f4500fc71463"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x2}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r2 = syz_usb_connect$uac1(0x5, 0xd6, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x5, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x6, 0x4, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "11"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x7, 0x3f, 0x5f, 0x2, 0x9}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x5, "af56c87f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3c, 0x0, "d0", '_'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x1d, 0x8, "892e6428"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0xbd, 0x80, "e084", "66ff74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x1, 0x5, {0x7, 0x25, 0x1, 0x81, 0x43, 0x1f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0xfc00, 0x80, "01f29bf0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x81, 0x6, 0xff, {0x7, 0x25, 0x1, 0x80, 0x40, 0x100}}}}}}}]}}, &(0x7f00000029c0)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x200, 0x6, 0x8, 0x4, 0x20, 0x7}, 0xf9, &(0x7f0000002580)={0x5, 0xf, 0xf9, 0x1, [@generic={0xf4, 0x10, 0xa, "a27962d702230952a6ade76524f81fba044c0619f765d6d8b9d667398c22fe312784e89f6fb5799bdc2162d9535638aaf51cf2a032d436e4be5ce22583ed77599f65b3d437f6179d377087707b7faeb900fcc302b71e4a890d1eed34cbda642622fcb348c9b23229f835319060e5cdd42d6d721bddeccd5d109608f23b2937bc61c7b4ee447991fd24ad71b4aa302698bdacc160d2d4d0c6e30298dd201f61f3c366ecbc2e159f126eb07672b639c11ca8ae669ea8a07c778aef27035cbb91aabf667cc06a07bb81513590121fabbdd6fd5de81eca9e166340b363420f81a0243118ab603adc4d2ce4348938b4f73e6567"}]}, 0x5, [{0xde, &(0x7f0000002680)=@string={0xde, 0x3, "3b9ed92e6dd8a349c5eeae8a1ef0def6eca5f664a72491933fafa23343ef3a2dcc4a7bf2d54a8e0901c5c3d0fe0ce3e78d3a4d62169055a2a644be5b6d95031301451508ceaff3f5f9d2f643dc779966e80dab95e0c106961bab4a3253b456f070b4a0ca4cc63a8d3f66d0f7729c17bec766bf70bf1c6f4aa9b00631cf064537b5d3ef05cb0b75e765403885fbb93fb7578c74be6a2f470a41dcf7c1506b6cdedac528cf978f0efab164af9775fdfbf96b5cc3860bd7eb866167182cee91170cf1545bcf9171b07fdd7e007ef58c08c5dcafe28fa58ccb4a70d967cd"}}, {0xcd, &(0x7f0000002780)=@string={0xcd, 0x3, "3e6f03eb32db44b267474a3a04bfde051f7c2d58d66225d31e03fb3a0c2669dab33b99701004a9ec9f9d6c4a1281d44e03d7db2008c89a3eed041ae412be09383dbf3bc408e9404c9f77db946d24f8c13373179fd2fb8f4c2af92633241a090ad88542a3440477133275cc297d0de126fb34012f735c9758ee3ac8f552f113e11ec452147af63938940d223577bda8971d9b05ee44e6f4918c6de9efd772ef789dcdf9fde21ba0722d98a5a1847fe014d636c958224320dd8133d8b8d0f02375b36e9a4158a6a0a9a790cc"}}, {0xb2, &(0x7f0000002880)=@string={0xb2, 0x3, "4b4c994b163ec8faad28b24e94478407894af752e63c12a95d1b60f6a0c441052685eb2f763f85ac4bf11b5ce25966d672b8d5cbcec388ab378d551289e449895ab023ae1c5874015e29a71d0fd486c207b7594e783855e93a0bc02950ac39d78b29ae50aad221529b053c14eb8ef95f3e2adb37db99725aa469c584eccd405a6dced25a6fc6c03ea98795a5338388397497b52621731fc164d559610f7146ed3e61bdf79a826adec5ea076d14504980"}}, {0x4, &(0x7f0000002940)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_ep_read(r2, 0x1f, 0xe, &(0x7f0000002a40)=""/14) r3 = syz_usb_connect(0x1, 0x1b9, &(0x7f0000001a80)={{0x12, 0x1, 0x110, 0x11, 0x3e, 0x76, 0x20, 0x19d2, 0x1073, 0xad43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a7, 0x1, 0x20, 0x7d, 0xa0, 0x74, [{{0x9, 0x4, 0x56, 0x6, 0x5, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0xc0, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1f, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xcebef5c0c15eba84, 0x85, 0x938}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x80, 0xb, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x8, 0x98, [@generic={0xf4, 0x31, "3fd5dc22d22736dcc952a4d59271c786ee6aae743e507b217ff54716608f4ef1d7ebea8af18f9e1e496d160c94b7e78a48b8363315fdac16d57e9583b4c13bd469ff4066edfaa0d16f5ede4301e199359c402f571320705a17681cc39187f7fed6d9446cdebb7fd3ede39f2834b5e2b0d17e05df6465f4fd732af12afadfa2009d8b4e468f83dd572d420648b48143f4fdf48121025fefa1f79f544bef77d20551f953d64140ac684544662c6fa49de8c9d6702522de620d0fde72feb98fd4320e6f4fa18c2bccb99ae3d54f2c6699b140b8203f39262377cd775add506bec98deab3e71ee06aa749a38ec9449e69e4bc888"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0xc1, 0x9, 0x1, [@generic={0x51, 0x20, "88a25d75e859dc81fbd440989ccb580af58787aae725f8d27c508c624ad60001c58a4252f351d814ab0b3351f6a3d25c01c42aa36ffcd63822d16632b1d32f888fbf91eda78d3fd1a8f83153521d70"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x234}]}}]}}]}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x200, 0x3, 0x81, 0x8d, 0x8, 0x80}, 0x15, &(0x7f0000001c40)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8001, 0x780, 0x80, [0xf]}]}, 0x3, [{0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x801}}, {0x86, &(0x7f0000001cc0)=@string={0x86, 0x3, "7813467361e65ad560b65dbd366766bd6629af434a0d9a12b27b8f9010dbc9d8b007a3278ec997f459fdb3834885bf7d592b0f78d4e3702b2d9cba61416418f7f5735dc95381275759170f5a3ef8cf115abb04de4679340a9cb59473c156cbadb7bff6ec2f61a3135a54306fe61bed504cbd84733ac43b25f9bd89bdc6bf0e6461e5737b"}}, {0xa, &(0x7f0000001dc0)=@string={0xa, 0x3, "6ff12643897e0a5b"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000022c0)={0x14, &(0x7f0000002180)={0x0, 0xa, 0xd9, {0xd9, 0xf, "f6ebabd7d238ca9123c678da526daa3079f190a16f365bd3c21116354a804bab3d65714587f382efcd32838644a2b1c43d709658243c32d3349210e99e715d1a0bfa2ce4a8f3339461cf6284721864a1b62a1fbc15c5e774def53fe8e3af2909f6d91a26e14d997ffa49c9906202028db75af97bdecf8f86a10e0c7f141365699853a8eb8ffd9d47ef7a66204fcdb905773abe1c047a4f0fcc20c33bb0fdc1deefca3171479bbe544c38a7491d8589a430c6680fcb97324628a3df2c1b3a9f93e861b57e1d59f1e41e78f78b834ab47144b33f38d704c3"}}, &(0x7f0000002280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002400)={0x1c, &(0x7f0000002300)={0x20, 0xa, 0x6f, "2b35842a32ac55d0fcca32c9fbf6bb5949fdb63c78195889883b50168db73f5ebc3b99bb1f569eb8e283bbbd96f38486951b4b9882f3d2b4c15b8b3a4dbd5a933f3d5a9b75d126bf6c5959d3553772f710cc6bac5fe98357544766695bbbfc3ef303b05d4000e4efa341c9cddbe751"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x1f}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3312.048486][ T33] audit: type=1800 audit(1629937347.457:17): pid=23156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14386 res=0 errno=0 00:22:27 executing program 3: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xfb}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x10000, 0x300) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000000c0)={0xee, "a8bcffe8cf4419f5d88cf16dc8d0c5b8eaaba82a2a97dee8ccbf95cf795416e879c71ccf6e7ea2d74cbf183e46eb2aa8d2ccd1ad0bdf848a7821fe5106a2b296"}) 00:22:27 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x206500) 00:22:27 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/133) [ 3312.186241][ T33] audit: type=1800 audit(1629937347.597:18): pid=23171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14370 res=0 errno=0 [ 3312.207703][T32516] usb 5-1: device descriptor read/64, error 18 00:22:27 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) [ 3312.237559][ T33] audit: type=1800 audit(1629937347.647:19): pid=23173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14370 res=0 errno=0 [ 3312.287096][ T33] audit: type=1800 audit(1629937347.697:20): pid=23175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14370 res=0 errno=0 [ 3312.320971][ T2641] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3312.380173][T18465] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3312.470363][ T7203] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3312.480291][T18032] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3312.630242][T32516] usb 5-1: device descriptor read/64, error 18 [ 3312.740249][ T2641] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3312.753345][T18032] usb 3-1: Using ep0 maxpacket: 8 [ 3312.800396][T18465] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3312.810262][T18465] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3312.819918][T18465] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3312.833191][T18465] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3312.910277][T32516] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3312.918399][ T7203] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3312.928138][ T7203] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3312.938119][ T7203] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 64 [ 3312.948031][ T7203] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3312.954812][T18032] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3312.967700][T18032] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3313.010358][ T2641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3313.019442][ T2641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.027492][ T2641] usb 6-1: Product: syz [ 3313.031716][ T2641] usb 6-1: Manufacturer: syz [ 3313.036361][ T2641] usb 6-1: SerialNumber: syz [ 3313.090306][T18465] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3313.099466][T18465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.107643][T18465] usb 1-1: Product: syz [ 3313.111961][T18465] usb 1-1: Manufacturer: syz [ 3313.116557][T18465] usb 1-1: SerialNumber: syz [ 3313.210468][ T7203] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3313.219648][ T7203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.227702][ T7203] usb 4-1: Product: syz [ 3313.231907][ T7203] usb 4-1: Manufacturer: syz [ 3313.236502][ T7203] usb 4-1: SerialNumber: syz [ 3313.241233][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3313.250333][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.258411][T18032] usb 3-1: Product: syz [ 3313.262617][T18032] usb 3-1: Manufacturer: syz [ 3313.267220][T18032] usb 3-1: SerialNumber: syz [ 3313.301699][T23163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3313.310992][T23167] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3313.350262][T32516] usb 5-1: device descriptor read/64, error 18 [ 3313.377487][ T2641] usb 6-1: USB disconnect, device number 18 [ 3313.434590][T18465] usb 1-1: USB disconnect, device number 35 [ 3313.584598][ T7203] usb 4-1: USB disconnect, device number 97 [ 3313.633436][T18032] usb 3-1: USB disconnect, device number 107 00:22:29 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x3, 0x0, 0x0, 0x0}) 00:22:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) 00:22:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) 00:22:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5f, 0x2200) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2021a6000000a6233b8b3917f67610364b4665c7aadb124d852f2ea9c1b6e68af93d69345f7262bbd46c3c53d620e7798171d40416da7d227dbda7bb4fc13b3569a0a8028567dc375cdf507be87767cbb9e8a059fc3917cb9bac61775f290075bced5df49093c9f17a9d6421cb0debda905b6515d1855688a934cdad7dd278e9a69813ca53796836eeb7183678ee5555c233312ed302491e5e380735d085f99e2ac465341ca2e571adb1e6df"], &(0x7f0000000080)={0x0, 0x3, 0x39, @string={0x39, 0x3, "14e0c1b6b82edd51d7b17484debe1e1635bac269ef27246548aee865ffe6e0dc921186d4def2d97994c92c47be227f3aee723207120b46"}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xa1, 0x84, "c5d8f2f9", "b47ba79e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xdc, 0x18, 0xff, 0x1, 0xf7, 0x4, 0x6}}}, &(0x7f00000017c0)={0x84, &(0x7f0000000340)={0x20, 0x18, 0x48, "0b4d73e6097f676c6e32f1bef8648f57f65a2aa3276aee1393690b93b05bcd8cdda509db6c8141b26c07a57ee7af39e18275834d58d17478f4cf962c4fea39dafead23be64345550"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x260, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, "143e"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x400}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2cca"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x1c}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x98}}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0x1]) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:29 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x149c82) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1f, 0x5931c1) read$hidraw(r0, &(0x7f0000000080)=""/3, 0x3) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b1d241a3b67bdb3b900f10fae8303090400060207010300090501020004f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0x5, 0x26, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x94, 0x1, 0x8, 0xff, 0x1}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4a, 0x1, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x7}]}, 0x1, [{0xbc, &(0x7f0000000180)=@string={0xbc, 0x3, "59fe60ebbcf6cc3948a9324168e890062bb77f0d0d55313aac42520d1aba592ae7df6818deaaf2332d363bf805bb4129420c29ba1400a4d58e207f9deba3a62b55876cdc47b406810932e8fd4d1e7689ca439c7ae8d53b6f6023f388bd841482c74045adc64c0b0f2a5eeba05348181a87285622266487a68af5fcbc89918622779d834154e7e29d586c39c1d62eb7c4aa9ffdd54c970e279999589beddfde5a54856bae8dee041024d58745734f11655822d59aa31622d98e02"}}]}) 00:22:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) [ 3313.770662][T32516] usb 5-1: device descriptor read/64, error 18 [ 3313.784900][ T33] audit: type=1800 audit(1629937349.197:21): pid=23224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14563 res=0 errno=0 00:22:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) 00:22:29 executing program 0 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3313.879656][ T33] audit: type=1800 audit(1629937349.237:22): pid=23226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14690 res=0 errno=0 [ 3313.912028][T32516] usb usb5-port1: attempt power cycle 00:22:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) [ 3313.936290][ T33] audit: type=1800 audit(1629937349.267:23): pid=23234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14706 res=0 errno=0 [ 3313.977738][ T33] audit: type=1800 audit(1629937349.387:24): pid=23239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14546 res=0 errno=0 [ 3313.979589][T23240] FAULT_INJECTION: forcing a failure. [ 3313.979589][T23240] name failslab, interval 1, probability 0, space 0, times 0 [ 3314.003241][ T33] audit: type=1800 audit(1629937349.417:25): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14690 res=0 errno=0 [ 3314.011548][T23240] CPU: 1 PID: 23240 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3314.011574][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3314.011588][T23240] Call Trace: [ 3314.055462][T23240] dump_stack_lvl+0xcd/0x134 [ 3314.060162][T23240] should_fail.cold+0x5/0xa [ 3314.064672][T23240] ? getname_flags.part.0+0x50/0x4f0 [ 3314.070069][T23240] should_failslab+0x5/0x10 [ 3314.074570][T23240] kmem_cache_alloc+0x5b/0x360 [ 3314.079323][T23240] getname_flags.part.0+0x50/0x4f0 [ 3314.084427][T23240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3314.090487][T23240] getname+0x8e/0xd0 [ 3314.094371][T23240] do_sys_openat2+0xf5/0x420 [ 3314.098960][T23240] ? build_open_flags+0x6f0/0x6f0 [ 3314.104003][T23240] ? __context_tracking_exit+0x9f/0xb0 [ 3314.109488][T23240] ? lock_downgrade+0x6e0/0x6e0 [ 3314.114327][T23240] __x64_sys_openat+0x13f/0x1f0 [ 3314.119175][T23240] ? __ia32_sys_open+0x1c0/0x1c0 [ 3314.124139][T23240] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3314.130108][T23240] ? syscall_enter_from_user_mode+0x21/0x70 [ 3314.136130][T23240] do_syscall_64+0x35/0xb0 [ 3314.140609][T23240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3314.146681][T23240] RIP: 0033:0x4196d4 [ 3314.150561][T23240] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3314.170181][T23240] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 00:22:29 executing program 0 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3314.178605][T23240] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3314.187125][T23240] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3314.195109][T23240] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3314.203071][T23240] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3314.211120][T23240] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 00:22:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x141801) 00:22:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) [ 3314.286530][T23244] FAULT_INJECTION: forcing a failure. [ 3314.286530][T23244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3314.289365][ T33] audit: type=1800 audit(1629937349.697:26): pid=23246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14546 res=0 errno=0 [ 3314.299970][T23244] CPU: 1 PID: 23244 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3314.329885][T23244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3314.339952][T23244] Call Trace: [ 3314.343238][T23244] dump_stack_lvl+0xcd/0x134 [ 3314.347856][T23244] should_fail.cold+0x5/0xa [ 3314.352385][T23244] strncpy_from_user+0x34/0x3e0 [ 3314.357260][T23244] getname_flags.part.0+0x95/0x4f0 [ 3314.362406][T23244] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3314.368407][T23244] getname+0x8e/0xd0 [ 3314.372314][T23244] do_sys_openat2+0xf5/0x420 [ 3314.376939][T23244] ? build_open_flags+0x6f0/0x6f0 [ 3314.381976][T23244] ? __context_tracking_exit+0x9f/0xb0 [ 3314.387440][T23244] ? lock_downgrade+0x6e0/0x6e0 [ 3314.392289][T23244] __x64_sys_openat+0x13f/0x1f0 [ 3314.397152][T23244] ? __ia32_sys_open+0x1c0/0x1c0 [ 3314.402114][T23244] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3314.408083][T23244] ? syscall_enter_from_user_mode+0x21/0x70 [ 3314.414155][T23244] do_syscall_64+0x35/0xb0 [ 3314.418564][T23244] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3314.424450][T23244] RIP: 0033:0x4196d4 [ 3314.428327][T23244] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3314.447942][T23244] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3314.456623][T23244] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3314.464585][T23244] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3314.472553][T23244] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3314.480541][T23244] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3314.488677][T23244] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3314.497462][T18465] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3314.569997][T18032] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3314.577948][T32516] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3314.790487][T32516] usb 5-1: config index 0 descriptor too short (expected 7451, got 27) [ 3314.798771][T32516] usb 5-1: config 26 has too many interfaces: 36, using maximum allowed: 32 [ 3314.807684][T32516] usb 5-1: config 26 has an invalid descriptor of length 179, skipping remainder of the config [ 3314.818086][T32516] usb 5-1: config 26 has 0 interfaces, different from the descriptor's value: 36 [ 3314.920087][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3314.980073][T18032] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3314.990015][T18032] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3314.999769][T18032] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3315.014676][T32516] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3315.023806][T32516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3315.031878][T32516] usb 5-1: Product: syz [ 3315.036036][T32516] usb 5-1: Manufacturer: syz [ 3315.040675][T32516] usb 5-1: SerialNumber: syz [ 3315.120186][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3315.129386][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3315.137453][T18465] usb 6-1: Product: syz [ 3315.141768][T18465] usb 6-1: Manufacturer: syz [ 3315.146458][T18465] usb 6-1: SerialNumber: syz [ 3315.310730][T18032] usb 3-1: string descriptor 0 read error: -22 [ 3315.317123][T18032] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3315.327531][T18032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3315.337376][T32516] usb 5-1: USB disconnect, device number 50 00:22:30 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x4, 0x0, 0x0, 0x0}) 00:22:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001380)={0x4, 0x4d, &(0x7f0000001300)="8bb1f212ea8469bffac9202282a71864fd0272ebd2ccda7447ec7e2eaa82e817268d772ed98d6cb763f918a90272a8a82498d88f0e2188536157e7a5c6d5fc9dfbd189efb14377907351d2961f"}) 00:22:30 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) [ 3315.433930][T18465] usb 6-1: USB disconnect, device number 19 00:22:31 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002340)={0x24, &(0x7f00000020c0)={0x0, 0xc, 0xd1, {0xd1, 0x5, "6d6ddcefb4102a15eaf9db35be5c59f934e830b93de6e8d08a1de428191e7791eea7472f9309186c510b67be926a259ca1949759985d5c38912f0e71abb5393338eadc8955112f70e843db15bd9340f5c4f2d930cf1e48a1bcdb9ad691ccf4e40669e45104b414313ce1c0eaa7aa0436a80d8c57a884ca9a53b0f7aa5c090ce0b18b340496fbb79714d65e4bb1ea3cc74faadd44dc786e111cc63710c96e073dde7caad3a850f2c68f333cfc02e2c844aa1dc91f3c33fe577f6f90ffd6b23ca6a7259636235faefc907d2c57218938"}}, &(0x7f00000021c0)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "d6b956802fff09613db844316d2873d4ad28bc98dde26d345a4275f471d38d49f054cf78925677ed86e85f48117e99ec118a25906b9bc3035ee57492fae288d430e02d141eb8359d5458137632e8b7b7baaa84870fb89b6a076cb4b6ad95982f3de99496f41eb84102c2a4bde4f50788bd602e04a5cf1b585197bdad0c64825908028ac1abf2ab8155f7241af3d0dabce88ab00928c9370d8bb16cfb2aeb21865345c26cf42b693480625679c2bbd856538d8e6fd3ed0ffac8df7ae0b48a161a0a1b42294dc982dd28bb"}}, &(0x7f00000022c0)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x8, "c27df8e9"}, @global=@item_4={0x3, 0x1, 0xa, "49a5e558"}, @global=@item_4={0x3, 0x1, 0x3, "dc6a0f1e"}, @local=@item_4={0x3, 0x2, 0xa, "fdf0b735"}]}}, &(0x7f0000002300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x21b}}}}, &(0x7f0000002600)={0x2c, &(0x7f0000002380)={0x40, 0x17, 0xf6, "9314f62136d2369ca9f7a6fa49d07dd062eda4efe00ed0478e56abeda38a11886f15819a55b724c8e90e93ce42b99f1d585d67514b54681910794592e1ea03bbc6f36a32ba491c4ddd83b8dfe6bb8d426fece97938d446ccbf99343b125dea6374718e8aa7f751fa33aa9bd9f12a1be954376a331775ba87286addaef05802248a18a3d05a3a260df2502b03425aa3711bb4906bb213775be9fc9fa6fef70d591571b4b0c61f9fe25ebab00213b2cb90136b2b3a8b2b6d28df407069b00fc620a550099c2642965a980ec4ddaef3096e5ee72392398586a6432fcdce498e58a6babe6135a971fe1f1bae2d4a93043232f54e303fa5fe"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002500)={0x20, 0x1, 0x9f, "44bfecb7c8b503369a0d71cf8f3c65e9e8c6057399abda6f3ef4ee46f09f21a2465f7d60466408e8934bafa8bf92753096e63451200b98cb0260658dc32f17bed27b54727a4d318ac34f127690731b26cb982b898238c52ed3588e1b8b6040b8f2ca2bbdba4581948323db845086fcb31a129315fd91900f6beb0ca3be84189747352ef0247dc3f1252341b9dc45c227576af2c178f9bddfb9eff03ba1599e"}, &(0x7f00000025c0)={0x20, 0x3, 0x1, 0xff}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) r0 = syz_usb_connect$cdc_ncm(0x3, 0x176, &(0x7f00000019c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x164, 0x2, 0x1, 0x1, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "bbfb"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xe6a6, 0x7}, {0x6, 0x24, 0x1a, 0xfe01}, [@mdlm={0x15, 0x24, 0x12, 0x95}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xff, 0x1f, 0x8}, @mdlm_detail={0xde, 0x24, 0x13, 0xb0, "59bc88afd49a29ea4eeebe7d45698c1f2305e89cdce3233e4a8cf4e095602a73e746d901a12dd5c4b4d2842dbbd44b97678b6b06f0e50a25bf7fe370e2699f15e637f38b7f697696a0001d9f53dca24cf399a66530832d512d33c42bab1f6dd51aabd6258a8d89d4c049a03791871ccddb14ec697c91c8f54a3ae281fc3e8bd2cba1314c86ba5bce6d43859fcb12a0da5e9c20dd8623ff4fc2bf35399728981f05c67a835377d4cdbfef263d2abcb6a2ecf45b378828c5b424b3261b7b0fe0a7d68e81031dee6663a54dd7b6a5cc113be76023e06bb7c41c3295"}, @mbim={0xc, 0x24, 0x1b, 0x9a3, 0x2, 0xe6, 0x5, 0x378, 0xe0}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x0, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x1, 0x3}}}}}}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x310, 0x5, 0x91, 0x0, 0x8, 0x2a}, 0x117, &(0x7f0000001b40)={0x5, 0xf, 0x117, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x9}, @generic={0xd6, 0x10, 0x1, "095aa3dad2c5d5b33760340e21f47c0e883da05cd422f3430003790fc05452189a6d2a362127c295e97bab574fe5c37b23685b89f93573234109655e54e41df93d481ab6607308a0545829648073cee14d6850699780e0287b7513a88d89adc280878f5dcd85854692ea605de60bdfa31bedf0ab58d17366e63e656f3f125c3598257131fedb650afa05cec86a08497fe90c082d7b3c5c0bc4d263c603cd64aa584df874c0874f249b5f30c89b0c252149e2cc46374790d6ac2b311235d38a2517ac78feb25af53dceec175c96d091b7a88ba8"}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x6, 0xe100, 0x2, [0xcf, 0xff3f00, 0xc0, 0xff0000, 0xff000f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x0, 0x7f, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x3, 0x1}]}, 0x1, [{0xbf, &(0x7f00000018c0)=@string={0xbf, 0x3, "bfa40e32ad54033015f85c5d1cbdacc2704fa0024adb67162b43b3a4cf0bf78fe2f61f0c46cd946052878bd5d74cb31bafc71709b0ca2b29eba1d1255f111463eb645a590af81039f7af8eed2fd90c1ce487d196229df16ad2432fa22253c43626a48bb7a0af707fc7686027b87976ce041020ddbc055d66ad88304180fd9bc41c5fd33fabfeb4ffb532f73888dbe3391c67cbb6843dafd052811d9e3d3a5756a3a4c240c0add3a357f23038499ed27e3fecfbcdbf32e31974c5eb98f9"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001e00)={0x14, &(0x7f0000001cc0)={0x40, 0x10, 0xd1, {0xd1, 0x1, "9bf3e451e54cceec0920ce1dd7f6345a271bf7ccb6b416ff153d4316c815e5066c0fc1c56c6c93211ec323d277adfa563109a1741af7402c1ce909ce3cc11e9ab71c39b3cf87006d9d9e3f2e7d85de53953e1ca7f0e70e568b7e87cdacda432f3998475473f063c7d1a86d3eeb49dfec0774d92c977c7eac79913b0a68a63f3990d9fe0ce8e3b7bb91c0870c5c72b5209f0645e5b7a201410d58c2ee877396baab748b13cac9fce509a4399a5f021e8370d3d3d88ae505844772b5b5ac7edd0960977f25d60d0fa90d4cada6b7c0d8"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002040)={0x44, &(0x7f0000001e40)={0x20, 0x9, 0x24, "e6cd100482d5b7f8134bd2ea4fd0f1e2933edca16a5748919e51ea8ba51dcbb34e77abf0"}, &(0x7f0000001e80)={0x0, 0xa, 0x1}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001f00)={0x20, 0x80, 0x1c, {0x1, 0xff01, 0x3a9, 0xfff, 0x3, 0x5, 0x6, 0x6, 0xffff, 0x0, 0x4f, 0xe4}}, &(0x7f0000001f40)={0x20, 0x85, 0x4, 0x45}, &(0x7f0000001f80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001fc0)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000002000)={0x20, 0x89, 0x2}}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x8a, {0x8a, 0x23, "3f12908e8d82a86e8c0da845a25413360b89d0015be75e6c687d45888a27ff71015817d5affb8bebcb40cb3552eee70255ae238edfbdb90c1ff8cc7905e50db04e948ec962c1aac7752641dbbb6b36f9eedceb796fb84f1ea22389276b04d7230ad08548948e389c354e3f9d95c3dac0deb8acca33304c610be9026fd1b25b6f8228d43fb178cd24"}}, &(0x7f0000000240)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "b013176057948afdfe698d6456efaf14a94af80771dfea91edf691687980892638e32ae2e4f7178c48be1ccd37f45ff1fa2754a3f23383a0d8396c9efd02fc4633eac4de4d407aa992f5c99722e90661318b239ce87c2ef4051aff17d0a549753c7995fd56c62de9f705fa776a10edd28c048429ebfdc1e71a8639228bb9629673fdae97017b7fb5b2e7f01c7473a72b8330a548925eaff43561f33594c503ab0a62ede433602ae1f65a5b8c0ae6be332509c1fcd92c97db422ad008b773459540605ee416f61e8e3ab3a363b5"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x3f, 0x1f, "d04c460c", "e7f788c8"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x6, 0x4, 0xf0, 0x3, 0x5}}}, &(0x7f00000017c0)={0x84, &(0x7f0000000380)={0x0, 0x6, 0x1a, "f24e54d374f3209cfef49b0f5028b96aa8ad66773ab56b8f8117"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2b2, 0x4}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000540)={0x40, 0xb, 0x2, '(5'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xf0ce}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "701b"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:31 executing program 0 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:22:31 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x404b, 0x20040) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x30, 0x200000) write$hidraw(r1, &(0x7f0000000100)="0bf9ec0efab2998f632f1bfe1bb84d92fc963d33fb565c0fbfa6bf06a2f65186e4984b51c8bbf0680dbc1f7983c3379ac53f4b39ebe02928895669ef389c3d5c480d02b4cb6d55a37bc764ebc8138130333e9c9396f4c384956fc82794c946643f3f3c88ab0e2ebf8cbbcd5fe957c705ab87a091c8878bf7cd08d7f77bc58394f53a640e95fb", 0x86) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000080)=0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 00:22:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/4096) [ 3315.591856][T32516] usb 3-1: USB disconnect, device number 108 [ 3315.666811][T23292] FAULT_INJECTION: forcing a failure. [ 3315.666811][T23292] name failslab, interval 1, probability 0, space 0, times 0 [ 3315.679599][T23292] CPU: 0 PID: 23292 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3315.688382][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.698547][T23292] Call Trace: [ 3315.701837][T23292] dump_stack_lvl+0xcd/0x134 [ 3315.706458][T23292] should_fail.cold+0x5/0xa [ 3315.710977][T23292] ? __alloc_file+0x21/0x280 [ 3315.715584][T23292] should_failslab+0x5/0x10 [ 3315.720114][T23292] kmem_cache_alloc+0x5b/0x360 [ 3315.724903][T23292] __alloc_file+0x21/0x280 [ 3315.729348][T23292] alloc_empty_file+0x6d/0x170 [ 3315.734219][T23292] path_openat+0xde/0x27f0 [ 3315.738705][T23292] ? __lock_acquire+0x162f/0x54a0 [ 3315.743722][T23292] ? path_lookupat+0x860/0x860 [ 3315.748508][T23292] ? mark_lock+0xef/0x17b0 [ 3315.752918][T23292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3315.758892][T23292] do_filp_open+0x1aa/0x400 [ 3315.763550][T23292] ? may_open_dev+0xf0/0xf0 [ 3315.768059][T23292] ? alloc_fd+0x2f0/0x670 [ 3315.772387][T23292] ? lock_downgrade+0x6e0/0x6e0 [ 3315.777250][T23292] ? rwlock_bug.part.0+0x90/0x90 [ 3315.782195][T23292] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3315.788432][T23292] ? _find_next_bit+0x1e3/0x260 [ 3315.793299][T23292] ? _raw_spin_unlock+0x1a/0x30 [ 3315.798153][T23292] ? alloc_fd+0x2f0/0x670 [ 3315.802483][T23292] do_sys_openat2+0x16d/0x420 [ 3315.807184][T23292] ? build_open_flags+0x6f0/0x6f0 [ 3315.812223][T23292] ? __context_tracking_exit+0x9f/0xb0 [ 3315.817669][T23292] ? lock_downgrade+0x6e0/0x6e0 [ 3315.822522][T23292] __x64_sys_openat+0x13f/0x1f0 [ 3315.827362][T23292] ? __ia32_sys_open+0x1c0/0x1c0 [ 3315.832301][T23292] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3315.838446][T23292] ? syscall_enter_from_user_mode+0x21/0x70 [ 3315.844333][T23292] do_syscall_64+0x35/0xb0 [ 3315.848756][T23292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3315.854656][T23292] RIP: 0033:0x4196d4 [ 3315.858979][T23292] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3315.869912][T18465] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3315.878767][T23292] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3315.878799][T23292] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3315.878817][T23292] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c 00:22:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) 00:22:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) 00:22:31 executing program 0 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3315.878833][T23292] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3315.878849][T23292] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3315.878863][T23292] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3315.950138][T30893] usb 5-1: new high-speed USB device number 51 using dummy_hcd 00:22:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) [ 3316.007686][T23304] FAULT_INJECTION: forcing a failure. [ 3316.007686][T23304] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.020407][T23304] CPU: 1 PID: 23304 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3316.029195][T23304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3316.039262][T23304] Call Trace: [ 3316.042550][T23304] dump_stack_lvl+0xcd/0x134 [ 3316.047161][T23304] should_fail.cold+0x5/0xa [ 3316.051682][T23304] ? security_file_alloc+0x34/0x170 [ 3316.056898][T23304] should_failslab+0x5/0x10 [ 3316.061423][T23304] kmem_cache_alloc+0x5b/0x360 [ 3316.066212][T23304] security_file_alloc+0x34/0x170 [ 3316.071250][T23304] __alloc_file+0xd8/0x280 [ 3316.075677][T23304] alloc_empty_file+0x6d/0x170 [ 3316.080426][T23304] path_openat+0xde/0x27f0 [ 3316.084831][T23304] ? __lock_acquire+0x162f/0x54a0 [ 3316.089843][T23304] ? path_lookupat+0x860/0x860 [ 3316.094612][T23304] ? mark_lock+0xef/0x17b0 [ 3316.099010][T23304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3316.104970][T23304] do_filp_open+0x1aa/0x400 [ 3316.109459][T23304] ? may_open_dev+0xf0/0xf0 [ 3316.113981][T23304] ? alloc_fd+0x2f0/0x670 [ 3316.118848][T23304] ? lock_downgrade+0x6e0/0x6e0 [ 3316.123690][T23304] ? rwlock_bug.part.0+0x90/0x90 [ 3316.128615][T23304] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3316.134848][T23304] ? _find_next_bit+0x1e3/0x260 [ 3316.139709][T23304] ? _raw_spin_unlock+0x1a/0x30 [ 3316.144575][T23304] ? alloc_fd+0x2f0/0x670 [ 3316.148894][T23304] do_sys_openat2+0x16d/0x420 [ 3316.153559][T23304] ? build_open_flags+0x6f0/0x6f0 [ 3316.158580][T23304] ? __context_tracking_exit+0x9f/0xb0 [ 3316.164025][T23304] ? lock_downgrade+0x6e0/0x6e0 [ 3316.168860][T23304] __x64_sys_openat+0x13f/0x1f0 [ 3316.173701][T23304] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.178626][T23304] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3316.184690][T23304] ? syscall_enter_from_user_mode+0x21/0x70 [ 3316.190596][T23304] do_syscall_64+0x35/0xb0 [ 3316.195001][T23304] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3316.200889][T23304] RIP: 0033:0x4196d4 [ 3316.204933][T23304] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3316.224626][T23304] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3316.233093][T23304] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3316.241116][T23304] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3316.249074][T23304] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3316.257032][T23304] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3316.264991][T23304] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3316.273478][T32516] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3316.449900][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3316.519931][T30893] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3316.529584][T30893] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3316.539287][T30893] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3316.552258][T30893] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3316.558894][T32516] usb 3-1: Using ep0 maxpacket: 16 [ 3316.639943][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3316.649074][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.657147][T18465] usb 6-1: Product: syz [ 3316.661376][T18465] usb 6-1: Manufacturer: syz [ 3316.666154][T18465] usb 6-1: SerialNumber: syz [ 3316.749963][T30893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3316.759083][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.767164][T30893] usb 5-1: Product: syz [ 3316.771417][T30893] usb 5-1: Manufacturer: syz [ 3316.776005][T30893] usb 5-1: SerialNumber: syz [ 3316.820013][T32516] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3316.830174][T32516] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 00:22:32 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x5, 0x0, 0x0, 0x0}) 00:22:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) 00:22:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) [ 3316.957124][T18465] usb 6-1: USB disconnect, device number 20 [ 3317.003222][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3317.012402][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.020499][T32516] usb 3-1: Product: syz [ 3317.024673][T32516] usb 3-1: Manufacturer: syz [ 3317.029274][T32516] usb 3-1: SerialNumber: syz [ 3317.103652][T30893] usb 5-1: USB disconnect, device number 51 00:22:32 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect$cdc_ecm(0x5, 0x4e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x5, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x6, 0x24, 0x6, 0x0, 0x0, "da"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x4, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x81, 0x1f}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x20, 0xff, 0x20, 0xff}, 0x143, &(0x7f0000000240)={0x5, 0xf, 0x143, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x40, 0xcb, 0xfbe3, 0xff}, @generic={0xd6, 0x10, 0x0, "d120516a3fdb7c249160d2c80a08640126d564ecb04f3f6a6a0fa5db28de08ad46787d7174b8d04530d9a39b46315f288ad2d6fa4872f0c9d227d0a04e466186705d79db06652265d6894398cb086a855450852cb6be468488e327ed86c86ab9805f35f3cd5cfd1e9326028b7c49fbdf861ddff8778a9aeb796a911b54655fa2b1be120f4360bec8cae6a15af7d7a2b4783af59ed61ca7ecc63a4fbfa6fce58aa2ee11f3d55e1a79748e2de4e094793c60a07f34157461bd6431084e13fe10c4849058b1ee8dec7eb1cfa960c1c431b50e8646"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "dc938215556a5da67ad009faf70ae146"}, @generic={0x35, 0x10, 0xb, "18fe75ce815b987103ed9719902ad396814322581e1c4ec671ce3d6bdd0f02b6389f91fb87bc5c62332e98cc9318e4a8df40"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "6f7cc86d43159dfe3a080a5fadfb2961"}]}, 0x6, [{0x92, &(0x7f0000000100)=@string={0x92, 0x3, "25062c364b66aaf47cd397e78224788c6e1c63b4f5e5f52ea46ec6ee9dec97bb5aa6e2c44879084b2f40a4af7ca8b6a0e58fd4f7db73e0f17bb7eb547eab208629a72886aabcce74096948327494737dfefe9b6e1a3896c17045c2bf212f352cbdf0c6dc245abef49f47d873655c9460fea2c53d39a46705c30c8a2c69459fade4044e254f8878149844fb1e107435d6"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40e}}, {0x97, &(0x7f0000000440)=@string={0x97, 0x3, "5c7dbbe9e1da491ccd1c66401b9caafb3ab8ac76fbb86b8a46f6a9289ffe4c368c0c31401b52c959f2bb743f6ac4055113a6dd3578dd58ad351ab37e6f86667b065deb60cf36374b1ed7a5f6d3c8fa1181297438fd74bb00952bf6121a66464a737f633b195efe241b6aee0f8a0987b2df1a926971853fa0c76d6908d48eb768eb40f514c8ae0037096fecc401d8470a9a104cd3ed"}}, {0x37, &(0x7f0000000500)=@string={0x37, 0x3, "eb27f9192b59b6d405d07e0e2623dbdf762754a669f91a71faad7b5d1cba6befb88fed6f7ae3216371f85ed061c9dbca170fa75beb"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r0, &(0x7f0000001880)={0x2c, &(0x7f0000000600)={0x0, 0x10, 0x1a, {0x1a, 0xd, "4ebfeb104a493e16377ff0c88fe0a4cd7af7e7acdc238379"}}, &(0x7f0000000640)={0x0, 0x3, 0x54, @string={0x54, 0x3, "aeb2f1c891be896b1320c655ce4943f539a081450158bf54520e710916b32c3ba3df99ff04835749a7d313c097497062496a65c86ab73f05981bb3923e9257acdfd89f1cdfea2839c4cd368e65508ee6cdac"}}, &(0x7f0000001780)={0x0, 0xf, 0xeb, {0x5, 0xf, 0xeb, 0x5, [@generic={0xbf, 0x10, 0x3, "0c7833557e6c66749c791b66903365bb18f4dbfbad1d4b963dac94c2a60b4da90bfe36e130e2537c0ca57c6bbe0c2e496372fd5177fbdc98039d87d16de11969d527ac41a6e243d099b4b6586b0eb62993bfdf647d7a3888e19b48b9edf5cc6f2551bc61586fdaef525272dd0779dd9647d55957ed8d74d090ca6803a662b691cdc8bcc8c796788661b97d01893c35f192f39ccc442dac9b3a1469bc6acf67bd5f069b845d54ad36c2295b4050a18178d23edfa94d6f23368b50e0b9"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x42, 0x7f, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x80, 0x5, 0x2c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0xcd, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x2, 0x8}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x80, 0x40, "beb1592a", "f9c27c9f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1d, 0x4, 0x81, 0x40, 0xfa, 0x9, 0x401}}}, &(0x7f0000001d40)={0x84, &(0x7f00000018c0)={0x20, 0xf, 0x69, "771ab595ebc598c41ada6b51877bb03cbe62d4c8822e5ab416e27a0f18267bb948b0ca85a3db44363d79af39ff01a25f87158c2be22b6a6ab8e7faea48ca7748596b4a7009d427b8280186f762919a7a36dbfe8d3809d74d789da8d7f9917065eb37b4a5fd74aac54e"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0xe6}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0xb58}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001b00)={0x40, 0xb, 0x2, "885e"}, &(0x7f0000001b40)={0x40, 0xf, 0x2}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001c00)={0x40, 0x19, 0x2, 'Rh'}, &(0x7f0000001c40)={0x40, 0x1a, 0x2, 0x26}, &(0x7f0000001c80)={0x40, 0x1c, 0x1, 0xa2}, &(0x7f0000001cc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001d00)={0x40, 0x21, 0x1, 0x6d}}) 00:22:32 executing program 0 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:22:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) 00:22:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:32 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x6, 0x101800) write$hidraw(r1, &(0x7f0000000440)="7b4ba409eb299cc8dc55d5a525ff8f38de0ec84dfc4d2c72d8af0132273387541032d49f067d443067226046257672ec6e6bab735b99744453b00a0f384f8bec526eee1d1ba7ba724f0199e941560e83e9e7e9f6cf6ab3d3224f798451895521ee6d0bd56d2984706243a2577f9ae6b10595e9d4ff62df09e7cf050130a4a1", 0x7f) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000380)={0x81, "3f94f0f2a918d45a2231eb1305ad1946db649ac3eaa2297c43b9c75c2c5c0e05e4f2e38cd9160bcd9e39fb37925f53ba0ba10cc66e44d8936f4434234584f65e"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_open_dev$hidraw(&(0x7f0000000000), 0x2c4, 0x101000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100a70c2a131eda2c16f0ea00000000402505a8a440000102030109021b000101e60003060207010000090501020000f5fe0012eb4b935aa6ad8da5049b01db96fdea25f635"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000340)) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x319}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x8, 0x1, 0x5, 0x40}, 0x4f, &(0x7f00000004c0)={0x5, 0xf, 0x4f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x8, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7fff16f, 0xf, 0x8, [0x3f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xa, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x5c, 0x4, 0x1ff, 0x0, 0x8, [0x0, 0x1fe00c0, 0x6f, 0xffc008]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x1, 0x0, 0x7, [0xff00c0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc74500fd42d36233}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41f}}]}) [ 3317.384735][T23349] FAULT_INJECTION: forcing a failure. [ 3317.384735][T23349] name failslab, interval 1, probability 0, space 0, times 0 [ 3317.397678][T23349] CPU: 1 PID: 23349 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3317.398725][ T33] kauditd_printk_skb: 10 callbacks suppressed [ 3317.398739][ T33] audit: type=1800 audit(1629937352.808:37): pid=23348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15087 res=0 errno=0 [ 3317.406454][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3317.406476][T23349] Call Trace: [ 3317.406485][T23349] dump_stack_lvl+0xcd/0x134 [ 3317.406519][T23349] should_fail.cold+0x5/0xa [ 3317.406543][T23349] ? __d_alloc+0x2a/0x950 [ 3317.406563][T23349] should_failslab+0x5/0x10 [ 3317.406591][T23349] kmem_cache_alloc+0x5b/0x360 [ 3317.406621][T23349] __d_alloc+0x2a/0x950 [ 3317.406641][T23349] d_alloc+0x4a/0x230 [ 3317.406661][T23349] d_alloc_parallel+0xe2/0x1980 00:22:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3317.446196][ T33] audit: type=1800 audit(1629937352.808:38): pid=23347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15096 res=0 errno=0 [ 3317.447108][T23349] ? __d_lookup+0x3e0/0x730 [ 3317.447140][T23349] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3317.447166][T23349] ? __d_lookup+0x409/0x730 [ 3317.517586][T23349] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3317.523588][T23349] lookup_open.isra.0+0x867/0x1300 [ 3317.528718][T23349] ? hashlen_string+0xf0/0xf0 00:22:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3317.533418][T23349] path_openat+0x9b3/0x27f0 [ 3317.537933][T23349] ? path_lookupat+0x860/0x860 [ 3317.542712][T23349] ? mark_lock+0xef/0x17b0 [ 3317.547140][T23349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3317.553136][T23349] do_filp_open+0x1aa/0x400 [ 3317.557654][T23349] ? may_open_dev+0xf0/0xf0 [ 3317.562173][T23349] ? alloc_fd+0x2f0/0x670 [ 3317.566516][T23349] ? rwlock_bug.part.0+0x90/0x90 [ 3317.571467][T23349] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3317.577728][T23349] ? _find_next_bit+0x1e3/0x260 00:22:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3317.582602][T23349] ? _raw_spin_unlock+0x1a/0x30 [ 3317.587469][T23349] ? alloc_fd+0x2f0/0x670 [ 3317.591915][T23349] do_sys_openat2+0x16d/0x420 [ 3317.596612][T23349] ? build_open_flags+0x6f0/0x6f0 [ 3317.601654][T23349] ? __context_tracking_exit+0x9f/0xb0 [ 3317.607130][T23349] ? lock_downgrade+0x6e0/0x6e0 [ 3317.611991][T23349] __x64_sys_openat+0x13f/0x1f0 [ 3317.616859][T23349] ? __ia32_sys_open+0x1c0/0x1c0 [ 3317.621815][T23349] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3317.627805][T23349] ? syscall_enter_from_user_mode+0x21/0x70 00:22:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) [ 3317.633829][T23349] do_syscall_64+0x35/0xb0 [ 3317.638269][T23349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3317.644178][T23349] RIP: 0033:0x4196d4 [ 3317.648084][T23349] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3317.667715][T23349] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3317.673274][ T33] audit: type=1800 audit(1629937352.808:39): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15087 res=0 errno=0 [ 3317.676230][T23349] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3317.676252][T23349] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3317.676269][T23349] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3317.676286][T23349] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3317.676301][T23349] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3317.737774][T32516] cdc_ncm 3-1:1.0: bind() failure [ 3317.742932][T18465] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3317.753737][T32516] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 3317.760723][T32516] cdc_ncm 3-1:1.1: bind() failure [ 3317.781032][T32516] usb 3-1: USB disconnect, device number 109 [ 3317.899769][ T1499] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3318.149767][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3318.170228][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3318.190220][T32516] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3318.330371][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3318.339545][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3318.347587][T18465] usb 6-1: Product: syz [ 3318.351816][T18465] usb 6-1: Manufacturer: syz [ 3318.356412][T18465] usb 6-1: SerialNumber: syz [ 3318.549744][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3318.559420][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3318.569132][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:22:34 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x6, 0x0, 0x0, 0x0}) 00:22:34 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 00:22:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) [ 3318.599833][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3318.648191][T18465] usb 6-1: USB disconnect, device number 21 [ 3318.670624][ T33] audit: type=1800 audit(1629937354.088:40): pid=23380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15104 res=0 errno=0 [ 3318.727802][ T33] audit: type=1800 audit(1629937354.118:41): pid=23381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15107 res=0 errno=0 [ 3318.829659][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3318.836493][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3318.845684][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3318.869741][ T1499] usb 5-1: new high-speed USB device number 53 using dummy_hcd 00:22:34 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:34 executing program 0 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:22:34 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x7, 0x0, 0x0, 0x0}) 00:22:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3319.101896][T32516] usb 3-1: USB disconnect, device number 110 [ 3319.140253][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3319.175211][ T33] audit: type=1800 audit(1629937354.588:42): pid=23402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15102 res=0 errno=0 [ 3319.182036][T23403] FAULT_INJECTION: forcing a failure. [ 3319.182036][T23403] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.209071][T23403] CPU: 1 PID: 23403 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3319.218027][T23403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3319.228101][T23403] Call Trace: [ 3319.231487][T23403] dump_stack_lvl+0xcd/0x134 [ 3319.236099][T23403] should_fail.cold+0x5/0xa [ 3319.240616][T23403] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3319.246352][T23403] should_failslab+0x5/0x10 [ 3319.250877][T23403] __kmalloc+0x72/0x310 [ 3319.255053][T23403] tomoyo_realpath_from_path+0xc3/0x620 [ 3319.260707][T23403] ? tomoyo_profile+0x42/0x50 [ 3319.265419][T23403] tomoyo_path_number_perm+0x1d5/0x590 [ 3319.270931][T23403] ? tomoyo_path_number_perm+0x18d/0x590 [ 3319.276555][T23403] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3319.282350][T23403] ? lock_chain_count+0x20/0x20 [ 3319.287184][T23403] ? find_held_lock+0x2d/0x110 [ 3319.291934][T23403] ? d_alloc_parallel+0x949/0x1980 [ 3319.297034][T23403] ? __d_lookup+0x3e0/0x730 [ 3319.301682][T23403] tomoyo_path_mknod+0x10d/0x190 [ 3319.306625][T23403] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3319.311948][T23403] security_path_mknod+0xf9/0x170 [ 3319.317001][T23403] lookup_open.isra.0+0x471/0x1300 [ 3319.322112][T23403] ? hashlen_string+0xf0/0xf0 [ 3319.326798][T23403] path_openat+0x9b3/0x27f0 [ 3319.331290][T23403] ? path_lookupat+0x860/0x860 [ 3319.336056][T23403] ? mark_lock+0xef/0x17b0 [ 3319.340517][T23403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3319.346525][T23403] do_filp_open+0x1aa/0x400 [ 3319.351033][T23403] ? may_open_dev+0xf0/0xf0 [ 3319.355524][T23403] ? alloc_fd+0x2f0/0x670 [ 3319.359850][T23403] ? rwlock_bug.part.0+0x90/0x90 [ 3319.364805][T23403] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3319.371155][T23403] ? _find_next_bit+0x1e3/0x260 [ 3319.376009][T23403] ? _raw_spin_unlock+0x1a/0x30 [ 3319.380857][T23403] ? alloc_fd+0x2f0/0x670 [ 3319.385210][T23403] do_sys_openat2+0x16d/0x420 [ 3319.389880][T23403] ? build_open_flags+0x6f0/0x6f0 [ 3319.394909][T23403] ? __context_tracking_exit+0x9f/0xb0 [ 3319.400371][T23403] ? lock_downgrade+0x6e0/0x6e0 [ 3319.405208][T23403] __x64_sys_openat+0x13f/0x1f0 [ 3319.410056][T23403] ? __ia32_sys_open+0x1c0/0x1c0 [ 3319.415002][T23403] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3319.421002][T23403] ? syscall_enter_from_user_mode+0x21/0x70 [ 3319.426910][T23403] do_syscall_64+0x35/0xb0 [ 3319.431320][T23403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3319.437209][T23403] RIP: 0033:0x4196d4 [ 3319.441092][T23403] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3319.461398][T23403] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3319.469818][T23403] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3319.477782][T23403] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3319.485742][T23403] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3319.493696][T23403] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3319.501649][T23403] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3319.509887][T23403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3319.679588][T28967] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3319.809538][ T1499] usb 5-1: device descriptor read/64, error 18 [ 3319.869548][T32516] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3319.929625][ T1499] usb usb5-port1: attempt power cycle [ 3320.059582][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3320.229997][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3320.239182][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.240185][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3320.247248][T28967] usb 6-1: Product: syz [ 3320.257058][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3320.257089][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3320.261261][T28967] usb 6-1: Manufacturer: syz [ 3320.288247][T28967] usb 6-1: SerialNumber: syz 00:22:35 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x0, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "ef12ee35"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xfff9, 0x4, 0x0, 0x7f, 0xf5b, 0x20}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x30}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x0, 0x1}, @obex={0x5, 0x24, 0x15, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf2, 0x7, 0x1}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x40, 0x1a, 0x7, 0x8, 0x1}, 0xd9, &(0x7f0000000100)={0x5, 0xf, 0xd9, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x1d, 0x465}, @generic={0xa6, 0x10, 0xa, "5b23c9bd21eaec6fd524b29883b3fa37d7af0277f03db75c554fa65c5ad42dd60d70447c22f88674766fc8a117ef2436f1deffeb1f636968193d54ad9d107062eb9d36a4a57cb94b5b8e2e16d6a84888745ce355c542274f62e0117449d78e40c2ceb4f94a7e13c53d28b4b15989b7733de1e3c8aef2b78a5c9d1a314748a48594e87eacdbf29d969e2cf459970dd644119d4058e53738b1308d6b169571dbe7d199d4"}, @ssp_cap={0x24, 0x10, 0xa, 0x4a, 0x6, 0x9, 0x0, 0x0, [0xff0060, 0x3fc0, 0xc0, 0x6000, 0xff0000, 0x0]}]}, 0x7, [{0xb1, &(0x7f0000000200)=@string={0xb1, 0x3, "da3410b2925e95416c9963e1821ba47de649b0eb3d4ca9e225937b20a3a4ffc8f0418ffb8fbd8b76a7897ba5c74642bc889ab0eef5c3a3f3d08ba526ad5ba523a62c1106384ba2ba02b2db59f118c8ed34ffd0708c3a9fc095f1051ddd098419c91f30d56f69d29300bc648bfd4c8f5b7e8efb2a287990b061891cb8f2200bceb4f06dc9442a30412a9b66c620923f7938e9d5537939c79e409d84db47a2dd2ee617bc3edd75375a92ba0765c7ded2"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x353aec15373a7c1a}}, {0xc9, &(0x7f0000000300)=@string={0xc9, 0x3, "c7203c0b0d482bad18317aa93091e0f991bbab028beb1933fa722b9f183de8972b147d7006b8c4e32a360ae9dcd69837c79d798ecb24d9fa8b2ab364c848fe6a151b16b8f985ea4c1d5b94f1393c3ba0d9f8cfb073a2794275efe75641d38efd51a43588a425a7ea40e4274132b8bbffa70223ff4b7d88cb303b54476d69b8aaf3836c9ded9e562fa10520a82b97dc070102a4886c460723dcd931588c268dc953d2620afbe1cbf0e86f1c54ddac3e9dd34b5358f3b94923e2e1e77950934bee238621ace839ff"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "0397c9231957064f9bdfe3e81918b3efa7b1766a695dfd901f9c6ffbab0c4547236b6adceee5994530f0ac0a44971e98871f2bd1c7a5788f6dab75024e35988d8e29a6c380bed1a3c745b5f5809fb0565baf248529cfb125780fdd2b62bd43208044675231805c2d1f4549548068ba772680834a729e8d0f085574fbf031361bda89722a"}}, {0x4f, &(0x7f0000000540)=@string={0x4f, 0x3, "aefce1dfeed7582f320b2450f9b3c30f2501e7dad21ea27b4cd04c67d07930edcd85d229871f2f54b1b2c8977ee1d45b0e2bf15d413b702d83427ff900a2d2f5289db06c3b213c338e6b8feece"}}]}) syz_usb_connect$uac1(0x1, 0xdb, &(0x7f0000001dc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x1, 0x20, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x5, "5c95f02fec"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x0, 0x0, "9a1473"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0xa, 0x6, 0x5, 0x4], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2d06, 0x0, 0x8, "759ba625"}, @as_header={0x7, 0x24, 0x1, 0xe0, 0x6, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x0, 0x3f, "62257287"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xe0, 0x8000, 0x9, "053ffd"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc4, 0x3, 0x4, 0x7f, "86"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x81, 0x8, {0x7, 0x25, 0x1, 0x80, 0x4, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3f, 0x2, 0x6, 0x80, "c46d1c2d1dce50a17a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x3, 0x5}}}}}}}]}}, &(0x7f00000021c0)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x340, 0x8, 0x4, 0x17, 0x8, 0xff}, 0x5, &(0x7f0000001f00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x4001}}, {0x4b, &(0x7f0000001f80)=@string={0x4b, 0x3, "3892353e2a84b4195fe781f9e6fba4e313891a065edf5dc1a2947e1c090beb7317cf34ae3333bed7ffa2a6241e0f3e017a439d6c9b06743f3c718af86dbe5aedcb2b96c4a5899edd9b"}}, {0xa2, &(0x7f0000002000)=@string={0xa2, 0x3, "0e5e0b805b073f812812abd07ee4bc352ab37a185c9426ebe47e6b27b7defbe4247783897f1cf671ebf900b96aacdf2d3bb82eed996abf4ae63a8be058d3a730959f991b3cf0720d4670f640178b38f68e5f11c86753b7d47b3a9fe12ed4fa2b08ce8f6a526f4992d8fdf97b5f81889b962730242197467c65541f08150255fdd3ab09b86e6101b277b658c25bcc6efe49aaeca1c5b21963c315abdb988e2ce1"}}, {0x90, &(0x7f00000020c0)=@string={0x90, 0x3, "73b4ebcb173bbdc8b8477c042f94d0375c020eafef78f0996ffc7271086e650ea0d883716914e0165911ae74b1224a1b3893d25f3cc2b652297414fa57bcdfad5ba66fc27dbeb3fa3e7ae8379e8a76ca90e774187eb4d718afd4b7223eac244459649f145e2f296b1f028c5029f52e59d6346468cc9525ea3d217d9850260137b1cd7d71cadc914e5242f8cfbdea"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_connect$cdc_ecm(0x4, 0xa6, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x1, 0x1, 0xff, 0x50, 0x80, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0xb, 0x24, 0x6, 0x0, 0x0, "5ab82af5d1fb"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x9, 0x38, 0xd5}, [@ncm={0x6, 0x24, 0x1a, 0x6}, @mdlm_detail={0x3c, 0x24, 0x13, 0x1, "ac269d960d1dea88fa576ed0f4c2e86d098e654835f9d79a2baf295d4cc8104eaa54567f0990a45addbf22dc898b121634840d2727bd61ab"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x31, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1f, 0x0, 0xed}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0x0, 0xc1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x9, 0x7, 0x78, 0x40, 0x3}, 0x83, &(0x7f0000001780)={0x5, 0xf, 0x83, 0x4, [@generic={0x54, 0x10, 0x2, "c60725de0ebd712d58d6663b0645d4639f023961ee2dd64657d2c0a53556775a6d66635c3c549cad8b8cffccdd7df73522dd6c1c5d48c7c63aea956d32cae8b8465f722c67fa7009dccb67d63199d0b9ed"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "cd6d7441ed1fc47b8728fa11844ded77"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc7, 0x0, 0x0, 0x4, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xe3, 0x4, 0x4, 0x37}]}, 0x8, [{0xa6, &(0x7f0000001840)=@string={0xa6, 0x3, "bf368d40d8672c7f2d268616bcdcb9b17aa72bdd5288199ea5f04c646db855ad6368e23decd892e041da2ac7a6b800293eaec8363f34a51640db0acd4997ccc2f9de55ca157daf9be9ad47590e1dc1940fdc8c79d0bd5cef91cd3c83c7c47d42b502e7e281336290ffcb6ff5832ce15692aae8d8f6512acf7bc9e3e10aaf45a5939909cf466adc3019e0bb29e2ed28dc549b96b70476f3a2cfdad32a33567bf333b14a23"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x446}}, {0xf6, &(0x7f00000019c0)=@string={0xf6, 0x3, "415b82b33b791ee82986ad9ca9978a5324bbae39ef6d6493d0c761b350c0a11c4a92a8797bfdf5d929f2d6f2e99a135e57e08eb4c9449d3c54cca265a3c5e7c30d7549faf16561c6102bff187b2daa4d2cc30461085f4434c2896a3d9cf5b01c62f33f9661ab943ee39a1b5d08cacbbe8c16c9f3d535aee6b1d334fcb1bd15e0a81ca0960abfdb5073b122fb090a9a5aa16c37f518689fd5ea36810bd1648b76387db6dcb714a3aa0420423f68e4a2f4e15244e6813e04a73d0c0b9b81c55c5f3d67030ccb904906d5135fecbdc6cd8458cef6b4472ba0dbae06a7ad8d621faf68239baaed1cae6357cdafb61ba3bc96133465d0"}}, {0xe5, &(0x7f0000001ac0)=@string={0xe5, 0x3, "9c5057d3b384856cddc9a5d601116c6374984677de5b4b1696f8303ec878ebc6a77de3bf8704a7b16c837573d902d2c59ab019fab032cd844402b1564665cb0ac3c28fe011f9377782e1a74208136baac90e908568406fec0787cd47dedce027f9147f641d473c09771c344b22af47c011623203e590c0df86c4829d423ae6fd2af00428c1be33443f33e7f37b7c5e9e8e7ca275a4d6c8403504779288990d78f1009f7cf8ea954eb4cb42e3cd21979bcdf5b899113df2a3b8abdd63ced07f64b69bea6b45362b0e80f83533e5acbcfcea70747dbeb134f11ea9dd3793370206ff510e"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x2809}}, {0xdb, &(0x7f0000001c00)=@string={0xdb, 0x3, "38a770ff860257779d5e030d48f2462acc25ecdd8c43957379f203c5320dab78fee37c51533eb535b8e7fcdd9515cb843e4dba06432f4fd4ad75e511c1131fd328306b3a16ec8fce6e83e28663309dbcf0fba1ef4cafb2b4a9c12714dd858079bc47fef674da048fa92ad50210f90937328c96d28588744282ca6fbac34666c70566d495be16ef716cf8b7b00ca1b0b57f0e22c5b2f2a502da5287004080921b64d8d41cda9f3b1f1514d3f3fc2b91b7d12a41f320675c68e33e8a2ff5dcf34fa938770a7bcd264617585215d3a12801e421050b92ad492e9f"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x80c}}]}) 00:22:35 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) 00:22:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:22:35 executing program 0 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3320.359571][ T1499] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3320.391773][T23416] FAULT_INJECTION: forcing a failure. [ 3320.391773][T23416] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.404701][T23416] CPU: 1 PID: 23416 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3320.413492][T23416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.423564][T23416] Call Trace: [ 3320.426850][T23416] dump_stack_lvl+0xcd/0x134 [ 3320.431731][T23416] should_fail.cold+0x5/0xa [ 3320.436256][T23416] ? tomoyo_encode2.part.0+0xe9/0x3a0 00:22:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3320.437488][ T33] audit: type=1800 audit(1629937355.848:43): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15111 res=0 errno=0 [ 3320.441662][T23416] should_failslab+0x5/0x10 [ 3320.441697][T23416] __kmalloc+0x72/0x310 [ 3320.441726][T23416] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3320.477098][T23416] tomoyo_encode+0x28/0x50 [ 3320.481538][T23416] tomoyo_realpath_from_path+0x186/0x620 [ 3320.487194][T23416] tomoyo_path_number_perm+0x1d5/0x590 [ 3320.492667][T23416] ? tomoyo_path_number_perm+0x18d/0x590 [ 3320.498318][T23416] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3320.504143][T23416] ? lock_chain_count+0x20/0x20 00:22:35 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) [ 3320.509011][T23416] ? find_held_lock+0x2d/0x110 [ 3320.513802][T23416] ? d_alloc_parallel+0x949/0x1980 [ 3320.518934][T23416] ? __d_lookup+0x3e0/0x730 [ 3320.523457][T23416] tomoyo_path_mknod+0x10d/0x190 [ 3320.528413][T23416] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3320.533551][T23416] security_path_mknod+0xf9/0x170 [ 3320.538606][T23416] lookup_open.isra.0+0x471/0x1300 [ 3320.543733][T23416] ? hashlen_string+0xf0/0xf0 [ 3320.548430][T23416] path_openat+0x9b3/0x27f0 [ 3320.549883][ T33] audit: type=1800 audit(1629937355.968:44): pid=23425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15116 res=0 errno=0 [ 3320.552956][T23416] ? path_lookupat+0x860/0x860 [ 3320.552986][T23416] ? mark_lock+0xef/0x17b0 [ 3320.553009][T23416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3320.553034][T23416] do_filp_open+0x1aa/0x400 [ 3320.594165][T23416] ? may_open_dev+0xf0/0xf0 [ 3320.598701][T23416] ? alloc_fd+0x2f0/0x670 [ 3320.603102][T23416] ? rwlock_bug.part.0+0x90/0x90 [ 3320.608061][T23416] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3320.614340][T23416] ? _find_next_bit+0x1e3/0x260 [ 3320.619278][T23416] ? _raw_spin_unlock+0x1a/0x30 [ 3320.624205][T23416] ? alloc_fd+0x2f0/0x670 [ 3320.628819][T23416] do_sys_openat2+0x16d/0x420 [ 3320.633520][T23416] ? build_open_flags+0x6f0/0x6f0 [ 3320.638577][T23416] ? __context_tracking_exit+0x9f/0xb0 [ 3320.644093][T23416] ? lock_downgrade+0x6e0/0x6e0 [ 3320.648969][T23416] __x64_sys_openat+0x13f/0x1f0 [ 3320.653840][T23416] ? __ia32_sys_open+0x1c0/0x1c0 00:22:36 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0}) 00:22:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3320.658800][T23416] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3320.664804][T23416] ? syscall_enter_from_user_mode+0x21/0x70 [ 3320.670718][T23416] do_syscall_64+0x35/0xb0 [ 3320.675270][T23416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3320.681195][T23416] RIP: 0033:0x4196d4 [ 3320.685281][T23416] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3320.697335][T28967] usb 6-1: USB disconnect, device number 22 [ 3320.705862][T23416] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3320.705894][T23416] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3320.705913][T23416] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3320.705929][T23416] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3320.705943][T23416] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3320.705958][T23416] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3320.706062][T23416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3320.839591][ T1499] usb 5-1: device not accepting address 54, error -71 [ 3320.909539][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3320.915809][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3320.924949][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.139643][T28967] usb 6-1: new high-speed USB device number 23 using dummy_hcd 00:22:36 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0xfd, 0x1000, &(0x7f00000019c0)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000400705a8a440000102030109021b000101e60040000000000005010000090501020000f5fe48"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) 00:22:36 executing program 1 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:36 executing program 0 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3321.191939][T32516] usb 3-1: USB disconnect, device number 111 [ 3321.219525][ T1499] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3321.239748][T23454] FAULT_INJECTION: forcing a failure. [ 3321.239748][T23454] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.252761][T23454] CPU: 1 PID: 23454 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3321.261752][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3321.271844][T23454] Call Trace: [ 3321.273135][T23457] FAULT_INJECTION: forcing a failure. [ 3321.273135][T23457] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.275125][T23454] dump_stack_lvl+0xcd/0x134 [ 3321.275158][T23454] should_fail.cold+0x5/0xa [ 3321.296893][T23454] ? ext4_init_journal_params+0x350/0x350 [ 3321.302627][T23454] ? ext4_alloc_inode+0x1a/0x640 [ 3321.307563][T23454] should_failslab+0x5/0x10 [ 3321.312073][T23454] kmem_cache_alloc+0x5b/0x360 [ 3321.316843][T23454] ? ext4_init_journal_params+0x350/0x350 [ 3321.322560][T23454] ext4_alloc_inode+0x1a/0x640 [ 3321.327322][T23454] ? ext4_init_journal_params+0x350/0x350 [ 3321.333040][T23454] alloc_inode+0x61/0x230 [ 3321.337375][T23454] new_inode+0x27/0x2f0 [ 3321.341534][T23454] __ext4_new_inode+0x34f/0x5b60 [ 3321.346475][T23454] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3321.352461][T23454] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3321.358272][T23454] ? trace_hardirqs_on+0x5b/0x1a0 [ 3321.363302][T23454] ? find_held_lock+0x2d/0x110 [ 3321.368077][T23454] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3321.373624][T23454] ? do_raw_spin_unlock+0x171/0x230 [ 3321.378907][T23454] ? d_splice_alias+0x4c6/0xc60 [ 3321.383755][T23454] ? ext4_create+0x447/0x4d0 [ 3321.388348][T23454] ext4_create+0x2d6/0x4d0 [ 3321.392769][T23454] ? ext4_mknod+0x4e0/0x4e0 [ 3321.397276][T23454] ? generic_permission+0x121/0x5b0 [ 3321.402493][T23454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3321.408768][T23454] ? security_inode_permission+0xc5/0xf0 [ 3321.414422][T23454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3321.420699][T23454] ? ext4_mknod+0x4e0/0x4e0 [ 3321.425216][T23454] lookup_open.isra.0+0xf19/0x1300 [ 3321.430336][T23454] ? hashlen_string+0xf0/0xf0 [ 3321.435020][T23454] path_openat+0x9b3/0x27f0 [ 3321.439525][T23454] ? path_lookupat+0x860/0x860 [ 3321.444301][T23454] ? mark_lock+0xef/0x17b0 [ 3321.448738][T23454] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3321.454904][T23454] do_filp_open+0x1aa/0x400 [ 3321.459410][T23454] ? may_open_dev+0xf0/0xf0 [ 3321.463915][T23454] ? alloc_fd+0x2f0/0x670 [ 3321.468250][T23454] ? rwlock_bug.part.0+0x90/0x90 [ 3321.473206][T23454] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3321.479453][T23454] ? _find_next_bit+0x1e3/0x260 [ 3321.484311][T23454] ? _raw_spin_unlock+0x1a/0x30 [ 3321.489170][T23454] ? alloc_fd+0x2f0/0x670 [ 3321.493503][T23454] do_sys_openat2+0x16d/0x420 [ 3321.498185][T23454] ? build_open_flags+0x6f0/0x6f0 [ 3321.503214][T23454] ? __context_tracking_exit+0x9f/0xb0 [ 3321.508675][T23454] ? lock_downgrade+0x6e0/0x6e0 [ 3321.513522][T23454] __x64_sys_openat+0x13f/0x1f0 [ 3321.518375][T23454] ? __ia32_sys_open+0x1c0/0x1c0 [ 3321.523321][T23454] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3321.529321][T23454] ? syscall_enter_from_user_mode+0x21/0x70 [ 3321.535230][T23454] do_syscall_64+0x35/0xb0 [ 3321.539673][T23454] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3321.545594][T23454] RIP: 0033:0x4196d4 [ 3321.549507][T23454] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3321.569127][T23454] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3321.577546][T23454] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3321.585511][T23454] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3321.593479][T23454] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3321.601454][T23454] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3321.609433][T23454] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3321.617411][T23457] CPU: 0 PID: 23457 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3321.626209][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3321.636280][T23457] Call Trace: [ 3321.639568][T23457] dump_stack_lvl+0xcd/0x134 [ 3321.644262][T23457] should_fail.cold+0x5/0xa [ 3321.648777][T23457] ? getname_flags.part.0+0x50/0x4f0 [ 3321.654079][T23457] should_failslab+0x5/0x10 [ 3321.658601][T23457] kmem_cache_alloc+0x5b/0x360 [ 3321.663473][T23457] getname_flags.part.0+0x50/0x4f0 [ 3321.668764][T23457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3321.674750][T23457] getname+0x8e/0xd0 [ 3321.678658][T23457] do_sys_openat2+0xf5/0x420 [ 3321.683266][T23457] ? build_open_flags+0x6f0/0x6f0 [ 3321.688569][T23457] ? __context_tracking_exit+0x9f/0xb0 [ 3321.694035][T23457] ? lock_downgrade+0x6e0/0x6e0 [ 3321.698898][T23457] __x64_sys_openat+0x13f/0x1f0 [ 3321.703768][T23457] ? __ia32_sys_open+0x1c0/0x1c0 [ 3321.708727][T23457] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3321.713206][ T33] audit: type=1800 audit(1629937357.048:45): pid=23456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15127 res=0 errno=0 [ 3321.714716][T23457] ? syscall_enter_from_user_mode+0x21/0x70 [ 3321.714746][T23457] do_syscall_64+0x35/0xb0 [ 3321.714775][T23457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3321.752084][T23457] RIP: 0033:0x4196d4 [ 3321.755983][T23457] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3321.775610][T23457] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3321.784040][T23457] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3321.792002][T23457] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3321.799961][T23457] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3321.807938][T23457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3321.815893][T23457] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3321.989444][ T1499] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3321.999103][ T1499] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3322.008943][ T1499] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3322.021852][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3322.069548][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3322.219473][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3322.228522][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.236545][ T1499] usb 5-1: Product: syz [ 3322.240749][ T1499] usb 5-1: Manufacturer: syz [ 3322.245341][ T1499] usb 5-1: SerialNumber: syz [ 3322.309561][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3322.318648][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.326675][T28967] usb 6-1: Product: syz [ 3322.330970][T28967] usb 6-1: Manufacturer: syz [ 3322.335564][T28967] usb 6-1: SerialNumber: syz 00:22:37 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402553a8a440000102030109021b000101e60003090400060207010000090501020000f5fe00"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000080)) 00:22:37 executing program 0 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:22:37 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x4, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_open_dev$hidraw(&(0x7f0000000100), 0x72a9, 0x8000) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/179) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000002c0), 0x7, 0x8800) 00:22:37 executing program 1 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3322.566090][T23469] FAULT_INJECTION: forcing a failure. [ 3322.566090][T23469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3322.577221][ T1499] usb 5-1: USB disconnect, device number 55 [ 3322.579428][T23469] CPU: 1 PID: 23469 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3322.593969][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.599981][T23471] FAULT_INJECTION: forcing a failure. [ 3322.599981][T23471] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.604037][T23469] Call Trace: [ 3322.604049][T23469] dump_stack_lvl+0xcd/0x134 [ 3322.624573][T23469] should_fail.cold+0x5/0xa [ 3322.629089][T23469] strncpy_from_user+0x34/0x3e0 [ 3322.633948][T23469] getname_flags.part.0+0x95/0x4f0 [ 3322.639070][T23469] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3322.645054][T23469] getname+0x8e/0xd0 [ 3322.649035][T23469] do_sys_openat2+0xf5/0x420 [ 3322.653627][T23469] ? build_open_flags+0x6f0/0x6f0 [ 3322.658654][T23469] ? __context_tracking_exit+0x9f/0xb0 [ 3322.664109][T23469] ? lock_downgrade+0x6e0/0x6e0 [ 3322.668963][T23469] __x64_sys_openat+0x13f/0x1f0 [ 3322.673822][T23469] ? __ia32_sys_open+0x1c0/0x1c0 [ 3322.678762][T23469] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3322.684955][T23469] ? syscall_enter_from_user_mode+0x21/0x70 [ 3322.690860][T23469] do_syscall_64+0x35/0xb0 [ 3322.695303][T23469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3322.701217][T23469] RIP: 0033:0x4196d4 [ 3322.705123][T23469] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3322.724728][T23469] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3322.733235][T23469] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3322.741292][T23469] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3322.749261][T23469] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3322.757223][T23469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3322.765188][T23469] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3322.773162][T23471] CPU: 0 PID: 23471 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3322.781942][T23471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.792015][T23471] Call Trace: [ 3322.795398][T23471] dump_stack_lvl+0xcd/0x134 [ 3322.800018][T23471] should_fail.cold+0x5/0xa [ 3322.804541][T23471] ? security_inode_alloc+0x34/0x160 [ 3322.809849][T23471] should_failslab+0x5/0x10 00:22:38 executing program 1 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3322.814397][T23471] kmem_cache_alloc+0x5b/0x360 [ 3322.819188][T23471] security_inode_alloc+0x34/0x160 [ 3322.824317][T23471] inode_init_always+0x52e/0xc40 [ 3322.829277][T23471] alloc_inode+0x82/0x230 [ 3322.833628][T23471] new_inode+0x27/0x2f0 [ 3322.837800][T23471] __ext4_new_inode+0x34f/0x5b60 [ 3322.842760][T23471] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3322.848940][T23471] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3322.854775][T23471] ? trace_hardirqs_on+0x5b/0x1a0 [ 3322.859824][T23471] ? find_held_lock+0x2d/0x110 [ 3322.864614][T23471] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3322.870182][T23471] ? do_raw_spin_unlock+0x171/0x230 [ 3322.875402][T23471] ? d_splice_alias+0x4c6/0xc60 [ 3322.880277][T23471] ? ext4_create+0x447/0x4d0 [ 3322.884886][T23471] ext4_create+0x2d6/0x4d0 [ 3322.889329][T23471] ? ext4_mknod+0x4e0/0x4e0 [ 3322.893945][T23471] ? generic_permission+0x121/0x5b0 [ 3322.899162][T23471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3322.905430][T23471] ? security_inode_permission+0xc5/0xf0 [ 3322.911082][T23471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:22:38 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x18, 0x0, 0x0, 0x0}) [ 3322.917346][T23471] ? ext4_mknod+0x4e0/0x4e0 [ 3322.921873][T23471] lookup_open.isra.0+0xf19/0x1300 [ 3322.927015][T23471] ? hashlen_string+0xf0/0xf0 [ 3322.931716][T23471] path_openat+0x9b3/0x27f0 [ 3322.936324][T23471] ? path_lookupat+0x860/0x860 [ 3322.941189][T23471] ? mark_lock+0xef/0x17b0 [ 3322.945704][T23471] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3322.951703][T23471] do_filp_open+0x1aa/0x400 [ 3322.956227][T23471] ? may_open_dev+0xf0/0xf0 [ 3322.960750][T23471] ? alloc_fd+0x2f0/0x670 [ 3322.965230][T23471] ? rwlock_bug.part.0+0x90/0x90 [ 3322.970182][T23471] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3322.976446][T23471] ? _find_next_bit+0x1e3/0x260 [ 3322.981322][T23471] ? _raw_spin_unlock+0x1a/0x30 [ 3322.986198][T23471] ? alloc_fd+0x2f0/0x670 [ 3322.990547][T23471] do_sys_openat2+0x16d/0x420 [ 3322.995243][T23471] ? build_open_flags+0x6f0/0x6f0 [ 3323.000285][T23471] ? __context_tracking_exit+0x9f/0xb0 [ 3323.005793][T23471] ? lock_downgrade+0x6e0/0x6e0 [ 3323.010752][T23471] __x64_sys_openat+0x13f/0x1f0 [ 3323.015628][T23471] ? __ia32_sys_open+0x1c0/0x1c0 [ 3323.020674][T23471] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3323.026697][T23471] ? syscall_enter_from_user_mode+0x21/0x70 [ 3323.032604][T23471] do_syscall_64+0x35/0xb0 [ 3323.037046][T23471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3323.038766][T23482] FAULT_INJECTION: forcing a failure. [ 3323.038766][T23482] name failslab, interval 1, probability 0, space 0, times 0 [ 3323.043047][T23471] RIP: 0033:0x4196d4 [ 3323.043069][T23471] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3323.043091][T23471] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3323.043117][T23471] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3323.043136][T23471] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3323.043153][T23471] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3323.043168][T23471] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3323.043181][T23471] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3323.072798][T28967] usb 6-1: USB disconnect, device number 23 [ 3323.079541][T23482] CPU: 1 PID: 23482 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3323.079571][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3323.079586][T23482] Call Trace: [ 3323.079595][T23482] dump_stack_lvl+0xcd/0x134 [ 3323.088317][ T33] audit: type=1800 audit(1629937358.458:46): pid=23479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15131 res=0 errno=0 [ 3323.096158][T23482] should_fail.cold+0x5/0xa [ 3323.096188][T23482] ? __alloc_file+0x21/0x280 [ 3323.096212][T23482] should_failslab+0x5/0x10 [ 3323.195200][T23482] kmem_cache_alloc+0x5b/0x360 [ 3323.199990][T23482] __alloc_file+0x21/0x280 [ 3323.204423][T23482] alloc_empty_file+0x6d/0x170 [ 3323.209204][T23482] path_openat+0xde/0x27f0 [ 3323.213631][T23482] ? __lock_acquire+0x162f/0x54a0 [ 3323.218673][T23482] ? path_lookupat+0x860/0x860 [ 3323.223454][T23482] ? mark_lock+0xef/0x17b0 [ 3323.227885][T23482] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3323.227916][T23501] FAULT_INJECTION: forcing a failure. [ 3323.227916][T23501] name failslab, interval 1, probability 0, space 0, times 0 [ 3323.233881][T23482] do_filp_open+0x1aa/0x400 [ 3323.233914][T23482] ? may_open_dev+0xf0/0xf0 [ 3323.233940][T23482] ? alloc_fd+0x2f0/0x670 [ 3323.233968][T23482] ? lock_downgrade+0x6e0/0x6e0 [ 3323.233989][T23482] ? rwlock_bug.part.0+0x90/0x90 [ 3323.269553][T23482] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3323.275800][T23482] ? _find_next_bit+0x1e3/0x260 [ 3323.280667][T23482] ? _raw_spin_unlock+0x1a/0x30 [ 3323.285527][T23482] ? alloc_fd+0x2f0/0x670 [ 3323.289859][T23482] do_sys_openat2+0x16d/0x420 [ 3323.294546][T23482] ? build_open_flags+0x6f0/0x6f0 [ 3323.299583][T23482] ? __context_tracking_exit+0x9f/0xb0 [ 3323.305056][T23482] ? lock_downgrade+0x6e0/0x6e0 [ 3323.309900][T23482] __x64_sys_openat+0x13f/0x1f0 [ 3323.314753][T23482] ? __ia32_sys_open+0x1c0/0x1c0 [ 3323.319717][T23482] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3323.325704][T23482] ? syscall_enter_from_user_mode+0x21/0x70 [ 3323.331600][T23482] do_syscall_64+0x35/0xb0 [ 3323.336031][T23482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3323.342020][T23482] RIP: 0033:0x4196d4 [ 3323.345910][T23482] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 00:22:38 executing program 0 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3323.365798][T23482] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3323.374212][T23482] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3323.382266][T23482] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3323.390235][T23482] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3323.398226][T23482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3323.406362][T23482] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 00:22:38 executing program 1 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3323.414330][T23501] CPU: 0 PID: 23501 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3323.423195][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3323.433260][T23501] Call Trace: [ 3323.436547][T23501] dump_stack_lvl+0xcd/0x134 [ 3323.441159][T23501] should_fail.cold+0x5/0xa [ 3323.445682][T23501] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3323.451418][T23501] should_failslab+0x5/0x10 [ 3323.455948][T23501] __kmalloc+0x72/0x310 [ 3323.460133][T23501] ? lock_chain_count+0x20/0x20 [ 3323.465176][T23501] tomoyo_realpath_from_path+0xc3/0x620 [ 3323.470745][T23501] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3323.476196][T23503] FAULT_INJECTION: forcing a failure. [ 3323.476196][T23503] name failslab, interval 1, probability 0, space 0, times 0 [ 3323.477008][T23501] tomoyo_check_open_permission+0x272/0x380 [ 3323.495460][T23501] ? tomoyo_path_number_perm+0x590/0x590 [ 3323.501104][T23501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3323.507089][T23501] ? path_get+0x5d/0x80 [ 3323.511329][T23501] ? lock_downgrade+0x6e0/0x6e0 [ 3323.516187][T23501] ? do_raw_spin_lock+0x120/0x2b0 [ 3323.521230][T23501] tomoyo_file_open+0xa3/0xd0 [ 3323.525917][T23501] security_file_open+0x52/0x4f0 [ 3323.530855][T23501] ? __mnt_want_write+0x196/0x270 [ 3323.535875][T23501] do_dentry_open+0x34e/0x1110 [ 3323.540666][T23501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3323.547001][T23501] ? may_open+0x1f6/0x420 [ 3323.551327][T23501] path_openat+0x1c23/0x27f0 [ 3323.555918][T23501] ? path_lookupat+0x860/0x860 [ 3323.560942][T23501] ? mark_lock+0xef/0x17b0 [ 3323.565376][T23501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3323.571353][T23501] do_filp_open+0x1aa/0x400 [ 3323.575872][T23501] ? may_open_dev+0xf0/0xf0 [ 3323.580371][T23501] ? alloc_fd+0x2f0/0x670 [ 3323.584706][T23501] ? rwlock_bug.part.0+0x90/0x90 [ 3323.589638][T23501] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3323.595914][T23501] ? _find_next_bit+0x1e3/0x260 [ 3323.600854][T23501] ? _raw_spin_unlock+0x1a/0x30 [ 3323.605711][T23501] ? alloc_fd+0x2f0/0x670 [ 3323.610049][T23501] do_sys_openat2+0x16d/0x420 [ 3323.614730][T23501] ? build_open_flags+0x6f0/0x6f0 [ 3323.619761][T23501] ? __context_tracking_exit+0x9f/0xb0 [ 3323.625234][T23501] ? lock_downgrade+0x6e0/0x6e0 [ 3323.630082][T23501] __x64_sys_openat+0x13f/0x1f0 [ 3323.634936][T23501] ? __ia32_sys_open+0x1c0/0x1c0 [ 3323.639878][T23501] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3323.645880][T23501] ? syscall_enter_from_user_mode+0x21/0x70 [ 3323.651803][T23501] do_syscall_64+0x35/0xb0 [ 3323.656330][T23501] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3323.662240][T23501] RIP: 0033:0x4196d4 [ 3323.666132][T23501] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3323.685744][T23501] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3323.694160][T23501] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3323.702166][T23501] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3323.710134][T23501] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3323.718100][T23501] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3323.726081][T23501] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3323.734056][T23503] CPU: 1 PID: 23503 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3323.734277][T23501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3323.742829][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3323.742845][T23503] Call Trace: [ 3323.742856][T23503] dump_stack_lvl+0xcd/0x134 [ 3323.767396][T23503] should_fail.cold+0x5/0xa [ 3323.771913][T23503] ? security_file_alloc+0x34/0x170 [ 3323.777125][T23503] should_failslab+0x5/0x10 [ 3323.781648][T23503] kmem_cache_alloc+0x5b/0x360 [ 3323.786433][T23503] security_file_alloc+0x34/0x170 [ 3323.791477][T23503] __alloc_file+0xd8/0x280 [ 3323.795907][T23503] alloc_empty_file+0x6d/0x170 [ 3323.800687][T23503] path_openat+0xde/0x27f0 [ 3323.805118][T23503] ? __lock_acquire+0x162f/0x54a0 [ 3323.810154][T23503] ? path_lookupat+0x860/0x860 [ 3323.814931][T23503] ? mark_lock+0xef/0x17b0 [ 3323.819357][T23503] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3323.821932][T23505] FAULT_INJECTION: forcing a failure. [ 3323.821932][T23505] name failslab, interval 1, probability 0, space 0, times 0 [ 3323.825347][T23503] do_filp_open+0x1aa/0x400 [ 3323.825380][T23503] ? may_open_dev+0xf0/0xf0 [ 3323.825405][T23503] ? alloc_fd+0x2f0/0x670 [ 3323.825433][T23503] ? lock_downgrade+0x6e0/0x6e0 [ 3323.856084][T23503] ? rwlock_bug.part.0+0x90/0x90 [ 3323.861019][T23503] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3323.867352][T23503] ? _find_next_bit+0x1e3/0x260 [ 3323.872209][T23503] ? _raw_spin_unlock+0x1a/0x30 [ 3323.877067][T23503] ? alloc_fd+0x2f0/0x670 [ 3323.881401][T23503] do_sys_openat2+0x16d/0x420 [ 3323.886082][T23503] ? build_open_flags+0x6f0/0x6f0 [ 3323.891105][T23503] ? __context_tracking_exit+0x9f/0xb0 [ 3323.896823][T23503] ? lock_downgrade+0x6e0/0x6e0 [ 3323.901680][T23503] __x64_sys_openat+0x13f/0x1f0 [ 3323.906539][T23503] ? __ia32_sys_open+0x1c0/0x1c0 [ 3323.911477][T23503] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3323.917553][T23503] ? syscall_enter_from_user_mode+0x21/0x70 [ 3323.923457][T23503] do_syscall_64+0x35/0xb0 [ 3323.927970][T23503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3323.933867][T23503] RIP: 0033:0x4196d4 [ 3323.937757][T23503] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3323.957367][T23503] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 00:22:39 executing program 0 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3323.965874][T23503] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3323.973946][T23503] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3323.982088][T23503] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3323.990054][T23503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3323.998020][T23503] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3324.005991][T23505] CPU: 0 PID: 23505 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 00:22:39 executing program 1 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3324.014772][T23505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.024848][T23505] Call Trace: [ 3324.028131][T23505] dump_stack_lvl+0xcd/0x134 [ 3324.032744][T23505] should_fail.cold+0x5/0xa [ 3324.037263][T23505] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3324.043000][T23505] should_failslab+0x5/0x10 [ 3324.047521][T23505] __kmalloc+0x72/0x310 [ 3324.051785][T23505] ? lock_chain_count+0x20/0x20 [ 3324.056658][T23505] tomoyo_realpath_from_path+0xc3/0x620 [ 3324.062225][T23505] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3324.062610][T23507] FAULT_INJECTION: forcing a failure. [ 3324.062610][T23507] name failslab, interval 1, probability 0, space 0, times 0 [ 3324.068485][T23505] tomoyo_check_open_permission+0x272/0x380 [ 3324.068519][T23505] ? tomoyo_path_number_perm+0x590/0x590 [ 3324.068546][T23505] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3324.068572][T23505] ? path_get+0x5d/0x80 [ 3324.102799][T23505] ? lock_downgrade+0x6e0/0x6e0 [ 3324.107651][T23505] ? do_raw_spin_lock+0x120/0x2b0 [ 3324.112672][T23505] tomoyo_file_open+0xa3/0xd0 [ 3324.117351][T23505] security_file_open+0x52/0x4f0 [ 3324.122304][T23505] ? __mnt_want_write+0x196/0x270 [ 3324.127325][T23505] do_dentry_open+0x34e/0x1110 [ 3324.132104][T23505] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3324.138358][T23505] ? may_open+0x1f6/0x420 [ 3324.142688][T23505] path_openat+0x1c23/0x27f0 [ 3324.147276][T23505] ? path_lookupat+0x860/0x860 [ 3324.152038][T23505] ? alloc_pages+0x194/0x2a0 [ 3324.156625][T23505] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3324.162606][T23505] do_filp_open+0x1aa/0x400 [ 3324.167107][T23505] ? may_open_dev+0xf0/0xf0 [ 3324.171611][T23505] ? alloc_fd+0x2f0/0x670 [ 3324.175943][T23505] ? rwlock_bug.part.0+0x90/0x90 [ 3324.180878][T23505] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3324.187123][T23505] ? _find_next_bit+0x1e3/0x260 [ 3324.191982][T23505] ? _raw_spin_unlock+0x1a/0x30 [ 3324.196838][T23505] ? alloc_fd+0x2f0/0x670 [ 3324.201171][T23505] do_sys_openat2+0x16d/0x420 [ 3324.207072][T23505] ? build_open_flags+0x6f0/0x6f0 [ 3324.212113][T23505] ? __context_tracking_exit+0x9f/0xb0 [ 3324.217587][T23505] ? lock_downgrade+0x6e0/0x6e0 [ 3324.222434][T23505] __x64_sys_openat+0x13f/0x1f0 [ 3324.227288][T23505] ? __ia32_sys_open+0x1c0/0x1c0 [ 3324.232228][T23505] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3324.238209][T23505] ? syscall_enter_from_user_mode+0x21/0x70 [ 3324.244103][T23505] do_syscall_64+0x35/0xb0 [ 3324.248533][T23505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3324.254433][T23505] RIP: 0033:0x4196d4 [ 3324.258335][T23505] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3324.278117][T23505] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3324.286537][T23505] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3324.294522][T23505] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3324.302506][T23505] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3324.310471][T23505] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3324.318439][T23505] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3324.326409][T23507] CPU: 1 PID: 23507 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3324.326585][T23505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3324.335273][T23507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.335289][T23507] Call Trace: [ 3324.335299][T23507] dump_stack_lvl+0xcd/0x134 [ 3324.359848][T23507] should_fail.cold+0x5/0xa [ 3324.364390][T23507] ? __d_alloc+0x2a/0x950 [ 3324.368735][T23507] should_failslab+0x5/0x10 [ 3324.373254][T23507] kmem_cache_alloc+0x5b/0x360 [ 3324.378048][T23507] __d_alloc+0x2a/0x950 [ 3324.382216][T23507] d_alloc+0x4a/0x230 [ 3324.386212][T23507] d_alloc_parallel+0xe2/0x1980 [ 3324.391084][T23507] ? __d_lookup+0x3e0/0x730 [ 3324.395695][T23507] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3324.400559][T23507] ? __d_lookup+0x409/0x730 [ 3324.405169][T23507] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3324.411162][T23507] lookup_open.isra.0+0x867/0x1300 [ 3324.416379][T23507] ? hashlen_string+0xf0/0xf0 00:22:39 executing program 0 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3324.421071][T23507] path_openat+0x9b3/0x27f0 [ 3324.425679][T23507] ? path_lookupat+0x860/0x860 [ 3324.430461][T23507] ? mark_lock+0xef/0x17b0 [ 3324.434904][T23507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3324.440902][T23507] do_filp_open+0x1aa/0x400 [ 3324.444812][T23509] FAULT_INJECTION: forcing a failure. [ 3324.444812][T23509] name failslab, interval 1, probability 0, space 0, times 0 [ 3324.445416][T23507] ? may_open_dev+0xf0/0xf0 [ 3324.462470][T23507] ? alloc_fd+0x2f0/0x670 [ 3324.466807][T23507] ? rwlock_bug.part.0+0x90/0x90 [ 3324.471744][T23507] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3324.478001][T23507] ? _find_next_bit+0x1e3/0x260 [ 3324.482859][T23507] ? _raw_spin_unlock+0x1a/0x30 [ 3324.487718][T23507] ? alloc_fd+0x2f0/0x670 [ 3324.492052][T23507] do_sys_openat2+0x16d/0x420 [ 3324.496737][T23507] ? build_open_flags+0x6f0/0x6f0 [ 3324.501764][T23507] ? __context_tracking_exit+0x9f/0xb0 [ 3324.507223][T23507] ? lock_downgrade+0x6e0/0x6e0 [ 3324.512075][T23507] __x64_sys_openat+0x13f/0x1f0 [ 3324.516932][T23507] ? __ia32_sys_open+0x1c0/0x1c0 [ 3324.521871][T23507] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3324.527848][T23507] ? syscall_enter_from_user_mode+0x21/0x70 [ 3324.533737][T23507] do_syscall_64+0x35/0xb0 [ 3324.538160][T23507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3324.544156][T23507] RIP: 0033:0x4196d4 [ 3324.548045][T23507] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3324.567715][T23507] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3324.576142][T23507] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3324.584130][T23507] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3324.592106][T23507] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3324.600261][T23507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3324.608228][T23507] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3324.616374][T23509] CPU: 0 PID: 23509 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3324.616730][T18465] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3324.625152][T23509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.625171][T23509] Call Trace: [ 3324.625181][T23509] dump_stack_lvl+0xcd/0x134 [ 3324.625212][T23509] should_fail.cold+0x5/0xa [ 3324.655633][T23509] ? integrity_inode_get+0x5a/0x270 [ 3324.660859][T23509] should_failslab+0x5/0x10 [ 3324.665386][T23509] kmem_cache_alloc+0x5b/0x360 [ 3324.670176][T23509] ? ima_get_action+0x7a/0xa0 [ 3324.674883][T23509] integrity_inode_get+0x5a/0x270 [ 3324.679935][T23509] process_measurement+0x33d/0x17e0 [ 3324.685157][T23509] ? mmap_violation_check+0x1e0/0x1e0 [ 3324.690545][T23509] ? tomoyo_path_number_perm+0x590/0x590 [ 3324.696168][T23509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3324.702136][T23509] ? find_held_lock+0x2d/0x110 [ 3324.706894][T23509] ? aa_get_task_label+0x211/0x550 [ 3324.712127][T23509] ? lock_downgrade+0x6e0/0x6e0 [ 3324.716962][T23509] ? fsnotify+0x1050/0x1050 [ 3324.721449][T23509] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3324.726981][T23509] ? path_get+0x5d/0x80 [ 3324.731124][T23509] ? aa_get_task_label+0x23a/0x550 [ 3324.736286][T23509] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3324.742522][T23509] ? apparmor_task_getsecid+0xc2/0x110 [ 3324.747968][T23509] ima_file_check+0xb1/0x100 [ 3324.752546][T23509] ? process_measurement+0x17e0/0x17e0 [ 3324.757993][T23509] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3324.763526][T23509] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3324.769764][T23509] ? may_open+0x1f6/0x420 [ 3324.774078][T23509] path_openat+0x15ca/0x27f0 [ 3324.778677][T23509] ? path_lookupat+0x860/0x860 [ 3324.783435][T23509] ? mark_lock+0xef/0x17b0 [ 3324.787844][T23509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3324.793830][T23509] do_filp_open+0x1aa/0x400 [ 3324.798328][T23509] ? may_open_dev+0xf0/0xf0 [ 3324.802832][T23509] ? alloc_fd+0x2f0/0x670 [ 3324.807146][T23509] ? rwlock_bug.part.0+0x90/0x90 [ 3324.812068][T23509] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3324.818299][T23509] ? _find_next_bit+0x1e3/0x260 [ 3324.823144][T23509] ? _raw_spin_unlock+0x1a/0x30 [ 3324.828073][T23509] ? alloc_fd+0x2f0/0x670 [ 3324.832481][T23509] do_sys_openat2+0x16d/0x420 [ 3324.837169][T23509] ? build_open_flags+0x6f0/0x6f0 [ 3324.842197][T23509] ? __context_tracking_exit+0x9f/0xb0 [ 3324.847643][T23509] ? lock_downgrade+0x6e0/0x6e0 [ 3324.852482][T23509] __x64_sys_openat+0x13f/0x1f0 [ 3324.857345][T23509] ? __ia32_sys_open+0x1c0/0x1c0 [ 3324.862266][T23509] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3324.868229][T23509] ? syscall_enter_from_user_mode+0x21/0x70 [ 3324.874108][T23509] do_syscall_64+0x35/0xb0 [ 3324.878512][T23509] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3324.884493][T23509] RIP: 0033:0x4196d4 [ 3324.888368][T23509] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3324.907962][T23509] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3324.916368][T23509] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3324.924342][T23509] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3324.932318][T23509] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3324.940358][T23509] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3324.948314][T23509] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3324.989491][T18465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3324.999283][T18465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3325.008915][T18465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3325.159118][ T1499] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3325.166811][T28967] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3325.259579][T18465] usb 3-1: string descriptor 0 read error: -22 [ 3325.265989][T18465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3325.275179][T18465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:22:41 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e60003090400060207010000090501020000f5fe00ee12b8a2233f19a9c03859368f7b38d86dc72fb1dbc03d64676c55e4619f8310b476a18db89c747ba5c9cbcd50"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:41 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0}) 00:22:41 executing program 1 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:41 executing program 0 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:22:41 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x8, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(0xfffffffffffffffe, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0xc0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000040)={0x2, 0xffffffff, 0x3}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0xfc, 0x7, 0x1, 0x1, 0xc0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_disconnect(r1) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r2, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f00000002c0)) r3 = syz_usb_connect$uac1(0x3, 0x99, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x20, 0x9, 0x5, 0x20, 0x74}, 0x6b, &(0x7f0000000240)={0x5, 0xf, 0x6b, 0x2, [@generic={0x52, 0x10, 0xa, "bb7190cdc1f785d0c608cf86aa898bd1d9d901d5c58c98d5f389071c4e2a83f9476b9eba1d3213dd0da5533a762c7f9c840c4ace30b35def73cfa97ca797445d226fe0bad47ba8708afe9835113771"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c9dea8687f2e219eeeaf425362d8013a"}]}, 0x1, [{0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3603bd8a2d806a3b67f468406489d8648a587d3219bd41e1b717190f4e80db25853636d30f7fb176819e40a39f51b9fb1cf5deb7a6e0758f4708076c9e91c5fc453ffa7b6c2f8b039632c41f0fb303a43aab2f2f25f0bf04c1101116ce00007342674bcdb05e29e8c09504588b1340d954f6"]}]}) syz_usb_disconnect(r3) [ 3325.530746][T18465] usb 3-1: USB disconnect, device number 112 [ 3325.599740][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3325.653211][T23528] FAULT_INJECTION: forcing a failure. [ 3325.653211][T23528] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.666080][T23528] CPU: 0 PID: 23528 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3325.670009][T23529] FAULT_INJECTION: forcing a failure. [ 3325.670009][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.674856][T23528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.674875][T23528] Call Trace: [ 3325.674884][T23528] dump_stack_lvl+0xcd/0x134 [ 3325.674917][T23528] should_fail.cold+0x5/0xa [ 3325.709854][T23528] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3325.715588][T23528] should_failslab+0x5/0x10 [ 3325.720098][T23528] __kmalloc+0x72/0x310 [ 3325.724259][T23528] tomoyo_realpath_from_path+0xc3/0x620 [ 3325.729807][T23528] ? tomoyo_profile+0x42/0x50 [ 3325.734489][T23528] tomoyo_path_number_perm+0x1d5/0x590 [ 3325.739947][T23528] ? tomoyo_path_number_perm+0x18d/0x590 [ 3325.745578][T23528] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3325.751383][T23528] ? lock_chain_count+0x20/0x20 [ 3325.756320][T23528] ? find_held_lock+0x2d/0x110 [ 3325.761099][T23528] ? d_alloc_parallel+0x949/0x1980 [ 3325.766209][T23528] ? __d_lookup+0x3e0/0x730 [ 3325.770797][T23528] tomoyo_path_mknod+0x10d/0x190 [ 3325.775736][T23528] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3325.780846][T23528] security_path_mknod+0xf9/0x170 [ 3325.785869][T23528] lookup_open.isra.0+0x471/0x1300 [ 3325.791083][T23528] ? hashlen_string+0xf0/0xf0 [ 3325.795760][T23528] path_openat+0x9b3/0x27f0 [ 3325.800262][T23528] ? path_lookupat+0x860/0x860 [ 3325.805024][T23528] ? mark_lock+0xef/0x17b0 [ 3325.809434][T23528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3325.815414][T23528] do_filp_open+0x1aa/0x400 [ 3325.819923][T23528] ? may_open_dev+0xf0/0xf0 [ 3325.824444][T23528] ? alloc_fd+0x2f0/0x670 [ 3325.828787][T23528] ? rwlock_bug.part.0+0x90/0x90 [ 3325.833758][T23528] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3325.840011][T23528] ? _find_next_bit+0x1e3/0x260 [ 3325.844873][T23528] ? _raw_spin_unlock+0x1a/0x30 [ 3325.849734][T23528] ? alloc_fd+0x2f0/0x670 [ 3325.854065][T23528] do_sys_openat2+0x16d/0x420 [ 3325.858761][T23528] ? build_open_flags+0x6f0/0x6f0 [ 3325.863792][T23528] ? __context_tracking_exit+0x9f/0xb0 [ 3325.869249][T23528] ? lock_downgrade+0x6e0/0x6e0 [ 3325.874188][T23528] __x64_sys_openat+0x13f/0x1f0 [ 3325.879048][T23528] ? __ia32_sys_open+0x1c0/0x1c0 [ 3325.883993][T23528] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3325.889969][T23528] ? syscall_enter_from_user_mode+0x21/0x70 [ 3325.895860][T23528] do_syscall_64+0x35/0xb0 [ 3325.900278][T23528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3325.906181][T23528] RIP: 0033:0x4196d4 [ 3325.910070][T23528] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3325.929774][T23528] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3325.938194][T23528] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3325.946161][T23528] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3325.954125][T23528] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3325.962188][T23528] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3325.970150][T23528] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3325.978116][T23529] CPU: 1 PID: 23529 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3325.978208][T23528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3325.986897][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.986913][T23529] Call Trace: [ 3325.986923][T23529] dump_stack_lvl+0xcd/0x134 [ 3325.994467][ T1499] usb 5-1: unable to read config index 0 descriptor/all [ 3326.003625][T23529] should_fail.cold+0x5/0xa [ 3326.003656][T23529] should_failslab+0x5/0x10 [ 3326.003684][T23529] __kmalloc_track_caller+0x79/0x2f0 [ 3326.003712][T23529] ? ima_collect_measurement+0x342/0x570 [ 3326.007106][ T1499] usb 5-1: can't read configurations, error -71 [ 3326.011642][T23529] krealloc+0x7e/0xd0 [ 3326.011668][T23529] ima_collect_measurement+0x342/0x570 [ 3326.054071][T23529] ? ima_get_action+0xa0/0xa0 [ 3326.058775][T23529] ? ima_get_cache_status+0x1d0/0x1d0 [ 3326.064170][T23529] process_measurement+0xd1c/0x17e0 [ 3326.069405][T23529] ? mmap_violation_check+0x1e0/0x1e0 [ 3326.074795][T23529] ? tomoyo_path_number_perm+0x590/0x590 [ 3326.080441][T23529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3326.086435][T23529] ? find_held_lock+0x2d/0x110 [ 3326.086714][ T33] audit: type=1800 audit(1629937361.388:47): pid=23528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15147 res=0 errno=0 [ 3326.091209][T23529] ? aa_get_task_label+0x211/0x550 [ 3326.091245][T23529] ? lock_downgrade+0x6e0/0x6e0 [ 3326.091267][T23529] ? fsnotify+0x1050/0x1050 [ 3326.091289][T23529] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3326.132372][T23529] ? path_get+0x5d/0x80 [ 3326.136568][T23529] ? aa_get_task_label+0x23a/0x550 [ 3326.141709][T23529] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3326.147975][T23529] ? apparmor_task_getsecid+0xc2/0x110 00:22:41 executing program 1 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3326.153460][T23529] ima_file_check+0xb1/0x100 [ 3326.158067][T23529] ? process_measurement+0x17e0/0x17e0 [ 3326.163547][T23529] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3326.169112][T23529] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3326.175369][T23529] ? may_open+0x1f6/0x420 [ 3326.179714][T23529] path_openat+0x15ca/0x27f0 [ 3326.184319][T23529] ? path_lookupat+0x860/0x860 [ 3326.189094][T23529] ? mark_lock+0xef/0x17b0 [ 3326.193518][T23529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3326.199519][T23529] do_filp_open+0x1aa/0x400 00:22:41 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x300, 0x0, 0x0, 0x0}) 00:22:41 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x3f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x2c, &(0x7f0000000080)=""/44) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102ec4709021b000101e60003090400060207010000090501020000f5fe00c120e1c46d4e93c18d76e0d118e8e5"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 3326.204037][T23529] ? may_open_dev+0xf0/0xf0 [ 3326.208549][T23529] ? alloc_fd+0x2f0/0x670 [ 3326.212903][T23529] ? rwlock_bug.part.0+0x90/0x90 [ 3326.217850][T23529] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3326.224108][T23529] ? _find_next_bit+0x1e3/0x260 [ 3326.228978][T23529] ? _raw_spin_unlock+0x1a/0x30 [ 3326.233930][T23529] ? alloc_fd+0x2f0/0x670 [ 3326.238275][T23529] do_sys_openat2+0x16d/0x420 [ 3326.242964][T23529] ? build_open_flags+0x6f0/0x6f0 [ 3326.248003][T23529] ? __context_tracking_exit+0x9f/0xb0 [ 3326.253467][T23529] ? lock_downgrade+0x6e0/0x6e0 [ 3326.258324][T23529] __x64_sys_openat+0x13f/0x1f0 [ 3326.263191][T23529] ? __ia32_sys_open+0x1c0/0x1c0 [ 3326.268145][T23529] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3326.274137][T23529] ? syscall_enter_from_user_mode+0x21/0x70 [ 3326.280046][T23529] do_syscall_64+0x35/0xb0 [ 3326.284483][T23529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3326.289646][T23541] FAULT_INJECTION: forcing a failure. [ 3326.289646][T23541] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.290398][T23529] RIP: 0033:0x4196d4 [ 3326.306847][T23529] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3326.326465][T23529] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3326.334896][T23529] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3326.342875][T23529] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3326.350866][T23529] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3326.358835][T23529] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3326.366818][T23529] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3326.374810][T23541] CPU: 0 PID: 23541 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3326.383594][T23541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3326.393664][T23541] Call Trace: [ 3326.396952][T23541] dump_stack_lvl+0xcd/0x134 [ 3326.401568][T23541] should_fail.cold+0x5/0xa [ 3326.406082][T23541] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3326.411471][T23541] should_failslab+0x5/0x10 [ 3326.415997][T23541] __kmalloc+0x72/0x310 [ 3326.420169][T23541] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3326.425382][T23541] tomoyo_encode+0x28/0x50 [ 3326.429813][T23541] tomoyo_realpath_from_path+0x186/0x620 [ 3326.435462][T23541] tomoyo_path_number_perm+0x1d5/0x590 00:22:41 executing program 0 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3326.440561][ T33] audit: type=1800 audit(1629937361.808:48): pid=23529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=48C7C060 dev="sda1" ino=15146 res=0 errno=0 [ 3326.440938][T23541] ? tomoyo_path_number_perm+0x18d/0x590 [ 3326.466777][T23541] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3326.472605][T23541] ? lock_chain_count+0x20/0x20 [ 3326.477476][T23541] ? find_held_lock+0x2d/0x110 [ 3326.482267][T23541] ? d_alloc_parallel+0x949/0x1980 [ 3326.487482][T23541] ? __d_lookup+0x3e0/0x730 [ 3326.492087][T23541] tomoyo_path_mknod+0x10d/0x190 [ 3326.497047][T23541] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3326.502182][T23541] security_path_mknod+0xf9/0x170 [ 3326.507226][T23541] lookup_open.isra.0+0x471/0x1300 [ 3326.512376][T23541] ? hashlen_string+0xf0/0xf0 [ 3326.517076][T23541] path_openat+0x9b3/0x27f0 [ 3326.521593][T23541] ? path_lookupat+0x860/0x860 [ 3326.522248][T23551] FAULT_INJECTION: forcing a failure. [ 3326.522248][T23551] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.526370][T23541] ? mark_lock+0xef/0x17b0 [ 3326.526395][T23541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3326.526422][T23541] do_filp_open+0x1aa/0x400 [ 3326.526449][T23541] ? may_open_dev+0xf0/0xf0 [ 3326.558313][T23541] ? alloc_fd+0x2f0/0x670 [ 3326.562648][T23541] ? rwlock_bug.part.0+0x90/0x90 [ 3326.567597][T23541] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3326.573862][T23541] ? _find_next_bit+0x1e3/0x260 [ 3326.579684][T23541] ? _raw_spin_unlock+0x1a/0x30 [ 3326.584550][T23541] ? alloc_fd+0x2f0/0x670 [ 3326.588895][T23541] do_sys_openat2+0x16d/0x420 [ 3326.593583][T23541] ? build_open_flags+0x6f0/0x6f0 [ 3326.598618][T23541] ? __context_tracking_exit+0x9f/0xb0 [ 3326.604079][T23541] ? lock_downgrade+0x6e0/0x6e0 [ 3326.608929][T23541] __x64_sys_openat+0x13f/0x1f0 [ 3326.613791][T23541] ? __ia32_sys_open+0x1c0/0x1c0 [ 3326.618733][T23541] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3326.624714][T23541] ? syscall_enter_from_user_mode+0x21/0x70 [ 3326.630717][T23541] do_syscall_64+0x35/0xb0 [ 3326.635152][T23541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3326.641071][T23541] RIP: 0033:0x4196d4 [ 3326.644965][T23541] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3326.664707][T23541] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3326.673137][T23541] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3326.681109][T23541] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3326.689252][T23541] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3326.697219][T23541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3326.705185][T23541] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3326.713158][T23551] CPU: 1 PID: 23551 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3326.713547][T23541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3326.722188][T23551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3326.722204][T23551] Call Trace: [ 3326.722212][T23551] dump_stack_lvl+0xcd/0x134 [ 3326.746818][T23551] should_fail.cold+0x5/0xa [ 3326.751343][T23551] ? ima_d_path+0x4d/0x1f0 [ 3326.755781][T23551] should_failslab+0x5/0x10 [ 3326.760309][T23551] kmem_cache_alloc+0x5b/0x360 [ 3326.765091][T23551] ima_d_path+0x4d/0x1f0 [ 3326.769357][T23551] process_measurement+0x137d/0x17e0 [ 3326.774661][T23551] ? mmap_violation_check+0x1e0/0x1e0 [ 3326.780053][T23551] ? tomoyo_path_number_perm+0x590/0x590 [ 3326.785706][T23551] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3326.791611][ T33] audit: type=1800 audit(1629937362.128:49): pid=23541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15149 res=0 errno=0 [ 3326.791694][T23551] ? find_held_lock+0x2d/0x110 [ 3326.817518][T23551] ? aa_get_task_label+0x211/0x550 [ 3326.822657][T23551] ? lock_downgrade+0x6e0/0x6e0 [ 3326.827518][T23551] ? fsnotify+0x1050/0x1050 [ 3326.832122][T23551] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3326.837688][T23551] ? path_get+0x5d/0x80 [ 3326.841854][T23551] ? aa_get_task_label+0x23a/0x550 [ 3326.846977][T23551] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3326.847681][T23553] FAULT_INJECTION: forcing a failure. [ 3326.847681][T23553] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.853234][T23551] ? apparmor_task_getsecid+0xc2/0x110 [ 3326.853268][T23551] ima_file_check+0xb1/0x100 [ 3326.853297][T23551] ? process_measurement+0x17e0/0x17e0 [ 3326.853325][T23551] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3326.853351][T23551] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3326.893203][T23551] ? may_open+0x1f6/0x420 [ 3326.897535][T23551] path_openat+0x15ca/0x27f0 [ 3326.902141][T23551] ? path_lookupat+0x860/0x860 [ 3326.906905][T23551] ? mark_lock+0xef/0x17b0 [ 3326.911325][T23551] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3326.917303][T23551] do_filp_open+0x1aa/0x400 [ 3326.921807][T23551] ? may_open_dev+0xf0/0xf0 [ 3326.926313][T23551] ? alloc_fd+0x2f0/0x670 [ 3326.930644][T23551] ? rwlock_bug.part.0+0x90/0x90 [ 3326.935587][T23551] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3326.941831][T23551] ? _find_next_bit+0x1e3/0x260 [ 3326.946687][T23551] ? _raw_spin_unlock+0x1a/0x30 [ 3326.951542][T23551] ? alloc_fd+0x2f0/0x670 [ 3326.955880][T23551] do_sys_openat2+0x16d/0x420 [ 3326.960562][T23551] ? build_open_flags+0x6f0/0x6f0 [ 3326.965592][T23551] ? __context_tracking_exit+0x9f/0xb0 [ 3326.971053][T23551] ? lock_downgrade+0x6e0/0x6e0 [ 3326.975910][T23551] __x64_sys_openat+0x13f/0x1f0 [ 3326.980787][T23551] ? __ia32_sys_open+0x1c0/0x1c0 [ 3326.985995][T23551] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3326.991987][T23551] ? syscall_enter_from_user_mode+0x21/0x70 [ 3326.997889][T23551] do_syscall_64+0x35/0xb0 [ 3327.002343][T23551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3327.008252][T23551] RIP: 0033:0x4196d4 [ 3327.012141][T23551] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3327.031748][T23551] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3327.040174][T23551] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3327.048142][T23551] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c 00:22:42 executing program 1 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3327.056109][T23551] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3327.064073][T23551] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3327.072038][T23551] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3327.080009][T23553] CPU: 0 PID: 23553 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3327.088786][T23553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3327.098854][T23553] Call Trace: [ 3327.102140][T23553] dump_stack_lvl+0xcd/0x134 00:22:42 executing program 0 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3327.106754][T23553] should_fail.cold+0x5/0xa [ 3327.111273][T23553] ? ext4_init_journal_params+0x350/0x350 [ 3327.117008][T23553] ? ext4_alloc_inode+0x1a/0x640 [ 3327.121959][T23553] should_failslab+0x5/0x10 [ 3327.126490][T23553] kmem_cache_alloc+0x5b/0x360 [ 3327.131272][T23553] ? ext4_init_journal_params+0x350/0x350 [ 3327.137002][T23553] ext4_alloc_inode+0x1a/0x640 [ 3327.141780][T23553] ? ext4_init_journal_params+0x350/0x350 [ 3327.147511][T23553] alloc_inode+0x61/0x230 [ 3327.151859][T23553] new_inode+0x27/0x2f0 [ 3327.156036][T23553] __ext4_new_inode+0x34f/0x5b60 [ 3327.157862][T23555] FAULT_INJECTION: forcing a failure. [ 3327.157862][T23555] name failslab, interval 1, probability 0, space 0, times 0 [ 3327.160985][T23553] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3327.161017][T23553] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3327.161050][T23553] ? trace_hardirqs_on+0x5b/0x1a0 [ 3327.161079][T23553] ? find_held_lock+0x2d/0x110 [ 3327.161107][T23553] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3327.200667][T23553] ? do_raw_spin_unlock+0x171/0x230 [ 3327.205887][T23553] ? d_splice_alias+0x4c6/0xc60 [ 3327.210732][T23553] ? ext4_create+0x447/0x4d0 [ 3327.215322][T23553] ext4_create+0x2d6/0x4d0 [ 3327.219743][T23553] ? ext4_mknod+0x4e0/0x4e0 [ 3327.224249][T23553] ? generic_permission+0x121/0x5b0 [ 3327.229450][T23553] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3327.235868][T23553] ? security_inode_permission+0xc5/0xf0 [ 3327.241499][T23553] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3327.247761][T23553] ? ext4_mknod+0x4e0/0x4e0 [ 3327.252277][T23553] lookup_open.isra.0+0xf19/0x1300 [ 3327.257388][T23553] ? hashlen_string+0xf0/0xf0 [ 3327.262061][T23553] path_openat+0x9b3/0x27f0 [ 3327.266563][T23553] ? path_lookupat+0x860/0x860 [ 3327.271328][T23553] ? mark_lock+0xef/0x17b0 [ 3327.275744][T23553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3327.281722][T23553] do_filp_open+0x1aa/0x400 [ 3327.286236][T23553] ? may_open_dev+0xf0/0xf0 [ 3327.290758][T23553] ? alloc_fd+0x2f0/0x670 [ 3327.295106][T23553] ? rwlock_bug.part.0+0x90/0x90 [ 3327.300168][T23553] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3327.306437][T23553] ? _find_next_bit+0x1e3/0x260 [ 3327.311311][T23553] ? _raw_spin_unlock+0x1a/0x30 [ 3327.316166][T23553] ? alloc_fd+0x2f0/0x670 [ 3327.320501][T23553] do_sys_openat2+0x16d/0x420 [ 3327.325180][T23553] ? build_open_flags+0x6f0/0x6f0 [ 3327.330209][T23553] ? __context_tracking_exit+0x9f/0xb0 [ 3327.335668][T23553] ? lock_downgrade+0x6e0/0x6e0 [ 3327.340519][T23553] __x64_sys_openat+0x13f/0x1f0 [ 3327.345376][T23553] ? __ia32_sys_open+0x1c0/0x1c0 [ 3327.350319][T23553] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3327.356299][T23553] ? syscall_enter_from_user_mode+0x21/0x70 [ 3327.362202][T23553] do_syscall_64+0x35/0xb0 [ 3327.366621][T23553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3327.372520][T23553] RIP: 0033:0x4196d4 [ 3327.376415][T23553] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3327.396289][T23553] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3327.404713][T23553] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3327.412698][T23553] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3327.420762][T23553] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3327.428750][T23553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3327.436732][T23553] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3327.444705][T23555] CPU: 1 PID: 23555 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3327.448910][T28967] usb 6-1: string descriptor 0 read error: -71 [ 3327.453476][T23555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3327.469652][T23555] Call Trace: [ 3327.472940][T23555] dump_stack_lvl+0xcd/0x134 [ 3327.476252][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3327.477542][T23555] should_fail.cold+0x5/0xa [ 3327.477569][T23555] ? ima_alloc_init_template+0xb4/0x750 [ 3327.477601][T23555] should_failslab+0x5/0x10 [ 3327.486648][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.491093][T23555] __kmalloc+0x72/0x310 [ 3327.491128][T23555] ? prepend_path+0x6ce/0xdc0 [ 3327.517992][T23555] ima_alloc_init_template+0xb4/0x750 [ 3327.523389][T23555] ima_store_measurement+0x1d7/0x5a0 [ 3327.528775][T23555] ? ima_collect_measurement+0x570/0x570 [ 3327.534434][T23555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3327.540686][T23555] ? d_absolute_path+0x10f/0x170 [ 3327.545636][T23555] ? kmem_cache_alloc+0x2d4/0x360 [ 3327.550672][T23555] process_measurement+0x11fb/0x17e0 [ 3327.555970][T23555] ? mmap_violation_check+0x1e0/0x1e0 [ 3327.561351][T23555] ? tomoyo_path_number_perm+0x590/0x590 [ 3327.566992][T23555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3327.572983][T23555] ? find_held_lock+0x2d/0x110 [ 3327.578023][T23555] ? aa_get_task_label+0x211/0x550 [ 3327.583151][T23555] ? lock_downgrade+0x6e0/0x6e0 [ 3327.588010][T23555] ? fsnotify+0x1050/0x1050 [ 3327.592516][T23555] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3327.598074][T23555] ? path_get+0x5d/0x80 [ 3327.602237][T23555] ? aa_get_task_label+0x23a/0x550 [ 3327.607366][T23555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3327.613746][T23555] ? apparmor_task_getsecid+0xc2/0x110 [ 3327.619232][T23555] ima_file_check+0xb1/0x100 [ 3327.623844][T23555] ? process_measurement+0x17e0/0x17e0 [ 3327.629323][T23555] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3327.634889][T23555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3327.641156][T23555] ? may_open+0x1f6/0x420 [ 3327.645503][T23555] path_openat+0x15ca/0x27f0 [ 3327.650113][T23555] ? path_lookupat+0x860/0x860 [ 3327.654895][T23555] ? mark_lock+0xef/0x17b0 [ 3327.659352][T23555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3327.665606][T23555] do_filp_open+0x1aa/0x400 [ 3327.670125][T23555] ? may_open_dev+0xf0/0xf0 [ 3327.674644][T23555] ? alloc_fd+0x2f0/0x670 [ 3327.678998][T23555] ? rwlock_bug.part.0+0x90/0x90 [ 3327.683957][T23555] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3327.690224][T23555] ? _find_next_bit+0x1e3/0x260 [ 3327.690358][T23557] FAULT_INJECTION: forcing a failure. [ 3327.690358][T23557] name failslab, interval 1, probability 0, space 0, times 0 [ 3327.695097][T23555] ? _raw_spin_unlock+0x1a/0x30 [ 3327.695132][T23555] ? alloc_fd+0x2f0/0x670 [ 3327.695162][T23555] do_sys_openat2+0x16d/0x420 [ 3327.695192][T23555] ? build_open_flags+0x6f0/0x6f0 [ 3327.726557][T23555] ? __context_tracking_exit+0x9f/0xb0 [ 3327.732028][T23555] ? lock_downgrade+0x6e0/0x6e0 [ 3327.736967][T23555] __x64_sys_openat+0x13f/0x1f0 [ 3327.741828][T23555] ? __ia32_sys_open+0x1c0/0x1c0 [ 3327.746777][T23555] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3327.752757][T23555] ? syscall_enter_from_user_mode+0x21/0x70 [ 3327.758651][T23555] do_syscall_64+0x35/0xb0 [ 3327.763077][T23555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3327.768984][T23555] RIP: 0033:0x4196d4 [ 3327.772879][T23555] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3327.792569][T23555] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3327.800983][T23555] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 00:22:43 executing program 1 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3327.808950][T23555] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3327.816916][T23555] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3327.824990][T23555] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3327.832954][T23555] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3327.841009][T23557] CPU: 0 PID: 23557 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3327.849785][T23557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3327.859856][T23557] Call Trace: [ 3327.863141][T23557] dump_stack_lvl+0xcd/0x134 [ 3327.867756][T23557] should_fail.cold+0x5/0xa [ 3327.872310][T23557] ? ext4_init_journal_params+0x350/0x350 [ 3327.878050][T23557] ? ext4_alloc_inode+0x1a/0x640 [ 3327.883008][T23557] should_failslab+0x5/0x10 00:22:43 executing program 0 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3327.884363][ T33] audit: type=1804 audit(1629937363.269:50): pid=23555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723039303233393037372F73797A6B616C6C65722E5A45364735502F353838392F48C7C060 dev="sda1" ino=15146 res=0 errno=0 [ 3327.887787][T23557] kmem_cache_alloc+0x5b/0x360 [ 3327.887824][T23557] ? ext4_init_journal_params+0x350/0x350 [ 3327.920587][T18465] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3327.923562][T23557] ext4_alloc_inode+0x1a/0x640 [ 3327.923594][T23557] ? ext4_init_journal_params+0x350/0x350 [ 3327.923618][T23557] alloc_inode+0x61/0x230 [ 3327.923644][T23557] new_inode+0x27/0x2f0 [ 3327.955883][T23557] __ext4_new_inode+0x34f/0x5b60 [ 3327.958402][T23559] FAULT_INJECTION: forcing a failure. [ 3327.958402][T23559] name failslab, interval 1, probability 0, space 0, times 0 [ 3327.960844][T23557] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3327.960874][T23557] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3327.960908][T23557] ? trace_hardirqs_on+0x5b/0x1a0 [ 3327.960939][T23557] ? find_held_lock+0x2d/0x110 [ 3327.960969][T23557] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3328.001298][T23557] ? do_raw_spin_unlock+0x171/0x230 [ 3328.006499][T23557] ? d_splice_alias+0x4c6/0xc60 [ 3328.011434][T23557] ? ext4_create+0x447/0x4d0 [ 3328.016049][T23557] ext4_create+0x2d6/0x4d0 [ 3328.020468][T23557] ? ext4_mknod+0x4e0/0x4e0 [ 3328.024973][T23557] ? generic_permission+0x121/0x5b0 [ 3328.030184][T23557] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.036432][T23557] ? security_inode_permission+0xc5/0xf0 [ 3328.042064][T23557] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.049436][T23557] ? ext4_mknod+0x4e0/0x4e0 [ 3328.053946][T23557] lookup_open.isra.0+0xf19/0x1300 [ 3328.059060][T23557] ? hashlen_string+0xf0/0xf0 [ 3328.063740][T23557] path_openat+0x9b3/0x27f0 [ 3328.068254][T23557] ? path_lookupat+0x860/0x860 [ 3328.073017][T23557] ? alloc_pages+0x194/0x2a0 [ 3328.077617][T23557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.083593][T23557] do_filp_open+0x1aa/0x400 [ 3328.088100][T23557] ? may_open_dev+0xf0/0xf0 [ 3328.092602][T23557] ? alloc_fd+0x2f0/0x670 [ 3328.096931][T23557] ? rwlock_bug.part.0+0x90/0x90 [ 3328.101870][T23557] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3328.108117][T23557] ? _find_next_bit+0x1e3/0x260 [ 3328.112972][T23557] ? _raw_spin_unlock+0x1a/0x30 [ 3328.117830][T23557] ? alloc_fd+0x2f0/0x670 [ 3328.122165][T23557] do_sys_openat2+0x16d/0x420 [ 3328.126844][T23557] ? build_open_flags+0x6f0/0x6f0 [ 3328.131875][T23557] ? __context_tracking_exit+0x9f/0xb0 [ 3328.137335][T23557] ? lock_downgrade+0x6e0/0x6e0 [ 3328.142200][T23557] __x64_sys_openat+0x13f/0x1f0 [ 3328.147064][T23557] ? __ia32_sys_open+0x1c0/0x1c0 [ 3328.152008][T23557] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3328.158004][T23557] ? syscall_enter_from_user_mode+0x21/0x70 [ 3328.163902][T23557] do_syscall_64+0x35/0xb0 [ 3328.168339][T23557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3328.174248][T23557] RIP: 0033:0x4196d4 [ 3328.178155][T23557] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3328.197766][T23557] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3328.206184][T23557] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3328.214153][T23557] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3328.222120][T23557] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3328.230088][T23557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3328.238071][T23557] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3328.246048][T23559] CPU: 1 PID: 23559 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3328.247930][ T1499] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3328.254823][T23559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3328.254840][T23559] Call Trace: [ 3328.254848][T23559] dump_stack_lvl+0xcd/0x134 [ 3328.262466][T28575] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3328.272466][T23559] should_fail.cold+0x5/0xa [ 3328.272501][T23559] ? ima_alloc_init_template+0x199/0x750 [ 3328.298011][T23559] should_failslab+0x5/0x10 [ 3328.302537][T23559] __kmalloc+0x72/0x310 [ 3328.306714][T23559] ima_alloc_init_template+0x199/0x750 [ 3328.312200][T23559] ima_store_measurement+0x1d7/0x5a0 [ 3328.317508][T23559] ? ima_collect_measurement+0x570/0x570 [ 3328.323339][T23559] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.329704][T23559] ? d_absolute_path+0x10f/0x170 [ 3328.334694][T23559] ? kmem_cache_alloc+0x2d4/0x360 [ 3328.339737][T23559] process_measurement+0x11fb/0x17e0 [ 3328.345133][T23559] ? mmap_violation_check+0x1e0/0x1e0 [ 3328.350562][T23559] ? tomoyo_path_number_perm+0x590/0x590 [ 3328.356214][T23559] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.362308][T23559] ? find_held_lock+0x2d/0x110 [ 3328.367244][T23559] ? aa_get_task_label+0x211/0x550 [ 3328.372385][T23559] ? lock_downgrade+0x6e0/0x6e0 [ 3328.377360][T23559] ? irqentry_enter+0x28/0x50 [ 3328.382037][T23559] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3328.388092][T23559] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3328.394237][T23559] ? aa_get_task_label+0x23a/0x550 [ 3328.399383][T23559] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.405643][T23559] ? apparmor_task_getsecid+0xc2/0x110 [ 3328.411102][T23559] ima_file_check+0xb1/0x100 [ 3328.415697][T23559] ? process_measurement+0x17e0/0x17e0 [ 3328.421155][T23559] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3328.426688][T23559] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.432937][T23559] ? may_open+0x1f6/0x420 [ 3328.437252][T23559] path_openat+0x15ca/0x27f0 [ 3328.441833][T23559] ? path_lookupat+0x860/0x860 [ 3328.446741][T23559] ? mark_lock+0xef/0x17b0 [ 3328.451155][T23559] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.457137][T23559] do_filp_open+0x1aa/0x400 [ 3328.461653][T23559] ? may_open_dev+0xf0/0xf0 [ 3328.466177][T23559] ? alloc_fd+0x2f0/0x670 [ 3328.470526][T23559] ? rwlock_bug.part.0+0x90/0x90 [ 3328.475509][T23559] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3328.481847][T23559] ? _find_next_bit+0x1e3/0x260 [ 3328.486715][T23559] ? _raw_spin_unlock+0x1a/0x30 [ 3328.491564][T23559] ? alloc_fd+0x2f0/0x670 [ 3328.495909][T23559] do_sys_openat2+0x16d/0x420 [ 3328.500598][T23559] ? build_open_flags+0x6f0/0x6f0 [ 3328.505610][T23559] ? __context_tracking_exit+0x9f/0xb0 [ 3328.511163][T23559] ? lock_downgrade+0x6e0/0x6e0 [ 3328.516002][T23559] __x64_sys_openat+0x13f/0x1f0 [ 3328.521751][T23559] ? __ia32_sys_open+0x1c0/0x1c0 [ 3328.526682][T23559] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3328.532668][T23559] ? syscall_enter_from_user_mode+0x21/0x70 [ 3328.538556][T23559] do_syscall_64+0x35/0xb0 [ 3328.542961][T23559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3328.548850][T23559] RIP: 0033:0x4196d4 [ 3328.552742][T23559] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3328.572424][T23559] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3328.580923][T23559] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3328.589011][T23559] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3328.597083][T23559] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3328.605044][T23559] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3328.613003][T23559] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3328.630193][T28967] usb 6-1: can't set config #1, error -71 00:22:44 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0}) 00:22:44 executing program 1 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:44 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40007c080000020058559d74f373bc5148923748b66d850000000000000600"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3328.636564][ T33] audit: type=1804 audit(1629937364.049:51): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723039303233393037372F73797A6B616C6C65722E5A45364735502F353839302F48C7C060 dev="sda1" ino=15146 res=0 errno=0 [ 3328.650541][T28967] usb 6-1: USB disconnect, device number 24 00:22:44 executing program 0 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3328.743906][T23569] FAULT_INJECTION: forcing a failure. [ 3328.743906][T23569] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.756847][T23569] CPU: 0 PID: 23569 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3328.765634][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3328.775702][T23569] Call Trace: [ 3328.778996][T23569] dump_stack_lvl+0xcd/0x134 [ 3328.783610][T23569] should_fail.cold+0x5/0xa [ 3328.788131][T23569] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3328.791574][T23572] FAULT_INJECTION: forcing a failure. [ 3328.791574][T23572] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.793865][T23569] should_failslab+0x5/0x10 [ 3328.793900][T23569] __kmalloc+0x72/0x310 [ 3328.815096][T23569] ? lock_chain_count+0x20/0x20 [ 3328.819947][T23569] tomoyo_realpath_from_path+0xc3/0x620 [ 3328.825585][T23569] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3328.831840][T23569] tomoyo_check_open_permission+0x272/0x380 [ 3328.837745][T23569] ? tomoyo_path_number_perm+0x590/0x590 [ 3328.843381][T23569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.849360][T23569] ? path_get+0x5d/0x80 [ 3328.853516][T23569] ? lock_downgrade+0x6e0/0x6e0 [ 3328.858362][T23569] ? do_raw_spin_lock+0x120/0x2b0 [ 3328.863385][T23569] tomoyo_file_open+0xa3/0xd0 [ 3328.868066][T23569] security_file_open+0x52/0x4f0 [ 3328.873002][T23569] do_dentry_open+0x34e/0x1110 [ 3328.877770][T23569] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3328.884018][T23569] ? may_open+0x1f6/0x420 [ 3328.888346][T23569] path_openat+0x1c23/0x27f0 [ 3328.892935][T23569] ? path_lookupat+0x860/0x860 [ 3328.897702][T23569] ? mark_lock+0xef/0x17b0 [ 3328.902126][T23569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.908129][T23569] do_filp_open+0x1aa/0x400 [ 3328.912629][T23569] ? may_open_dev+0xf0/0xf0 [ 3328.917134][T23569] ? alloc_fd+0x2f0/0x670 [ 3328.921468][T23569] ? rwlock_bug.part.0+0x90/0x90 [ 3328.926401][T23569] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3328.932646][T23569] ? _find_next_bit+0x1e3/0x260 [ 3328.937505][T23569] ? _raw_spin_unlock+0x1a/0x30 [ 3328.942359][T23569] ? alloc_fd+0x2f0/0x670 [ 3328.946703][T23569] do_sys_openat2+0x16d/0x420 [ 3328.951385][T23569] ? build_open_flags+0x6f0/0x6f0 [ 3328.956511][T23569] ? __context_tracking_exit+0x9f/0xb0 [ 3328.961976][T23569] ? lock_downgrade+0x6e0/0x6e0 [ 3328.966910][T23569] __x64_sys_openat+0x13f/0x1f0 [ 3328.971767][T23569] ? __ia32_sys_open+0x1c0/0x1c0 [ 3328.976711][T23569] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3328.982688][T23569] ? syscall_enter_from_user_mode+0x21/0x70 [ 3328.988597][T23569] do_syscall_64+0x35/0xb0 [ 3328.993018][T23569] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3328.998916][T23569] RIP: 0033:0x4196d4 [ 3329.002805][T23569] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3329.022409][T23569] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3329.030840][T23569] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3329.038981][T23569] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3329.047034][T23569] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3329.054998][T23569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3329.062979][T23569] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3329.071383][T23572] CPU: 1 PID: 23572 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3329.071525][T23569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3329.080151][T23572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.080167][T23572] Call Trace: [ 3329.080178][T23572] dump_stack_lvl+0xcd/0x134 [ 3329.104843][T23572] should_fail.cold+0x5/0xa [ 3329.109384][T23572] ? ima_write_template_field_data+0x47/0x1c0 [ 3329.115622][T23572] should_failslab+0x5/0x10 [ 3329.120181][T23572] __kmalloc+0x72/0x310 [ 3329.124360][T23572] ? ima_alloc_init_template+0x199/0x750 [ 3329.130016][T23572] ima_write_template_field_data+0x47/0x1c0 [ 3329.135941][T23572] ima_eventdigest_init_common+0xed/0x250 [ 3329.140626][T23575] FAULT_INJECTION: forcing a failure. [ 3329.140626][T23575] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.141761][T23572] ? ima_write_template_field_data+0x1c0/0x1c0 [ 3329.141798][T23572] ? lock_acquire+0x19d/0x4d0 [ 3329.165250][T23572] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3329.170815][T23572] ima_alloc_init_template+0x39e/0x750 [ 3329.176281][T23572] ima_store_measurement+0x1d7/0x5a0 [ 3329.181591][T23572] ? ima_collect_measurement+0x570/0x570 [ 3329.187405][T23572] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3329.193653][T23572] ? d_absolute_path+0x10f/0x170 [ 3329.198600][T23572] ? kmem_cache_alloc+0x2d4/0x360 [ 3329.203629][T23572] process_measurement+0x11fb/0x17e0 [ 3329.208916][T23572] ? mmap_violation_check+0x1e0/0x1e0 [ 3329.214317][T23572] ? tomoyo_path_number_perm+0x590/0x590 [ 3329.219953][T23572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.225932][T23572] ? find_held_lock+0x2d/0x110 [ 3329.230802][T23572] ? aa_get_task_label+0x211/0x550 [ 3329.235918][T23572] ? lock_downgrade+0x6e0/0x6e0 [ 3329.240799][T23572] ? fsnotify+0x1050/0x1050 [ 3329.245300][T23572] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3329.250847][T23572] ? path_get+0x5d/0x80 [ 3329.255006][T23572] ? aa_get_task_label+0x23a/0x550 [ 3329.260125][T23572] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3329.266374][T23572] ? apparmor_task_getsecid+0xc2/0x110 [ 3329.271843][T23572] ima_file_check+0xb1/0x100 [ 3329.276436][T23572] ? process_measurement+0x17e0/0x17e0 [ 3329.281920][T23572] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3329.287556][T23572] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3329.293803][T23572] ? may_open+0x1f6/0x420 [ 3329.298131][T23572] path_openat+0x15ca/0x27f0 [ 3329.302726][T23572] ? path_lookupat+0x860/0x860 [ 3329.307513][T23572] ? mark_lock+0xef/0x17b0 [ 3329.311932][T23572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.317911][T23572] do_filp_open+0x1aa/0x400 [ 3329.322430][T23572] ? may_open_dev+0xf0/0xf0 [ 3329.326937][T23572] ? alloc_fd+0x2f0/0x670 [ 3329.331271][T23572] ? rwlock_bug.part.0+0x90/0x90 [ 3329.336301][T23572] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3329.342546][T23572] ? _find_next_bit+0x1e3/0x260 [ 3329.347406][T23572] ? _raw_spin_unlock+0x1a/0x30 [ 3329.352262][T23572] ? alloc_fd+0x2f0/0x670 [ 3329.356594][T23572] do_sys_openat2+0x16d/0x420 [ 3329.361288][T23572] ? build_open_flags+0x6f0/0x6f0 [ 3329.366343][T23572] ? __context_tracking_exit+0x9f/0xb0 [ 3329.371802][T23572] ? lock_downgrade+0x6e0/0x6e0 [ 3329.376651][T23572] __x64_sys_openat+0x13f/0x1f0 [ 3329.381594][T23572] ? __ia32_sys_open+0x1c0/0x1c0 [ 3329.386535][T23572] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3329.392529][T23572] ? syscall_enter_from_user_mode+0x21/0x70 [ 3329.398421][T23572] do_syscall_64+0x35/0xb0 [ 3329.402931][T23572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3329.408839][T23572] RIP: 0033:0x4196d4 [ 3329.412751][T23572] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3329.432392][T23572] RSP: 002b:00007f5c0905acc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3329.440830][T23572] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3329.449075][T23572] RDX: 00000000000021f2 RSI: 00007f5c0905ad60 RDI: 00000000ffffff9c [ 3329.457060][T23572] RBP: 00007f5c0905ad60 R08: 0000000000000000 R09: 0000000000000000 [ 3329.465059][T23572] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000021f2 [ 3329.473037][T23572] R13: 00007ffce4d3635f R14: 00007f5c0905b300 R15: 0000000000022000 [ 3329.481022][T23575] CPU: 0 PID: 23575 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 00:22:44 executing program 1 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3329.489668][ T33] audit: type=1800 audit(1629937364.489:52): pid=23569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15135 res=0 errno=0 [ 3329.489801][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.489817][T23575] Call Trace: [ 3329.489825][T23575] dump_stack_lvl+0xcd/0x134 [ 3329.489856][T23575] should_fail.cold+0x5/0xa [ 3329.489878][T23575] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3329.489905][T23575] should_failslab+0x5/0x10 [ 3329.489934][T23575] __kmalloc+0x72/0x310 00:22:44 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x500, 0x0, 0x0, 0x0}) [ 3329.489962][T23575] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3329.489987][T23575] tomoyo_encode+0x28/0x50 [ 3329.490010][T23575] tomoyo_realpath_from_path+0x186/0x620 [ 3329.490037][T23575] tomoyo_check_open_permission+0x272/0x380 [ 3329.569219][T23575] ? tomoyo_path_number_perm+0x590/0x590 [ 3329.574873][T23575] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.580874][T23575] ? path_get+0x5d/0x80 [ 3329.585064][T23575] ? lock_downgrade+0x6e0/0x6e0 [ 3329.589927][T23575] ? do_raw_spin_lock+0x120/0x2b0 [ 3329.594964][T23575] tomoyo_file_open+0xa3/0xd0 [ 3329.599663][T23575] security_file_open+0x52/0x4f0 [ 3329.604615][T23575] do_dentry_open+0x34e/0x1110 [ 3329.609401][T23575] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3329.615666][T23575] ? may_open+0x1f6/0x420 [ 3329.620063][T23575] path_openat+0x1c23/0x27f0 [ 3329.624670][T23575] ? path_lookupat+0x860/0x860 [ 3329.629445][T23575] ? mark_lock+0xef/0x17b0 [ 3329.633900][T23575] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.640006][T23575] do_filp_open+0x1aa/0x400 00:22:45 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000001c0)) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000100)=""/137) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="8d4333e9000000402505a8a440000102030109021b000101e60003090400060207010000090501020000f5fe0031f1d456b7d343b82dcc655bbe83bb9f138c0ae8e952b5ab57c9"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:45 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0}) [ 3329.644531][T23575] ? may_open_dev+0xf0/0xf0 [ 3329.649052][T23575] ? alloc_fd+0x2f0/0x670 [ 3329.653399][T23575] ? rwlock_bug.part.0+0x90/0x90 [ 3329.658354][T23575] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3329.664791][T23575] ? _find_next_bit+0x1e3/0x260 [ 3329.669756][T23575] ? _raw_spin_unlock+0x1a/0x30 [ 3329.674632][T23575] ? alloc_fd+0x2f0/0x670 [ 3329.679077][T23575] do_sys_openat2+0x16d/0x420 [ 3329.683784][T23575] ? build_open_flags+0x6f0/0x6f0 [ 3329.688848][T23575] ? __context_tracking_exit+0x9f/0xb0 [ 3329.694496][T23575] ? lock_downgrade+0x6e0/0x6e0 [ 3329.699450][T23575] __x64_sys_openat+0x13f/0x1f0 [ 3329.704327][T23575] ? __ia32_sys_open+0x1c0/0x1c0 [ 3329.709391][T23575] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3329.715403][T23575] ? syscall_enter_from_user_mode+0x21/0x70 [ 3329.721315][T23575] do_syscall_64+0x35/0xb0 [ 3329.725759][T23575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3329.731786][T23575] RIP: 0033:0x4196d4 [ 3329.735691][T23575] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3329.755493][T23575] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3329.764013][T23575] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3329.772091][T23575] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3329.780112][T23575] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3329.788195][T23575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3329.790157][ T33] audit: type=1804 audit(1629937365.209:53): pid=23572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723039303233393037372F73797A6B616C6C65722E5A45364735502F353839312F48C7C060 dev="sda1" ino=15148 res=0 errno=0 [ 3329.796179][T23575] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3329.835249][T23575] ERROR: Out of memory at tomoyo_realpath_from_path. 00:22:45 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x600, 0x0, 0x0, 0x0}) 00:22:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3329.854408][ T33] audit: type=1800 audit(1629937365.269:54): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15136 res=0 errno=0 00:22:45 executing program 1 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3329.909055][T18465] usb 3-1: device descriptor read/64, error -71 00:22:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x21f2) 00:22:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x21f2) [ 3329.995450][T23600] FAULT_INJECTION: forcing a failure. [ 3329.995450][T23600] name failslab, interval 1, probability 0, space 0, times 0 [ 3330.008210][T23600] CPU: 0 PID: 23600 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3330.016990][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3330.027062][T23600] Call Trace: [ 3330.030353][T23600] dump_stack_lvl+0xcd/0x134 [ 3330.034997][T23600] should_fail.cold+0x5/0xa [ 3330.039605][T23600] ? integrity_inode_get+0x5a/0x270 00:22:45 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x21f2) [ 3330.044823][T23600] should_failslab+0x5/0x10 [ 3330.049346][T23600] kmem_cache_alloc+0x5b/0x360 [ 3330.054132][T23600] ? ima_get_action+0x7a/0xa0 [ 3330.058832][T23600] integrity_inode_get+0x5a/0x270 [ 3330.063873][T23600] process_measurement+0x33d/0x17e0 [ 3330.069095][T23600] ? mmap_violation_check+0x1e0/0x1e0 [ 3330.074503][T23600] ? tomoyo_path_number_perm+0x590/0x590 [ 3330.080175][T23600] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3330.086169][T23600] ? find_held_lock+0x2d/0x110 [ 3330.090983][T23600] ? aa_get_task_label+0x211/0x550 [ 3330.096117][T23600] ? lock_downgrade+0x6e0/0x6e0 [ 3330.100978][T23600] ? fsnotify+0x1050/0x1050 [ 3330.105496][T23600] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3330.111059][T23600] ? path_get+0x5d/0x80 [ 3330.115230][T23600] ? aa_get_task_label+0x23a/0x550 [ 3330.120363][T23600] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3330.126625][T23600] ? apparmor_task_getsecid+0xc2/0x110 [ 3330.132629][T23600] ima_file_check+0xb1/0x100 [ 3330.137239][T23600] ? process_measurement+0x17e0/0x17e0 [ 3330.142721][T23600] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3330.148292][T23600] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3330.154598][T23600] ? may_open+0x1f6/0x420 [ 3330.158920][T23600] path_openat+0x15ca/0x27f0 [ 3330.163522][T23600] ? path_lookupat+0x860/0x860 [ 3330.168541][T23600] ? mark_lock+0xef/0x17b0 [ 3330.172963][T23600] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3330.179036][T23600] do_filp_open+0x1aa/0x400 [ 3330.183842][T23600] ? may_open_dev+0xf0/0xf0 [ 3330.188336][T23600] ? alloc_fd+0x2f0/0x670 [ 3330.192657][T23600] ? rwlock_bug.part.0+0x90/0x90 [ 3330.197586][T23600] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3330.203924][T23600] ? _find_next_bit+0x1e3/0x260 [ 3330.208785][T23600] ? _raw_spin_unlock+0x1a/0x30 [ 3330.213629][T23600] ? alloc_fd+0x2f0/0x670 [ 3330.217983][T23600] do_sys_openat2+0x16d/0x420 [ 3330.222671][T23600] ? build_open_flags+0x6f0/0x6f0 [ 3330.227692][T23600] ? __context_tracking_exit+0x9f/0xb0 [ 3330.233228][T23600] ? lock_downgrade+0x6e0/0x6e0 [ 3330.238069][T23600] __x64_sys_openat+0x13f/0x1f0 [ 3330.242938][T23600] ? __ia32_sys_open+0x1c0/0x1c0 [ 3330.247875][T23600] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3330.253884][T23600] ? syscall_enter_from_user_mode+0x21/0x70 [ 3330.259790][T23600] do_syscall_64+0x35/0xb0 [ 3330.264231][T23600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3330.270126][T23600] RIP: 0033:0x4196d4 [ 3330.274123][T23600] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3330.294079][T23600] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3330.302671][T23600] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3330.310664][T23600] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3330.318676][T23600] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3330.326643][T23600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3330.334629][T23600] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3330.388752][T18465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3330.398508][T18465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3330.408400][T18465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3330.428820][T28575] usb 4-1: device descriptor read/64, error -71 [ 3330.578803][ T1499] usb 5-1: device not accepting address 57, error -71 [ 3330.585908][ T1499] usb usb5-port1: attempt power cycle [ 3330.648680][T28967] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3330.658830][T18465] usb 3-1: string descriptor 0 read error: -22 [ 3330.665177][T18465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3330.674295][T18465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:22:46 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_open_dev$hidraw(&(0x7f00000006c0), 0x81, 0x20800) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001800)={0x14, &(0x7f0000001780)={0x0, 0x23, 0x51, {0x51, 0x0, "c91452d4cc365e54badc21c3d355d9d5e4dd12df3ee7caf3d7161ceadcf4beaa1f8f484513c37a88b142f5ccfae105410f06eadbe7c82533ae4a4767a95e61a5b61dfb7f2d9c3595bf969943f20171"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001900)={0x1c, &(0x7f0000001840)={0x20, 0xf, 0x3a, "4fc418bfb80a7e43408100c21551a02e0f98ea6a743bcebe68f114c30f1bd374de630d2a37b080baf11de55c98a3fa126cc8e48ef53535d64c88"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000100)={0x87, "9e8b5fb024138a42738139873d59cd5d962330bf55815e6ab447f62ceb2969ec9ff1f2bd392abbaf77a158004d9294bff08879704497a8913ffc4fceaa4b14bd8509f0faa7be402a0f741c8fbf34d77076795277907b73bf4032168c71de9ad5dc1bcc61a8c0c79b1264eca4ff8aafa077bf2b59dd99be2997299398b1936cc8d80b05bcea20bd"}) syz_usb_connect$uac1(0x2, 0xcf, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x9, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x59}, [@selector_unit={0xa, 0x24, 0x5, 0x1, 0x4, "8b1ffc7d9f"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x6, 0x2, 0xf7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x4, 0x6, {0x7, 0x25, 0x1, 0x182, 0x2c, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x2, 0x3f, 0xf9, "db7ebebf5c0747"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x3, "281abeba2c33"}, @as_header={0x7, 0x24, 0x1, 0xb8, 0x3f, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0xda, "9d1d855f8f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x6, 0x3f, 0x6, "51b1b8bdca03c3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x4, 0x3, "", "0425bd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x2, 0x43, {0x7, 0x25, 0x1, 0x1, 0x5, 0x60}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x350, 0x7, 0xf8, 0x28, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc1, "60bc7557a0784e1f53f01df23ff9e345"}]}, 0x6, [{0xcc, &(0x7f0000000340)=@string={0xcc, 0x3, "341343ac86f7f43857a21e9199be53d197f81d807b9bc972bf07bec7a399f432f763bc9729989a7ee1af10784bf346c3b7e4e4b3a296bbe3441956285f6b81cfd29423b33f5ac8b01a0ffb1f346c5acef9a00a004a985900e16c7b493510c5638d00894f034d42f71e07a3be7991c8cfc0ae06310351d4ef2f11011b6bf063b239dcc23774efec294c6d75d6d03b275eae7c9223eb71993aa3841b4d23f6e60463637fa5676ff4ec1ee44e64cfb0c9e2195b942180d1f1c8626487d61c2a2e4faa156b316e7db96d3776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0x34, &(0x7f0000000480)=@string={0x34, 0x3, "b43c66fe3dae88764caaa400f678d31dbe75d733be5f8f06331ac5d1425b4e2035f24f7c9cb3a5fdccae3e68776aab83741d"}}, {0x71, &(0x7f00000004c0)=@string={0x71, 0x3, "1e0a0da3cc94213e13febae7907438e72b0dbea8e676b08a48391d1811e794644ccf0b1b03feb9ec08686b3cd96988c98c649240021dbf637262f3c22a72112f62fbe03f911fb0666081847ea542bc1a81134619c1bd6c2e296556142c145025b5ed97e4897c99e2ed326046bc8295"}}, {0xa7, &(0x7f0000000540)=@string={0xa7, 0x3, "f633268e77ca062e1181fff623e74b665b795cdbcd0e7c8a47d2cc0415d2d31ea8e72b1818ffae052c3d19b4525c2a09f5f43d34becbf64afc6f9507229ab48cc88d649f40d4df0ad1597373aa77fed3be827c2ef8324c35843c9c8dbd2f46b8a2b26117a02a10415f0bb6537a9236d72b8e0c001e14b72e955d26ca52c246bf92ed053ab4c99bd938b407c043ceb34d92c62652c24e50a2258513a747c9ef1ca8d99e0fb6"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3801}}]}) 00:22:46 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x21f2) 00:22:46 executing program 1 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3330.930719][T18465] usb 3-1: USB disconnect, device number 113 [ 3330.949911][T28575] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3331.017263][T23622] FAULT_INJECTION: forcing a failure. [ 3331.017263][T23622] name failslab, interval 1, probability 0, space 0, times 0 [ 3331.019281][T28967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3331.029989][T23622] CPU: 1 PID: 23622 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3331.030020][T23622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3331.043656][ T1499] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3331.051613][T23622] Call Trace: [ 3331.051623][T23622] dump_stack_lvl+0xcd/0x134 [ 3331.051655][T23622] should_fail.cold+0x5/0xa [ 3331.051677][T23622] should_failslab+0x5/0x10 [ 3331.051705][T23622] __kmalloc_track_caller+0x79/0x2f0 [ 3331.093647][T23622] ? ima_collect_measurement+0x342/0x570 [ 3331.099310][T23622] krealloc+0x7e/0xd0 [ 3331.103320][T23622] ima_collect_measurement+0x342/0x570 [ 3331.108803][T23622] ? ima_get_action+0xa0/0xa0 00:22:46 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x21f2) [ 3331.113499][T23622] ? ima_get_cache_status+0x1d0/0x1d0 [ 3331.118904][T23622] process_measurement+0xd1c/0x17e0 [ 3331.124124][T23622] ? mmap_violation_check+0x1e0/0x1e0 [ 3331.129517][T23622] ? tomoyo_path_number_perm+0x590/0x590 [ 3331.135201][T23622] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3331.141225][T23622] ? find_held_lock+0x2d/0x110 [ 3331.146018][T23622] ? aa_get_task_label+0x211/0x550 [ 3331.151413][T23622] ? lock_downgrade+0x6e0/0x6e0 [ 3331.156275][T23622] ? fsnotify+0x1050/0x1050 [ 3331.159944][T28575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3331.160787][T23622] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3331.169850][T28575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3331.175317][T23622] ? path_get+0x5d/0x80 [ 3331.183412][T28575] usb 4-1: Product: syz [ 3331.187406][T23622] ? aa_get_task_label+0x23a/0x550 [ 3331.191599][T28575] usb 4-1: Manufacturer: syz [ 3331.196807][T23622] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3331.201409][T28575] usb 4-1: SerialNumber: syz [ 3331.207593][T23622] ? apparmor_task_getsecid+0xc2/0x110 [ 3331.217692][T23622] ima_file_check+0xb1/0x100 [ 3331.222307][T23622] ? process_measurement+0x17e0/0x17e0 [ 3331.227785][T23622] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3331.233524][T23622] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3331.239796][T23622] ? may_open+0x1f6/0x420 [ 3331.244143][T23622] path_openat+0x15ca/0x27f0 [ 3331.248928][T23622] ? path_lookupat+0x860/0x860 [ 3331.253702][T23622] ? mark_lock+0xef/0x17b0 [ 3331.258132][T23622] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3331.261325][T28967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3331.264296][T23622] do_filp_open+0x1aa/0x400 [ 3331.273407][T28967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3331.277791][T23622] ? may_open_dev+0xf0/0xf0 [ 3331.285874][T28967] usb 6-1: Product: syz [ 3331.290241][T23622] ? alloc_fd+0x2f0/0x670 [ 3331.290272][T23622] ? rwlock_bug.part.0+0x90/0x90 [ 3331.290299][T23622] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3331.294436][T28967] usb 6-1: Manufacturer: syz [ 3331.298751][T23622] ? _find_next_bit+0x1e3/0x260 [ 3331.298785][T23622] ? _raw_spin_unlock+0x1a/0x30 [ 3331.303799][T28967] usb 6-1: SerialNumber: syz [ 3331.310011][T23622] ? alloc_fd+0x2f0/0x670 [ 3331.310041][T23622] do_sys_openat2+0x16d/0x420 [ 3331.310070][T23622] ? build_open_flags+0x6f0/0x6f0 [ 3331.342915][T23622] ? __context_tracking_exit+0x9f/0xb0 [ 3331.348599][T23622] ? lock_downgrade+0x6e0/0x6e0 [ 3331.353494][T23622] __x64_sys_openat+0x13f/0x1f0 [ 3331.358396][T23622] ? __ia32_sys_open+0x1c0/0x1c0 [ 3331.363359][T23622] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3331.369167][ T1499] usb 5-1: device descriptor read/8, error -61 [ 3331.369375][T23622] ? syscall_enter_from_user_mode+0x21/0x70 [ 3331.369407][T23622] do_syscall_64+0x35/0xb0 [ 3331.369437][T23622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3331.391924][T23622] RIP: 0033:0x4196d4 [ 3331.395843][T23622] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3331.415898][T23622] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3331.424305][T23622] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3331.432269][T23622] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3331.440241][T23622] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3331.448260][T23622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3331.456224][T23622] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3331.466837][ T33] audit: type=1800 audit(1629937366.879:55): pid=23622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15163 res=0 errno=0 [ 3331.562061][T28575] usb 4-1: USB disconnect, device number 98 [ 3331.622192][T28967] usb 6-1: USB disconnect, device number 25 [ 3331.638963][ T1499] usb 5-1: device descriptor read/8, error -61 [ 3331.838584][T18465] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3331.918597][ T1499] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3332.089062][ T1499] usb 5-1: device descriptor read/8, error -61 [ 3332.199011][T18465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3332.208925][T18465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3332.218614][T18465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3332.359042][ T1499] usb 5-1: device descriptor read/8, error -61 [ 3332.468979][T18465] usb 3-1: string descriptor 0 read error: -22 [ 3332.475196][T18465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3332.478751][ T1499] usb usb5-port1: unable to enumerate USB device [ 3332.484574][T18465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:22:48 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000140)={0x2, "d0dda4c81c595aff7aa2d934072980da74c85e76d9d72105923a5793ad2871ab16ab95c7d30d3790ac27ac0c63ec4339390e0cd07b6c04ff67cdee2bce260e0b"}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xfd, 0xfe}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x21f2) 00:22:48 executing program 1 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x21f2) 00:22:48 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x700, 0x0, 0x0, 0x0}) [ 3332.775325][T23664] FAULT_INJECTION: forcing a failure. [ 3332.775325][T23664] name failslab, interval 1, probability 0, space 0, times 0 [ 3332.788049][T23664] CPU: 0 PID: 23664 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3332.796835][T23664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3332.806918][T23664] Call Trace: [ 3332.810208][T23664] dump_stack_lvl+0xcd/0x134 [ 3332.814821][T23664] should_fail.cold+0x5/0xa [ 3332.819376][T23664] ? audit_log_start.part.0+0x25a/0x740 [ 3332.819476][T32516] usb 3-1: USB disconnect, device number 114 [ 3332.824936][T23664] should_failslab+0x5/0x10 [ 3332.824972][T23664] kmem_cache_alloc+0x5b/0x360 [ 3332.825003][T23664] audit_log_start.part.0+0x25a/0x740 [ 3332.825027][T23664] ? audit_log_task_context+0x160/0x160 [ 3332.851225][T23664] ? audit_compare_dname_path+0x120/0x120 [ 3332.856969][T23664] ? lock_acquire+0x19d/0x4d0 [ 3332.861683][T23664] ? find_held_lock+0x2d/0x110 [ 3332.866551][T23664] audit_log_start+0x5f/0x90 [ 3332.871152][T23664] integrity_audit_message+0x100/0x450 [ 3332.876638][T23664] ? integrity_kernel_read+0xb0/0xb0 [ 3332.881946][T23664] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3332.887513][T23664] ? kfree+0x309/0x400 [ 3332.891596][T23664] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3332.897179][T23664] integrity_audit_msg+0x3d/0x50 [ 3332.902135][T23664] ima_collect_measurement+0x3d4/0x570 [ 3332.907887][T23664] ? ima_get_action+0xa0/0xa0 [ 3332.912582][T23664] ? ima_get_cache_status+0x1d0/0x1d0 [ 3332.918071][T23664] process_measurement+0xd1c/0x17e0 [ 3332.923290][T23664] ? mmap_violation_check+0x1e0/0x1e0 [ 3332.928686][T23664] ? tomoyo_path_number_perm+0x590/0x590 [ 3332.934510][T23664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3332.940622][T23664] ? find_held_lock+0x2d/0x110 [ 3332.945414][T23664] ? aa_get_task_label+0x211/0x550 [ 3332.950546][T23664] ? lock_downgrade+0x6e0/0x6e0 [ 3332.955424][T23664] ? fsnotify+0x1050/0x1050 [ 3332.959939][T23664] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3332.965501][T23664] ? path_get+0x5d/0x80 [ 3332.969673][T23664] ? aa_get_task_label+0x23a/0x550 [ 3332.975012][T23664] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3332.981274][T23664] ? apparmor_task_getsecid+0xc2/0x110 [ 3332.986752][T23664] ima_file_check+0xb1/0x100 [ 3332.991364][T23664] ? process_measurement+0x17e0/0x17e0 [ 3332.996927][T23664] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3333.002585][T23664] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3333.008932][T23664] ? may_open+0x1f6/0x420 [ 3333.013272][T23664] path_openat+0x15ca/0x27f0 [ 3333.017876][T23664] ? path_lookupat+0x860/0x860 00:22:48 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000010000000200"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x21f2) 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x21f2) 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x21f2) [ 3333.022664][T23664] ? mark_lock+0xef/0x17b0 [ 3333.027092][T23664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3333.033091][T23664] do_filp_open+0x1aa/0x400 [ 3333.037630][T23664] ? may_open_dev+0xf0/0xf0 [ 3333.042150][T23664] ? alloc_fd+0x2f0/0x670 [ 3333.046492][T23664] ? rwlock_bug.part.0+0x90/0x90 [ 3333.051442][T23664] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3333.057706][T23664] ? _find_next_bit+0x1e3/0x260 [ 3333.062867][T23664] ? _raw_spin_unlock+0x1a/0x30 [ 3333.067740][T23664] ? alloc_fd+0x2f0/0x670 [ 3333.072095][T23664] do_sys_openat2+0x16d/0x420 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x21f2) [ 3333.076792][T23664] ? build_open_flags+0x6f0/0x6f0 [ 3333.081859][T23664] ? __context_tracking_exit+0x9f/0xb0 [ 3333.087333][T23664] ? lock_downgrade+0x6e0/0x6e0 [ 3333.092190][T23664] __x64_sys_openat+0x13f/0x1f0 [ 3333.097081][T23664] ? __ia32_sys_open+0x1c0/0x1c0 [ 3333.102039][T23664] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3333.108034][T23664] ? syscall_enter_from_user_mode+0x21/0x70 [ 3333.114035][T23664] do_syscall_64+0x35/0xb0 [ 3333.118500][T23664] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:22:48 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x21f2) [ 3333.124541][T23664] RIP: 0033:0x4196d4 [ 3333.128444][T23664] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3333.148074][T23664] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3333.156512][T23664] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3333.164501][T23664] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3333.172490][T23664] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3333.180476][T23664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3333.188465][T23664] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3333.196849][T23664] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 3333.204582][T23664] audit: out of memory in audit_log_start 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0x21f2) 00:22:48 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x43, 0x111000) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/36) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xb5, 0xfe}}}}}]}}]}}, &(0x7f0000000080)={0xfffffd6a, 0x0, 0x0, 0x0, 0x1, [{0xb, &(0x7f00000000c0)=@string={0xb, 0x3, "9bb8900f985dedc4c4"}}]}) 00:22:48 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x500, 0x0, 0x0, 0x0}) 00:22:48 executing program 1 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:48 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0x21f2) [ 3333.371979][T18465] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3333.398737][T23696] FAULT_INJECTION: forcing a failure. [ 3333.398737][T23696] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.411504][T23696] CPU: 1 PID: 23696 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3333.420290][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3333.430362][T23696] Call Trace: [ 3333.433654][T23696] dump_stack_lvl+0xcd/0x134 [ 3333.438274][T23696] should_fail.cold+0x5/0xa [ 3333.442885][T23696] ? __alloc_skb+0x20b/0x340 [ 3333.447503][T23696] should_failslab+0x5/0x10 [ 3333.452030][T23696] kmem_cache_alloc_node+0x55/0x390 [ 3333.457250][T23696] __alloc_skb+0x20b/0x340 [ 3333.461786][T23696] audit_log_start.part.0+0x27f/0x740 [ 3333.467238][T23696] ? audit_log_task_context+0x160/0x160 [ 3333.472791][T23696] ? audit_compare_dname_path+0x120/0x120 [ 3333.478517][T23696] ? lock_acquire+0x19d/0x4d0 [ 3333.483184][T23696] ? find_held_lock+0x2d/0x110 [ 3333.487940][T23696] audit_log_start+0x5f/0x90 [ 3333.492524][T23696] integrity_audit_message+0x100/0x450 [ 3333.498007][T23696] ? integrity_kernel_read+0xb0/0xb0 [ 3333.503306][T23696] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3333.508850][T23696] ? kfree+0x309/0x400 [ 3333.512913][T23696] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3333.518477][T23696] integrity_audit_msg+0x3d/0x50 [ 3333.523410][T23696] ima_collect_measurement+0x3d4/0x570 [ 3333.528874][T23696] ? ima_get_action+0xa0/0xa0 [ 3333.533985][T23696] ? ima_get_cache_status+0x1d0/0x1d0 [ 3333.539558][T23696] process_measurement+0xd1c/0x17e0 [ 3333.544768][T23696] ? mmap_violation_check+0x1e0/0x1e0 [ 3333.550137][T23696] ? tomoyo_path_number_perm+0x590/0x590 [ 3333.555850][T23696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3333.561820][T23696] ? find_held_lock+0x2d/0x110 [ 3333.566595][T23696] ? aa_get_task_label+0x211/0x550 [ 3333.571715][T23696] ? lock_downgrade+0x6e0/0x6e0 [ 3333.576553][T23696] ? fsnotify+0x1050/0x1050 [ 3333.581047][T23696] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3333.586603][T23696] ? path_get+0x5d/0x80 [ 3333.590763][T23696] ? aa_get_task_label+0x23a/0x550 [ 3333.595870][T23696] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3333.602114][T23696] ? apparmor_task_getsecid+0xc2/0x110 [ 3333.607567][T23696] ima_file_check+0xb1/0x100 [ 3333.612147][T23696] ? process_measurement+0x17e0/0x17e0 [ 3333.617611][T23696] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3333.623153][T23696] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3333.629431][T23696] ? may_open+0x1f6/0x420 [ 3333.633769][T23696] path_openat+0x15ca/0x27f0 [ 3333.638365][T23696] ? path_lookupat+0x860/0x860 [ 3333.643138][T23696] ? mark_lock+0xef/0x17b0 [ 3333.647569][T23696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3333.648452][ T1499] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3333.653546][T23696] do_filp_open+0x1aa/0x400 [ 3333.653580][T23696] ? may_open_dev+0xf0/0xf0 [ 3333.653606][T23696] ? alloc_fd+0x2f0/0x670 [ 3333.653634][T23696] ? rwlock_bug.part.0+0x90/0x90 [ 3333.679347][T23696] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3333.685615][T23696] ? _find_next_bit+0x1e3/0x260 [ 3333.690487][T23696] ? _raw_spin_unlock+0x1a/0x30 [ 3333.695445][T23696] ? alloc_fd+0x2f0/0x670 [ 3333.699769][T23696] do_sys_openat2+0x16d/0x420 [ 3333.704470][T23696] ? build_open_flags+0x6f0/0x6f0 [ 3333.709491][T23696] ? __context_tracking_exit+0x9f/0xb0 [ 3333.714992][T23696] ? lock_downgrade+0x6e0/0x6e0 [ 3333.719849][T23696] __x64_sys_openat+0x13f/0x1f0 [ 3333.724698][T23696] ? __ia32_sys_open+0x1c0/0x1c0 [ 3333.729627][T23696] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3333.736131][T23696] ? syscall_enter_from_user_mode+0x21/0x70 [ 3333.742037][T23696] do_syscall_64+0x35/0xb0 [ 3333.746444][T23696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3333.752681][T23696] RIP: 0033:0x4196d4 [ 3333.756561][T23696] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3333.776162][T23696] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3333.784594][T23696] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3333.792559][T23696] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3333.800694][T23696] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3333.808928][T23696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3333.817009][T23696] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3333.825338][T23696] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 3333.833016][T23696] audit: out of memory in audit_log_start [ 3333.918409][T32516] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3333.988382][T30893] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3334.048433][ T1499] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 3334.058440][ T1499] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3334.071281][ T1499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3334.158418][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3334.238531][ T1499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3334.247654][ T1499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.255677][ T1499] usb 5-1: Product: syz [ 3334.259896][ T1499] usb 5-1: Manufacturer: syz [ 3334.264533][ T1499] usb 5-1: SerialNumber: syz [ 3334.289710][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3334.299457][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3334.299824][T23695] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3334.309224][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3334.368512][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3334.377579][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.385606][T18465] usb 6-1: Product: syz [ 3334.389816][T18465] usb 6-1: Manufacturer: syz [ 3334.394433][T18465] usb 6-1: SerialNumber: syz [ 3334.399225][T30893] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3334.569169][T30893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3334.578343][T30893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.586347][T30893] usb 4-1: Product: syz [ 3334.590780][T30893] usb 4-1: Manufacturer: syz [ 3334.595386][T30893] usb 4-1: SerialNumber: syz [ 3334.608627][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3334.610085][ T1499] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 3334.616600][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3334.634902][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.650990][ T1499] usb 5-1: USB disconnect, device number 60 00:22:50 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x1800, 0x0, 0x0, 0x0}) [ 3334.683315][ T1499] usblp0: removed [ 3334.722500][T18465] usb 6-1: USB disconnect, device number 26 [ 3334.902001][T30893] usb 4-1: USB disconnect, device number 99 00:22:50 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x5e, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xee, 0x44}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) syz_open_dev$hidraw(&(0x7f0000000040), 0x3f000000000, 0x404080) 00:22:50 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x21f2) 00:22:50 executing program 1 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:50 executing program 4: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000080)=""/163) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0x200400) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="a0380000100000402705a88e40000102020109021b0001061ce3d265e08f105a6bc7049212c5e5aa9ec256c2c68206f5fe0000003d3882b84e00000600ab3bd40dad"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:50 executing program 3 (fault-call:0 fault-nth:0): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3334.980566][ T1499] usb 3-1: USB disconnect, device number 115 [ 3335.057032][T23757] FAULT_INJECTION: forcing a failure. [ 3335.057032][T23757] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.070082][T23757] CPU: 0 PID: 23757 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3335.078865][T23757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.088376][T18465] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3335.088923][T23757] Call Trace: [ 3335.088934][T23757] dump_stack_lvl+0xcd/0x134 [ 3335.101924][T23759] FAULT_INJECTION: forcing a failure. [ 3335.101924][T23759] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.104314][T23757] should_fail.cold+0x5/0xa [ 3335.104346][T23757] should_failslab+0x5/0x10 [ 3335.125907][T23757] __kmalloc_node_track_caller+0x7d/0x330 [ 3335.131658][T23757] ? audit_log_start.part.0+0x27f/0x740 [ 3335.137201][T23757] __alloc_skb+0xde/0x340 [ 3335.141540][T23757] audit_log_start.part.0+0x27f/0x740 [ 3335.146910][T23757] ? audit_log_task_context+0x160/0x160 [ 3335.152452][T23757] ? audit_compare_dname_path+0x120/0x120 [ 3335.158171][T23757] ? lock_acquire+0x19d/0x4d0 [ 3335.162846][T23757] ? find_held_lock+0x2d/0x110 [ 3335.167699][T23757] audit_log_start+0x5f/0x90 [ 3335.172372][T23757] integrity_audit_message+0x100/0x450 [ 3335.177920][T23757] ? integrity_kernel_read+0xb0/0xb0 [ 3335.183203][T23757] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3335.188751][T23757] ? kfree+0x309/0x400 [ 3335.192910][T23757] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3335.198460][T23757] integrity_audit_msg+0x3d/0x50 [ 3335.203401][T23757] ima_collect_measurement+0x3d4/0x570 [ 3335.208864][T23757] ? ima_get_action+0xa0/0xa0 [ 3335.213542][T23757] ? ima_get_cache_status+0x1d0/0x1d0 [ 3335.218920][T23757] process_measurement+0xd1c/0x17e0 [ 3335.224122][T23757] ? mmap_violation_check+0x1e0/0x1e0 [ 3335.229506][T23757] ? tomoyo_path_number_perm+0x590/0x590 [ 3335.235137][T23757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3335.241209][T23757] ? find_held_lock+0x2d/0x110 [ 3335.245976][T23757] ? aa_get_task_label+0x211/0x550 [ 3335.251093][T23757] ? lock_downgrade+0x6e0/0x6e0 [ 3335.255938][T23757] ? fsnotify+0x1050/0x1050 [ 3335.260438][T23757] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3335.265984][T23757] ? path_get+0x5d/0x80 [ 3335.270135][T23757] ? aa_get_task_label+0x23a/0x550 [ 3335.275258][T23757] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3335.281503][T23757] ? apparmor_task_getsecid+0xc2/0x110 [ 3335.286962][T23757] ima_file_check+0xb1/0x100 [ 3335.291558][T23757] ? process_measurement+0x17e0/0x17e0 [ 3335.297028][T23757] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3335.302576][T23757] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3335.308819][T23757] ? may_open+0x1f6/0x420 [ 3335.313148][T23757] path_openat+0x15ca/0x27f0 [ 3335.317741][T23757] ? path_lookupat+0x860/0x860 [ 3335.322507][T23757] ? mark_lock+0xef/0x17b0 [ 3335.326917][T23757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3335.332896][T23757] do_filp_open+0x1aa/0x400 [ 3335.337400][T23757] ? may_open_dev+0xf0/0xf0 [ 3335.341902][T23757] ? alloc_fd+0x2f0/0x670 [ 3335.346232][T23757] ? rwlock_bug.part.0+0x90/0x90 [ 3335.351167][T23757] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3335.357418][T23757] ? _find_next_bit+0x1e3/0x260 [ 3335.362281][T23757] ? _raw_spin_unlock+0x1a/0x30 [ 3335.367234][T23757] ? alloc_fd+0x2f0/0x670 [ 3335.371565][T23757] do_sys_openat2+0x16d/0x420 [ 3335.376250][T23757] ? build_open_flags+0x6f0/0x6f0 [ 3335.381282][T23757] ? __context_tracking_exit+0x9f/0xb0 [ 3335.386736][T23757] ? lock_downgrade+0x6e0/0x6e0 [ 3335.391582][T23757] __x64_sys_openat+0x13f/0x1f0 [ 3335.396443][T23757] ? __ia32_sys_open+0x1c0/0x1c0 [ 3335.401384][T23757] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3335.407360][T23757] ? syscall_enter_from_user_mode+0x21/0x70 [ 3335.413250][T23757] do_syscall_64+0x35/0xb0 [ 3335.417672][T23757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3335.423586][T23757] RIP: 0033:0x4196d4 [ 3335.427485][T23757] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3335.447113][T23757] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3335.455880][T23757] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3335.463941][T23757] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3335.471907][T23757] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3335.479872][T23757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3335.488407][T23757] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3335.496503][T23759] CPU: 1 PID: 23759 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3335.496608][T23757] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 3335.505275][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.505292][T23759] Call Trace: [ 3335.505299][T23759] dump_stack_lvl+0xcd/0x134 [ 3335.512941][T23757] audit: out of memory in audit_log_start [ 3335.523141][T23759] should_fail.cold+0x5/0xa [ 3335.523170][T23759] ? getname_flags.part.0+0x50/0x4f0 [ 3335.548034][T23759] should_failslab+0x5/0x10 [ 3335.552656][T23759] kmem_cache_alloc+0x5b/0x360 [ 3335.557538][T23759] getname_flags.part.0+0x50/0x4f0 [ 3335.562674][T23759] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3335.568671][T23759] getname+0x8e/0xd0 [ 3335.572583][T23759] do_sys_openat2+0xf5/0x420 [ 3335.577199][T23759] ? build_open_flags+0x6f0/0x6f0 [ 3335.582246][T23759] ? __context_tracking_exit+0x9f/0xb0 [ 3335.587717][T23759] ? lock_downgrade+0x6e0/0x6e0 [ 3335.592786][T23759] __x64_sys_openat+0x13f/0x1f0 [ 3335.597686][T23759] ? __ia32_sys_open+0x1c0/0x1c0 [ 3335.602638][T23759] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3335.608661][T23759] ? syscall_enter_from_user_mode+0x21/0x70 [ 3335.614608][T23759] do_syscall_64+0x35/0xb0 [ 3335.619048][T23759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3335.624970][T23759] RIP: 0033:0x4196d4 [ 3335.628874][T23759] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3335.648678][T23759] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 00:22:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0x21f2) 00:22:51 executing program 1 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x21f2) [ 3335.657110][T23759] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3335.665098][T23759] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3335.673082][T23759] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3335.681071][T23759] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3335.689100][T23759] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3335.718018][T23768] FAULT_INJECTION: forcing a failure. [ 3335.718018][T23768] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.730791][T23768] CPU: 0 PID: 23768 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3335.739594][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.750040][T23768] Call Trace: [ 3335.753328][T23768] dump_stack_lvl+0xcd/0x134 [ 3335.757954][T23768] should_fail.cold+0x5/0xa [ 3335.762474][T23768] ? aa_label_snxprint+0x4e4/0x910 00:22:51 executing program 3 (fault-call:0 fault-nth:1): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:51 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000200000002cb53"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b200101e6800309c0575ed51143a56e000207010000090501"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:51 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x21f2) [ 3335.767599][T23768] ? aa_label_asxprint+0x86/0x130 [ 3335.772672][T23768] should_failslab+0x5/0x10 [ 3335.777194][T23768] __kmalloc+0x72/0x310 [ 3335.781545][T23768] aa_label_asxprint+0x86/0x130 [ 3335.786596][T23768] apparmor_secid_to_secctx+0x84/0x150 [ 3335.792092][T23768] security_secid_to_secctx+0x6c/0xb0 [ 3335.797490][T23768] audit_log_task_context+0xec/0x160 [ 3335.802802][T23768] ? audit_log_format+0x110/0x110 [ 3335.807844][T23768] ? from_kuid+0x85/0xc0 [ 3335.812108][T23768] integrity_audit_message+0x24f/0x450 [ 3335.817597][T23768] ? integrity_kernel_read+0xb0/0xb0 [ 3335.822940][T23768] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3335.828511][T23768] ? kfree+0x309/0x400 [ 3335.832863][T23768] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3335.838437][T23768] integrity_audit_msg+0x3d/0x50 [ 3335.843404][T23768] ima_collect_measurement+0x3d4/0x570 [ 3335.848821][T30893] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3335.848998][T23768] ? ima_get_action+0xa0/0xa0 [ 3335.861212][T23768] ? ima_get_cache_status+0x1d0/0x1d0 [ 3335.866616][T23768] process_measurement+0xd1c/0x17e0 [ 3335.871841][T23768] ? mmap_violation_check+0x1e0/0x1e0 [ 3335.877338][T23768] ? tomoyo_path_number_perm+0x590/0x590 [ 3335.882984][T23768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3335.888976][T23768] ? find_held_lock+0x2d/0x110 [ 3335.893766][T23768] ? aa_get_task_label+0x211/0x550 [ 3335.898906][T23768] ? lock_downgrade+0x6e0/0x6e0 [ 3335.901040][T23777] FAULT_INJECTION: forcing a failure. [ 3335.901040][T23777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3335.903794][T23768] ? fsnotify+0x1050/0x1050 [ 3335.903821][T23768] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3335.903851][T23768] ? path_get+0x5d/0x80 [ 3335.903873][T23768] ? aa_get_task_label+0x23a/0x550 [ 3335.936204][T23768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3335.942555][T23768] ? apparmor_task_getsecid+0xc2/0x110 [ 3335.948026][T23768] ima_file_check+0xb1/0x100 [ 3335.952621][T23768] ? process_measurement+0x17e0/0x17e0 [ 3335.958084][T23768] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3335.963635][T23768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3335.969969][T23768] ? may_open+0x1f6/0x420 [ 3335.974406][T23768] path_openat+0x15ca/0x27f0 [ 3335.978997][T23768] ? path_lookupat+0x860/0x860 [ 3335.983773][T23768] ? irqentry_enter+0x28/0x50 [ 3335.988451][T23768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3335.994432][T23768] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3336.000412][T23768] do_filp_open+0x1aa/0x400 [ 3336.004928][T23768] ? may_open_dev+0xf0/0xf0 [ 3336.009434][T23768] ? alloc_fd+0x2f0/0x670 [ 3336.013768][T23768] ? rwlock_bug.part.0+0x90/0x90 [ 3336.018705][T23768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3336.024950][T23768] ? _find_next_bit+0x1e3/0x260 [ 3336.029809][T23768] ? _raw_spin_unlock+0x1a/0x30 [ 3336.034670][T23768] ? alloc_fd+0x2f0/0x670 [ 3336.039005][T23768] do_sys_openat2+0x16d/0x420 [ 3336.043689][T23768] ? build_open_flags+0x6f0/0x6f0 [ 3336.048716][T23768] ? __context_tracking_exit+0x9f/0xb0 [ 3336.054261][T23768] ? lock_downgrade+0x6e0/0x6e0 [ 3336.059110][T23768] __x64_sys_openat+0x13f/0x1f0 [ 3336.063965][T23768] ? __ia32_sys_open+0x1c0/0x1c0 [ 3336.068918][T23768] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3336.075173][T23768] ? syscall_enter_from_user_mode+0x21/0x70 [ 3336.081158][T23768] do_syscall_64+0x35/0xb0 [ 3336.085754][T23768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3336.091749][T23768] RIP: 0033:0x4196d4 [ 3336.095671][T23768] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3336.115277][T23768] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3336.123689][T23768] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3336.131661][T23768] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3336.139628][T23768] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3336.147594][T23768] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3336.155561][T23768] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3336.163550][T23777] CPU: 1 PID: 23777 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3336.163833][T23768] audit: error in audit_log_task_context [ 3336.172408][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3336.172424][T23777] Call Trace: [ 3336.172432][T23777] dump_stack_lvl+0xcd/0x134 [ 3336.195995][T23777] should_fail.cold+0x5/0xa [ 3336.200517][T23777] strncpy_from_user+0x34/0x3e0 [ 3336.205401][T23777] getname_flags.part.0+0x95/0x4f0 [ 3336.208007][ T33] audit: type=1800 audit(1629937371.129:56): pid=23768 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13942 res=0 errno=0 [ 3336.210537][T23777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3336.210566][T23777] getname+0x8e/0xd0 [ 3336.210591][T23777] do_sys_openat2+0xf5/0x420 [ 3336.244617][T23777] ? build_open_flags+0x6f0/0x6f0 [ 3336.249763][T23777] ? __context_tracking_exit+0x9f/0xb0 [ 3336.255242][T23777] ? lock_downgrade+0x6e0/0x6e0 [ 3336.260104][T23777] __x64_sys_openat+0x13f/0x1f0 [ 3336.264971][T23777] ? __ia32_sys_open+0x1c0/0x1c0 [ 3336.269923][T23777] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3336.275917][T23777] ? syscall_enter_from_user_mode+0x21/0x70 [ 3336.281828][T23777] do_syscall_64+0x35/0xb0 [ 3336.286257][T23777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3336.292153][T23777] RIP: 0033:0x4196d4 [ 3336.296084][T23777] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3336.315770][T23777] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3336.324950][T23777] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3336.332926][T23777] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3336.340989][T23777] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3336.348963][T23777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3336.356920][T23777] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3336.508257][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3336.588172][T30893] usb 5-1: device descriptor read/64, error 18 [ 3336.678595][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3336.687637][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.688150][ T1499] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3336.695796][T18465] usb 6-1: Product: syz [ 3336.707629][T18465] usb 6-1: Manufacturer: syz [ 3336.712516][T18465] usb 6-1: SerialNumber: syz 00:22:52 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x1f00, 0x0, 0x0, 0x0}) 00:22:52 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x21f2) 00:22:52 executing program 1 (fault-call:0 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:52 executing program 3 (fault-call:0 fault-nth:2): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3337.004164][ T33] audit: type=1800 audit(1629937372.419:57): pid=23786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15200 res=0 errno=0 [ 3337.029584][T23786] FAULT_INJECTION: forcing a failure. [ 3337.029584][T23786] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.033690][T30893] usb 5-1: device descriptor read/64, error 18 [ 3337.042361][T23786] CPU: 0 PID: 23786 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3337.049477][T18465] usb 6-1: USB disconnect, device number 27 [ 3337.057731][T23786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3337.057749][T23786] Call Trace: [ 3337.057758][T23786] dump_stack_lvl+0xcd/0x134 [ 3337.057791][T23786] should_fail.cold+0x5/0xa [ 3337.086157][T23786] ? ima_d_path+0x4d/0x1f0 [ 3337.090624][T23786] should_failslab+0x5/0x10 [ 3337.095153][T23786] kmem_cache_alloc+0x5b/0x360 [ 3337.099934][T23786] ima_d_path+0x4d/0x1f0 [ 3337.104294][T23786] process_measurement+0x137d/0x17e0 [ 3337.109229][T23787] FAULT_INJECTION: forcing a failure. [ 3337.109229][T23787] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.109609][T23786] ? mmap_violation_check+0x1e0/0x1e0 [ 3337.127546][T23786] ? tomoyo_path_number_perm+0x590/0x590 [ 3337.133189][T23786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3337.139173][T23786] ? find_held_lock+0x2d/0x110 [ 3337.144038][T23786] ? aa_get_task_label+0x211/0x550 [ 3337.149157][T23786] ? lock_downgrade+0x6e0/0x6e0 [ 3337.154023][T23786] ? fsnotify+0x1050/0x1050 [ 3337.158523][T23786] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3337.164074][T23786] ? path_get+0x5d/0x80 [ 3337.168243][T23786] ? aa_get_task_label+0x23a/0x550 [ 3337.173552][T23786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3337.179814][T23786] ? apparmor_task_getsecid+0xc2/0x110 [ 3337.185281][T23786] ima_file_check+0xb1/0x100 [ 3337.189883][T23786] ? process_measurement+0x17e0/0x17e0 [ 3337.195363][T23786] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3337.200925][T23786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3337.207171][T23786] ? may_open+0x1f6/0x420 [ 3337.211514][T23786] path_openat+0x15ca/0x27f0 [ 3337.216106][T23786] ? path_lookupat+0x860/0x860 [ 3337.220874][T23786] ? mark_lock+0xef/0x17b0 [ 3337.225286][T23786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3337.231277][T23786] do_filp_open+0x1aa/0x400 [ 3337.235780][T23786] ? may_open_dev+0xf0/0xf0 [ 3337.240288][T23786] ? alloc_fd+0x2f0/0x670 [ 3337.244621][T23786] ? rwlock_bug.part.0+0x90/0x90 [ 3337.249558][T23786] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3337.255806][T23786] ? _find_next_bit+0x1e3/0x260 [ 3337.260662][T23786] ? _raw_spin_unlock+0x1a/0x30 [ 3337.265619][T23786] ? alloc_fd+0x2f0/0x670 [ 3337.270039][T23786] do_sys_openat2+0x16d/0x420 [ 3337.274772][T23786] ? build_open_flags+0x6f0/0x6f0 [ 3337.279808][T23786] ? __context_tracking_exit+0x9f/0xb0 [ 3337.285266][T23786] ? lock_downgrade+0x6e0/0x6e0 [ 3337.290115][T23786] __x64_sys_openat+0x13f/0x1f0 [ 3337.294971][T23786] ? __ia32_sys_open+0x1c0/0x1c0 [ 3337.299912][T23786] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3337.305889][T23786] ? syscall_enter_from_user_mode+0x21/0x70 [ 3337.311793][T23786] do_syscall_64+0x35/0xb0 [ 3337.316239][T23786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3337.322139][T23786] RIP: 0033:0x4196d4 [ 3337.326027][T23786] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3337.345635][T23786] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3337.354228][T23786] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3337.362196][T23786] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3337.370257][T23786] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3337.378235][T23786] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3337.386201][T23786] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3337.394264][T23787] CPU: 1 PID: 23787 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3337.403046][T23787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3337.408166][ T1499] usb 3-1: config index 0 descriptor too short (expected 8219, got 27) [ 3337.413103][T23787] Call Trace: [ 3337.413115][T23787] dump_stack_lvl+0xcd/0x134 [ 3337.421387][ T1499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3337.424614][T23787] should_fail.cold+0x5/0xa [ 3337.429221][ T1499] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3337.439221][T23787] ? __alloc_file+0x21/0x280 [ 3337.439249][T23787] should_failslab+0x5/0x10 [ 3337.462116][T23787] kmem_cache_alloc+0x5b/0x360 [ 3337.466934][T23787] __alloc_file+0x21/0x280 [ 3337.471369][T23787] alloc_empty_file+0x6d/0x170 [ 3337.476149][T23787] path_openat+0xde/0x27f0 [ 3337.480590][T23787] ? __lock_acquire+0x162f/0x54a0 [ 3337.485737][T23787] ? path_lookupat+0x860/0x860 [ 3337.490512][T23787] ? mark_lock+0xef/0x17b0 [ 3337.495024][T23787] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3337.501019][T23787] do_filp_open+0x1aa/0x400 [ 3337.505573][T23787] ? may_open_dev+0xf0/0xf0 [ 3337.510097][T23787] ? alloc_fd+0x2f0/0x670 [ 3337.514445][T23787] ? lock_downgrade+0x6e0/0x6e0 [ 3337.519396][T23787] ? rwlock_bug.part.0+0x90/0x90 [ 3337.524348][T23787] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3337.530754][T23787] ? _find_next_bit+0x1e3/0x260 [ 3337.535600][T23787] ? _raw_spin_unlock+0x1a/0x30 [ 3337.540447][T23787] ? alloc_fd+0x2f0/0x670 [ 3337.544795][T23787] do_sys_openat2+0x16d/0x420 [ 3337.549465][T23787] ? build_open_flags+0x6f0/0x6f0 [ 3337.554482][T23787] ? __context_tracking_exit+0x9f/0xb0 [ 3337.559939][T23787] ? lock_downgrade+0x6e0/0x6e0 [ 3337.564797][T23787] __x64_sys_openat+0x13f/0x1f0 [ 3337.569654][T23787] ? __ia32_sys_open+0x1c0/0x1c0 [ 3337.574580][T23787] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3337.580548][T23787] ? syscall_enter_from_user_mode+0x21/0x70 [ 3337.586431][T23787] do_syscall_64+0x35/0xb0 [ 3337.590839][T23787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3337.596903][T23787] RIP: 0033:0x4196d4 [ 3337.600787][T23787] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3337.620489][T23787] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3337.628898][T23787] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3337.636862][T23787] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3337.645083][T23787] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3337.653045][T23787] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3337.661012][T23787] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3337.708628][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3337.714841][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3337.724255][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.828163][T30893] usb 5-1: new high-speed USB device number 62 using dummy_hcd 00:22:53 executing program 4: syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x3f) 00:22:53 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x21f2) 00:22:53 executing program 1 (fault-call:0 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:53 executing program 3 (fault-call:0 fault-nth:3): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:53 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="1201000000000040250101e68003000400007600f5fe4800b66a6a0000000000000000000000001da21625"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3337.979770][ T1499] usb 3-1: USB disconnect, device number 116 [ 3338.038238][T18465] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3338.079764][T23814] FAULT_INJECTION: forcing a failure. [ 3338.079764][T23814] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.092503][T23814] CPU: 0 PID: 23814 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3338.101289][T23814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.106659][ T33] audit: type=1800 audit(1629937373.519:58): pid=23817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15266 res=0 errno=0 [ 3338.111442][T23814] Call Trace: [ 3338.111453][T23814] dump_stack_lvl+0xcd/0x134 [ 3338.111487][T23814] should_fail.cold+0x5/0xa [ 3338.111510][T23814] ? security_file_alloc+0x34/0x170 [ 3338.111536][T23814] should_failslab+0x5/0x10 [ 3338.111563][T23814] kmem_cache_alloc+0x5b/0x360 [ 3338.111593][T23814] security_file_alloc+0x34/0x170 [ 3338.133238][T23817] FAULT_INJECTION: forcing a failure. [ 3338.133238][T23817] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.136004][T23814] __alloc_file+0xd8/0x280 [ 3338.136037][T23814] alloc_empty_file+0x6d/0x170 [ 3338.136062][T23814] path_openat+0xde/0x27f0 [ 3338.136086][T23814] ? __lock_acquire+0x162f/0x54a0 [ 3338.195902][T23814] ? path_lookupat+0x860/0x860 [ 3338.200671][T23814] ? mark_lock+0xef/0x17b0 [ 3338.205095][T23814] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3338.211090][T23814] do_filp_open+0x1aa/0x400 [ 3338.215703][T23814] ? may_open_dev+0xf0/0xf0 [ 3338.220207][T23814] ? alloc_fd+0x2f0/0x670 [ 3338.224538][T23814] ? lock_downgrade+0x6e0/0x6e0 [ 3338.229384][T23814] ? rwlock_bug.part.0+0x90/0x90 [ 3338.234322][T23814] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3338.240570][T23814] ? _find_next_bit+0x1e3/0x260 [ 3338.245426][T23814] ? _raw_spin_unlock+0x1a/0x30 [ 3338.250284][T23814] ? alloc_fd+0x2f0/0x670 [ 3338.254618][T23814] do_sys_openat2+0x16d/0x420 [ 3338.259297][T23814] ? build_open_flags+0x6f0/0x6f0 [ 3338.264326][T23814] ? __context_tracking_exit+0x9f/0xb0 [ 3338.269789][T23814] ? lock_downgrade+0x6e0/0x6e0 [ 3338.274655][T23814] __x64_sys_openat+0x13f/0x1f0 [ 3338.279512][T23814] ? __ia32_sys_open+0x1c0/0x1c0 [ 3338.284458][T23814] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3338.290456][T23814] ? syscall_enter_from_user_mode+0x21/0x70 [ 3338.296439][T23814] do_syscall_64+0x35/0xb0 [ 3338.300861][T23814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3338.306764][T23814] RIP: 0033:0x4196d4 [ 3338.310656][T23814] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3338.330362][T23814] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3338.338878][T23814] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3338.346951][T23814] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3338.355036][T23814] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3338.363018][T23814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3338.370983][T23814] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3338.378954][T23817] CPU: 1 PID: 23817 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3338.387768][T23817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.397839][T23817] Call Trace: [ 3338.401133][T23817] dump_stack_lvl+0xcd/0x134 [ 3338.406122][T23817] should_fail.cold+0x5/0xa [ 3338.410647][T23817] ? ima_alloc_init_template+0xb4/0x750 [ 3338.416216][T23817] should_failslab+0x5/0x10 [ 3338.420737][T23817] __kmalloc+0x72/0x310 [ 3338.424911][T23817] ? prepend_path+0x6ce/0xdc0 [ 3338.429640][T23817] ima_alloc_init_template+0xb4/0x750 [ 3338.435048][T23817] ima_store_measurement+0x1d7/0x5a0 [ 3338.440470][T23817] ? ima_collect_measurement+0x570/0x570 [ 3338.446128][T23817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3338.452392][T23817] ? d_absolute_path+0x10f/0x170 [ 3338.457354][T23817] ? kmem_cache_alloc+0x2d4/0x360 [ 3338.462403][T23817] process_measurement+0x11fb/0x17e0 [ 3338.467709][T23817] ? mmap_violation_check+0x1e0/0x1e0 [ 3338.473099][T23817] ? tomoyo_path_number_perm+0x590/0x590 00:22:53 executing program 3 (fault-call:0 fault-nth:4): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:53 executing program 4: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc71f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0x260}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4a, 0x5c}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x80, 0x53}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x9, 0x12, 0xff, 0x10}, 0x2c, &(0x7f00000000c0)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x7fff000, 0xf, 0x4, [0xff0000, 0xc000, 0x30, 0xffffc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x8}]}, 0x5, [{0x35, &(0x7f0000000100)=@string={0x35, 0x3, "f63e443bdbb2dcd4f9befb9b471da5d97ea90ead74bd86f791626e534e7f87fe2fbade8534c047f21cc4a66f88e9bf13111159"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x419}}, {0xcc, &(0x7f0000000240)=@string={0xcc, 0x3, "8ec894e42fc6eaced7c7045b0b8a2ab35d44a3cbcfffe6e912c14c945e6ce61e4c55e31101615ca019d856289e0fe52c205135731f2b3f79490d5f3206b3ca1d6505a2e576f2e9493ce25e3e47e814ff7c2a0ef3ebb8b97a0d7a0a7e46f9ededc1936e9d4d0ed533b7b8f77b028c9263d69b6713c834732187b1f3d8d5e1a84733ed350905fef12490d035df487e20939de2f3e78fb5e36a23dcd06bb6473eb628337c9418ac686b4e3a84a81e2020480e859d871e37ba291d795925819b54c04723b708c4c43df1c8a8"}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "4eca9b7ee25158fc70ee46db6d87fc8ad8729b13181e95b3312d2e22584606d546ea6cdfa9d899cec92b94b1d5fc702d79cedf07aa4823babf005d26337caecf4ec79d150b7e61a6da7619a1dcc05296ac808c17"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f00000019c0)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:22:53 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0x21f2) [ 3338.478782][T23817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3338.484783][T23817] ? find_held_lock+0x2d/0x110 [ 3338.489571][T23817] ? aa_get_task_label+0x211/0x550 [ 3338.494884][T23817] ? lock_downgrade+0x6e0/0x6e0 [ 3338.499746][T23817] ? fsnotify+0x1050/0x1050 [ 3338.504292][T23817] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3338.509856][T23817] ? path_get+0x5d/0x80 [ 3338.514021][T23817] ? aa_get_task_label+0x23a/0x550 [ 3338.519156][T23817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3338.525418][T23817] ? apparmor_task_getsecid+0xc2/0x110 [ 3338.530899][T23817] ima_file_check+0xb1/0x100 [ 3338.535508][T23817] ? process_measurement+0x17e0/0x17e0 [ 3338.541014][T23817] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3338.546664][T23817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3338.553015][T23817] ? may_open+0x1f6/0x420 [ 3338.557359][T23817] path_openat+0x15ca/0x27f0 [ 3338.561442][T23827] FAULT_INJECTION: forcing a failure. [ 3338.561442][T23827] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.561971][T23817] ? path_lookupat+0x860/0x860 [ 3338.579292][T23817] ? mark_lock+0xef/0x17b0 [ 3338.583931][T23817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3338.590004][T23817] do_filp_open+0x1aa/0x400 [ 3338.594510][T23817] ? may_open_dev+0xf0/0xf0 [ 3338.599101][T23817] ? alloc_fd+0x2f0/0x670 [ 3338.603702][T23817] ? rwlock_bug.part.0+0x90/0x90 [ 3338.608722][T23817] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3338.614969][T23817] ? _find_next_bit+0x1e3/0x260 [ 3338.619836][T23817] ? _raw_spin_unlock+0x1a/0x30 [ 3338.624701][T23817] ? alloc_fd+0x2f0/0x670 [ 3338.629044][T23817] do_sys_openat2+0x16d/0x420 [ 3338.633910][T23817] ? build_open_flags+0x6f0/0x6f0 [ 3338.638947][T23817] ? __context_tracking_exit+0x9f/0xb0 [ 3338.644414][T23817] ? lock_downgrade+0x6e0/0x6e0 [ 3338.649269][T23817] __x64_sys_openat+0x13f/0x1f0 [ 3338.654125][T23817] ? __ia32_sys_open+0x1c0/0x1c0 [ 3338.659091][T23817] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3338.665159][T23817] ? syscall_enter_from_user_mode+0x21/0x70 [ 3338.671053][T23817] do_syscall_64+0x35/0xb0 [ 3338.675493][T23817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3338.681395][T23817] RIP: 0033:0x4196d4 [ 3338.685294][T23817] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3338.705027][T23817] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3338.713455][T23817] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3338.721455][T23817] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3338.729452][T23817] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3338.737868][T23817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3338.745854][T23817] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3338.753828][T23827] CPU: 0 PID: 23827 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3338.762611][T23827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.772738][T23827] Call Trace: [ 3338.776026][T23827] dump_stack_lvl+0xcd/0x134 [ 3338.780642][T23827] should_fail.cold+0x5/0xa [ 3338.785166][T23827] ? __d_alloc+0x2a/0x950 [ 3338.789510][T23827] should_failslab+0x5/0x10 [ 3338.794035][T23827] kmem_cache_alloc+0x5b/0x360 [ 3338.798828][T23827] __d_alloc+0x2a/0x950 [ 3338.803089][T23827] d_alloc+0x4a/0x230 [ 3338.807094][T23827] d_alloc_parallel+0xe2/0x1980 [ 3338.811956][T23827] ? __d_lookup+0x3e0/0x730 [ 3338.816476][T23827] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3338.821338][T23827] ? __d_lookup+0x409/0x730 [ 3338.825854][T23827] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3338.831857][T23827] lookup_open.isra.0+0x867/0x1300 [ 3338.836993][T23827] ? hashlen_string+0xf0/0xf0 [ 3338.841688][T23827] path_openat+0x9b3/0x27f0 [ 3338.846209][T23827] ? path_lookupat+0x860/0x860 [ 3338.850994][T23827] ? mark_lock+0xef/0x17b0 [ 3338.855418][T23827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3338.861419][T23827] do_filp_open+0x1aa/0x400 [ 3338.865958][ T33] audit: type=1804 audit(1629937374.219:59): pid=23817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723935383536343237342F73797A6B616C6C65722E66796B6364332F353833312F48C7C060 dev="sda1" ino=15266 res=0 errno=0 [ 3338.865963][T23827] ? may_open_dev+0xf0/0xf0 [ 3338.865994][T23827] ? alloc_fd+0x2f0/0x670 [ 3338.905343][T23827] ? rwlock_bug.part.0+0x90/0x90 [ 3338.910335][T23827] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3338.916657][T23827] ? _find_next_bit+0x1e3/0x260 [ 3338.921499][T23827] ? _raw_spin_unlock+0x1a/0x30 [ 3338.926343][T23827] ? alloc_fd+0x2f0/0x670 [ 3338.930682][T23827] do_sys_openat2+0x16d/0x420 [ 3338.935351][T23827] ? build_open_flags+0x6f0/0x6f0 [ 3338.940381][T23827] ? __context_tracking_exit+0x9f/0xb0 [ 3338.946002][T23827] ? lock_downgrade+0x6e0/0x6e0 [ 3338.950847][T23827] __x64_sys_openat+0x13f/0x1f0 [ 3338.955756][T23827] ? __ia32_sys_open+0x1c0/0x1c0 [ 3338.960688][T23827] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3338.966701][T23827] ? syscall_enter_from_user_mode+0x21/0x70 [ 3338.972580][T23827] do_syscall_64+0x35/0xb0 [ 3338.976984][T23827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3338.982865][T23827] RIP: 0033:0x4196d4 [ 3338.986850][T23827] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3339.006446][T23827] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3339.008058][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3339.014932][T23827] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3339.014953][T23827] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3339.014970][T23827] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3339.014986][T23827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3339.015002][T23827] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3339.048769][T30893] usb usb5-port1: attempt power cycle [ 3339.188006][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3339.197304][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3339.205348][T18465] usb 6-1: Product: syz [ 3339.209567][T18465] usb 6-1: Manufacturer: syz [ 3339.214185][T18465] usb 6-1: SerialNumber: syz [ 3339.367937][ T1499] usb 3-1: new high-speed USB device number 117 using dummy_hcd 00:22:54 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x2000, 0x0, 0x0, 0x0}) 00:22:54 executing program 1 (fault-call:0 fault-nth:19): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:54 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0x21f2) 00:22:54 executing program 3 (fault-call:0 fault-nth:5): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3339.504892][T18465] usb 6-1: USB disconnect, device number 28 [ 3339.510992][T30893] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 3339.524293][T23841] FAULT_INJECTION: forcing a failure. [ 3339.524293][T23841] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.537185][T23841] CPU: 0 PID: 23841 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3339.546061][T23841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3339.556127][T23841] Call Trace: [ 3339.559423][T23841] dump_stack_lvl+0xcd/0x134 [ 3339.564033][T23841] should_fail.cold+0x5/0xa [ 3339.568567][T23841] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3339.574306][T23841] should_failslab+0x5/0x10 [ 3339.578830][T23841] __kmalloc+0x72/0x310 [ 3339.583016][T23841] tomoyo_realpath_from_path+0xc3/0x620 [ 3339.588591][T23841] ? tomoyo_profile+0x42/0x50 [ 3339.593301][T23841] tomoyo_path_number_perm+0x1d5/0x590 [ 3339.598780][T23841] ? tomoyo_path_number_perm+0x18d/0x590 [ 3339.604432][T23841] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3339.610343][T23841] ? lock_chain_count+0x20/0x20 [ 3339.615224][T23841] ? find_held_lock+0x2d/0x110 [ 3339.618017][T30893] usb 5-1: Invalid ep0 maxpacket: 0 [ 3339.620266][T23841] ? d_alloc_parallel+0x949/0x1980 [ 3339.620298][T23841] ? __d_lookup+0x3e0/0x730 [ 3339.620323][T23841] tomoyo_path_mknod+0x10d/0x190 [ 3339.640018][T23841] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3339.645157][T23841] security_path_mknod+0xf9/0x170 [ 3339.650203][T23841] lookup_open.isra.0+0x471/0x1300 00:22:55 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xff00, 0x0, 0x0, 0x0}) 00:22:55 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0x21f2) [ 3339.655335][T23841] ? hashlen_string+0xf0/0xf0 [ 3339.660206][T23841] path_openat+0x9b3/0x27f0 [ 3339.664726][T23841] ? path_lookupat+0x860/0x860 [ 3339.669503][T23841] ? mark_lock+0xef/0x17b0 [ 3339.673931][T23841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.679925][T23841] do_filp_open+0x1aa/0x400 [ 3339.684444][T23841] ? may_open_dev+0xf0/0xf0 [ 3339.689057][T23841] ? alloc_fd+0x2f0/0x670 [ 3339.693403][T23841] ? rwlock_bug.part.0+0x90/0x90 [ 3339.698354][T23841] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3339.704616][T23841] ? _find_next_bit+0x1e3/0x260 [ 3339.709491][T23841] ? _raw_spin_unlock+0x1a/0x30 [ 3339.714367][T23841] ? alloc_fd+0x2f0/0x670 [ 3339.718713][T23841] do_sys_openat2+0x16d/0x420 [ 3339.723404][T23841] ? build_open_flags+0x6f0/0x6f0 [ 3339.724780][ T33] audit: type=1800 audit(1629937375.139:60): pid=23846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15298 res=0 errno=0 [ 3339.728440][T23841] ? __context_tracking_exit+0x9f/0xb0 [ 3339.728469][T23841] ? lock_downgrade+0x6e0/0x6e0 [ 3339.728493][T23841] __x64_sys_openat+0x13f/0x1f0 [ 3339.728522][T23841] ? __ia32_sys_open+0x1c0/0x1c0 [ 3339.728547][T23841] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3339.751201][T23846] FAULT_INJECTION: forcing a failure. [ 3339.751201][T23846] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.755245][T23841] ? syscall_enter_from_user_mode+0x21/0x70 [ 3339.755276][T23841] do_syscall_64+0x35/0xb0 [ 3339.755306][T23841] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3339.805060][T23841] RIP: 0033:0x4196d4 [ 3339.808960][T23841] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3339.828570][T23841] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3339.837006][T23841] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3339.844973][T23841] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3339.852939][T23841] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3339.860902][T23841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3339.868867][T23841] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3339.877273][T23846] CPU: 1 PID: 23846 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3339.877485][T23841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3339.886038][T23846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3339.886054][T23846] Call Trace: [ 3339.886063][T23846] dump_stack_lvl+0xcd/0x134 [ 3339.910599][T23846] should_fail.cold+0x5/0xa [ 3339.915121][T23846] ? ima_alloc_init_template+0x199/0x750 [ 3339.920779][T23846] should_failslab+0x5/0x10 [ 3339.925275][T23846] __kmalloc+0x72/0x310 [ 3339.929551][T23846] ima_alloc_init_template+0x199/0x750 [ 3339.935012][T23846] ima_store_measurement+0x1d7/0x5a0 [ 3339.940293][T23846] ? ima_collect_measurement+0x570/0x570 [ 3339.945923][T23846] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3339.952162][T23846] ? d_absolute_path+0x10f/0x170 [ 3339.957123][T23846] ? kmem_cache_alloc+0x2d4/0x360 [ 3339.962180][T23846] process_measurement+0x11fb/0x17e0 [ 3339.967533][T23846] ? mmap_violation_check+0x1e0/0x1e0 [ 3339.972898][T23846] ? tomoyo_path_number_perm+0x590/0x590 [ 3339.978523][T23846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.984495][T23846] ? find_held_lock+0x2d/0x110 [ 3339.989321][T23846] ? aa_get_task_label+0x211/0x550 [ 3339.994449][T23846] ? lock_downgrade+0x6e0/0x6e0 [ 3339.999351][T23846] ? fsnotify+0x1050/0x1050 [ 3340.003838][T23846] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3340.009372][T23846] ? path_get+0x5d/0x80 [ 3340.013511][T23846] ? aa_get_task_label+0x23a/0x550 [ 3340.018615][T23846] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3340.024880][T23846] ? apparmor_task_getsecid+0xc2/0x110 [ 3340.030416][T23846] ima_file_check+0xb1/0x100 [ 3340.034997][T23846] ? process_measurement+0x17e0/0x17e0 [ 3340.040443][T23846] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3340.045973][T23846] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3340.052199][T23846] ? may_open+0x1f6/0x420 [ 3340.056512][T23846] path_openat+0x15ca/0x27f0 [ 3340.061092][T23846] ? path_lookupat+0x860/0x860 [ 3340.065838][T23846] ? mark_lock+0xef/0x17b0 [ 3340.070238][T23846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.076200][T23846] do_filp_open+0x1aa/0x400 [ 3340.080693][T23846] ? may_open_dev+0xf0/0xf0 [ 3340.085207][T23846] ? alloc_fd+0x2f0/0x670 [ 3340.089538][T23846] ? rwlock_bug.part.0+0x90/0x90 [ 3340.094479][T23846] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3340.100721][T23846] ? _find_next_bit+0x1e3/0x260 [ 3340.105572][T23846] ? _raw_spin_unlock+0x1a/0x30 [ 3340.110415][T23846] ? alloc_fd+0x2f0/0x670 [ 3340.114738][T23846] do_sys_openat2+0x16d/0x420 [ 3340.119418][T23846] ? build_open_flags+0x6f0/0x6f0 [ 3340.124454][T23846] ? __context_tracking_exit+0x9f/0xb0 [ 3340.129906][T23846] ? lock_downgrade+0x6e0/0x6e0 [ 3340.134761][T23846] __x64_sys_openat+0x13f/0x1f0 [ 3340.139601][T23846] ? __ia32_sys_open+0x1c0/0x1c0 [ 3340.144524][T23846] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3340.150485][T23846] ? syscall_enter_from_user_mode+0x21/0x70 [ 3340.156371][T23846] do_syscall_64+0x35/0xb0 [ 3340.160809][T23846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3340.166802][T23846] RIP: 0033:0x4196d4 [ 3340.170777][T23846] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3340.190372][T23846] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3340.198945][T23846] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3340.206907][T23846] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3340.214866][T23846] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3340.222834][T23846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3340.230793][T23846] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3340.239200][T30893] usb 5-1: new full-speed USB device number 64 using dummy_hcd 00:22:55 executing program 1 (fault-call:0 fault-nth:20): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3340.252181][ T33] audit: type=1804 audit(1629937375.660:61): pid=23846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723935383536343237342F73797A6B616C6C65722E66796B6364332F353833322F48C7C060 dev="sda1" ino=15298 res=0 errno=0 [ 3340.305343][ T33] audit: type=1800 audit(1629937375.670:62): pid=23841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13893 res=0 errno=0 [ 3340.326627][T23854] FAULT_INJECTION: forcing a failure. [ 3340.326627][T23854] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.339548][T23854] CPU: 0 PID: 23854 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3340.340371][T30893] usb 5-1: Invalid ep0 maxpacket: 0 [ 3340.348334][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.348351][T23854] Call Trace: [ 3340.348359][T23854] dump_stack_lvl+0xcd/0x134 [ 3340.348391][T23854] should_fail.cold+0x5/0xa [ 3340.361087][ T33] audit: type=1800 audit(1629937375.710:63): pid=23854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13969 res=0 errno=0 [ 3340.363645][T23854] ? ima_write_template_field_data+0x47/0x1c0 [ 3340.370840][T30893] usb usb5-port1: unable to enumerate USB device [ 3340.371511][T23854] should_failslab+0x5/0x10 [ 3340.386672][T23856] FAULT_INJECTION: forcing a failure. [ 3340.386672][T23856] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.397152][T23854] __kmalloc+0x72/0x310 [ 3340.397189][T23854] ? ima_alloc_init_template+0x199/0x750 [ 3340.397218][T23854] ima_write_template_field_data+0x47/0x1c0 [ 3340.442292][T23854] ima_eventdigest_init_common+0xed/0x250 [ 3340.448057][T23854] ? ima_write_template_field_data+0x1c0/0x1c0 [ 3340.454222][T23854] ? lock_acquire+0x19d/0x4d0 [ 3340.458912][T23854] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3340.464461][T23854] ima_alloc_init_template+0x39e/0x750 [ 3340.469928][T23854] ima_store_measurement+0x1d7/0x5a0 [ 3340.475232][T23854] ? ima_collect_measurement+0x570/0x570 [ 3340.480889][T23854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3340.487165][T23854] ? d_absolute_path+0x10f/0x170 [ 3340.492118][T23854] ? kmem_cache_alloc+0x2d4/0x360 [ 3340.497148][T23854] process_measurement+0x11fb/0x17e0 [ 3340.502438][T23854] ? mmap_violation_check+0x1e0/0x1e0 [ 3340.507902][T23854] ? tomoyo_path_number_perm+0x590/0x590 [ 3340.513536][T23854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.519519][T23854] ? find_held_lock+0x2d/0x110 [ 3340.524297][T23854] ? aa_get_task_label+0x211/0x550 [ 3340.529410][T23854] ? lock_downgrade+0x6e0/0x6e0 [ 3340.534260][T23854] ? fsnotify+0x1050/0x1050 [ 3340.538935][T23854] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3340.544496][T23854] ? path_get+0x5d/0x80 [ 3340.548647][T23854] ? aa_get_task_label+0x23a/0x550 [ 3340.553759][T23854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3340.560005][T23854] ? apparmor_task_getsecid+0xc2/0x110 [ 3340.565464][T23854] ima_file_check+0xb1/0x100 [ 3340.570069][T23854] ? process_measurement+0x17e0/0x17e0 [ 3340.575534][T23854] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3340.581079][T23854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3340.587322][T23854] ? may_open+0x1f6/0x420 [ 3340.591647][T23854] path_openat+0x15ca/0x27f0 [ 3340.596237][T23854] ? path_lookupat+0x860/0x860 [ 3340.600998][T23854] ? mark_lock+0xef/0x17b0 [ 3340.605411][T23854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.611407][T23854] do_filp_open+0x1aa/0x400 [ 3340.615913][T23854] ? may_open_dev+0xf0/0xf0 [ 3340.620421][T23854] ? alloc_fd+0x2f0/0x670 [ 3340.624767][T23854] ? rwlock_bug.part.0+0x90/0x90 [ 3340.629704][T23854] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3340.635949][T23854] ? _find_next_bit+0x1e3/0x260 [ 3340.640804][T23854] ? _raw_spin_unlock+0x1a/0x30 [ 3340.645658][T23854] ? alloc_fd+0x2f0/0x670 [ 3340.649994][T23854] do_sys_openat2+0x16d/0x420 [ 3340.654671][T23854] ? build_open_flags+0x6f0/0x6f0 [ 3340.659698][T23854] ? __context_tracking_exit+0x9f/0xb0 [ 3340.665154][T23854] ? lock_downgrade+0x6e0/0x6e0 [ 3340.670190][T23854] __x64_sys_openat+0x13f/0x1f0 [ 3340.675064][T23854] ? __ia32_sys_open+0x1c0/0x1c0 [ 3340.680020][T23854] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3340.686008][T23854] ? syscall_enter_from_user_mode+0x21/0x70 [ 3340.691909][T23854] do_syscall_64+0x35/0xb0 [ 3340.696329][T23854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3340.702231][T23854] RIP: 0033:0x4196d4 [ 3340.706123][T23854] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3340.725732][T23854] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3340.734149][T23854] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3340.742124][T23854] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c 00:22:55 executing program 3 (fault-call:0 fault-nth:6): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3340.750095][T23854] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3340.758068][T23854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3340.766039][T23854] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3340.774018][T23856] CPU: 1 PID: 23856 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3340.775807][ T1499] usb 3-1: no configurations [ 3340.782800][T23856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.782819][T23856] Call Trace: [ 3340.782827][T23856] dump_stack_lvl+0xcd/0x134 [ 3340.782858][T23856] should_fail.cold+0x5/0xa [ 3340.782880][T23856] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3340.782906][T23856] should_failslab+0x5/0x10 [ 3340.782936][T23856] __kmalloc+0x72/0x310 [ 3340.782971][T23856] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3340.782996][T23856] tomoyo_encode+0x28/0x50 [ 3340.783018][T23856] tomoyo_realpath_from_path+0x186/0x620 [ 3340.787602][ T1499] usb 3-1: can't read configurations, error -22 [ 3340.797635][T23856] tomoyo_path_number_perm+0x1d5/0x590 [ 3340.797661][T23856] ? tomoyo_path_number_perm+0x18d/0x590 [ 3340.797683][T23856] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3340.860850][ T33] audit: type=1804 audit(1629937376.180:64): pid=23854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723935383536343237342F73797A6B616C6C65722E66796B6364332F353833332F48C7C060 dev="sda1" ino=13969 res=0 errno=0 [ 3340.864828][T23856] ? lock_chain_count+0x20/0x20 [ 3340.900226][T23856] ? find_held_lock+0x2d/0x110 [ 3340.905334][T23856] ? d_alloc_parallel+0x949/0x1980 [ 3340.910480][T23856] ? __d_lookup+0x3e0/0x730 [ 3340.914972][T23856] tomoyo_path_mknod+0x10d/0x190 [ 3340.919908][T23856] ? tomoyo_path_chown+0x1b0/0x1b0 [ 3340.925021][T23856] security_path_mknod+0xf9/0x170 [ 3340.930032][T23856] lookup_open.isra.0+0x471/0x1300 [ 3340.935151][T23856] ? hashlen_string+0xf0/0xf0 [ 3340.939836][T23856] path_openat+0x9b3/0x27f0 [ 3340.944353][T23856] ? path_lookupat+0x860/0x860 [ 3340.949269][T23856] ? mark_lock+0xef/0x17b0 [ 3340.953679][T23856] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.959741][T23856] do_filp_open+0x1aa/0x400 [ 3340.964266][T23856] ? may_open_dev+0xf0/0xf0 [ 3340.968759][T23856] ? alloc_fd+0x2f0/0x670 [ 3340.973086][T23856] ? rwlock_bug.part.0+0x90/0x90 [ 3340.978018][T23856] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3340.984252][T23856] ? _find_next_bit+0x1e3/0x260 [ 3340.989093][T23856] ? _raw_spin_unlock+0x1a/0x30 [ 3340.993930][T23856] ? alloc_fd+0x2f0/0x670 [ 3340.998249][T23856] do_sys_openat2+0x16d/0x420 [ 3341.002924][T23856] ? build_open_flags+0x6f0/0x6f0 [ 3341.007960][T23856] ? __context_tracking_exit+0x9f/0xb0 [ 3341.013410][T23856] ? lock_downgrade+0x6e0/0x6e0 [ 3341.018425][T23856] __x64_sys_openat+0x13f/0x1f0 [ 3341.023289][T23856] ? __ia32_sys_open+0x1c0/0x1c0 [ 3341.028212][T23856] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3341.034181][T23856] ? syscall_enter_from_user_mode+0x21/0x70 [ 3341.040079][T23856] do_syscall_64+0x35/0xb0 [ 3341.044482][T23856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3341.050372][T23856] RIP: 0033:0x4196d4 00:22:56 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:56 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x21f2) [ 3341.054275][T23856] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3341.074069][T23856] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3341.082499][T23856] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3341.090487][T23856] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3341.098558][T23856] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3341.106542][T23856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3341.114528][T23856] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3341.122683][T23856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3341.131901][ T33] audit: type=1800 audit(1629937376.550:65): pid=23856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13969 res=0 errno=0 [ 3341.198152][T18465] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3341.437808][ T1499] usb 3-1: new high-speed USB device number 118 using dummy_hcd 00:22:56 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101e60019ffedbdc4353537fc412303090400061d0701"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000019c0)={{0x3, 0x2, 0x6, 0x3, 0x4, 0x4}, 0xbf, [0xf91, 0x2f0, 0x6, 0x2, 0x80000001, 0x4, 0x7, 0x200, 0x1, 0x0, 0xfcca, 0x0, 0xce, 0x99, 0x40, 0x12, 0x8, 0x6, 0x4, 0x280000, 0x10001, 0x200, 0x1, 0x1f, 0x2, 0x4, 0x1ff, 0xbe77, 0x6, 0x5, 0x166, 0x7ff, 0x2, 0x618b71f9, 0x401, 0x9, 0xff, 0x3, 0x0, 0x1ed1, 0x6, 0x0, 0x2, 0x40, 0xb2, 0x3ff, 0x3, 0x7, 0x6, 0x400, 0x1, 0x7, 0x400, 0x9, 0x1, 0x6, 0xaa, 0x0, 0x0, 0x2, 0x47, 0x20, 0x0, 0x1, 0x1000, 0x80000000, 0x81, 0x2, 0xb08c, 0x6, 0xffff, 0x10000, 0x2, 0x7, 0x81, 0xc0, 0x3, 0x7, 0x3, 0xffff0001, 0x80, 0xfff, 0x6, 0x9, 0x1, 0x81, 0x4, 0x6, 0x0, 0x7, 0x6, 0x81, 0x8000, 0x6, 0x9, 0xffffffff, 0x800, 0x3, 0x5, 0x10001, 0x8, 0x1, 0xf2, 0xa45d, 0x7fff, 0xee, 0x8000, 0x3ff, 0x0, 0x1000, 0x935a, 0x348, 0x101, 0x4, 0x4, 0x7fff, 0x51, 0x1000, 0x5, 0x80, 0x6, 0x101, 0x0, 0x58c, 0x5, 0x72, 0x80000001, 0x1, 0xcf4, 0xfb, 0x300000, 0x6, 0x200, 0xfffffff8, 0x100, 0xca4, 0x8, 0xfff, 0x6, 0x1, 0x0, 0xe9, 0xe23, 0x2, 0x23, 0x9, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0xff, 0x2bb, 0x6, 0x8, 0x6, 0x9, 0x80000001, 0x3, 0x6, 0xc4, 0x2, 0x7, 0x20c, 0x8, 0x0, 0x2, 0x861, 0x8, 0x1, 0xfffffffe, 0xde0b, 0x9, 0x3c67, 0x4, 0x4, 0x400, 0x8, 0x1, 0x2, 0x2, 0x5, 0x24e, 0x1, 0x0, 0x7, 0x2, 0x2, 0x1, 0x30000, 0x20, 0x10000, 0x4, 0x9, 0x63, 0x99ec, 0x1, 0x3, 0xfffffc01, 0x7, 0x3, 0x8001, 0x81, 0xfffffffc, 0x6, 0x84, 0xe965, 0x5, 0x80000001, 0x2, 0x8, 0x7, 0x9, 0x1, 0x4, 0x101, 0x168f, 0x2, 0x10001, 0x6, 0x8, 0x3, 0xfff, 0x5, 0x5, 0x5a, 0x4, 0x8, 0xa49c0000, 0x5c, 0x80, 0x330, 0x9, 0x23, 0x23, 0x0, 0x7fff, 0xee29, 0x397, 0x100, 0x6, 0x3, 0xfffffffc, 0x41b1, 0x2, 0x1, 0x6, 0x80, 0x792d, 0x101, 0x3e5, 0x6d6, 0x800, 0x3ff, 0x4, 0x8, 0x3, 0x40, 0x8d15, 0x4, 0x1f, 0x0, 0x4, 0x7f, 0x5, 0xfffff801, 0x6, 0x5, 0x6cf5366b, 0x0, 0x4, 0x3ff, 0x9, 0x800, 0x400, 0x8, 0x0, 0x0, 0x92b, 0x0, 0x4, 0x200, 0x7, 0x10000, 0x5, 0x9, 0x6, 0x2011, 0x5, 0x5f, 0x6, 0x9, 0x400, 0x2, 0x8, 0x3, 0x0, 0x0, 0x98e, 0x3ff, 0x800, 0x4, 0x0, 0x9, 0x5, 0x1, 0x3f, 0x1000, 0x4, 0x8, 0x8000, 0x7f, 0xffff, 0xffffffff, 0x66d, 0xfffffffa, 0x3, 0x5, 0x5, 0x7f, 0x88, 0x101, 0x20, 0x7fff, 0x9, 0x9, 0xae, 0x2, 0x7fff, 0x10001, 0xffff88da, 0x8, 0xfb5, 0x6, 0x0, 0xffff5592, 0x5164, 0x8000, 0x7, 0x2, 0x1, 0xffff, 0x1, 0x5a, 0x5759, 0x64, 0x101, 0x3f, 0x8, 0x2, 0x6, 0x1, 0x2, 0x5, 0x2, 0x1, 0x100, 0x401, 0x1000, 0xfff, 0x0, 0x2, 0x6, 0xfffffffc, 0xff, 0x744, 0x9, 0xcf1, 0x2, 0x7, 0x6, 0x0, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x9, 0x4, 0x7, 0x5, 0x7, 0x5, 0x8, 0x20, 0x81, 0x7, 0x5, 0x7, 0xed, 0x401, 0x2, 0x52, 0x9, 0x3, 0x9, 0x0, 0x5, 0x5, 0x2, 0x8000, 0x401, 0xffff0000, 0x74, 0x1, 0x4, 0x7, 0xc4985095, 0x7, 0x5, 0x3f, 0x9d4, 0x6d8, 0x6d5318a4, 0xffffff7f, 0x7, 0x8, 0x881, 0xd73, 0x8, 0x1, 0x1, 0x2, 0x3ff, 0x401, 0xe4b, 0x1ff, 0x4c4, 0x9, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0x5, 0x1, 0x6, 0x5, 0x0, 0x5, 0x40, 0x8, 0x0, 0x101, 0x70a2, 0x7, 0x7, 0x800, 0x1, 0x5, 0x1, 0x2, 0xbc, 0x8, 0x2, 0x3ff, 0x1, 0x8000, 0x4, 0x5, 0xea, 0x8, 0x624f, 0x8, 0x900000, 0x80000000, 0x1, 0x9, 0x7ff, 0x3, 0x1000, 0x6, 0x1ff, 0xc2, 0x2, 0x8001, 0x1, 0x8dda, 0x1, 0xa6, 0x1, 0x7, 0x8, 0x4, 0x0, 0x80, 0x3, 0x4, 0x19, 0x2, 0x9, 0x6, 0x0, 0xfffffffd, 0x1f, 0x20, 0x3, 0x7, 0x3f, 0x4c, 0x1, 0xfffffffe, 0x8, 0x7fff, 0x8, 0x396, 0x200, 0x8, 0x5, 0x0, 0x0, 0x9, 0x9, 0x7, 0xb8, 0x80000000, 0x9, 0xac8c, 0x7fffffff, 0x10001, 0x4, 0x1, 0x4, 0x746, 0x5e, 0x6, 0x7, 0x5f, 0x2, 0x8001, 0x4, 0x0, 0x7fff, 0xffffffff, 0x80, 0xac4c, 0xffcf, 0x1f, 0x80000001, 0x0, 0x6, 0x0, 0x8, 0xfffffff8, 0x3, 0x1a3e6747, 0x6, 0x3, 0x1, 0x2, 0xfffffffb, 0x0, 0x8, 0x9, 0x1bb9, 0x79, 0x0, 0x2, 0x0, 0xe600000, 0x4, 0x8, 0x10000, 0x5, 0x2, 0x80, 0x3, 0x1000, 0x3d655aaf, 0x2, 0x3, 0x10001, 0x100, 0xe81, 0x8, 0x10000, 0x4, 0x1, 0x8, 0xf99, 0x4, 0x40000000, 0x67, 0x3, 0x9cf0, 0xf98, 0x4, 0x40, 0x2, 0x7fffffff, 0x7, 0x6, 0x1, 0x1f, 0x5, 0x1ca9c2dd, 0x81, 0x6d1a5104, 0x6, 0x7ff, 0x4, 0x1000, 0x4, 0x2, 0x8, 0x1, 0x0, 0x3ff, 0x3f, 0x5, 0x100, 0x1, 0x0, 0x3ff, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x4, 0x4, 0x4, 0x8, 0x6, 0x3ff, 0x9, 0x1, 0x4, 0x81, 0x3, 0x10000, 0x5, 0x3, 0x5, 0xa5a, 0x1, 0x1, 0xff, 0x800, 0x9, 0x1, 0x1000, 0x2, 0x8, 0x3, 0x3, 0x40, 0x2, 0x0, 0x4d, 0x4000000, 0x6, 0x5, 0x10000, 0xfffffffb, 0xfffeffff, 0xeb3c, 0x4, 0x0, 0x800, 0x800, 0xfffffffe, 0x81, 0x8, 0x6, 0x41, 0x0, 0x1f, 0x1, 0x2b1, 0x8, 0x7, 0x664, 0x6, 0xc6d, 0xff, 0x5b15b601, 0x6, 0x1000, 0x0, 0x20, 0x2, 0xbe90, 0xdd0, 0x9, 0x1f, 0x3, 0xa46, 0x7, 0x3, 0x6, 0x4, 0x800, 0x6, 0x100, 0x1f6, 0xfe1, 0x401, 0x9, 0x20, 0x0, 0x2751, 0x80, 0xa5b, 0x1f, 0x1000, 0x1, 0x8000, 0x40, 0x0, 0x7ff, 0x5f8369a4, 0xffff, 0x7e, 0x8, 0x2, 0x7, 0x7fff, 0x1, 0x0, 0x6, 0xf993, 0xfffeffff, 0x100, 0x65, 0x0, 0xffffffff, 0x1, 0x400, 0x4, 0x3, 0x4a, 0x0, 0x7, 0x342, 0xffff, 0x0, 0x400, 0x7fffffff, 0x0, 0x101, 0x8607, 0x6, 0x3, 0x3, 0x0, 0x4, 0xfff, 0x8001, 0x80000000, 0xffffffff, 0xffff, 0x1, 0x8e, 0xfffffff7, 0x0, 0x5, 0x4, 0x319f66c9, 0x2, 0x11, 0x0, 0xd93, 0x4, 0x9, 0x7f, 0x9, 0x2, 0x200, 0x3ff, 0x8000, 0x0, 0x9, 0xcc, 0x8001, 0x9, 0x14ab61c4, 0xffff0000, 0x4, 0x101ff, 0x5, 0x40, 0x7ff, 0x0, 0x8, 0x8, 0xfffffff7, 0x59, 0x2, 0xfffffffb, 0x200, 0xfffff001, 0x8, 0x2, 0x7, 0x9, 0x7f, 0x23b, 0xf9ec, 0x9, 0x7f, 0x43, 0x563, 0x3, 0x7fffffff, 0x3f, 0x7, 0x55c, 0x2, 0xe5, 0x3, 0x88, 0xf98, 0x7, 0x4, 0x800, 0x7fffffff, 0x7f, 0x2, 0xfffffff8, 0x89, 0xffff, 0x5d, 0x5, 0x1000, 0x9, 0x0, 0x5, 0x5, 0x8, 0x101, 0x2, 0x5, 0xfffffffd, 0x9, 0x4, 0xf23a, 0x200, 0x8000, 0x2, 0x7fff, 0x3, 0x3e, 0xfffffffd, 0x7, 0x9, 0x5, 0x4, 0x5, 0x3acb, 0x80, 0x88e, 0x5, 0x6, 0xffff, 0x7, 0x5, 0xbfee, 0x40, 0x6de, 0x5, 0x6, 0x81, 0x4, 0x48, 0x2, 0x1, 0x6b, 0x3, 0xfffffffd, 0x3, 0x9f1, 0x2, 0xb9, 0x7, 0x0, 0x7, 0x5, 0x8000, 0x2, 0x1, 0x4, 0x6, 0x100, 0x7, 0x0, 0x3, 0x1, 0x7f, 0xed, 0x8, 0x7, 0x3, 0x8, 0x0, 0xfffffff9, 0x972, 0x6, 0xffff, 0x2, 0xfff, 0xfff, 0x8001, 0x2, 0x101, 0x7, 0xfff, 0xd1, 0x8000, 0x8, 0x7, 0x3, 0xc8, 0x100, 0xf7, 0x5, 0x2, 0x1f, 0x0, 0x3, 0x1f, 0x10000, 0x5, 0x4, 0x4, 0x5, 0x9, 0x6, 0xdd, 0x3, 0x3f, 0xff, 0x7fffffff, 0x800, 0x5f7102e, 0xfff, 0x5, 0x8, 0x9, 0x7, 0xa493, 0x1a, 0x353, 0x1ff, 0x1000, 0x2, 0x78db, 0x2, 0x2, 0x1, 0x47, 0x7, 0x80000001, 0x2, 0x8, 0xfff, 0x42f, 0x8, 0x1, 0x3ff, 0x7fff, 0x2, 0x5, 0x10001, 0x0, 0x8, 0x1, 0x8, 0xc80, 0x3, 0xfffffffb, 0x1, 0x6, 0x7ff, 0x6, 0x8, 0x5, 0x9, 0x4, 0x0, 0x9, 0x4, 0x1, 0x1f, 0x7ff, 0xff, 0x9, 0x4, 0xcce, 0x6, 0x2, 0x1, 0x634, 0x5, 0x400, 0x7, 0x5, 0x8e88, 0x486e, 0x5, 0xfffffff7, 0x2, 0x0, 0x5, 0x1, 0x800, 0x81, 0x3, 0x200, 0x97, 0x7, 0x2, 0x7, 0x1, 0x7fffffff, 0x48, 0x9, 0x0, 0x1ff, 0x4, 0x8, 0x3, 0x6]}) 00:22:56 executing program 1 (fault-call:0 fault-nth:21): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:56 executing program 3 (fault-call:0 fault-nth:7): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:56 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0x21f2) [ 3341.542439][T23871] FAULT_INJECTION: forcing a failure. [ 3341.542439][T23871] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.547965][T23874] FAULT_INJECTION: forcing a failure. [ 3341.547965][T23874] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.555187][T23871] CPU: 0 PID: 23871 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3341.576497][T23871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3341.586552][T23871] Call Trace: [ 3341.589827][T23871] dump_stack_lvl+0xcd/0x134 [ 3341.594420][T23871] should_fail.cold+0x5/0xa [ 3341.598918][T23871] ? ext4_init_journal_params+0x350/0x350 [ 3341.604642][T23871] ? ext4_alloc_inode+0x1a/0x640 [ 3341.609585][T23871] should_failslab+0x5/0x10 [ 3341.614196][T23871] kmem_cache_alloc+0x5b/0x360 [ 3341.618980][T23871] ? ext4_init_journal_params+0x350/0x350 [ 3341.624714][T23871] ext4_alloc_inode+0x1a/0x640 [ 3341.629662][T23871] ? ext4_init_journal_params+0x350/0x350 [ 3341.635393][T23871] alloc_inode+0x61/0x230 [ 3341.639728][T23871] new_inode+0x27/0x2f0 [ 3341.643897][T23871] __ext4_new_inode+0x34f/0x5b60 [ 3341.648842][T23871] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3341.654823][T23871] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3341.660640][T23871] ? trace_hardirqs_on+0x5b/0x1a0 [ 3341.665668][T23871] ? find_held_lock+0x2d/0x110 [ 3341.670439][T23871] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3341.675991][T23871] ? do_raw_spin_unlock+0x171/0x230 [ 3341.681186][T23871] ? d_splice_alias+0x4c6/0xc60 [ 3341.686035][T23871] ? ext4_create+0x447/0x4d0 [ 3341.690627][T23871] ext4_create+0x2d6/0x4d0 [ 3341.695053][T23871] ? ext4_mknod+0x4e0/0x4e0 [ 3341.699557][T23871] ? generic_permission+0x121/0x5b0 [ 3341.704750][T23871] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3341.710992][T23871] ? security_inode_permission+0xc5/0xf0 [ 3341.716628][T23871] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3341.722975][T23871] ? ext4_mknod+0x4e0/0x4e0 [ 3341.727488][T23871] lookup_open.isra.0+0xf19/0x1300 [ 3341.732599][T23871] ? hashlen_string+0xf0/0xf0 [ 3341.737296][T23871] path_openat+0x9b3/0x27f0 [ 3341.741799][T23871] ? path_lookupat+0x860/0x860 [ 3341.746563][T23871] ? mark_lock+0xef/0x17b0 [ 3341.750989][T23871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3341.756966][T23871] do_filp_open+0x1aa/0x400 [ 3341.761480][T23871] ? may_open_dev+0xf0/0xf0 [ 3341.765986][T23871] ? alloc_fd+0x2f0/0x670 [ 3341.770315][T23871] ? rwlock_bug.part.0+0x90/0x90 [ 3341.775252][T23871] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3341.781493][T23871] ? _find_next_bit+0x1e3/0x260 [ 3341.786345][T23871] ? _raw_spin_unlock+0x1a/0x30 [ 3341.791206][T23871] ? alloc_fd+0x2f0/0x670 [ 3341.795539][T23871] do_sys_openat2+0x16d/0x420 [ 3341.800217][T23871] ? build_open_flags+0x6f0/0x6f0 [ 3341.805243][T23871] ? __context_tracking_exit+0x9f/0xb0 [ 3341.810703][T23871] ? lock_downgrade+0x6e0/0x6e0 [ 3341.815547][T23871] __x64_sys_openat+0x13f/0x1f0 [ 3341.820403][T23871] ? __ia32_sys_open+0x1c0/0x1c0 [ 3341.825342][T23871] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3341.831325][T23871] ? syscall_enter_from_user_mode+0x21/0x70 [ 3341.837578][T23871] do_syscall_64+0x35/0xb0 [ 3341.842013][T23871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3341.847921][T23871] RIP: 0033:0x4196d4 [ 3341.851825][T23871] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3341.871449][T23871] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3341.879906][T23871] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3341.887876][T23871] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3341.895842][T23871] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3341.903898][T23871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3341.911865][T23871] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3341.919839][T23874] CPU: 1 PID: 23874 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3341.923742][ T33] audit: type=1800 audit(1629937376.950:66): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14084 res=0 errno=0 [ 3341.928706][T23874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3341.928721][T23874] Call Trace: [ 3341.928729][T23874] dump_stack_lvl+0xcd/0x134 [ 3341.928759][T23874] should_fail.cold+0x5/0xa [ 3341.928782][T23874] ? ima_write_template_field_data+0x47/0x1c0 [ 3341.978423][T23874] should_failslab+0x5/0x10 [ 3341.982953][T23874] __kmalloc+0x72/0x310 [ 3341.987220][T23874] ? ima_alloc_init_template+0x199/0x750 [ 3341.992881][T23874] ima_write_template_field_data+0x47/0x1c0 [ 3341.998811][T23874] ima_eventdigest_init_common+0xed/0x250 [ 3342.004559][T23874] ? ima_write_template_field_data+0x1c0/0x1c0 [ 3342.010736][T23874] ? lock_acquire+0x19d/0x4d0 [ 3342.015451][T23874] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3342.021026][T23874] ima_alloc_init_template+0x39e/0x750 [ 3342.026524][T23874] ima_store_measurement+0x1d7/0x5a0 [ 3342.031855][T23874] ? ima_collect_measurement+0x570/0x570 [ 3342.037599][T23874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:22:57 executing program 3 (fault-call:0 fault-nth:8): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:57 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x21f2) [ 3342.043898][T23874] ? d_absolute_path+0x10f/0x170 [ 3342.048863][T23874] ? kmem_cache_alloc+0x2d4/0x360 [ 3342.053911][T23874] process_measurement+0x11fb/0x17e0 [ 3342.059220][T23874] ? mmap_violation_check+0x1e0/0x1e0 [ 3342.064613][T23874] ? tomoyo_path_number_perm+0x590/0x590 [ 3342.070349][T23874] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3342.076354][T23874] ? find_held_lock+0x2d/0x110 [ 3342.081146][T23874] ? aa_get_task_label+0x211/0x550 [ 3342.086282][T23874] ? lock_downgrade+0x6e0/0x6e0 [ 3342.091149][T23874] ? fsnotify+0x1050/0x1050 [ 3342.095661][T23874] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3342.101231][T23874] ? path_get+0x5d/0x80 [ 3342.105396][T23874] ? aa_get_task_label+0x23a/0x550 [ 3342.110530][T23874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.116792][T23874] ? apparmor_task_getsecid+0xc2/0x110 [ 3342.119180][T23880] FAULT_INJECTION: forcing a failure. [ 3342.119180][T23880] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.122306][T23874] ima_file_check+0xb1/0x100 [ 3342.122339][T23874] ? process_measurement+0x17e0/0x17e0 [ 3342.122370][T23874] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3342.151059][T23874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.157312][T23874] ? may_open+0x1f6/0x420 [ 3342.161646][T23874] path_openat+0x15ca/0x27f0 [ 3342.166238][T23874] ? path_lookupat+0x860/0x860 [ 3342.171006][T23874] ? mark_lock+0xef/0x17b0 [ 3342.175612][T23874] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3342.181679][T23874] do_filp_open+0x1aa/0x400 [ 3342.186185][T23874] ? may_open_dev+0xf0/0xf0 [ 3342.190690][T23874] ? alloc_fd+0x2f0/0x670 [ 3342.195035][T23874] ? rwlock_bug.part.0+0x90/0x90 [ 3342.199975][T23874] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3342.206223][T23874] ? _find_next_bit+0x1e3/0x260 [ 3342.211086][T23874] ? _raw_spin_unlock+0x1a/0x30 [ 3342.215942][T23874] ? alloc_fd+0x2f0/0x670 [ 3342.220315][T23874] do_sys_openat2+0x16d/0x420 [ 3342.224996][T23874] ? build_open_flags+0x6f0/0x6f0 [ 3342.230053][T23874] ? __context_tracking_exit+0x9f/0xb0 [ 3342.235512][T23874] ? lock_downgrade+0x6e0/0x6e0 [ 3342.240364][T23874] __x64_sys_openat+0x13f/0x1f0 [ 3342.245234][T23874] ? __ia32_sys_open+0x1c0/0x1c0 [ 3342.250175][T23874] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3342.256156][T23874] ? syscall_enter_from_user_mode+0x21/0x70 [ 3342.262051][T23874] do_syscall_64+0x35/0xb0 [ 3342.266563][T23874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3342.272466][T23874] RIP: 0033:0x4196d4 [ 3342.276362][T23874] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3342.296145][T23874] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3342.304576][T23874] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3342.312560][T23874] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3342.320551][T23874] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3342.328956][T23874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3342.336924][T23874] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3342.344906][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3342.353713][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3342.363786][T23880] Call Trace: [ 3342.367070][T23880] dump_stack_lvl+0xcd/0x134 [ 3342.371684][T23880] should_fail.cold+0x5/0xa [ 3342.376205][T23880] ? security_inode_alloc+0x34/0x160 [ 3342.381504][T23880] should_failslab+0x5/0x10 [ 3342.386027][T23880] kmem_cache_alloc+0x5b/0x360 [ 3342.390815][T23880] security_inode_alloc+0x34/0x160 [ 3342.395943][T23880] inode_init_always+0x52e/0xc40 [ 3342.399778][ T33] audit: type=1804 audit(1629937377.750:67): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723935383536343237342F73797A6B616C6C65722E66796B6364332F353833342F48C7C060 dev="sda1" ino=14084 res=0 errno=0 [ 3342.400893][T23880] alloc_inode+0x82/0x230 [ 3342.400929][T23880] new_inode+0x27/0x2f0 [ 3342.400954][T23880] __ext4_new_inode+0x34f/0x5b60 [ 3342.449567][T23880] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3342.455540][T23880] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3342.461340][T23880] ? trace_hardirqs_on+0x5b/0x1a0 [ 3342.466359][T23880] ? find_held_lock+0x2d/0x110 [ 3342.471118][T23880] ? ext4_mark_inode_used+0x1a70/0x1a70 [ 3342.476772][T23880] ? do_raw_spin_unlock+0x171/0x230 [ 3342.481982][T23880] ? d_splice_alias+0x4c6/0xc60 [ 3342.486835][T23880] ? ext4_create+0x447/0x4d0 [ 3342.491409][T23880] ext4_create+0x2d6/0x4d0 [ 3342.495813][T23880] ? ext4_mknod+0x4e0/0x4e0 [ 3342.500299][T23880] ? generic_permission+0x121/0x5b0 [ 3342.505480][T23880] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.511747][T23880] ? security_inode_permission+0xc5/0xf0 [ 3342.517628][T23880] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.523878][T23880] ? ext4_mknod+0x4e0/0x4e0 [ 3342.528367][T23880] lookup_open.isra.0+0xf19/0x1300 [ 3342.533464][T23880] ? hashlen_string+0xf0/0xf0 [ 3342.538124][T23880] path_openat+0x9b3/0x27f0 [ 3342.542613][T23880] ? path_lookupat+0x860/0x860 [ 3342.547385][T23880] ? mark_lock+0xef/0x17b0 [ 3342.551786][T23880] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3342.557750][T23880] do_filp_open+0x1aa/0x400 [ 3342.562328][T23880] ? may_open_dev+0xf0/0xf0 [ 3342.566814][T23880] ? alloc_fd+0x2f0/0x670 [ 3342.571128][T23880] ? rwlock_bug.part.0+0x90/0x90 [ 3342.576053][T23880] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3342.582286][T23880] ? _find_next_bit+0x1e3/0x260 [ 3342.587136][T23880] ? _raw_spin_unlock+0x1a/0x30 [ 3342.591985][T23880] ? alloc_fd+0x2f0/0x670 [ 3342.596310][T23880] do_sys_openat2+0x16d/0x420 [ 3342.601066][T23880] ? build_open_flags+0x6f0/0x6f0 [ 3342.606089][T23880] ? __context_tracking_exit+0x9f/0xb0 [ 3342.611555][T23880] ? lock_downgrade+0x6e0/0x6e0 [ 3342.616392][T23880] __x64_sys_openat+0x13f/0x1f0 [ 3342.621237][T23880] ? __ia32_sys_open+0x1c0/0x1c0 [ 3342.626165][T23880] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3342.632152][T23880] ? syscall_enter_from_user_mode+0x21/0x70 [ 3342.638052][T23880] do_syscall_64+0x35/0xb0 [ 3342.642496][T23880] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:22:58 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x200000, 0x0, 0x0, 0x0}) 00:22:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x26a2, 0x21f2) 00:22:58 executing program 1 (fault-call:0 fault-nth:22): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3342.648410][T23880] RIP: 0033:0x4196d4 [ 3342.652313][T23880] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3342.671939][T23880] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3342.680375][T23880] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3342.688363][T23880] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3342.696390][T23880] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3342.704377][T23880] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3342.712364][T23880] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 00:22:58 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x21f2) [ 3342.746186][ T33] audit: type=1800 audit(1629937378.150:68): pid=23888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14209 res=0 errno=0 [ 3342.758440][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3342.773647][T23888] FAULT_INJECTION: forcing a failure. [ 3342.773647][T23888] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.777716][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3342.790542][T23888] CPU: 1 PID: 23888 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3342.799983][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3342.808684][T23888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3342.808700][T23888] Call Trace: [ 3342.808709][T23888] dump_stack_lvl+0xcd/0x134 [ 3342.839342][T23888] should_fail.cold+0x5/0xa [ 3342.843862][T23888] ? ima_add_digest_entry+0x4e/0x510 [ 3342.849166][T23888] should_failslab+0x5/0x10 [ 3342.853690][T23888] kmem_cache_alloc_trace+0x55/0x290 [ 3342.859086][T23888] ima_add_digest_entry+0x4e/0x510 [ 3342.864216][T23888] ima_add_template_entry+0x414/0x790 [ 3342.869610][T23888] ? ima_get_binary_runtime_size+0x40/0x40 [ 3342.875497][T23888] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3342.881273][T23888] ? ima_calc_field_array_hash+0x377/0x430 [ 3342.887097][T23888] ima_store_template+0xdb/0x140 [ 3342.892455][T23888] ima_store_measurement+0x208/0x5a0 [ 3342.897741][T23888] ? ima_collect_measurement+0x570/0x570 [ 3342.903391][T23888] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.909632][T23888] ? d_absolute_path+0x10f/0x170 [ 3342.914718][T23888] ? kmem_cache_alloc+0x2d4/0x360 [ 3342.919909][T23888] process_measurement+0x11fb/0x17e0 [ 3342.925186][T23888] ? mmap_violation_check+0x1e0/0x1e0 [ 3342.930556][T23888] ? tomoyo_path_number_perm+0x590/0x590 [ 3342.936197][T23888] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3342.942185][T23888] ? find_held_lock+0x2d/0x110 [ 3342.946987][T23888] ? aa_get_task_label+0x211/0x550 [ 3342.952093][T23888] ? lock_downgrade+0x6e0/0x6e0 [ 3342.956933][T23888] ? fsnotify+0x1050/0x1050 [ 3342.961427][T23888] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3342.966966][T23888] ? path_get+0x5d/0x80 [ 3342.971373][T23888] ? aa_get_task_label+0x23a/0x550 [ 3342.976492][T23888] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3342.982739][T23888] ? apparmor_task_getsecid+0xc2/0x110 [ 3342.988200][T23888] ima_file_check+0xb1/0x100 [ 3342.992901][T23888] ? process_measurement+0x17e0/0x17e0 [ 3342.998374][T23888] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3343.003908][T23888] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3343.010165][T23888] ? may_open+0x1f6/0x420 [ 3343.014483][T23888] path_openat+0x15ca/0x27f0 [ 3343.019061][T23888] ? path_lookupat+0x860/0x860 [ 3343.023826][T23888] ? mark_lock+0xef/0x17b0 [ 3343.028254][T23888] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3343.034241][T23888] do_filp_open+0x1aa/0x400 [ 3343.038733][T23888] ? may_open_dev+0xf0/0xf0 [ 3343.043222][T23888] ? alloc_fd+0x2f0/0x670 [ 3343.047551][T23888] ? rwlock_bug.part.0+0x90/0x90 [ 3343.052493][T23888] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3343.058724][T23888] ? _find_next_bit+0x1e3/0x260 [ 3343.063568][T23888] ? _raw_spin_unlock+0x1a/0x30 [ 3343.068414][T23888] ? alloc_fd+0x2f0/0x670 [ 3343.072763][T23888] do_sys_openat2+0x16d/0x420 [ 3343.077456][T23888] ? build_open_flags+0x6f0/0x6f0 [ 3343.082466][T23888] ? __context_tracking_exit+0x9f/0xb0 [ 3343.087913][T23888] ? lock_downgrade+0x6e0/0x6e0 [ 3343.092772][T23888] __x64_sys_openat+0x13f/0x1f0 [ 3343.097635][T23888] ? __ia32_sys_open+0x1c0/0x1c0 [ 3343.097727][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3343.102641][T23888] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3343.102669][T23888] ? syscall_enter_from_user_mode+0x21/0x70 [ 3343.102696][T23888] do_syscall_64+0x35/0xb0 [ 3343.102725][T23888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3343.110261][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3343.114826][T23888] RIP: 0033:0x4196d4 [ 3343.114846][T23888] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3343.114870][T23888] RSP: 002b:00007f0ee3cfbcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3343.114896][T23888] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3343.120948][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3343.125273][T23888] RDX: 0000000000004870 RSI: 00007f0ee3cfbd60 RDI: 00000000ffffff9c [ 3343.195990][T23888] RBP: 00007f0ee3cfbd60 R08: 0000000000000000 R09: 0000000000000000 [ 3343.203981][T23888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3343.212317][T23888] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3343.220346][T23888] ima: OUT OF MEMORY ERROR creating queue entry [ 3343.227162][T18465] usb 6-1: unable to read config index 0 descriptor/all [ 3343.234450][T18465] usb 6-1: can't read configurations, error -71 00:22:58 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x518040) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:22:58 executing program 3 (fault-call:0 fault-nth:9): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3343.399417][T32516] usb 3-1: USB disconnect, device number 118 [ 3343.435631][T23905] FAULT_INJECTION: forcing a failure. [ 3343.435631][T23905] name failslab, interval 1, probability 0, space 0, times 0 [ 3343.448531][T23905] CPU: 1 PID: 23905 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3343.457317][T23905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3343.467503][T23905] Call Trace: [ 3343.470796][T23905] dump_stack_lvl+0xcd/0x134 [ 3343.475410][T23905] should_fail.cold+0x5/0xa [ 3343.479967][T23905] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3343.485976][T23905] should_failslab+0x5/0x10 [ 3343.490579][T23905] __kmalloc+0x72/0x310 [ 3343.494841][T23905] ? lock_chain_count+0x20/0x20 [ 3343.499722][T23905] tomoyo_realpath_from_path+0xc3/0x620 [ 3343.505428][T23905] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3343.511690][T23905] tomoyo_check_open_permission+0x272/0x380 [ 3343.517845][T23905] ? tomoyo_path_number_perm+0x590/0x590 [ 3343.523603][T23905] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3343.529601][T23905] ? path_get+0x5d/0x80 [ 3343.533939][T23905] ? lock_downgrade+0x6e0/0x6e0 [ 3343.538790][T23905] ? do_raw_spin_lock+0x120/0x2b0 [ 3343.543939][T23905] tomoyo_file_open+0xa3/0xd0 [ 3343.548608][T23905] security_file_open+0x52/0x4f0 [ 3343.553553][T23905] do_dentry_open+0x34e/0x1110 [ 3343.558310][T23905] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3343.564554][T23905] ? may_open+0x1f6/0x420 [ 3343.568896][T23905] path_openat+0x1c23/0x27f0 [ 3343.573478][T23905] ? path_lookupat+0x860/0x860 [ 3343.578233][T23905] ? mark_lock+0xef/0x17b0 [ 3343.582741][T23905] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3343.588728][T23905] do_filp_open+0x1aa/0x400 [ 3343.593222][T23905] ? may_open_dev+0xf0/0xf0 [ 3343.597714][T23905] ? alloc_fd+0x2f0/0x670 [ 3343.602030][T23905] ? rwlock_bug.part.0+0x90/0x90 [ 3343.606960][T23905] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3343.613262][T23905] ? _find_next_bit+0x1e3/0x260 [ 3343.618109][T23905] ? _raw_spin_unlock+0x1a/0x30 [ 3343.622995][T23905] ? alloc_fd+0x2f0/0x670 [ 3343.627313][T23905] do_sys_openat2+0x16d/0x420 [ 3343.631980][T23905] ? build_open_flags+0x6f0/0x6f0 [ 3343.636992][T23905] ? __context_tracking_exit+0x9f/0xb0 [ 3343.642444][T23905] ? lock_downgrade+0x6e0/0x6e0 [ 3343.647312][T23905] __x64_sys_openat+0x13f/0x1f0 [ 3343.652151][T23905] ? __ia32_sys_open+0x1c0/0x1c0 [ 3343.657076][T23905] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3343.663040][T23905] ? syscall_enter_from_user_mode+0x21/0x70 [ 3343.668930][T23905] do_syscall_64+0x35/0xb0 [ 3343.673342][T23905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3343.679239][T23905] RIP: 0033:0x4196d4 [ 3343.683131][T23905] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3343.702836][T23905] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3343.711241][T23905] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3343.719210][T23905] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3343.727166][T23905] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3343.735127][T23905] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3343.743099][T23905] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3343.751121][T23905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3343.758213][T30893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3343.827618][T18465] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3344.127738][T32516] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3344.147713][T30893] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3344.158017][T30893] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3344.217648][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3344.317620][T30893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3344.326720][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.334865][T30893] usb 5-1: Product: syz [ 3344.339090][T30893] usb 5-1: Manufacturer: syz [ 3344.343691][T30893] usb 5-1: SerialNumber: syz [ 3344.387807][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3344.396880][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.405073][T18465] usb 6-1: Product: syz [ 3344.409359][T18465] usb 6-1: Manufacturer: syz [ 3344.414104][T18465] usb 6-1: SerialNumber: syz 00:22:59 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="978ebf") 00:22:59 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x21f2) 00:22:59 executing program 1 (fault-call:0 fault-nth:23): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:22:59 executing program 3 (fault-call:0 fault-nth:10): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3344.537647][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3344.547366][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3344.557115][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3344.599620][T30893] usb 5-1: USB disconnect, device number 65 [ 3344.601822][T23920] FAULT_INJECTION: forcing a failure. [ 3344.601822][T23920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3344.605759][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 3344.605773][ T33] audit: type=1800 audit(1629937380.010:71): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14273 res=0 errno=0 [ 3344.619119][T23920] CPU: 0 PID: 23920 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3344.626633][T23921] FAULT_INJECTION: forcing a failure. [ 3344.626633][T23921] name failslab, interval 1, probability 0, space 0, times 0 [ 3344.646096][T23920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.646116][T23920] Call Trace: [ 3344.646125][T23920] dump_stack_lvl+0xcd/0x134 [ 3344.646154][T23920] should_fail.cold+0x5/0xa [ 3344.646177][T23920] _copy_to_user+0x2c/0x150 [ 3344.646202][T23920] simple_read_from_buffer+0xcc/0x160 [ 3344.646230][T23920] proc_fail_nth_read+0x187/0x220 [ 3344.646260][T23920] ? proc_sessionid_read+0x220/0x220 [ 3344.710844][T23920] ? security_file_permission+0x248/0x560 [ 3344.716596][T23920] ? proc_sessionid_read+0x220/0x220 [ 3344.721905][T23920] vfs_read+0x1b5/0x570 [ 3344.726323][T23920] ksys_read+0x12d/0x250 [ 3344.730845][T23920] ? vfs_write+0x9f0/0x9f0 [ 3344.735257][T23920] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3344.741236][T23920] ? syscall_enter_from_user_mode+0x21/0x70 [ 3344.747130][T23920] do_syscall_64+0x35/0xb0 [ 3344.751552][T23920] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3344.757457][T23920] RIP: 0033:0x41936c [ 3344.761350][T23920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3344.780958][T23920] RSP: 002b:00007f0ee3cfc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3344.789386][T23920] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041936c [ 3344.797365][T23920] RDX: 000000000000000f RSI: 00007f0ee3cfc1e0 RDI: 0000000000000003 [ 3344.805336][T23920] RBP: 00007f0ee3cfc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3344.813303][T23920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3344.821272][T23920] R13: 00007ffe9cf6eacf R14: 00007f0ee3cfc300 R15: 0000000000022000 [ 3344.829254][T23921] CPU: 1 PID: 23921 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3344.838042][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.848199][T23921] Call Trace: [ 3344.851499][T23921] dump_stack_lvl+0xcd/0x134 [ 3344.856111][T23921] should_fail.cold+0x5/0xa [ 3344.860633][T23921] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3344.866044][T23921] should_failslab+0x5/0x10 [ 3344.870571][T23921] __kmalloc+0x72/0x310 [ 3344.874752][T23921] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3344.879969][T23921] tomoyo_encode+0x28/0x50 [ 3344.884400][T23921] tomoyo_realpath_from_path+0x186/0x620 [ 3344.890049][T23921] tomoyo_check_open_permission+0x272/0x380 [ 3344.895961][T23921] ? tomoyo_path_number_perm+0x590/0x590 [ 3344.901613][T23921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3344.907637][T23921] ? path_get+0x5d/0x80 [ 3344.911806][T23921] ? lock_downgrade+0x6e0/0x6e0 [ 3344.916674][T23921] ? do_raw_spin_lock+0x120/0x2b0 [ 3344.921717][T23921] tomoyo_file_open+0xa3/0xd0 [ 3344.926414][T23921] security_file_open+0x52/0x4f0 [ 3344.931400][T23921] do_dentry_open+0x34e/0x1110 [ 3344.936182][T23921] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3344.942448][T23921] ? may_open+0x1f6/0x420 [ 3344.946817][T23921] path_openat+0x1c23/0x27f0 00:23:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xa226, 0x21f2) 00:23:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0x21f2) [ 3344.951423][T23921] ? path_lookupat+0x860/0x860 [ 3344.956199][T23921] ? mark_lock+0xef/0x17b0 [ 3344.960806][T23921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3344.966889][T23921] do_filp_open+0x1aa/0x400 [ 3344.971410][T23921] ? may_open_dev+0xf0/0xf0 [ 3344.975925][T23921] ? alloc_fd+0x2f0/0x670 [ 3344.980281][T23921] ? rwlock_bug.part.0+0x90/0x90 [ 3344.985232][T23921] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3344.991528][T23921] ? _find_next_bit+0x1e3/0x260 [ 3344.996412][T23921] ? _raw_spin_unlock+0x1a/0x30 00:23:00 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x1000000, 0x0, 0x0, 0x0}) 00:23:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x21f2) 00:23:00 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3345.001282][T23921] ? alloc_fd+0x2f0/0x670 [ 3345.005639][T23921] do_sys_openat2+0x16d/0x420 [ 3345.010338][T23921] ? build_open_flags+0x6f0/0x6f0 [ 3345.015385][T23921] ? __context_tracking_exit+0x9f/0xb0 [ 3345.020884][T23921] ? lock_downgrade+0x6e0/0x6e0 [ 3345.025760][T23921] __x64_sys_openat+0x13f/0x1f0 [ 3345.030632][T23921] ? __ia32_sys_open+0x1c0/0x1c0 [ 3345.035599][T23921] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3345.041601][T23921] ? syscall_enter_from_user_mode+0x21/0x70 [ 3345.047528][T23921] do_syscall_64+0x35/0xb0 00:23:00 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0x21f2) [ 3345.051971][T23921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3345.057894][T23921] RIP: 0033:0x4196d4 [ 3345.061799][T23921] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3345.081696][T23921] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3345.090568][T23921] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3345.098596][T23921] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3345.106665][T23921] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3345.114745][T23921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3345.122770][T23921] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3345.131066][T23921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3345.152629][ T33] audit: type=1800 audit(1629937380.560:72): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14225 res=0 errno=0 [ 3345.161140][T18465] usb 6-1: USB disconnect, device number 30 [ 3345.255587][ T33] audit: type=1800 audit(1629937380.640:73): pid=23921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14305 res=0 errno=0 [ 3345.427489][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3345.434425][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3345.443555][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3345.491259][T30893] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3345.577499][T18465] usb 6-1: new high-speed USB device number 31 using dummy_hcd 00:23:01 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:01 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x4870) [ 3345.699260][T32516] usb 3-1: USB disconnect, device number 119 [ 3345.726870][ T33] audit: type=1800 audit(1629937381.130:74): pid=23961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13965 res=0 errno=0 [ 3345.768466][ T33] audit: type=1800 audit(1629937381.160:75): pid=23961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13965 res=0 errno=0 [ 3345.897722][T30893] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3345.907430][T30893] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 3345.917231][T30893] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3345.930756][T30893] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3345.987576][T18465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3346.117478][T30893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3346.126568][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.134620][T30893] usb 5-1: Product: syz [ 3346.138946][T30893] usb 5-1: Manufacturer: syz [ 3346.143534][T30893] usb 5-1: SerialNumber: syz [ 3346.187625][T18465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3346.196720][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.204749][T18465] usb 6-1: Product: syz [ 3346.208966][T18465] usb 6-1: Manufacturer: syz [ 3346.213555][T18465] usb 6-1: SerialNumber: syz [ 3346.218469][T32516] usb 3-1: new high-speed USB device number 120 using dummy_hcd 00:23:01 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x4870) 00:23:01 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0x21f2) 00:23:01 executing program 3 (fault-call:0 fault-nth:11): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:01 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x4870) [ 3346.435841][ T33] audit: type=1800 audit(1629937381.840:76): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14401 res=0 errno=0 [ 3346.441773][T30893] usb 5-1: USB disconnect, device number 66 00:23:01 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x2000000, 0x0, 0x0, 0x0}) [ 3346.483295][T23977] FAULT_INJECTION: forcing a failure. [ 3346.483295][T23977] name failslab, interval 1, probability 0, space 0, times 0 [ 3346.496071][T23977] CPU: 0 PID: 23977 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3346.504868][T23977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3346.514943][T23977] Call Trace: [ 3346.518234][T23977] dump_stack_lvl+0xcd/0x134 [ 3346.522850][T23977] should_fail.cold+0x5/0xa [ 3346.527370][T23977] ? integrity_inode_get+0x5a/0x270 00:23:01 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) [ 3346.532599][T23977] should_failslab+0x5/0x10 [ 3346.537126][T23977] kmem_cache_alloc+0x5b/0x360 [ 3346.542012][T23977] ? ima_get_action+0x7a/0xa0 [ 3346.546715][T23977] integrity_inode_get+0x5a/0x270 [ 3346.551686][T18465] usb 6-1: USB disconnect, device number 31 [ 3346.551755][T23977] process_measurement+0x33d/0x17e0 [ 3346.562833][T23977] ? mmap_violation_check+0x1e0/0x1e0 [ 3346.568235][T23977] ? tomoyo_path_number_perm+0x590/0x590 [ 3346.573887][T23977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3346.579974][T23977] ? find_held_lock+0x2d/0x110 [ 3346.584769][T23977] ? aa_get_task_label+0x211/0x550 [ 3346.589904][T23977] ? lock_downgrade+0x6e0/0x6e0 [ 3346.591087][ T33] audit: type=1800 audit(1629937381.880:77): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14401 res=0 errno=0 [ 3346.594765][T23977] ? fsnotify+0x1050/0x1050 [ 3346.594791][T23977] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3346.594821][T23977] ? path_get+0x5d/0x80 00:23:02 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x3000000, 0x0, 0x0, 0x0}) [ 3346.617851][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3346.620655][T23977] ? aa_get_task_label+0x23a/0x550 [ 3346.620696][T23977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3346.620729][T23977] ? apparmor_task_getsecid+0xc2/0x110 [ 3346.626285][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3346.630418][T23977] ima_file_check+0xb1/0x100 [ 3346.630453][T23977] ? process_measurement+0x17e0/0x17e0 [ 3346.630478][T23977] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3346.630503][T23977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3346.630535][T23977] ? may_open+0x1f6/0x420 [ 3346.640289][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3346.645324][T23977] path_openat+0x15ca/0x27f0 [ 3346.703251][ T33] audit: type=1800 audit(1629937382.110:78): pid=23982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=13926 res=0 errno=0 [ 3346.705474][T23977] ? path_lookupat+0x860/0x860 00:23:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x21f2) 00:23:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x21f2) [ 3346.705509][T23977] ? mark_lock+0xef/0x17b0 [ 3346.705533][T23977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3346.746391][T23977] do_filp_open+0x1aa/0x400 [ 3346.750917][T23977] ? may_open_dev+0xf0/0xf0 [ 3346.755530][T23977] ? alloc_fd+0x2f0/0x670 [ 3346.759882][T23977] ? rwlock_bug.part.0+0x90/0x90 [ 3346.764845][T23977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3346.771107][T23977] ? _find_next_bit+0x1e3/0x260 [ 3346.775978][T23977] ? _raw_spin_unlock+0x1a/0x30 [ 3346.780851][T23977] ? alloc_fd+0x2f0/0x670 [ 3346.785197][T23977] do_sys_openat2+0x16d/0x420 [ 3346.789889][T23977] ? build_open_flags+0x6f0/0x6f0 [ 3346.794929][T23977] ? __context_tracking_exit+0x9f/0xb0 [ 3346.800401][T23977] ? lock_downgrade+0x6e0/0x6e0 [ 3346.805262][T23977] __x64_sys_openat+0x13f/0x1f0 [ 3346.810134][T23977] ? __ia32_sys_open+0x1c0/0x1c0 [ 3346.815083][T23977] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3346.821074][T23977] ? syscall_enter_from_user_mode+0x21/0x70 [ 3346.826984][T23977] do_syscall_64+0x35/0xb0 [ 3346.831421][T23977] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:23:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x21f2) [ 3346.837337][T23977] RIP: 0033:0x4196d4 [ 3346.841245][T23977] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3346.860904][T23977] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3346.869423][T23977] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3346.877505][T23977] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3346.885615][T23977] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3346.893602][T23977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3346.901761][T23977] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3346.910049][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3346.928471][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3346.937660][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.945837][ T33] audit: type=1800 audit(1629937382.340:79): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14433 res=0 errno=0 [ 3347.014016][ T33] audit: type=1800 audit(1629937382.340:80): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14433 res=0 errno=0 00:23:02 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0xf6, 0x20}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0}]}) 00:23:02 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xa226, 0x21f2) 00:23:02 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x4870) 00:23:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x21f2) 00:23:02 executing program 3 (fault-call:0 fault-nth:12): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3347.257378][ T1499] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3347.259100][T32516] usb 3-1: USB disconnect, device number 120 [ 3347.333733][T24025] FAULT_INJECTION: forcing a failure. [ 3347.333733][T24025] name failslab, interval 1, probability 0, space 0, times 0 [ 3347.346596][T24025] CPU: 1 PID: 24025 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3347.355383][T24025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3347.365459][T24025] Call Trace: [ 3347.368748][T24025] dump_stack_lvl+0xcd/0x134 [ 3347.373357][T24025] should_fail.cold+0x5/0xa [ 3347.377880][T24025] should_failslab+0x5/0x10 [ 3347.382403][T24025] __kmalloc_track_caller+0x79/0x2f0 [ 3347.387729][T24025] ? ima_collect_measurement+0x342/0x570 [ 3347.393391][T24025] krealloc+0x7e/0xd0 [ 3347.397393][T24025] ima_collect_measurement+0x342/0x570 [ 3347.402875][T24025] ? ima_get_action+0xa0/0xa0 [ 3347.407572][T24025] ? ima_get_cache_status+0x1d0/0x1d0 [ 3347.412971][T24025] process_measurement+0xd1c/0x17e0 [ 3347.418191][T24025] ? mmap_violation_check+0x1e0/0x1e0 [ 3347.423588][T24025] ? tomoyo_path_number_perm+0x590/0x590 00:23:02 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4870) 00:23:02 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:02 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x21f2) [ 3347.429328][T24025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3347.435329][T24025] ? find_held_lock+0x2d/0x110 [ 3347.440147][T24025] ? aa_get_task_label+0x211/0x550 [ 3347.445280][T24025] ? lock_downgrade+0x6e0/0x6e0 [ 3347.450147][T24025] ? fsnotify+0x1050/0x1050 [ 3347.454663][T24025] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3347.460316][T24025] ? path_get+0x5d/0x80 [ 3347.464485][T24025] ? aa_get_task_label+0x23a/0x550 [ 3347.469618][T24025] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3347.475878][T24025] ? apparmor_task_getsecid+0xc2/0x110 [ 3347.481382][T24025] ima_file_check+0xb1/0x100 [ 3347.485992][T24025] ? process_measurement+0x17e0/0x17e0 [ 3347.491901][T24025] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3347.497472][T24025] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3347.503745][T24025] ? may_open+0x1f6/0x420 [ 3347.508106][T24025] path_openat+0x15ca/0x27f0 [ 3347.512711][T24025] ? path_lookupat+0x860/0x860 [ 3347.517490][T24025] ? mark_lock+0xef/0x17b0 [ 3347.521947][T24025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3347.527943][T24025] do_filp_open+0x1aa/0x400 [ 3347.532473][T24025] ? may_open_dev+0xf0/0xf0 [ 3347.537016][T24025] ? alloc_fd+0x2f0/0x670 [ 3347.541366][T24025] ? rwlock_bug.part.0+0x90/0x90 [ 3347.546411][T24025] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3347.552670][T24025] ? _find_next_bit+0x1e3/0x260 [ 3347.557542][T24025] ? _raw_spin_unlock+0x1a/0x30 [ 3347.562418][T24025] ? alloc_fd+0x2f0/0x670 [ 3347.566779][T24025] do_sys_openat2+0x16d/0x420 [ 3347.571647][T24025] ? build_open_flags+0x6f0/0x6f0 [ 3347.576692][T24025] ? __context_tracking_exit+0x9f/0xb0 [ 3347.582273][T24025] ? lock_downgrade+0x6e0/0x6e0 [ 3347.587116][T24025] __x64_sys_openat+0x13f/0x1f0 [ 3347.591984][T24025] ? __ia32_sys_open+0x1c0/0x1c0 [ 3347.596949][T24025] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3347.602931][T24025] ? syscall_enter_from_user_mode+0x21/0x70 [ 3347.608824][T24025] do_syscall_64+0x35/0xb0 [ 3347.613267][T24025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3347.619382][T24025] RIP: 0033:0x4196d4 [ 3347.623266][T24025] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3347.643342][T24025] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3347.651754][T24025] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3347.659923][T24025] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3347.667910][T24025] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3347.675893][T24025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3347.683958][T24025] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3347.857694][T28575] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3347.957298][ T1499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3348.037254][T32516] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3348.137676][ T1499] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3348.146724][ T1499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.154851][ T1499] usb 6-1: Product: syz [ 3348.159131][ T1499] usb 6-1: Manufacturer: syz [ 3348.163729][ T1499] usb 6-1: SerialNumber: syz [ 3348.247313][T28575] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3348.256995][T28575] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3348.266780][T28575] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:23:03 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x4000000, 0x0, 0x0, 0x0}) 00:23:03 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x4870) 00:23:03 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x21f2) 00:23:03 executing program 3 (fault-call:0 fault-nth:13): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3348.448022][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3348.457916][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3348.465585][ T1499] usb 6-1: USB disconnect, device number 32 [ 3348.467619][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3348.499133][T24051] FAULT_INJECTION: forcing a failure. [ 3348.499133][T24051] name failslab, interval 1, probability 0, space 0, times 0 [ 3348.512102][T24051] CPU: 1 PID: 24051 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3348.520973][T24051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3348.531045][T24051] Call Trace: [ 3348.534329][T24051] dump_stack_lvl+0xcd/0x134 [ 3348.538950][T24051] should_fail.cold+0x5/0xa [ 3348.543477][T24051] ? audit_log_start.part.0+0x25a/0x740 [ 3348.549421][T24051] should_failslab+0x5/0x10 [ 3348.553950][T24051] kmem_cache_alloc+0x5b/0x360 [ 3348.558747][T24051] audit_log_start.part.0+0x25a/0x740 [ 3348.564136][T24051] ? audit_log_task_context+0x160/0x160 [ 3348.569697][T24051] ? audit_compare_dname_path+0x120/0x120 [ 3348.575454][T24051] ? lock_acquire+0x19d/0x4d0 [ 3348.580149][T24051] ? find_held_lock+0x2d/0x110 [ 3348.585236][T24051] audit_log_start+0x5f/0x90 [ 3348.589855][T24051] integrity_audit_message+0x100/0x450 [ 3348.595334][T24051] ? integrity_kernel_read+0xb0/0xb0 [ 3348.600639][T24051] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3348.606218][T24051] ? kfree+0x309/0x400 [ 3348.610331][T24051] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3348.615901][T24051] integrity_audit_msg+0x3d/0x50 [ 3348.620861][T24051] ima_collect_measurement+0x3d4/0x570 [ 3348.626371][T24051] ? ima_get_action+0xa0/0xa0 [ 3348.631168][T24051] ? ima_get_cache_status+0x1d0/0x1d0 [ 3348.636554][T24051] process_measurement+0xd1c/0x17e0 [ 3348.641751][T24051] ? mmap_violation_check+0x1e0/0x1e0 [ 3348.647118][T24051] ? tomoyo_path_number_perm+0x590/0x590 [ 3348.652753][T24051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3348.658721][T24051] ? find_held_lock+0x2d/0x110 [ 3348.663490][T24051] ? aa_get_task_label+0x211/0x550 [ 3348.668633][T24051] ? lock_downgrade+0x6e0/0x6e0 [ 3348.673561][T24051] ? fsnotify+0x1050/0x1050 [ 3348.678070][T24051] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3348.683643][T24051] ? path_get+0x5d/0x80 [ 3348.687852][T24051] ? aa_get_task_label+0x23a/0x550 [ 3348.693006][T24051] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3348.699287][T24051] ? apparmor_task_getsecid+0xc2/0x110 [ 3348.704763][T24051] ima_file_check+0xb1/0x100 [ 3348.709350][T24051] ? process_measurement+0x17e0/0x17e0 [ 3348.714927][T24051] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3348.720721][T24051] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3348.727048][T24051] ? may_open+0x1f6/0x420 [ 3348.731371][T24051] path_openat+0x15ca/0x27f0 [ 3348.736047][T24051] ? path_lookupat+0x860/0x860 [ 3348.740826][T24051] ? mark_lock+0xef/0x17b0 [ 3348.745231][T24051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3348.751202][T24051] do_filp_open+0x1aa/0x400 [ 3348.755782][T24051] ? may_open_dev+0xf0/0xf0 [ 3348.760364][T24051] ? alloc_fd+0x2f0/0x670 [ 3348.764681][T24051] ? rwlock_bug.part.0+0x90/0x90 [ 3348.769607][T24051] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3348.775870][T24051] ? _find_next_bit+0x1e3/0x260 [ 3348.780725][T24051] ? _raw_spin_unlock+0x1a/0x30 [ 3348.786005][T24051] ? alloc_fd+0x2f0/0x670 [ 3348.790374][T24051] do_sys_openat2+0x16d/0x420 [ 3348.795051][T24051] ? build_open_flags+0x6f0/0x6f0 [ 3348.800222][T24051] ? __context_tracking_exit+0x9f/0xb0 [ 3348.805680][T24051] ? lock_downgrade+0x6e0/0x6e0 [ 3348.810614][T24051] __x64_sys_openat+0x13f/0x1f0 [ 3348.815481][T24051] ? __ia32_sys_open+0x1c0/0x1c0 [ 3348.820427][T24051] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3348.826407][T24051] ? syscall_enter_from_user_mode+0x21/0x70 [ 3348.832325][T24051] do_syscall_64+0x35/0xb0 [ 3348.836846][T24051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3348.842733][T24051] RIP: 0033:0x4196d4 [ 3348.846610][T24051] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3348.866216][T24051] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3348.874620][T24051] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3348.882586][T24051] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3348.890544][T24051] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3348.898507][T24051] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3348.906480][T24051] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3348.937878][T28575] usb 5-1: string descriptor 0 read error: -22 [ 3348.944574][T28575] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3348.953894][T28575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.097253][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3349.106309][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.114384][T32516] usb 3-1: Product: syz [ 3349.118612][T32516] usb 3-1: Manufacturer: syz [ 3349.123450][T32516] usb 3-1: SerialNumber: syz [ 3349.149114][T24027] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3349.225324][ T1499] usb 5-1: USB disconnect, device number 67 00:23:04 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000240)={0x0, 0xe, 0xcd, {0xcd, 0xe, "e7e70282417d0edcecbd5f28f4dc0af2dbefe3da6ed8a47023e2ec35dd5f1cf1a37f33cd1683768cda07e9b993f63204a1cd0f49fb645730f33c287010b349c609c76c3ac6e6c5a11c7351c92ea37c1caefa9d791a0e90ae3c27462efa4f0e6e52d81e031078252d5f92ad35ecc84cfb57bba157030d37665cd510093a860cc00774a23897cd30c7cfe4440b10f5db8a5c5f29a30b14f7c45ae114fd2f509fe3674db70d7a1b80bcbd85befe74d966228a8dec2b929ec73904cca88048bc536875cba65e06087d599a97dc"}}, &(0x7f0000000340)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x20, 0x16, 0xf2, "6b1e12c5c4b5a9b4ef15030e3599c5961d423d1e759770b621b2f24ebdd2ba85442bca9947bd281c92a5d9aa743a523041c9899ab0ca9000f7a491b5ff1ebd41010539a5c3e61f7ffc451e19e7603b9102d7027a025811c9e00d51c5670a68d2c5884ab355bf9fff20c66471f5c1201b73a447e0a722f83e36c61347573c09be9d362917ab6e7c1fc119dc14ca6d38e35e80416b43c1621b962ee03ffa96d61d3bc406db6393a84843e9f59736541590f33641c5f6117cab5eb3849a1a3a3a62f828bfbe830bb30b1ade44de7e45be090ceb447dac6134eed364bcb6ef639e80d70a340b4d24fac29beafb31dc427642d851"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000080)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000100)={0x20, 0x0, 0xaf, {0xad, "c354c8921eca4277dc68448e9d1cc4ddaf2a23bba040061318b80f222d5d1f77323f6d6e157bd704d9bf6d6a3e8e770b032a3e73aee0b2aa7fd06b493c7457fce949d157033305cb9e0398bd7c7758d9dd7555f0bed651afc3a749bcb97362e4b4844db9946f63775d44fc5daa5aa7d2891c03f3fbe6d1d214cf5004e7a2d0390a26cd372706077f4eb3c7453ef2c95e61e0609138ded93d75abf6980e9c0b2db7b1b5364480aa325c350429b4"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x49}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x1e}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x4870) 00:23:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x21f2) 00:23:04 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x5000000, 0x0, 0x0, 0x0}) 00:23:04 executing program 3 (fault-call:0 fault-nth:14): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:04 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x21f2) [ 3349.403756][T24076] FAULT_INJECTION: forcing a failure. [ 3349.403756][T24076] name failslab, interval 1, probability 0, space 0, times 0 [ 3349.416470][T24076] CPU: 1 PID: 24076 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3349.425252][T24076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3349.435324][T24076] Call Trace: [ 3349.438610][T24076] dump_stack_lvl+0xcd/0x134 [ 3349.443224][T24076] should_fail.cold+0x5/0xa [ 3349.447744][T24076] ? __alloc_skb+0x20b/0x340 [ 3349.452358][T24076] should_failslab+0x5/0x10 [ 3349.456884][T24076] kmem_cache_alloc_node+0x55/0x390 [ 3349.462111][T24076] __alloc_skb+0x20b/0x340 [ 3349.466553][T24076] audit_log_start.part.0+0x27f/0x740 [ 3349.471947][T24076] ? audit_log_task_context+0x160/0x160 [ 3349.477509][T24076] ? audit_compare_dname_path+0x120/0x120 [ 3349.483255][T24076] ? lock_acquire+0x19d/0x4d0 [ 3349.487945][T24076] ? find_held_lock+0x2d/0x110 [ 3349.492731][T24076] audit_log_start+0x5f/0x90 [ 3349.497333][T24076] integrity_audit_message+0x100/0x450 [ 3349.502806][T24076] ? integrity_kernel_read+0xb0/0xb0 [ 3349.508107][T24076] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3349.513801][T24076] ? kfree+0x309/0x400 [ 3349.517885][T24076] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3349.523454][T24076] integrity_audit_msg+0x3d/0x50 [ 3349.528408][T24076] ima_collect_measurement+0x3d4/0x570 [ 3349.533885][T24076] ? ima_get_action+0xa0/0xa0 [ 3349.538672][T24076] ? ima_get_cache_status+0x1d0/0x1d0 [ 3349.544067][T24076] process_measurement+0xd1c/0x17e0 [ 3349.549286][T24076] ? mmap_violation_check+0x1e0/0x1e0 00:23:04 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x21f2) 00:23:04 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x4870) 00:23:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x4870) [ 3349.554676][T24076] ? tomoyo_path_number_perm+0x590/0x590 [ 3349.560323][T24076] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3349.566313][T24076] ? find_held_lock+0x2d/0x110 [ 3349.571091][T24076] ? aa_get_task_label+0x211/0x550 [ 3349.576237][T24076] ? lock_downgrade+0x6e0/0x6e0 [ 3349.581103][T24076] ? fsnotify+0x1050/0x1050 [ 3349.585634][T24076] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3349.591209][T24076] ? path_get+0x5d/0x80 [ 3349.595376][T24076] ? aa_get_task_label+0x23a/0x550 00:23:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x21f2) [ 3349.600517][T24076] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3349.606782][T24076] ? apparmor_task_getsecid+0xc2/0x110 [ 3349.612258][T24076] ima_file_check+0xb1/0x100 [ 3349.616866][T24076] ? process_measurement+0x17e0/0x17e0 [ 3349.622341][T24076] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3349.627901][T24076] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3349.634163][T24076] ? may_open+0x1f6/0x420 [ 3349.638533][T24076] path_openat+0x15ca/0x27f0 [ 3349.643146][T24076] ? path_lookupat+0x860/0x860 [ 3349.647935][T24076] ? mark_lock+0xef/0x17b0 [ 3349.652384][T24076] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3349.658378][T24076] do_filp_open+0x1aa/0x400 [ 3349.662906][T24076] ? may_open_dev+0xf0/0xf0 [ 3349.667423][T24076] ? alloc_fd+0x2f0/0x670 [ 3349.671776][T24076] ? rwlock_bug.part.0+0x90/0x90 [ 3349.676728][T24076] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3349.682990][T24076] ? _find_next_bit+0x1e3/0x260 [ 3349.687879][T24076] ? _raw_spin_unlock+0x1a/0x30 [ 3349.692762][T24076] ? alloc_fd+0x2f0/0x670 [ 3349.697118][T24076] do_sys_openat2+0x16d/0x420 [ 3349.697255][T28575] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3349.701817][T24076] ? build_open_flags+0x6f0/0x6f0 [ 3349.701851][T24076] ? __context_tracking_exit+0x9f/0xb0 [ 3349.701878][T24076] ? lock_downgrade+0x6e0/0x6e0 [ 3349.701900][T24076] __x64_sys_openat+0x13f/0x1f0 [ 3349.729646][T24076] ? __ia32_sys_open+0x1c0/0x1c0 [ 3349.734610][T24076] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3349.736235][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 3349.736249][ T33] audit: type=1800 audit(1629937385.140:91): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14820 res=0 errno=0 [ 3349.740597][T24076] ? syscall_enter_from_user_mode+0x21/0x70 [ 3349.740629][T24076] do_syscall_64+0x35/0xb0 [ 3349.740660][T24076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3349.740692][T24076] RIP: 0033:0x4196d4 00:23:05 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x4870) [ 3349.740709][T24076] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3349.757717][ T33] audit: type=1800 audit(1629937385.170:92): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14820 res=0 errno=0 [ 3349.768000][T24076] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3349.768028][T24076] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3349.768047][T24076] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c 00:23:05 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x4870) [ 3349.768068][T24076] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3349.768082][T24076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3349.768097][T24076] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3349.768265][T24076] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 3349.871003][ T33] audit: type=1800 audit(1629937385.280:93): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14820 res=0 errno=0 [ 3349.877864][T24076] audit: out of memory in audit_log_start [ 3349.934464][T32516] usb 3-1: USB disconnect, device number 121 [ 3349.940700][ T33] audit: type=1800 audit(1629937385.330:94): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14820 res=0 errno=0 [ 3349.999167][ T33] audit: type=1800 audit(1629937385.380:95): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14820 res=0 errno=0 [ 3350.077150][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3350.247621][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3350.256831][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3350.264897][T28575] usb 6-1: Product: syz [ 3350.269140][T28575] usb 6-1: Manufacturer: syz [ 3350.273733][T28575] usb 6-1: SerialNumber: syz [ 3350.337074][T32516] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3350.560753][T28575] usb 6-1: USB disconnect, device number 33 [ 3350.737106][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3350.747147][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3350.756780][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3351.017085][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3351.023327][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3351.032417][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:06 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40000200000002005ffc5d91a30e90771eafc875bfae0dfb65b9acbbe4cb64ed2ba23b76e7df218351fbedeb087ff4a486ae1ce9bb7652d50eaac3"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x1, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0x7}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x1}) 00:23:06 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0x4870) 00:23:06 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x21f2) 00:23:06 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x21f2) 00:23:06 executing program 3 (fault-call:0 fault-nth:15): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:06 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x6000000, 0x0, 0x0, 0x0}) [ 3351.299010][T32516] usb 3-1: USB disconnect, device number 122 [ 3351.389621][T24136] FAULT_INJECTION: forcing a failure. [ 3351.389621][T24136] name failslab, interval 1, probability 0, space 0, times 0 [ 3351.402438][T24136] CPU: 0 PID: 24136 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3351.411221][T24136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3351.421301][T24136] Call Trace: [ 3351.424595][T24136] dump_stack_lvl+0xcd/0x134 [ 3351.429207][T24136] should_fail.cold+0x5/0xa [ 3351.433731][T24136] should_failslab+0x5/0x10 [ 3351.438255][T24136] __kmalloc_node_track_caller+0x7d/0x330 [ 3351.443998][T24136] ? audit_log_start.part.0+0x27f/0x740 [ 3351.447247][ T33] audit: type=1800 audit(1629937386.800:96): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15123 res=0 errno=0 [ 3351.449553][T24136] __alloc_skb+0xde/0x340 [ 3351.449588][T24136] audit_log_start.part.0+0x27f/0x740 [ 3351.480428][T24136] ? audit_log_task_context+0x160/0x160 00:23:06 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x9c, {0x9c, 0x23, "066d36785e6fedb275e277eca33a0b9a73c666b3d1dde2814f91a421d2fae5294b911569ac02ce172f9fd39c2364c01b187876abbf448b5717e39ac2a4d698c827feac1103b2e50280f3ce9807a346b1b7db1e5c8f9257d4a09fe23031b40d480d60b783229d0f9186222af9c115249ac9595b1957d9c59e5b7595f84e061e56cfd9d5a4be76ecd2335ce43712102829daa6e44102f50f735946"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x9, "07f63b59b0723d6b3a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3a}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4be, 0x80, 0x40, 0x0, 0x7, 0x3f, 0x81, 0x8, 0x8, 0xffff, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x8000}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x40, 0x23, 0xd2, {0xd2, 0xf, "af14cce394fcdacbcdf29dafa9c02f5d5a59d043edf7621d02679ec6a54b4bca378453677eea487dab84befc7f8047693958ac47fcb5100a6b9c6e2a6a5cc0676f947fbbc6862d255e4f27886b03b4de9b92bec497a4480702181c8f379b04ac7e87fd121825d93dfa38fae3d90e34a195b505fabeab3c7600ef117de431132fc0d39057072ed9e3231de677afc02512ea828edc6f35d20534037a4533a96915fea5c6f37e955078efdef2f1b481d2a914398a3b04576f61a48b8fcda212ac4def5969d615f5c9ecee19cd94dd95cdf0"}}, &(0x7f0000000580)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "091bece3210dbf881c6743c0b57e4bb04a5a5452ea36d8a9c159e762c750f339881ee7a6cf76a7b28d63c690247ab35a21f3c5c05d5f0ebf699e0327529fc13f708ee039046bfb1f9773a440d145737df892d5e3681a6fa388cd9b5cdca625616314930ec1ee6afe4e9877080c"}}}, &(0x7f0000001880)={0x44, &(0x7f0000000640)={0x40, 0xf, 0x4, "d84a0957"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9b}, &(0x7f0000000700)={0x20, 0x81, 0x3, "de5500"}, &(0x7f0000001780)={0x20, 0x82, 0x3, "228e6f"}, &(0x7f00000017c0)={0x20, 0x83, 0x3, "2ec626"}, &(0x7f0000001800)={0x20, 0x84, 0x3, "bc1d80"}, &(0x7f0000001840)={0x20, 0x85, 0x3, "c0aec7"}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a9a440000102030109021b001f01e68003090400000207010000090501020000fdfe48"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:06 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0x4870) [ 3351.485989][T24136] ? audit_compare_dname_path+0x120/0x120 [ 3351.491733][T24136] ? lock_acquire+0x19d/0x4d0 [ 3351.496429][T24136] ? ___slab_alloc+0x17c/0x820 [ 3351.499950][ T33] audit: type=1800 audit(1629937386.810:97): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15123 res=0 errno=0 [ 3351.501210][T24136] audit_log_start+0x5f/0x90 [ 3351.501238][T24136] integrity_audit_message+0x100/0x450 [ 3351.501267][T24136] ? integrity_kernel_read+0xb0/0xb0 00:23:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x21f2) [ 3351.537857][T24136] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3351.543426][T24136] ? kfree+0x309/0x400 [ 3351.547602][T24136] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3351.553279][T24136] integrity_audit_msg+0x3d/0x50 [ 3351.558260][T24136] ima_collect_measurement+0x3d4/0x570 [ 3351.563917][T24136] ? ima_get_action+0xa0/0xa0 [ 3351.568621][T24136] ? ima_get_cache_status+0x1d0/0x1d0 [ 3351.574014][T24136] process_measurement+0xd1c/0x17e0 [ 3351.579229][T24136] ? mmap_violation_check+0x1e0/0x1e0 [ 3351.584618][T24136] ? tomoyo_path_number_perm+0x590/0x590 [ 3351.590266][T24136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3351.596264][T24136] ? find_held_lock+0x2d/0x110 [ 3351.601050][T24136] ? aa_get_task_label+0x211/0x550 [ 3351.606182][T24136] ? lock_downgrade+0x6e0/0x6e0 [ 3351.611057][T24136] ? fsnotify+0x1050/0x1050 [ 3351.615569][T24136] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3351.621132][T24136] ? path_get+0x5d/0x80 [ 3351.625369][T24136] ? aa_get_task_label+0x23a/0x550 [ 3351.630592][T24136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:23:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0x21f2) [ 3351.636851][T24136] ? apparmor_task_getsecid+0xc2/0x110 [ 3351.642330][T24136] ima_file_check+0xb1/0x100 [ 3351.646956][T24136] ? process_measurement+0x17e0/0x17e0 [ 3351.652436][T24136] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3351.658007][T24136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3351.664365][T24136] ? may_open+0x1f6/0x420 [ 3351.668710][T24136] path_openat+0x15ca/0x27f0 [ 3351.673319][T24136] ? path_lookupat+0x860/0x860 [ 3351.677142][T30893] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3351.678220][T24136] ? mark_lock+0xef/0x17b0 00:23:07 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x4870) [ 3351.678248][T24136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3351.678274][T24136] do_filp_open+0x1aa/0x400 [ 3351.678300][T24136] ? may_open_dev+0xf0/0xf0 [ 3351.705169][T24136] ? alloc_fd+0x2f0/0x670 [ 3351.709518][T24136] ? rwlock_bug.part.0+0x90/0x90 [ 3351.714466][T24136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3351.720725][T24136] ? _find_next_bit+0x1e3/0x260 [ 3351.725603][T24136] ? _raw_spin_unlock+0x1a/0x30 [ 3351.730471][T24136] ? alloc_fd+0x2f0/0x670 [ 3351.734811][T24136] do_sys_openat2+0x16d/0x420 [ 3351.739763][T24136] ? build_open_flags+0x6f0/0x6f0 [ 3351.744812][T24136] ? __context_tracking_exit+0x9f/0xb0 [ 3351.750287][T24136] ? lock_downgrade+0x6e0/0x6e0 [ 3351.755149][T24136] __x64_sys_openat+0x13f/0x1f0 [ 3351.760102][T24136] ? __ia32_sys_open+0x1c0/0x1c0 [ 3351.765058][T24136] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3351.768009][ T33] audit: type=1800 audit(1629937387.180:98): pid=24154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15225 res=0 errno=0 [ 3351.771057][T24136] ? syscall_enter_from_user_mode+0x21/0x70 [ 3351.771087][T24136] do_syscall_64+0x35/0xb0 [ 3351.771119][T24136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3351.809062][T24136] RIP: 0033:0x4196d4 [ 3351.812966][T24136] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3351.832677][T24136] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 00:23:07 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4870) 00:23:07 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x4870) [ 3351.841111][T24136] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3351.849098][T24136] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3351.857084][T24136] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3351.865155][T24136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3351.873140][T24136] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 00:23:07 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0x21f2) 00:23:07 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0x4870) 00:23:07 executing program 3 (fault-call:0 fault-nth:16): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:07 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e, 0x4870) [ 3351.997706][T32516] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3352.077658][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3352.097682][T24164] FAULT_INJECTION: forcing a failure. [ 3352.097682][T24164] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.110509][T24164] CPU: 1 PID: 24164 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3352.119368][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3352.129607][T24164] Call Trace: [ 3352.132886][T24164] dump_stack_lvl+0xcd/0x134 [ 3352.137480][T24164] should_fail.cold+0x5/0xa [ 3352.141983][T24164] should_failslab+0x5/0x10 [ 3352.146487][T24164] __kmalloc_node_track_caller+0x7d/0x330 [ 3352.152205][T24164] ? audit_log_start.part.0+0x27f/0x740 [ 3352.157737][T24164] __alloc_skb+0xde/0x340 [ 3352.162055][T24164] audit_log_start.part.0+0x27f/0x740 [ 3352.167411][T24164] ? audit_log_task_context+0x160/0x160 [ 3352.172945][T24164] ? audit_compare_dname_path+0x120/0x120 [ 3352.178647][T24164] ? lock_acquire+0x19d/0x4d0 [ 3352.183308][T24164] ? find_held_lock+0x2d/0x110 [ 3352.188058][T24164] audit_log_start+0x5f/0x90 [ 3352.192637][T24164] integrity_audit_message+0x100/0x450 [ 3352.198201][T24164] ? integrity_kernel_read+0xb0/0xb0 [ 3352.203486][T24164] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3352.209220][T24164] ? kfree+0x309/0x400 [ 3352.213306][T24164] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3352.218847][T24164] integrity_audit_msg+0x3d/0x50 [ 3352.223786][T24164] ima_collect_measurement+0x3d4/0x570 [ 3352.229260][T24164] ? ima_get_action+0xa0/0xa0 [ 3352.233968][T24164] ? ima_get_cache_status+0x1d0/0x1d0 [ 3352.239333][T24164] process_measurement+0xd1c/0x17e0 [ 3352.244526][T24164] ? mmap_violation_check+0x1e0/0x1e0 [ 3352.249884][T24164] ? tomoyo_path_number_perm+0x590/0x590 [ 3352.255516][T24164] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3352.261485][T24164] ? find_held_lock+0x2d/0x110 [ 3352.266236][T24164] ? aa_get_task_label+0x211/0x550 [ 3352.271339][T24164] ? lock_downgrade+0x6e0/0x6e0 [ 3352.276174][T24164] ? fsnotify+0x1050/0x1050 [ 3352.280663][T24164] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3352.286197][T24164] ? path_get+0x5d/0x80 [ 3352.290334][T24164] ? aa_get_task_label+0x23a/0x550 [ 3352.295529][T24164] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3352.301782][T24164] ? apparmor_task_getsecid+0xc2/0x110 [ 3352.307246][T24164] ima_file_check+0xb1/0x100 [ 3352.311913][T24164] ? process_measurement+0x17e0/0x17e0 [ 3352.317379][T24164] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3352.322910][T24164] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3352.329223][T24164] ? may_open+0x1f6/0x420 [ 3352.333536][T24164] path_openat+0x15ca/0x27f0 [ 3352.338131][T24164] ? path_lookupat+0x860/0x860 [ 3352.342895][T24164] ? mark_lock+0xef/0x17b0 [ 3352.347402][T24164] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3352.353388][T24164] do_filp_open+0x1aa/0x400 [ 3352.357889][T24164] ? may_open_dev+0xf0/0xf0 [ 3352.362377][T24164] ? alloc_fd+0x2f0/0x670 [ 3352.366693][T24164] ? rwlock_bug.part.0+0x90/0x90 [ 3352.371614][T24164] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3352.377862][T24164] ? _find_next_bit+0x1e3/0x260 [ 3352.382728][T24164] ? _raw_spin_unlock+0x1a/0x30 [ 3352.387578][T24164] ? alloc_fd+0x2f0/0x670 [ 3352.392028][T24164] do_sys_openat2+0x16d/0x420 [ 3352.396716][T24164] ? build_open_flags+0x6f0/0x6f0 [ 3352.401735][T24164] ? __context_tracking_exit+0x9f/0xb0 [ 3352.407190][T24164] ? lock_downgrade+0x6e0/0x6e0 [ 3352.412913][T24164] __x64_sys_openat+0x13f/0x1f0 [ 3352.417755][T24164] ? __ia32_sys_open+0x1c0/0x1c0 [ 3352.422681][T24164] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3352.428662][T24164] ? syscall_enter_from_user_mode+0x21/0x70 [ 3352.434542][T24164] do_syscall_64+0x35/0xb0 [ 3352.438950][T24164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3352.444833][T24164] RIP: 0033:0x4196d4 [ 3352.448709][T24164] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3352.468300][T24164] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3352.476698][T24164] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3352.484754][T24164] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3352.492712][T24164] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3352.500669][T24164] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3352.508626][T24164] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3352.677135][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3352.686206][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.694232][T30893] usb 6-1: Product: syz [ 3352.698600][T30893] usb 6-1: Manufacturer: syz [ 3352.703201][T30893] usb 6-1: SerialNumber: syz [ 3352.767040][T32516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 31 [ 3352.776326][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3352.786290][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3352.796004][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:23:08 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3353.022236][T30893] usb 6-1: USB disconnect, device number 34 [ 3353.066902][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3353.073216][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a9, bcdDevice= 0.40 [ 3353.082420][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.266809][T18465] usb 5-1: new high-speed USB device number 68 using dummy_hcd 00:23:08 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcd1, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x21f2) 00:23:08 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc0, 0x4870) 00:23:08 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x7000000, 0x0, 0x0, 0x0}) 00:23:08 executing program 3 (fault-call:0 fault-nth:17): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3353.348212][T30893] usb 3-1: USB disconnect, device number 123 [ 3353.430707][T24198] FAULT_INJECTION: forcing a failure. [ 3353.430707][T24198] name failslab, interval 1, probability 0, space 0, times 0 [ 3353.443576][T24198] CPU: 0 PID: 24198 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3353.452359][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3353.462510][T24198] Call Trace: [ 3353.465866][T24198] dump_stack_lvl+0xcd/0x134 [ 3353.470497][T24198] should_fail.cold+0x5/0xa [ 3353.475017][T24198] ? ima_d_path+0x4d/0x1f0 00:23:08 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0x4870) [ 3353.479452][T24198] should_failslab+0x5/0x10 [ 3353.483974][T24198] kmem_cache_alloc+0x5b/0x360 [ 3353.488844][T24198] ima_d_path+0x4d/0x1f0 [ 3353.493110][T24198] process_measurement+0x137d/0x17e0 [ 3353.498417][T24198] ? mmap_violation_check+0x1e0/0x1e0 [ 3353.503811][T24198] ? tomoyo_path_number_perm+0x590/0x590 [ 3353.509464][T24198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3353.515462][T24198] ? find_held_lock+0x2d/0x110 [ 3353.520246][T24198] ? aa_get_task_label+0x211/0x550 [ 3353.525378][T24198] ? lock_downgrade+0x6e0/0x6e0 00:23:08 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x21f2) [ 3353.530237][T24198] ? fsnotify+0x1050/0x1050 [ 3353.534750][T24198] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3353.540319][T24198] ? path_get+0x5d/0x80 [ 3353.544486][T24198] ? aa_get_task_label+0x23a/0x550 [ 3353.549622][T24198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3353.555880][T24198] ? apparmor_task_getsecid+0xc2/0x110 [ 3353.561356][T24198] ima_file_check+0xb1/0x100 [ 3353.565967][T24198] ? process_measurement+0x17e0/0x17e0 [ 3353.571441][T24198] ? ext4_file_write_iter+0x19c0/0x19c0 00:23:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0x21f2) [ 3353.577004][T24198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3353.583264][T24198] ? may_open+0x1f6/0x420 [ 3353.587604][T24198] path_openat+0x15ca/0x27f0 [ 3353.592204][T24198] ? path_lookupat+0x860/0x860 [ 3353.597068][T24198] ? mark_lock+0xef/0x17b0 [ 3353.601492][T24198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3353.607507][T24198] do_filp_open+0x1aa/0x400 [ 3353.612021][T24198] ? may_open_dev+0xf0/0xf0 [ 3353.616537][T24198] ? alloc_fd+0x2f0/0x670 [ 3353.620882][T24198] ? rwlock_bug.part.0+0x90/0x90 00:23:09 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x21f2) [ 3353.625831][T24198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3353.632084][T24198] ? _find_next_bit+0x1e3/0x260 [ 3353.636955][T24198] ? _raw_spin_unlock+0x1a/0x30 [ 3353.641820][T24198] ? alloc_fd+0x2f0/0x670 [ 3353.646167][T24198] do_sys_openat2+0x16d/0x420 [ 3353.650860][T24198] ? build_open_flags+0x6f0/0x6f0 [ 3353.655902][T24198] ? __context_tracking_exit+0x9f/0xb0 [ 3353.661415][T24198] ? lock_downgrade+0x6e0/0x6e0 [ 3353.666328][T24198] __x64_sys_openat+0x13f/0x1f0 [ 3353.671206][T24198] ? __ia32_sys_open+0x1c0/0x1c0 [ 3353.676169][T24198] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 00:23:09 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x4870) [ 3353.682187][T24198] ? syscall_enter_from_user_mode+0x21/0x70 [ 3353.688092][T24198] do_syscall_64+0x35/0xb0 [ 3353.692517][T24198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3353.698437][T24198] RIP: 0033:0x4196d4 [ 3353.702336][T24198] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3353.721964][T24198] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 00:23:09 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x4870) [ 3353.730397][T24198] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3353.738383][T24198] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3353.746453][T24198] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3353.754433][T24198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3353.762418][T24198] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3353.926741][T32516] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3353.976817][T18465] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3353.986501][T18465] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3353.996227][T18465] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3354.156785][T30893] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3354.267410][T18465] usb 5-1: string descriptor 0 read error: -22 [ 3354.273690][T18465] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3354.282784][T18465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.291365][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3354.416997][T30893] usb 3-1: Using ep0 maxpacket: 8 [ 3354.536816][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3354.546342][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.554759][T32516] usb 6-1: Product: syz [ 3354.558986][T32516] usb 6-1: Manufacturer: syz [ 3354.563589][T32516] usb 6-1: SerialNumber: syz 00:23:10 executing program 3 (fault-call:0 fault-nth:18): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3354.597520][T28575] usb 5-1: USB disconnect, device number 68 [ 3354.616910][T30893] usb 3-1: config index 0 descriptor too short (expected 64721, got 36) [ 3354.625286][T30893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3354.640813][T24230] FAULT_INJECTION: forcing a failure. [ 3354.640813][T24230] name failslab, interval 1, probability 0, space 0, times 0 [ 3354.650129][T30893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3354.653649][T24230] CPU: 0 PID: 24230 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3354.663180][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3354.671826][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3354.671844][T24230] Call Trace: [ 3354.671852][T24230] dump_stack_lvl+0xcd/0x134 [ 3354.671883][T24230] should_fail.cold+0x5/0xa [ 3354.681540][T30893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3354.691563][T24230] ? aa_label_snxprint+0x4e4/0x910 [ 3354.691599][T24230] ? aa_label_asxprint+0x86/0x130 [ 3354.691621][T24230] should_failslab+0x5/0x10 [ 3354.731751][T24230] __kmalloc+0x72/0x310 [ 3354.735900][T24230] aa_label_asxprint+0x86/0x130 [ 3354.740733][T24230] apparmor_secid_to_secctx+0x84/0x150 [ 3354.746180][T24230] security_secid_to_secctx+0x6c/0xb0 [ 3354.751536][T24230] audit_log_task_context+0xec/0x160 [ 3354.756818][T24230] ? audit_log_format+0x110/0x110 [ 3354.761821][T24230] ? from_kuid+0x85/0xc0 [ 3354.766046][T24230] integrity_audit_message+0x24f/0x450 [ 3354.771504][T24230] ? integrity_kernel_read+0xb0/0xb0 [ 3354.776871][T24230] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3354.782403][T24230] ? kfree+0x309/0x400 [ 3354.786457][T24230] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3354.792000][T24230] integrity_audit_msg+0x3d/0x50 [ 3354.796945][T24230] ima_collect_measurement+0x3d4/0x570 [ 3354.802479][T24230] ? ima_get_action+0xa0/0xa0 [ 3354.807141][T24230] ? ima_get_cache_status+0x1d0/0x1d0 [ 3354.812499][T24230] process_measurement+0xd1c/0x17e0 [ 3354.817682][T24230] ? mmap_violation_check+0x1e0/0x1e0 [ 3354.823036][T24230] ? tomoyo_path_number_perm+0x590/0x590 [ 3354.828830][T24230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3354.834827][T24230] ? find_held_lock+0x2d/0x110 [ 3354.839583][T24230] ? aa_get_task_label+0x211/0x550 [ 3354.844704][T24230] ? lock_downgrade+0x6e0/0x6e0 [ 3354.849550][T24230] ? fsnotify+0x1050/0x1050 [ 3354.854221][T24230] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3354.859768][T24230] ? path_get+0x5d/0x80 [ 3354.863910][T24230] ? aa_get_task_label+0x23a/0x550 [ 3354.869010][T24230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3354.875288][T24230] ? apparmor_task_getsecid+0xc2/0x110 [ 3354.880740][T24230] ima_file_check+0xb1/0x100 [ 3354.885409][T24230] ? process_measurement+0x17e0/0x17e0 [ 3354.890872][T24230] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3354.896428][T24230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3354.902686][T24230] ? may_open+0x1f6/0x420 [ 3354.907032][T24230] path_openat+0x15ca/0x27f0 [ 3354.911611][T24230] ? path_lookupat+0x860/0x860 [ 3354.916377][T24230] ? alloc_pages+0x194/0x2a0 [ 3354.920970][T24230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3354.926936][T24230] do_filp_open+0x1aa/0x400 [ 3354.931428][T24230] ? may_open_dev+0xf0/0xf0 [ 3354.935952][T24230] ? alloc_fd+0x2f0/0x670 [ 3354.940360][T24230] ? rwlock_bug.part.0+0x90/0x90 [ 3354.945374][T24230] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3354.951604][T24230] ? _find_next_bit+0x1e3/0x260 [ 3354.956533][T24230] ? _raw_spin_unlock+0x1a/0x30 [ 3354.961379][T24230] ? alloc_fd+0x2f0/0x670 [ 3354.965697][T24230] do_sys_openat2+0x16d/0x420 [ 3354.970376][T24230] ? build_open_flags+0x6f0/0x6f0 [ 3354.975510][T24230] ? __context_tracking_exit+0x9f/0xb0 [ 3354.981042][T24230] ? lock_downgrade+0x6e0/0x6e0 [ 3354.985885][T24230] __x64_sys_openat+0x13f/0x1f0 [ 3354.990742][T24230] ? __ia32_sys_open+0x1c0/0x1c0 [ 3354.995699][T24230] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3355.001666][T24230] ? syscall_enter_from_user_mode+0x21/0x70 [ 3355.007558][T24230] do_syscall_64+0x35/0xb0 [ 3355.011964][T24230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3355.017854][T24230] RIP: 0033:0x4196d4 [ 3355.021733][T24230] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3355.041446][T24230] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3355.049851][T24230] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3355.057924][T24230] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3355.065881][T24230] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3355.073838][T24230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3355.081794][T24230] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3355.089857][T24230] audit_panic: 21 callbacks suppressed [ 3355.089872][T24230] audit: error in audit_log_task_context [ 3355.101104][ T33] audit: type=1800 audit(1629937390.051:116): pid=24230 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13925 res=0 errno=0 [ 3355.180505][T32516] usb 6-1: USB disconnect, device number 35 [ 3355.346672][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3355.353483][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3355.362589][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:11 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000008c0)={0x40, 0x10, 0x4c, {0x4c, 0x23, "c508b683d1c52a992da1b3db5ac7ac89353f5ce6093fb3674d497292ea6bf56879ef5b485b49a3f0b3e06fee5a10bb7eafd84c9716f3fc2f9a3780833a74cb0b88e53cfc028838484949"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000940)={0x0, 0xa, 0x73, "5b352af18920a10611fa4422a3f86dde9e93eea1f62534e8ad6317c2b28a80b230f28715dfc103717f2940e028999b02dff2a156b046d56a219f926ce2c40e6078680089a161b72c460ac23b8e91b2c90a74d9ba7f9fc4c8983059da8861feff26836f2020f938e6f5e2803cf5c5d89ccd4559"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x1ede}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_ep_write(r0, 0xff, 0x79, &(0x7f0000000000)="435b286832a7bef443e5241ccc3a914c56b8bcff99a92293afa61d9241747b26ca253cdf14224ae9a53ae06d1fa94d8eec1ece652357ab0353ff889605fa130c9156fb65a7fb856b422b44506f629f751e249f2cac961d929a309fbc952b36b213fabe85586be359214a52e4053c4c2d5f64f259831efb4a8a") syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x21f2) 00:23:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x21f2) 00:23:11 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x4870) 00:23:11 executing program 3 (fault-call:0 fault-nth:19): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:11 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8000000, 0x0, 0x0, 0x0}) [ 3355.618437][T30893] usb 3-1: USB disconnect, device number 124 [ 3355.717690][ T33] audit: type=1800 audit(1629937391.131:117): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15368 res=0 errno=0 [ 3355.742870][T24259] FAULT_INJECTION: forcing a failure. [ 3355.742870][T24259] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.755738][T24259] CPU: 0 PID: 24259 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 00:23:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x21f2) 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xa2260000, 0x21f2) [ 3355.764521][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3355.774847][T24259] Call Trace: [ 3355.778135][T24259] dump_stack_lvl+0xcd/0x134 [ 3355.782786][T24259] should_fail.cold+0x5/0xa [ 3355.787399][T24259] ? ima_alloc_init_template+0x199/0x750 [ 3355.793050][T24259] should_failslab+0x5/0x10 [ 3355.797574][T24259] __kmalloc+0x72/0x310 [ 3355.801758][T24259] ima_alloc_init_template+0x199/0x750 [ 3355.807239][T24259] ima_store_measurement+0x1d7/0x5a0 [ 3355.812548][T24259] ? ima_collect_measurement+0x570/0x570 00:23:11 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x4870) [ 3355.818245][T24259] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3355.824507][T24259] ? d_absolute_path+0x10f/0x170 [ 3355.829642][T24259] ? kmem_cache_alloc+0x2d4/0x360 [ 3355.834691][T24259] process_measurement+0x11fb/0x17e0 [ 3355.839997][T24259] ? mmap_violation_check+0x1e0/0x1e0 [ 3355.845391][T24259] ? tomoyo_path_number_perm+0x590/0x590 [ 3355.851044][T24259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 00:23:11 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x20, 0x102) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000019c0)={0xbde, "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"}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x1000, &(0x7f00000025c0)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a80000000102030109a506444906021b000101e6800109040000020701000009050102"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3355.852629][ T33] audit: type=1800 audit(1629937391.141:118): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15370 res=0 errno=0 [ 3355.857048][T24259] ? find_held_lock+0x2d/0x110 [ 3355.857081][T24259] ? aa_get_task_label+0x211/0x550 [ 3355.857112][T24259] ? lock_downgrade+0x6e0/0x6e0 [ 3355.893260][T24259] ? fsnotify+0x1050/0x1050 [ 3355.897778][T24259] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3355.903343][T24259] ? path_get+0x5d/0x80 [ 3355.905942][ T33] audit: type=1800 audit(1629937391.141:119): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15370 res=0 errno=0 [ 3355.907512][T24259] ? aa_get_task_label+0x23a/0x550 [ 3355.907549][T24259] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3355.907580][T24259] ? apparmor_task_getsecid+0xc2/0x110 [ 3355.907608][T24259] ima_file_check+0xb1/0x100 [ 3355.907634][T24259] ? process_measurement+0x17e0/0x17e0 [ 3355.955696][T24259] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3355.961264][T24259] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x21f2) [ 3355.967617][T24259] ? may_open+0x1f6/0x420 [ 3355.971962][T24259] path_openat+0x15ca/0x27f0 [ 3355.976868][T24259] ? path_lookupat+0x860/0x860 [ 3355.981651][T24259] ? mark_lock+0xef/0x17b0 [ 3355.986110][T24259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.992138][T24259] do_filp_open+0x1aa/0x400 [ 3355.996659][T24259] ? may_open_dev+0xf0/0xf0 [ 3356.001175][T24259] ? alloc_fd+0x2f0/0x670 [ 3356.005532][T24259] ? rwlock_bug.part.0+0x90/0x90 [ 3356.010486][T24259] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3356.016923][T24259] ? _find_next_bit+0x1e3/0x260 [ 3356.021800][T24259] ? _raw_spin_unlock+0x1a/0x30 [ 3356.026670][T24259] ? alloc_fd+0x2f0/0x670 [ 3356.031011][T24259] do_sys_openat2+0x16d/0x420 [ 3356.035707][T24259] ? build_open_flags+0x6f0/0x6f0 [ 3356.040752][T24259] ? __context_tracking_exit+0x9f/0xb0 [ 3356.046229][T24259] ? lock_downgrade+0x6e0/0x6e0 [ 3356.051092][T24259] __x64_sys_openat+0x13f/0x1f0 [ 3356.055967][T24259] ? __ia32_sys_open+0x1c0/0x1c0 [ 3356.060935][T24259] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x21f2) [ 3356.066929][T24259] ? syscall_enter_from_user_mode+0x21/0x70 [ 3356.072875][T24259] do_syscall_64+0x35/0xb0 [ 3356.077311][T24259] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3356.083228][T24259] RIP: 0033:0x4196d4 [ 3356.087133][T24259] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3356.106758][T24259] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3356.115302][T24259] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3356.123389][T24259] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3356.131411][T24259] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3356.139413][T24259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3356.147401][T24259] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3356.172022][ T33] audit: type=1800 audit(1629937391.581:120): pid=24275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15367 res=0 errno=0 [ 3356.196689][T30893] usb 6-1: new high-speed USB device number 36 using dummy_hcd 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x21f2) 00:23:11 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0x4870) [ 3356.215268][ T33] audit: type=1800 audit(1629937391.611:121): pid=24275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15367 res=0 errno=0 00:23:11 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x21f2) [ 3356.266904][ T33] audit: type=1800 audit(1629937391.671:122): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15330 res=0 errno=0 [ 3356.296645][T32516] usb 3-1: new high-speed USB device number 125 using dummy_hcd 00:23:11 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0x21f2) [ 3356.319902][ T33] audit: type=1800 audit(1629937391.671:123): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15330 res=0 errno=0 00:23:11 executing program 3 (fault-call:0 fault-nth:20): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3356.353348][ T33] audit: type=1804 audit(1629937391.751:124): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723133393331383331322F73797A6B616C6C65722E5741435771452F363035382F48C7C060 dev="sda1" ino=15368 res=0 errno=0 [ 3356.440966][T24288] FAULT_INJECTION: forcing a failure. [ 3356.440966][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.454082][T24288] CPU: 1 PID: 24288 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3356.462838][T24288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3356.473084][T24288] Call Trace: [ 3356.476360][T24288] dump_stack_lvl+0xcd/0x134 [ 3356.480946][T24288] should_fail.cold+0x5/0xa [ 3356.485464][T24288] ? ima_write_template_field_data+0x47/0x1c0 [ 3356.491539][T24288] should_failslab+0x5/0x10 [ 3356.496034][T24288] __kmalloc+0x72/0x310 [ 3356.500180][T24288] ? ima_alloc_init_template+0x199/0x750 [ 3356.505841][T24288] ima_write_template_field_data+0x47/0x1c0 [ 3356.511741][T24288] ima_eventdigest_init_common+0xed/0x250 [ 3356.517555][T24288] ? ima_write_template_field_data+0x1c0/0x1c0 [ 3356.523717][T24288] ? lock_acquire+0x19d/0x4d0 [ 3356.528500][T24288] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3356.534065][T24288] ima_alloc_init_template+0x39e/0x750 [ 3356.539546][T24288] ima_store_measurement+0x1d7/0x5a0 [ 3356.544824][T24288] ? ima_collect_measurement+0x570/0x570 [ 3356.550451][T24288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3356.556691][T24288] ? d_absolute_path+0x10f/0x170 [ 3356.561643][T24288] ? kmem_cache_alloc+0x2d4/0x360 [ 3356.566686][T24288] process_measurement+0x11fb/0x17e0 [ 3356.572076][T24288] ? mmap_violation_check+0x1e0/0x1e0 [ 3356.577437][T24288] ? tomoyo_path_number_perm+0x590/0x590 [ 3356.583097][T24288] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3356.589153][T24288] ? find_held_lock+0x2d/0x110 [ 3356.593907][T24288] ? aa_get_task_label+0x211/0x550 [ 3356.599016][T24288] ? lock_downgrade+0x6e0/0x6e0 [ 3356.603887][T24288] ? fsnotify+0x1050/0x1050 [ 3356.608380][T24288] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3356.614352][T24288] ? path_get+0x5d/0x80 [ 3356.618500][T24288] ? aa_get_task_label+0x23a/0x550 [ 3356.623628][T24288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3356.629896][T24288] ? apparmor_task_getsecid+0xc2/0x110 [ 3356.635347][T24288] ima_file_check+0xb1/0x100 [ 3356.639933][T24288] ? process_measurement+0x17e0/0x17e0 [ 3356.645377][T24288] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3356.650910][T24288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3356.657153][T24288] ? may_open+0x1f6/0x420 [ 3356.661475][T24288] path_openat+0x15ca/0x27f0 [ 3356.666062][T24288] ? path_lookupat+0x860/0x860 [ 3356.670881][T24288] ? mark_lock+0xef/0x17b0 [ 3356.675300][T24288] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3356.681287][T24288] do_filp_open+0x1aa/0x400 [ 3356.685789][T24288] ? may_open_dev+0xf0/0xf0 [ 3356.690284][T24288] ? alloc_fd+0x2f0/0x670 [ 3356.694611][T24288] ? rwlock_bug.part.0+0x90/0x90 [ 3356.699541][T24288] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3356.705794][T24288] ? _find_next_bit+0x1e3/0x260 [ 3356.710643][T24288] ? _raw_spin_unlock+0x1a/0x30 [ 3356.715560][T24288] ? alloc_fd+0x2f0/0x670 [ 3356.719920][T24288] do_sys_openat2+0x16d/0x420 [ 3356.724587][T24288] ? build_open_flags+0x6f0/0x6f0 [ 3356.729612][T24288] ? __context_tracking_exit+0x9f/0xb0 [ 3356.735077][T24288] ? lock_downgrade+0x6e0/0x6e0 [ 3356.739912][T24288] __x64_sys_openat+0x13f/0x1f0 [ 3356.744767][T24288] ? __ia32_sys_open+0x1c0/0x1c0 [ 3356.749693][T24288] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3356.755681][T24288] ? syscall_enter_from_user_mode+0x21/0x70 [ 3356.761575][T24288] do_syscall_64+0x35/0xb0 [ 3356.765981][T24288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3356.771867][T24288] RIP: 0033:0x4196d4 [ 3356.775772][T24288] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3356.795725][T24288] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3356.804129][T24288] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3356.812174][T24288] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3356.820309][T24288] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3356.828271][T24288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3356.836234][T24288] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3356.936575][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3357.046614][T32516] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3357.055584][T32516] usb 3-1: can't read configurations, error -61 [ 3357.116576][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3357.125631][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.133727][T30893] usb 6-1: Product: syz [ 3357.137969][T30893] usb 6-1: Manufacturer: syz [ 3357.142560][T30893] usb 6-1: SerialNumber: syz [ 3357.216566][T32516] usb 3-1: new high-speed USB device number 126 using dummy_hcd 00:23:12 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x21f2) 00:23:12 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0x4870) 00:23:12 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x21f2) 00:23:12 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x18000000, 0x0, 0x0, 0x0}) [ 3357.445840][T30893] usb 6-1: USB disconnect, device number 36 [ 3357.676565][T32516] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3357.684179][T32516] usb 3-1: can't read configurations, error -61 [ 3357.691735][T32516] usb usb3-port1: attempt power cycle [ 3357.916438][T30893] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 3358.126435][T32516] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3358.296499][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3358.396470][T32516] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3358.404058][T32516] usb 3-1: can't read configurations, error -61 [ 3358.486460][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3358.495515][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3358.503564][T30893] usb 6-1: Product: syz [ 3358.507909][T30893] usb 6-1: Manufacturer: syz [ 3358.512650][T30893] usb 6-1: SerialNumber: syz [ 3358.596440][T32516] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3358.839894][T30893] usb 6-1: USB disconnect, device number 37 00:23:14 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x31, 0x91, {0x91, 0xd, "ec1bac639ecbaed95c88844d9701a0ae8a8750b24acaaf94d75f05774f764a44d38b434a509718685cc691d4f8cbe6f079c156d2031e9c1dd8de1b29ec8c6e8eae015ee604f5a1e5783c666315f4427d50c6b5dc7eec980f02c124b50e8b7839d00aed112d1c5626b76c3b733362a4b3e315800292db956780c022275eef73669f53ff328830fe7b6e744b4d4cc9c2"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20, 0x1, 0xab, "796dfb52fbc2e61eae3f86582d880f6ebc65e5fe85648972cde27c5b93ce89b256ec0c6d444f51a70d9c04e2a138cb26a65aa639a698771c53e3e419e7c71665c392e346044f06652ded1b6ee0c7c35f256897efdc3b69f468fc8622c4227d0fb8b8d4fbf99e3681003b3ca1ca63c3a9c2a9c85a811416261e1c47ea359e5da8993b8ebd5d3b467fde3d2f92eeb6bece1a37508df06d52ce3b23041fcae83f630a7cee6feff6c13f5168aa"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8001, 0x0, 0x7fffffff, 0xc88, 0xf56a, 0x1, 0x2, 0x4, 0x40, 0x4, 0x7, 0x3ff}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x400}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:14 executing program 3 (fault-call:0 fault-nth:21): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0x4870) 00:23:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x21f2) 00:23:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e, 0x4870) 00:23:14 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x1f000000, 0x0, 0x0, 0x0}) [ 3358.896632][T32516] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3358.904229][T32516] usb 3-1: can't read configurations, error -61 [ 3358.912379][T32516] usb usb3-port1: unable to enumerate USB device 00:23:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x21f2) [ 3359.049191][T24332] FAULT_INJECTION: forcing a failure. [ 3359.049191][T24332] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.062062][T24332] CPU: 1 PID: 24332 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3359.070858][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3359.080928][T24332] Call Trace: [ 3359.084365][T24332] dump_stack_lvl+0xcd/0x134 [ 3359.088980][T24332] should_fail.cold+0x5/0xa [ 3359.093514][T24332] ? ima_write_template_field_data+0xeb/0x1c0 00:23:14 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x21f2) 00:23:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x4870) [ 3359.099611][T24332] should_failslab+0x5/0x10 [ 3359.104176][T24332] __kmalloc+0x72/0x310 [ 3359.108356][T24332] ima_write_template_field_data+0xeb/0x1c0 [ 3359.114278][T24332] ima_alloc_init_template+0x39e/0x750 [ 3359.119789][T24332] ima_store_measurement+0x1d7/0x5a0 [ 3359.125100][T24332] ? ima_collect_measurement+0x570/0x570 [ 3359.130754][T24332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3359.137021][T24332] ? d_absolute_path+0x10f/0x170 [ 3359.142131][T24332] ? kmem_cache_alloc+0x2d4/0x360 00:23:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0x21f2) [ 3359.147185][T24332] process_measurement+0x11fb/0x17e0 [ 3359.152489][T24332] ? mmap_violation_check+0x1e0/0x1e0 [ 3359.157876][T24332] ? tomoyo_path_number_perm+0x590/0x590 [ 3359.163543][T24332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3359.169532][T24332] ? find_held_lock+0x2d/0x110 [ 3359.174316][T24332] ? aa_get_task_label+0x211/0x550 [ 3359.179448][T24332] ? lock_downgrade+0x6e0/0x6e0 [ 3359.184398][T24332] ? fsnotify+0x1050/0x1050 [ 3359.188931][T24332] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3359.194510][T24332] ? path_get+0x5d/0x80 00:23:14 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0x21f2) [ 3359.198768][T24332] ? aa_get_task_label+0x23a/0x550 [ 3359.203992][T24332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3359.210257][T24332] ? apparmor_task_getsecid+0xc2/0x110 [ 3359.215734][T24332] ima_file_check+0xb1/0x100 [ 3359.220368][T24332] ? process_measurement+0x17e0/0x17e0 [ 3359.225845][T24332] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3359.231408][T24332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3359.237777][T24332] ? may_open+0x1f6/0x420 [ 3359.242122][T24332] path_openat+0x15ca/0x27f0 [ 3359.246728][T24332] ? path_lookupat+0x860/0x860 [ 3359.251504][T24332] ? mark_lock+0xef/0x17b0 [ 3359.255930][T24332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3359.261918][T24332] do_filp_open+0x1aa/0x400 [ 3359.266471][T24332] ? may_open_dev+0xf0/0xf0 [ 3359.270992][T24332] ? alloc_fd+0x2f0/0x670 [ 3359.275352][T24332] ? rwlock_bug.part.0+0x90/0x90 [ 3359.280309][T24332] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3359.286577][T24332] ? _find_next_bit+0x1e3/0x260 [ 3359.291452][T24332] ? _raw_spin_unlock+0x1a/0x30 00:23:14 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0x4870) [ 3359.296362][T24332] ? alloc_fd+0x2f0/0x670 [ 3359.300795][T24332] do_sys_openat2+0x16d/0x420 [ 3359.305498][T24332] ? build_open_flags+0x6f0/0x6f0 [ 3359.310544][T24332] ? __context_tracking_exit+0x9f/0xb0 [ 3359.316294][T24332] ? lock_downgrade+0x6e0/0x6e0 [ 3359.321159][T24332] __x64_sys_openat+0x13f/0x1f0 [ 3359.326039][T24332] ? __ia32_sys_open+0x1c0/0x1c0 [ 3359.330996][T24332] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3359.336992][T24332] ? syscall_enter_from_user_mode+0x21/0x70 [ 3359.342933][T24332] do_syscall_64+0x35/0xb0 [ 3359.347493][T24332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3359.353434][T24332] RIP: 0033:0x4196d4 [ 3359.357357][T24332] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3359.376986][T24332] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3359.385443][T24332] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3359.393430][T24332] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3359.401416][T24332] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3359.409404][T24332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3359.417386][T24332] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3359.786271][T32516] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3359.793844][T30893] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 3360.156693][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3360.166439][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3360.176753][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3360.189640][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3360.366271][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3360.375347][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.383427][T30893] usb 6-1: Product: syz [ 3360.387706][T30893] usb 6-1: Manufacturer: syz [ 3360.392302][T30893] usb 6-1: SerialNumber: syz [ 3360.476246][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3360.482495][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3360.491614][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.681446][T30893] usb 6-1: USB disconnect, device number 38 00:23:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x21f2) 00:23:16 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000240)={0x40, 0x5, 0xcf, {0xcf, 0x1, "40143f9e4447163032c9261446b91a4b3da5adfdeb0ebe666a4aba6148f1d52e9b7d6f72769a395374071122514af78691a92d1302a647ff8486ffae46682c1d955ff38ab90a33e7befbdf421893a8b43da05ba1aaba2201fad10bfb1c119fa710e756284e88e4956d00a61415c9f4390b243f2474ee9524d8064a07c1d34e80707e5bf437a1a1f165608efa25c38f177c886e91343f6e41f2866297bc6f59296a851bc310e836edb4dca0986ad3c76b025cddc739504ffe9b3318b58d5e241bb785dd08a3ad2c58542805b622"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000180)={0x1c, &(0x7f0000000080)={0x0, 0x0, 0x36, "caa9bea7eace858664d20051e84e00ac7bb31a42a2db615137a366f403a3f9baf921cc5bec3cf67ae8dbe22d955a0777bf46139451a4"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x4870) 00:23:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x4870) 00:23:16 executing program 3 (fault-call:0 fault-nth:22): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:16 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xf6ffffff, 0x0, 0x0, 0x0}) [ 3360.747641][T28575] usb 3-1: USB disconnect, device number 3 00:23:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x21f2) 00:23:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2696, 0x4870) [ 3360.870995][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 3360.871012][ T33] audit: type=1800 audit(1629937396.281:138): pid=24380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15245 res=0 errno=0 [ 3360.915257][T24379] FAULT_INJECTION: forcing a failure. [ 3360.915257][T24379] name failslab, interval 1, probability 0, space 0, times 0 [ 3360.928194][T24379] CPU: 1 PID: 24379 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3360.937008][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3360.947119][T24379] Call Trace: [ 3360.950421][T24379] dump_stack_lvl+0xcd/0x134 [ 3360.953264][ T33] audit: type=1800 audit(1629937396.281:139): pid=24380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15245 res=0 errno=0 [ 3360.955037][T24379] should_fail.cold+0x5/0xa [ 3360.955068][T24379] ? ima_add_digest_entry+0x4e/0x510 [ 3360.978001][ T33] audit: type=1800 audit(1629937396.321:140): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15245 res=0 errno=0 [ 3360.980733][T24379] should_failslab+0x5/0x10 [ 3360.980766][T24379] kmem_cache_alloc_trace+0x55/0x290 [ 3360.980800][T24379] ima_add_digest_entry+0x4e/0x510 [ 3360.991093][ T33] audit: type=1800 audit(1629937396.351:141): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15457 res=0 errno=0 [ 3361.007264][T24379] ima_add_template_entry+0x414/0x790 [ 3361.007301][T24379] ? ima_get_binary_runtime_size+0x40/0x40 [ 3361.007331][T24379] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3361.007362][T24379] ? ima_calc_field_array_hash+0x377/0x430 [ 3361.007390][T24379] ima_store_template+0xdb/0x140 [ 3361.035521][ T33] audit: type=1800 audit(1629937396.351:142): pid=24387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15553 res=0 errno=0 [ 3361.043425][T24379] ima_store_measurement+0x208/0x5a0 [ 3361.043464][T24379] ? ima_collect_measurement+0x570/0x570 [ 3361.043495][T24379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3361.043526][T24379] ? d_absolute_path+0x10f/0x170 [ 3361.116193][T24379] ? kmem_cache_alloc+0x2d4/0x360 [ 3361.121309][T24379] process_measurement+0x11fb/0x17e0 [ 3361.126592][T24379] ? mmap_violation_check+0x1e0/0x1e0 [ 3361.131980][T24379] ? tomoyo_path_number_perm+0x590/0x590 [ 3361.137631][T24379] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3361.143631][T24379] ? find_held_lock+0x2d/0x110 [ 3361.148384][T24379] ? aa_get_task_label+0x211/0x550 [ 3361.153484][T24379] ? lock_downgrade+0x6e0/0x6e0 [ 3361.158320][T24379] ? fsnotify+0x1050/0x1050 [ 3361.162903][T24379] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3361.168467][T24379] ? path_get+0x5d/0x80 [ 3361.172606][T24379] ? aa_get_task_label+0x23a/0x550 [ 3361.177724][T24379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3361.183962][T24379] ? apparmor_task_getsecid+0xc2/0x110 [ 3361.189414][T24379] ima_file_check+0xb1/0x100 [ 3361.194025][T24379] ? process_measurement+0x17e0/0x17e0 [ 3361.199494][T24379] ? ext4_file_write_iter+0x19c0/0x19c0 [ 3361.205049][T24379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3361.211315][T24379] ? may_open+0x1f6/0x420 [ 3361.215634][T24379] path_openat+0x15ca/0x27f0 [ 3361.220239][T24379] ? path_lookupat+0x860/0x860 [ 3361.224991][T24379] ? mark_lock+0xef/0x17b0 [ 3361.229417][T24379] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3361.235417][T24379] do_filp_open+0x1aa/0x400 [ 3361.239911][T24379] ? may_open_dev+0xf0/0xf0 [ 3361.244418][T24379] ? alloc_fd+0x2f0/0x670 [ 3361.248757][T24379] ? rwlock_bug.part.0+0x90/0x90 [ 3361.253708][T24379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3361.260049][T24379] ? _find_next_bit+0x1e3/0x260 [ 3361.264914][T24379] ? _raw_spin_unlock+0x1a/0x30 [ 3361.269759][T24379] ? alloc_fd+0x2f0/0x670 [ 3361.274091][T24379] do_sys_openat2+0x16d/0x420 [ 3361.278797][T24379] ? build_open_flags+0x6f0/0x6f0 [ 3361.283864][T24379] ? __context_tracking_exit+0x9f/0xb0 [ 3361.289311][T24379] ? lock_downgrade+0x6e0/0x6e0 [ 3361.294166][T24379] __x64_sys_openat+0x13f/0x1f0 [ 3361.299014][T24379] ? __ia32_sys_open+0x1c0/0x1c0 [ 3361.303957][T24379] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3361.309933][T24379] ? syscall_enter_from_user_mode+0x21/0x70 [ 3361.315852][T24379] do_syscall_64+0x35/0xb0 [ 3361.320273][T24379] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3361.326263][T24379] RIP: 0033:0x4196d4 [ 3361.330180][T24379] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3361.349968][T24379] RSP: 002b:00007fca9c853cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3361.358401][T24379] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 3361.366366][T24379] RDX: 0000000000004870 RSI: 00007fca9c853d60 RDI: 00000000ffffff9c [ 3361.374417][T24379] RBP: 00007fca9c853d60 R08: 0000000000000000 R09: 0000000000000000 [ 3361.382390][T24379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004870 [ 3361.390525][T24379] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3361.398820][T24379] ima: OUT OF MEMORY ERROR creating queue entry 00:23:16 executing program 3 (fault-call:0 fault-nth:23): syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) [ 3361.405658][ T33] audit: type=1804 audit(1629937396.821:143): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723133393331383331322F73797A6B616C6C65722E5741435771452F363036312F48C7C060 dev="sda1" ino=15245 res=0 errno=0 [ 3361.452420][ T33] audit: type=1800 audit(1629937396.821:144): pid=24387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15553 res=0 errno=0 00:23:16 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x4870) 00:23:16 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e00, 0x4870) 00:23:16 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x300000000000000, 0x21f2) [ 3361.512837][ T33] audit: type=1800 audit(1629937396.921:145): pid=24389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15389 res=0 errno=0 [ 3361.535385][T24389] FAULT_INJECTION: forcing a failure. [ 3361.535385][T24389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3361.548663][T24389] CPU: 1 PID: 24389 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3361.557530][T24389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3361.567596][T24389] Call Trace: [ 3361.570884][T24389] dump_stack_lvl+0xcd/0x134 [ 3361.575494][T24389] should_fail.cold+0x5/0xa [ 3361.580011][T24389] _copy_to_user+0x2c/0x150 [ 3361.584530][T24389] simple_read_from_buffer+0xcc/0x160 [ 3361.590002][T24389] proc_fail_nth_read+0x187/0x220 [ 3361.595188][T24389] ? proc_sessionid_read+0x220/0x220 [ 3361.600497][T24389] ? security_file_permission+0x248/0x560 [ 3361.606250][T24389] ? proc_sessionid_read+0x220/0x220 [ 3361.611542][T24389] vfs_read+0x1b5/0x570 [ 3361.615690][T24389] ksys_read+0x12d/0x250 [ 3361.619941][T24389] ? vfs_write+0x9f0/0x9f0 [ 3361.624369][T24389] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3361.630369][T24389] ? syscall_enter_from_user_mode+0x21/0x70 [ 3361.636277][T24389] do_syscall_64+0x35/0xb0 [ 3361.639289][ T33] audit: type=1800 audit(1629937396.971:146): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15473 res=0 errno=0 [ 3361.640707][T24389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3361.640745][T24389] RIP: 0033:0x41936c [ 3361.640764][T24389] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3361.678465][ T33] audit: type=1800 audit(1629937396.971:147): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15473 res=0 errno=0 [ 3361.691743][T24389] RSP: 002b:00007fca9c854170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3361.691771][T24389] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041936c [ 3361.691795][T24389] RDX: 000000000000000f RSI: 00007fca9c8541e0 RDI: 0000000000000003 [ 3361.691811][T24389] RBP: 00007fca9c8541d0 R08: 0000000000000000 R09: 0000000000000000 [ 3361.691825][T24389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3361.691841][T24389] R13: 00007ffce614ba1f R14: 00007fca9c854300 R15: 0000000000022000 [ 3361.906110][T30893] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3361.936153][T28575] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3362.266597][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3362.336729][T28575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3362.346866][T28575] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3362.356572][T28575] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3362.466748][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3362.476058][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.484053][T30893] usb 6-1: Product: syz [ 3362.488336][T30893] usb 6-1: Manufacturer: syz [ 3362.493063][T30893] usb 6-1: SerialNumber: syz [ 3362.636098][T28575] usb 3-1: string descriptor 0 read error: -22 [ 3362.642592][T28575] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3362.651663][T28575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.779407][T30893] usb 6-1: USB disconnect, device number 39 00:23:18 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, &(0x7f0000000240)={0x0, 0xf, 0xfe, {0xfe, 0xc, "6d588167b44d80c9b2825a46d97faa28aaafd4fcd6775420099c56e203e796d93cb2be3d20e027ba09afc3276331a83fdb71c43e13872a3ce1c0307014b4065f995a550af972c954746d1b5412726318c51ced74ae58c651b076dda01277ce7c4c7c4e3d7ce4bbdd177f4a733cbe317a6e6e3313776fdfdc5931057eb7910d8341f776e1793bb393d9a8f0ae5ad91a15c78c9caf91006fe66d42bc125106253d57549cad1c65f0fadb8b34a3e8d0729ef51e3f87766adf5d446b32b8bf27de0b56bfb8460d4396aadc88239aa5390696d0d53982c57d19e628ead5ca8b65476638dfa0a811423a6437760a981d7d6feee73fd89fce049cc65ee2a3e0"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0xfffffffffffffe56, 0x3, 0xc07}}}, &(0x7f0000000440)={0x34, &(0x7f0000000080)={0x0, 0x31, 0x3, "99d4d4"}, &(0x7f0000000100)={0x0, 0xa, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x58, {0x56, "048cdd6a56ddee13661d31a886383e8d46c3427a233bd2f3ffc8d6d9c59c993d5b75bf09fdab5af40be617eb9d3596ff44ddd60ab9014864291da41f48e86be3d3d5603957d51790269d39b0f74d6f3924586b653e22"}}, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x80}}) 00:23:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x400000000000000, 0x21f2) 00:23:18 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x4870) 00:23:18 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000000000000, 0x21f2) 00:23:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x4870) 00:23:18 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xfeffffff, 0x0, 0x0, 0x0}) [ 3362.917682][T32516] usb 3-1: USB disconnect, device number 4 00:23:18 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x4870) 00:23:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x500000000000000, 0x21f2) 00:23:18 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2, 0x4870) 00:23:18 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0x21f2) 00:23:18 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x9626, 0x4870) 00:23:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x600000000000000, 0x21f2) 00:23:18 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x3, 0x4870) 00:23:18 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x21f2) 00:23:18 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000, 0x4870) 00:23:18 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x700000000000000, 0x21f2) [ 3363.337856][T30893] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3363.446076][T32516] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3363.716024][T30893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3363.826018][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3363.835673][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3363.845361][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3363.896032][T30893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3363.905121][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.913198][T30893] usb 6-1: Product: syz [ 3363.917428][T30893] usb 6-1: Manufacturer: syz [ 3363.922014][T30893] usb 6-1: SerialNumber: syz [ 3364.125951][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3364.132606][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3364.141706][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:19 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xff000000, 0x0, 0x0, 0x0}) 00:23:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x21f2) 00:23:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) [ 3364.213553][T30893] usb 6-1: USB disconnect, device number 40 00:23:19 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x21f2) 00:23:19 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0x4870) 00:23:19 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x5, 0x4870) 00:23:19 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) 00:23:19 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0xff, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8200) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:19 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xfffffff6, 0x0, 0x0, 0x0}) [ 3364.398054][T32516] usb 3-1: USB disconnect, device number 5 00:23:19 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x4870) 00:23:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000000000000, 0x21f2) 00:23:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4870) 00:23:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4870) 00:23:20 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xff0f, 0x4870) 00:23:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000000, 0x21f2) 00:23:20 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x800000000000000, 0x21f2) 00:23:20 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x4870) 00:23:20 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0x4870) 00:23:20 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200000000000000, 0x21f2) [ 3364.805928][T28575] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3364.886350][T32516] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3365.125903][T32516] usb 3-1: Using ep0 maxpacket: 8 [ 3365.195887][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3365.245924][T32516] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3365.258782][T32516] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3365.386280][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3365.395525][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.403559][T28575] usb 6-1: Product: syz [ 3365.407775][T28575] usb 6-1: Manufacturer: syz [ 3365.412381][T28575] usb 6-1: SerialNumber: syz [ 3365.425959][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3365.435056][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.443237][T32516] usb 3-1: Product: syz [ 3365.447464][T32516] usb 3-1: Manufacturer: syz [ 3365.452106][T32516] usb 3-1: SerialNumber: syz [ 3365.477338][T24496] raw-gadget gadget: fail, usb_ep_enable returned -22 00:23:21 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x4, 0x2, {0x7f, 0x9}, {0x20}, @cond=[{0x800, 0x2, 0x8001, 0x4, 0x81, 0x5}, {0x61, 0x0, 0x9, 0x8, 0xec, 0x1}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x511880) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/132) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x4870) 00:23:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x4870) 00:23:21 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00000, 0x4870) 00:23:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300000000000000, 0x21f2) 00:23:21 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0xfffffffe, 0x0, 0x0, 0x0}) [ 3365.712734][T28575] usb 6-1: USB disconnect, device number 41 [ 3365.809910][T32516] usb 3-1: USB disconnect, device number 6 00:23:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800000000000000, 0x21f2) 00:23:21 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0x4870) 00:23:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xc, 0x4870) 00:23:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x4870) 00:23:21 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000480)={0x2, 0xffffffff, 0x1ff}) syz_usb_connect$uac1(0x5, 0x106, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x5c, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x80}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x4, 0x1, "ddccacb72d"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x6, 0x9, "05ae6e23"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x40, 0x0, "8b6084", "d7a9"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xb3, 0xfb, "141087ce7e649883a4"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x61, 0x3, 0x1, 0x3, "a9f3ab91"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x7, 0xbf, "95d63bd28c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2b, 0xfc, 0x2, {0x7, 0x25, 0x1, 0x80, 0x20, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x80, 0x1, 0x64, 0x0, "bd16"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x9, 0xff, 0x2, "f6ca"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x2, 0xb6, 0x1, "95195c2f7623e165"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8001, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfa, 0xff}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x7, "0e56"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3f, 0x20, 0x2, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xff, 0x3, 0x0, 0xff, 0x4}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x68, 0x20, 0x800, 0x3}, @ptm_cap={0x3}]}, 0x2, [{0xce, &(0x7f0000000380)=@string={0xce, 0x3, "48894c898671b6baa27cea6c081fe5209f9f006919573550f91f61c588007ab0f8837c3733700a84344f41dcea38d28805cc408b350130c7693a9cbc993150c0533ac52f135e7e6bb1ccbc033211a32e5fbcc7d824767d40319b0c959505e3ea63e43777f57b6307f416ccc9453231f729c619d9d18d4bfd28459e7f8291b5c9f4018f9b251bbd3cab605069bde16e806cb8d363071c2faa73cd205dc60954861764486b4740f6b224fa5c34898190c5107dc165edb2979248d65dda5b2c38532b4e44aa8b4adef8f30567ee"}}, {0x9f, &(0x7f0000000100)=@string={0x9f, 0x3, "5f5dbc07018b9122a5dd80f7e732689567897a303d3e443101d3f2086deb6c639347dbecf3be22f5fdec0758c70eff890cf27cf8c3a57231ffe3be1648f42088fbba4b83afa82078b9c3524dcff3f0742e2cc4c47ee041188c20a9088ecd52fe4577b990081ca77bfec1b2501c9009d185bba1aee186b64297444f8bab719e2f0f157fb8a878db9b28f09d694587921dd1bbb00cb6f359e2b966c462f0"}}]}) 00:23:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00000000000000, 0x21f2) 00:23:21 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x4870) [ 3366.023095][ T33] kauditd_printk_skb: 37 callbacks suppressed [ 3366.023112][ T33] audit: type=1800 audit(1629937401.432:185): pid=24557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15721 res=0 errno=0 00:23:21 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x40, 0x0, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xffffffffffffffea, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:21 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x4870) 00:23:21 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8, 0x4870) [ 3366.124000][ T33] audit: type=1800 audit(1629937401.452:186): pid=24559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15723 res=0 errno=0 00:23:21 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00000000000000, 0x21f2) [ 3366.199344][ T33] audit: type=1800 audit(1629937401.452:187): pid=24559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15723 res=0 errno=0 [ 3366.236166][T28575] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 3366.264085][ T33] audit: type=1800 audit(1629937401.472:188): pid=24557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15721 res=0 errno=0 [ 3366.288184][ T33] audit: type=1800 audit(1629937401.482:189): pid=24560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15254 res=0 errno=0 [ 3366.310786][ T33] audit: type=1800 audit(1629937401.562:190): pid=24566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15398 res=0 errno=0 [ 3366.333521][ T33] audit: type=1800 audit(1629937401.572:191): pid=24566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15398 res=0 errno=0 [ 3366.355111][ T33] audit: type=1800 audit(1629937401.632:192): pid=24572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15722 res=0 errno=0 [ 3366.376760][ T33] audit: type=1800 audit(1629937401.642:193): pid=24572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15722 res=0 errno=0 [ 3366.398157][ T33] audit: type=1800 audit(1629937401.652:194): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=13980 res=0 errno=0 [ 3366.465796][ T1499] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3366.635776][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3366.705731][ T1499] usb 3-1: Using ep0 maxpacket: 8 [ 3366.806391][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3366.815552][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.823860][T28575] usb 6-1: Product: syz [ 3366.828152][T28575] usb 6-1: Manufacturer: syz [ 3366.832735][T28575] usb 6-1: SerialNumber: syz [ 3366.837482][ T1499] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3366.850375][ T1499] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3367.025753][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3367.034805][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3367.042922][ T1499] usb 3-1: Product: syz [ 3367.047160][ T1499] usb 3-1: Manufacturer: syz [ 3367.051743][ T1499] usb 3-1: SerialNumber: syz 00:23:22 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:23:22 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x4870) 00:23:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x12, 0x4870) 00:23:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff0f, 0x4870) 00:23:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0x21f2) [ 3367.077268][T24568] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3367.162997][T28575] usb 6-1: USB disconnect, device number 42 00:23:22 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x4870) 00:23:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xa226000000000000, 0x21f2) 00:23:22 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x13, 0x4870) 00:23:22 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x7, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000000000402505a8a4400005f7030109021b000101e68003090400000207010000090509020000f5fe48"], &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x401, 0x2840) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000100)={0x99, "bb15bff7991c1aee21c899c7cf6201a20612c67e3daeecd2f771e26cb41814286abc28a7f8aeb8b4295013db0ff054b52c0f1b9c2ca755e5f19fe3321ef190655e80a9bdcd4d7667e81b3e08ad34f605980047077a06d00d437b621ef36e178c34e7264c22dea5b8420fdbbd53ba9230d0f1e722556890d1d78db71c127fb2b83fada96aad622d88186a97c032d17a530f0976204b315600e3"}) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x3, 0xffffffff, 0x81, 0xfff, 0x7ff, 0x3}) 00:23:22 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000000000000, 0x21f2) 00:23:22 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x4870) 00:23:22 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff00000000, 0x21f2) [ 3367.470153][ T1499] usb 3-1: USB disconnect, device number 7 [ 3367.645634][T28575] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 3368.006116][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3368.196055][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3368.205140][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.213208][T28575] usb 6-1: Product: syz [ 3368.217428][T28575] usb 6-1: Manufacturer: syz [ 3368.222013][T28575] usb 6-1: SerialNumber: syz 00:23:23 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x2, 0x0}) 00:23:23 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x18, 0x4870) 00:23:23 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001780)={0x24, &(0x7f0000000500)={0x0, 0x21, 0x8b, {0x8b, 0x8, "698965701c2d7c5522a15e61f12583dc926fe94574d683b685288bcc41102ce6fea58430e12257bcaaafedeb59568480cdc2829a8ae2a6a2b44ed2a4c4f750eb4e9bb2417cc840b2fc6a78ee590bb39000353c4be4fbb82d367056e03c838039dfdd4f8a4a6e984fbad21193733452a182626a4db8a7231b42812ca26b56563a518a7fa9d02b0b399a"}}, &(0x7f00000005c0)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "001759b779632c32d78a16ad72eca467f627c6eef2f2301dac8e05159168d6e861302e9c742869ff655254bc3b7a457e712b583dbbb52379ee73e95301b15c114cf99bba77058cfd96a443cbd6cdf5e8b09f4a149f1c6b55b055baa7464764d4a4c175820e18067a02f4f286600389812563e4829c9c16e5853976f4237d65c069c3ce793f27ca07df997a0f47cf08df81211b55766332a8673afc846cd287dfd47438372f197c22b7150eae3dca723abf5b15da13c8f86cc53861aa67abf51155bba1374e3bfa41126cbad5486f6a9cf0bf9ebacc98c3b68826"}}, &(0x7f00000006c0)={0x0, 0x22, 0x11, {[@global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "738dea97"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x9, "00c07d60"}, @main=@item_012={0x2, 0x0, 0xc, "16a3"}, @main=@item_012={0x1, 0x0, 0xa, '.'}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9233, 0x20, 0x1, {0x22, 0x233}}}}, &(0x7f0000001940)={0x2c, &(0x7f00000017c0)={0x0, 0xc, 0xa9, "edb84658c6d39a1f5649a2eefe0947bcfecc41d9e1d2cc7c63ed9f244c1eafd98540289d40a07f6c59bbfb267646d94ab9c3487669e259d773f2f8b72f97f6bc2f89ea31cbbc77cdabf734faff6b60902ceb90b5e3f831ddd8e770b5a1c4c5af630746ae68ffeb30a72667df3c925ef691bf4507a76b697796340d18373995ed78822e8700416e466c0d4ff04953394d2d87db967fc45b001c5950f78be07af80db85950fd751c6613"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0xc5}, &(0x7f00000019c0)={0x20, 0x1, 0xf9, "9d6e46fc38437854e2cccc47101dcd11328bb0dbd9831005596f59cd1a85cd3251c1292ad77f81f0765ca1942a6587fbfb84fc589b20ef7964ba921d22c7f29904871fc6fee9e6a58bb589cc226ed2fab533940ab3a7394bf7f146ad5c5f3356d5f2a8ec2c68b5024bd232cfb8aada9f929c2004dd7de35263196ee0430ffcd7d2582544557dc07cf6dff07cb7bdce85257fa65b7a9e8a4e36122722659e7b42643f0452a26d9ecdea7234d2cb6dd1b92a45ea12488ae24a7ee470691d1b8b5ca153c8ba5f38842f72724810114355e83f18160f93d8a5eb32e9d6806991bbc3d0330dc165bf0bb0fbe713162b088ec2fe1b3a5323936d19f5"}, &(0x7f0000001900)={0x20, 0x3, 0x1, 0xfb}}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0xb758771ad3ac504d, 0xbd, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x22, 0x20}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x4, 0x1, 0x8, 0x81}, 0x1c, &(0x7f0000000080)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x65, "0cf51c07e9cba40b7a5fe87452f4657f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2409}}, {0xa4, &(0x7f0000000240)=@string={0xa4, 0x3, "e8cf59d853954cb73a32475a0d71ad4b9004adcd2c980162e2590a5f6a2335ddd55a987163686b0a6b78a4f45f0445184f18b4c724f28d7f3f176c7dbb13a65c77bef1fc917c3f77b66d5511c73cf2d1191b38ff16f46fb74eba09f09ffc8352e1cd7bd3c073ef2d5c1163a4c25ae0ed70b38160421833a9b40c62ac29d6b33e9aaccefe43b87cbc464eaf51d42b723e811574999d53eef81db547df1404819adbda"}}, {0x78, &(0x7f0000000140)=@string={0x78, 0x3, "13d9b0330a1eaf8769a3c390d8755688132d0799ae64db8add7a0be4f7ba5485a03eecdcf8f0abc1db3839a669a73306a543a566177d56b9021333e90ef1e3f6e4f3bce8148f1e47877ff8522c25094571a6f34c0329189c9da307408f9b6ac7f3ee3c3c4d2fb5d72a61cb0177cae3faaa38e3ef15a7"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140a}}, {0xb0, &(0x7f0000000380)=@string={0xb0, 0x3, "31795838788cdf7bf49ff192c5c6d205bc87272ad60882b6225d71263ac1e64be47ee92eda047c44347f2560d80374f4c40b3bb0dc6ad190487ec0c5da5421f5fc66750a1d741d3f01d9eef014a25ff25d9c5a6397d7b87690d5988aebfa0cd706f50f9cbbb7174b49e9d416b8276cf29b5ab1eb933d56055d96fa2b26bb3ab10288f963013c92f5ffd394b6c24e0fb5c259ebb11c25eda571a7ed5c9e3fc20779ed3491b745ff4347ba9dc44751"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1407}}]}) 00:23:23 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x4870) 00:23:23 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x4870) 00:23:23 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff00000000, 0x21f2) [ 3368.525937][T28575] usb 6-1: USB disconnect, device number 43 00:23:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0x4870) 00:23:24 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00000000000000, 0x21f2) 00:23:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x4870) 00:23:24 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6, 0x4870) 00:23:24 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x300, 0x4870) 00:23:24 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x4870) [ 3368.875563][ T1499] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3369.025530][T28575] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 3369.256017][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3369.265749][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3369.275374][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3369.445579][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3369.605567][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3369.611903][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3369.621055][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3369.655647][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3369.664724][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3369.672857][T28575] usb 6-1: Product: syz [ 3369.677208][T28575] usb 6-1: Manufacturer: syz [ 3369.681798][T28575] usb 6-1: SerialNumber: syz [ 3369.888282][ T1499] usb 3-1: USB disconnect, device number 8 00:23:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x500, 0x4870) 00:23:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffff00000000, 0x21f2) 00:23:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x4870) 00:23:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0, 0x4870) 00:23:25 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x3, 0x0}) 00:23:25 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x9e, {0x9e, 0x11, "b0e7a9219e1bc6b7326a155e25e6a0b86a94b6e2c5660b542b70c02d0207e7b7baa58f36435364da2a572d39cc2eb6390b7551fa69fa3cc02e5e47c503d0266a80c4b9162a11390845b0e5b674ad1272da48a0d9d50aec48f781fd57b197dd422e37ebb1dcc5cf9b22086c5fa1d2655ee8556971c4549d848a203ed1937b4f719a67d62271efbaef6904cb2b3be5ca82caeb3e2c644391d235ec0d8c"}}, &(0x7f0000000100)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "49e63a09c873ecdefb48a0f9c5a362620094ceb563912723615ff8511aa303e2d9bffa86e0aa5287ad7e4199d2fc6d042589080654e8c9e681c93c8804bdb724fed5d8abb5063c258ab1e13423f3517f5f0563439bd7832f7fa59cc084a72ba5afd5784ace45ec6d9eec641a4937dfd717faabf07ab0eddfb9c6f35ba5739c4a9c77af9de599a8c3726df8707a5cca8486ec9f5311649665da3206bcdd34"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x11, 0xb0, "4484c09cc62159e47bb20c348d420880d76426772c6c66c2a0c7a3f0cf1747fb40973d68f8b8030e1fafbf84cfb6132007da1d5c4f2e03c5d0f8ab7277320d6b39487e9a43cd368fcc4b8f4c8b8909a8a91f372e9c39cb813c611b642a5b30620ac252984779c59df8d74e996b8557c23f8413d9748a22fa6c30a5f56728b30166f0e88e7616ab8a68589ad59872c0c6cb7c1d7a51758fa62391b18a1caf3b28750d332f296c0fe61c019d45553b9a45"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0xfa, {0xf8, "5ccb35a312b8c50080d9914307a7f20ff888622dc1b8b6705827013b255dfdc309a760fbdaee3a137ea07537e1217708ec808b7463d97a982d8307960f7ac0202e2227e2c9c75e19268b29d46c2e188259ae3f71846f43f7ff426a3e9fa2a02e67771d900ce34f2b29ab1ccf608f444a02284ff70e87ee47628389eadbfcf0e04ebe1429d1a0286cc00db8d9d1bef7103b5fb3ff5ffde360a00553d4fc71407e55bb9111763c12a08c28a912e527b2e1f9e70580cf332aa263c77371a2d7e5f894a4e2fc2fddfce74f0ab52f16a5f9467db56182f54d381c7a224803d9649efcac95ffe86590a2f4eab563e776293b3efe1774bc790fa718"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000006c0)={0x14, &(0x7f0000001840)={0x40, 0x23, 0x90, {0x90, 0x31, "3715b51681a4d54ecd919f3fa9e86b789672589333cb918d16897f1b3471b03049f86596fcd4da14672c8392ed11c354df41ce88b4c45ef2d37efb274158c61aeec40e02acbd82cebc8d130ca8a4ed9b3b315ade3c95fcfc7920b8e15f13ac39e11605f217e27c33bd7edcffb368301978292d23f3793750fd38d3414951234c4228b6f7edd3b200312a32a2cce0"}}, &(0x7f00000019c0)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "10338ffc50a54f2bdc0467096ed48ce20c471be4c49b213112de5506198e42a68c450150afbb353eada0f0fd295802995f1b181e36affb49ca90c6787c8dabbc189c830e8d462d275c1ba47b00c58cb14db408fe6f47dbe2f2e54f76ca0d97f9160f92fbf688f10996e3e767ca31d65cd7bc853a070d5fb3d731bc93acbd7457c0734dd9796085579fc0827aae803e64678bbb2ebe4fcf40ef735b73ec55a6f5289fa334d5ef556697118d87fa3500b9d774354fd355acf99354c5605c2969852e30cfe5659884eb2d3334cec1076949dd38ead46d80e964b0e1a2"}}}, &(0x7f0000001c80)={0x34, &(0x7f0000001900)={0x40, 0x30, 0x65, "08295f85007a076e78251bc82f5e85261ba3cddb0d283e189646abe7dbd2d2539f62d998d34eeb5a344c9242fbb0a2338c7c0abbde6b45cd606203acf63ad733d29e07fe19ffb6f587852d06d17eee60e11068636ecb2fe892f4c0fb1a658df731199a7ca8"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001ac0)={0x0, 0x8, 0x1}, &(0x7f0000001b00)={0x20, 0x0, 0xfa, {0xf8, "ed7ed9292aadf94a07e6d5d77dd6dc9ab35d4037d337152607b86f9799214573d4e40ccfb3f0e218c0ac2edd8349a9b8e215b5d3abeae5731cf1f63239a381ebaf939f0626f04980b194119a91fdb4b44c5ca943407bf06602b9cf9f1c4d60966922bdc803650355075aa6bee9b6c759cb9872de7f06d3061db2f637c395169ead65345ffc7da8c978ebf7ff04992292d2c6e33e1ab30834a36739c233bb1aecb364414890223d840e9bad59ac68736ae8c9d23641c554c87aa469e5dffc435075d305a9c996c9488fbc1c6884929f29449df57138e543df376a7417d7e73bce2077432dd9e901bd7d04095230a93233b4a5968126d565a7"}}, &(0x7f0000001c00)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000001c40)={0x20, 0x0, 0x1}}) r0 = syz_open_dev$hiddev(&(0x7f0000000680), 0x100000001, 0x1) read$hiddev(r0, &(0x7f0000001780)=""/154, 0x9a) r1 = syz_open_dev$hidraw(0x0, 0x7, 0x200002) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000580)=""/255) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3369.989347][T28575] usb 6-1: USB disconnect, device number 44 00:23:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x4870) 00:23:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffff000, 0x21f2) 00:23:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x600, 0x4870) 00:23:25 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="65abd935ff34c7619bf91aa0c0ead5c366"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0x4870) 00:23:25 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x700, 0x4870) 00:23:25 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0x4870) 00:23:25 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f2) 00:23:25 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x4870) 00:23:25 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x3ff]) [ 3370.485540][T28575] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 3370.505904][ T1499] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3370.846042][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3370.866190][ T1499] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3370.875957][ T1499] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3370.885656][ T1499] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3371.065438][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3371.074566][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.082599][T28575] usb 6-1: Product: syz [ 3371.086810][T28575] usb 6-1: Manufacturer: syz [ 3371.091395][T28575] usb 6-1: SerialNumber: syz [ 3371.215460][ T1499] usb 3-1: string descriptor 0 read error: -22 [ 3371.221688][ T1499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3371.230749][ T1499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:26 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x4, 0x0}) 00:23:26 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xc00, 0x4870) 00:23:26 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0x4870) 00:23:26 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x8040) 00:23:26 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x3ff]) [ 3371.382512][T28575] usb 6-1: USB disconnect, device number 45 [ 3371.416545][ T33] kauditd_printk_skb: 40 callbacks suppressed [ 3371.416562][ T33] audit: type=1800 audit(1629937406.832:235): pid=24736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14274 res=0 errno=0 [ 3371.474009][ T33] audit: type=1800 audit(1629937406.832:236): pid=24736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14274 res=0 errno=0 [ 3371.518352][ T33] audit: type=1800 audit(1629937406.872:237): pid=24737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 3371.546650][ T33] audit: type=1800 audit(1629937406.872:238): pid=24737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 00:23:27 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x7f5824caa466512, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1, 0xc0, 0xd6, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "657295"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x0, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xa1, 0x40}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x6, 0x2, 0x8, 0x1f}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "38238f041ab4fd9fa9c2ad8ccac6a266"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x8, 0x9, 0x5}, @ptm_cap={0x3}]}, 0x3, [{0x88, &(0x7f0000000240)=@string={0x88, 0x3, "7615a5cc2244fa7a7308ab6d6aac0b82d9aaea8bf23ca33fd35670bb5cb8b48466709d76b072f1586fc723ec34c98a0f08e96b9a624c35a32c41f1286bae55571f59f6da31d9ecbadbb2c3a5b16960235a5fe7fe22325db45bfa6c39f0b35e3879b3ec2549ecea29b0de7747db39cc2fcbf98aad0faa193af807e3f95b3b60adc617ab24393e"}}, {0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "10e30fd4e28313659a353699e13f5fd8131425746c35fbf1ec78df957be3137eed0f5efcb5d8fa92a9bcb2a7db16b805b4893fbe6077addf495f5223145784a13fe2d07f7006c34440a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0xb5a5669d8b43a686, 0x23, 0xb0, {0xb0, 0x1, "7de63f08133edf653366ef0e4640f68782d4bcc82b32a236cbb94bf54cc54128a754df13d54cd9937b677d0cbd11359213997b1483281b92039a4fb36107c6322e4700227867d3bc943fc739555c3c433d87a48357f8e2dc8eefc282ceab9be5cbc6fe63437ce3a1b367d921823c4ebcbf51294b62b774a059b74ed10f61837a038fa6b1e5f9312573207002b9fd0b1be1a2c2040654c145e5ff220ed0772f51d2c1f4b7ead1a968c4938346dbd5"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x40, 0x11, 0x92, "b506710b6b799709a5630d1a418cf2c68df68fbb3c955f7e548f0a372ad518dcf82bd526602fd132a46324ea8c7e5269d4261f20f087cf843af29fcd7114b76fd1cb33fff503ef25ea4de231f983c10265be2bc93c6976aadea1920c796e5263760559fd60a06c323dff7b1d72a441af20497a38be169e25530ca08be20bbd1e816d7a91614cbc0a189edc1932ad5cfd3f2b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1f}}) 00:23:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1200, 0x4870) 00:23:27 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xdb8, 0x821b0) 00:23:27 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x4870) 00:23:27 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x8040) [ 3371.549153][ T1499] usb 3-1: USB disconnect, device number 9 00:23:27 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000018c0), 0x4000000000000000, 0xc51c0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/209) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0x9, 0x4a02) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000680)={0x2, 0xfffffff9, 0xffffffff, 0x0, 0xce, 0x2}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000006c0)={0x54, 0x9, 0x2, {0x100, 0x8}, {0x800, 0xfffe}, @const={0x400, {0xfeff, 0x200, 0x8}}}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000004c0)={0x4, 0xa0, &(0x7f0000000400)="5cbb7e1102a08f87fadcb78a3b616517d696c31b87d0135520ad11631c8bc3e699840c3eac345ba1f972cd180d68339ca2fefaf22e1dc95402f6f3dfc9d9a0fa36f3be0af10b7470b6f6415802f3f81e360b17544adb0fcc56c0ee3f7ca9f5480f3be0e87cc8f25a945fefab0419eb1da6c15462928b98af1b4d8cb20216ea40d660181482d70ed6d65f24f1443d90b66dcc08055192335391c1f1270bbe4239"}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/218) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000005c0)=""/149) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000000)=""/164) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000500)=""/155) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000002c0)=""/208) 00:23:27 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1300, 0x4870) [ 3371.626958][ T33] audit: type=1800 audit(1629937407.042:239): pid=24750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14547 res=0 errno=0 [ 3371.721084][ T33] audit: type=1800 audit(1629937407.042:240): pid=24750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14547 res=0 errno=0 [ 3371.764117][ T33] audit: type=1800 audit(1629937407.072:241): pid=24753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14562 res=0 errno=0 [ 3371.785927][ T33] audit: type=1800 audit(1629937407.072:242): pid=24753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14562 res=0 errno=0 [ 3371.817060][ T33] audit: type=1800 audit(1629937407.172:243): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14355 res=0 errno=0 [ 3371.839269][ T33] audit: type=1800 audit(1629937407.172:244): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14355 res=0 errno=0 [ 3371.885307][T28575] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 3372.265745][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3372.435673][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3372.444719][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3372.452763][T28575] usb 6-1: Product: syz [ 3372.457000][T28575] usb 6-1: Manufacturer: syz [ 3372.461674][T28575] usb 6-1: SerialNumber: syz 00:23:28 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0xb, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x1}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:28 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x18000000, 0x4870) 00:23:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x4870) 00:23:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1800, 0x4870) 00:23:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/150) 00:23:28 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x5, 0x0}) [ 3372.774120][T28575] usb 6-1: USB disconnect, device number 46 00:23:28 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f00, 0x4870) 00:23:28 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0x4870) 00:23:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x51, 0xffff, 0xfff, {0x6, 0x8}, {0x3, 0x418a}, @const={0x3, {0x8, 0xffff, 0xfffa, 0x9}}}) 00:23:28 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x4870) 00:23:28 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xaaf, 0x85ab, 0x0, 0x7f, 0x9, 0x100}) 00:23:28 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x2e000000, 0x4870) [ 3373.056502][T32516] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3373.245206][T28575] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 3373.415610][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3373.425300][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3373.434970][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3373.615668][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3373.705731][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3373.711978][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3373.721065][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.825211][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3373.834262][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.842305][T28575] usb 6-1: Product: syz [ 3373.846524][T28575] usb 6-1: Manufacturer: syz [ 3373.851111][T28575] usb 6-1: SerialNumber: syz 00:23:29 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x1f000000, 0x4870) 00:23:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000, 0x4870) 00:23:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffffffffffb, 0x21f2) [ 3373.977121][T32516] usb 3-1: USB disconnect, device number 10 00:23:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f000000, 0x4870) 00:23:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2696, 0x4870) 00:23:29 executing program 0: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x65, 0x3e73]) syz_open_dev$evdev(0xfffffffffffffffc, 0xfdfffffffffffffc, 0x240200) 00:23:29 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x6, 0x0}) 00:23:29 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x51, 0xffff, 0xfff, {0x6, 0x8}, {0x3, 0x418a}, @const={0x3, {0x8, 0xffff, 0xfffa, 0x9}}}) [ 3374.173260][T28575] usb 6-1: USB disconnect, device number 47 00:23:29 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x10, 0x37d121) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/249) 00:23:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1, 0x4, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x3f00, 0x4870) 00:23:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x40000000, 0x4870) 00:23:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000, 0x4870) 00:23:29 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x51, 0xffff, 0xfff, {0x6, 0x8}, {0x3, 0x418a}, @const={0x3, {0x8, 0xffff, 0xfffa, 0x9}}}) 00:23:29 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x96260000, 0x4870) 00:23:29 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x80, 0x2002) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/70) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x20000) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/62) 00:23:29 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x9626, 0x4870) 00:23:29 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/3) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x51, 0xffff, 0xfff, {0x6, 0x8}, {0x3, 0x418a}, @const={0x3, {0x8, 0xffff, 0xfffa, 0x9}}}) [ 3374.595059][T32516] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3374.705032][T28575] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 3374.955529][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3374.965234][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3374.975424][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3375.065500][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3375.245462][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3375.252264][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3375.255675][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3375.261360][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.270328][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.286330][T28575] usb 6-1: Product: syz [ 3375.290498][T28575] usb 6-1: Manufacturer: syz [ 3375.295164][T28575] usb 6-1: SerialNumber: syz 00:23:30 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x7, 0x0}) 00:23:30 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x6, 0xe8, 0x3ff, 0x6, 0xb2c, 0x955}) 00:23:30 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xe4ffffff, 0x4870) 00:23:30 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xf000, 0x4870) 00:23:30 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/3) 00:23:30 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1f, 0x204042) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3375.526455][T32516] usb 3-1: USB disconnect, device number 11 [ 3375.604975][T28575] usb 6-1: USB disconnect, device number 48 00:23:31 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x4, 0x4400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0xc0801) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/233) 00:23:31 executing program 4: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x1ff, 0xfe, 0x4f, 0x8000, 0x9, 0x100}) 00:23:31 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xff00, 0x4870) 00:23:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf6ffffff, 0x4870) 00:23:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfbffffff, 0x4870) 00:23:31 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x1031f3) [ 3376.104950][T32516] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3376.104950][T28575] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 3376.475379][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3376.524986][T32516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3376.534720][T32516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3376.544416][T32516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3376.645401][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3376.654550][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.662599][T28575] usb 6-1: Product: syz [ 3376.666827][T28575] usb 6-1: Manufacturer: syz [ 3376.671423][T28575] usb 6-1: SerialNumber: syz [ 3376.844947][T32516] usb 3-1: string descriptor 0 read error: -22 [ 3376.851184][T32516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3376.860275][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:32 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x8, 0x0}) 00:23:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x101100) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/2) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:23:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x200000, 0x4870) 00:23:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:23:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfeffffff, 0x4870) [ 3376.978886][T28575] usb 6-1: USB disconnect, device number 49 [ 3377.035900][ T33] kauditd_printk_skb: 39 callbacks suppressed [ 3377.035916][ T33] audit: type=1800 audit(1629937412.453:284): pid=24933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15650 res=0 errno=0 [ 3377.093472][ T33] audit: type=1800 audit(1629937412.453:285): pid=24933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15650 res=0 errno=0 00:23:32 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x1, 0x20}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x16, {0x16, 0x31, "4ebf204a681c7bb9e33d1e01e4e01d48da6f96b8"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xd6, "b4651405e9865a4afe2947976832c374014c50d8abdcda56631e303004eb9b6657a5ae4a0400fc26bd886c164ea699c37e12818bb90bc0527cc46d63bb9e5e5ec1be52e4de582b10e046002cb05729eeb24b2732da8d73f63f04215e9ece3c052127c789ef09c2d04e7c14549c70faeca76b61fe8b5c91f48260421bd2d19a475c39e51eb8892601f733512f70e6f4459c43f2647b960aeeb7fc77762d6fa0b0201e0db70ccb7f392322190453e088132ef6f25678c669f3b84df1abd193154584430644f1da2e104ecdf73bd3abfd40b449c1bc7315"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x81, 0x3, "a87523"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "f2a119"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "480408"}, &(0x7f0000000400)={0x20, 0x84, 0x4, "8dbe53e1"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "c19788"}}) 00:23:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffff, 0x4870) 00:23:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) 00:23:32 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x4870) 00:23:32 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/50) [ 3377.124713][ T33] audit: type=1800 audit(1629937412.503:286): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15697 res=0 errno=0 [ 3377.137250][T30893] usb 3-1: USB disconnect, device number 12 00:23:32 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x0) [ 3377.226504][ T33] audit: type=1800 audit(1629937412.503:287): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15697 res=0 errno=0 00:23:32 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000, 0x4870) [ 3377.310609][ T33] audit: type=1800 audit(1629937412.643:288): pid=24954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15490 res=0 errno=0 [ 3377.380964][ T33] audit: type=1800 audit(1629937412.663:289): pid=24954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15490 res=0 errno=0 [ 3377.415062][T28575] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3377.427653][ T33] audit: type=1800 audit(1629937412.713:290): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15233 res=0 errno=0 [ 3377.449866][ T33] audit: type=1800 audit(1629937412.723:291): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=15233 res=0 errno=0 [ 3377.472253][ T33] audit: type=1800 audit(1629937412.793:292): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15474 res=0 errno=0 [ 3377.493804][ T33] audit: type=1800 audit(1629937412.823:293): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=15474 res=0 errno=0 [ 3377.734829][T30893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3377.784873][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3377.955288][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3377.964344][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.972385][T28575] usb 6-1: Product: syz [ 3377.976659][T28575] usb 6-1: Manufacturer: syz [ 3377.981253][T28575] usb 6-1: SerialNumber: syz [ 3378.105271][T30893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3378.114973][T30893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 00:23:33 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x18, 0x0}) 00:23:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xff0f0000, 0x4870) 00:23:33 executing program 0: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/56, 0x38) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x402172) r0 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) 00:23:33 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x2000000, 0x4870) 00:23:33 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0xff000000, 0x4870) [ 3378.305402][T28575] usb 6-1: USB disconnect, device number 50 [ 3378.355457][T30893] usb 3-1: string descriptor 0 read error: -22 [ 3378.373224][T30893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3378.382456][T30893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:23:34 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x1, 0x40e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xda, 0x23, 0xf7, 0x10, 0x8516, 0x3070, 0x8c37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fc, 0x3, 0x20, 0x7f, 0x10, 0x80, [{{0x9, 0x4, 0xf4, 0x3, 0x5, 0xae, 0xb5, 0x70, 0xb5, [@generic={0xa7, 0x10, "220a0feff7f6082a12f35d2aef83f8574beef0ce518a5ec080fac6b90d9e5edfae639c5372907f8319d46e281ec66619521197720444dafb680e2468fc004400c503ba21add66967d430485098661224cffb07709d197ad04e60f056f74c8af0058abf82fb3e6d5db53cbc53a3a229ae2d1e0b6a89a716cffbfe400acb338fd978b02db37e3108aa2f6ccecf96ce3da2721372ce30a71285fda59da5fa91d91095ef95b22e"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x79, '>', '`$]'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x80, 0x4, "", "27fa"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0xfb, 0x7, '/', "7caf"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x1001}]}], [{{0x9, 0x5, 0x5, 0x1, 0x3e6, 0x4d, 0x4, 0x2, [@generic={0xa4, 0x9, "57c09f68cbcac2c75ac10353aae2124cbeb6b06801e0a07a87185d4c02d694e493597ff2acffbe93fd6db1b78f79c945cb8de9710ad82c4e9049940f2ba967fb7d2a761116d012a4128fc8bf9668b7da7f293bfb5eddb4c3db6a8195d68e09d81f5e0efc73d30c46abb2f81e4cfc613267743de38e0d1371f34eae155852b6108faf1e53dc30a617a80a395d552f295b6baef154a59ffc1a59fc3bb17d88edb37aa7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x9, 0x6, 0x3f, [@generic={0x39, 0xf, "c3f96ea5244b150bca0a734479a24ad8af4aa875ab9cc7dc7e349df59004d6de83a1bb8ed6bb95351e6f934e07cf9f4ae40d6299d90854"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x4, 0x91, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x2, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x7, 0x40, 0x5, [@generic={0x6d, 0x10, "c5ffa42d1c34d7ca2366e7748f9e5c970fa02cf811e2db3b36c69a9ddb56c4e319c4997bbe7729f9fba4222fa20c9ad17f7f72f055919b86768e37817f319f79771e48738b28f3dd1d05073acd85cc1e14cf2dc8e25ef56f4b237a8691a8d30ce4198f441ae3efc07d46e4"}]}}]}}, {{0x9, 0x4, 0xe9, 0xe0, 0x2, 0x91, 0xf4, 0x9d, 0x2, [], [{{0x9, 0x5, 0x9, 0x0, 0xc1a1ef8aad0db942, 0x9, 0x1, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x86, 0x3e, 0xfc, [@generic={0x1a, 0x3, "c07cd3e2596eac5dc8c7825347fda714c32d89363452cc31"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0xa, 0xff, 0x4, 0x7c, 0x5, [], [{{0x9, 0x5, 0x7, 0xc, 0x200, 0xeb, 0x7, 0x7f}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xed, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @generic={0x9e, 0x31, "8ce93cd16e9ac43ec1db4a844642f6d94b8be358fc855660c96368d7ea65d5b72bd6f5d76cb0f62d0a558edbd8cbb7cff10d04590340148b298efa622602dbcc71f9cbb8bcceff094705683a8ae575ac57c7e672b9fac997879558be0d98162b1d079bdb9880880c7c506f14564c9bbf7b094fa6e397a72ae902da12d447166749c0e5eb9cd45947243395d21b22a53fbab87521bc3cbcd168cf2614"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd5, 0x4800}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7f}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x3, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xa9d}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1f, 0x7a}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x4, 0x7e, 0x1, [@generic={0x2f, 0x10, "27425dabac5eb7c9cc4badfab2963f9449ce717d9b0a182bbefac06a19f0cef9dc1d23ae29857625782b20fd41"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x1, 0x64, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x5}]}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0x1, 0x1, 0x40, 0x5c}, 0xa8, &(0x7f0000000100)={0x5, 0xf, 0xa8, 0x6, [@generic={0x1a, 0x10, 0xa, "ed38c4423b291e02584d71e8142835fb0fb0b7137e5661"}, @generic={0x53, 0x10, 0xb, "a92d78990528dbb6e02f218ba982632af02926c9656c55465d515372de2dfb20b37bad7441b089bfc2e6b828af26dd229848b92da08f3a2d6619a7850cf23e9242d7d162b0b4e479f27cf64db80cf793"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e35372d7a08a502d758384bdc1d3e6c1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x49, 0x7, 0x7, 0x7f, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x4d, "719c949c8905375b45b416444b721832"}, @ptm_cap={0x3}]}, 0x1, [{0xa0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"]}]}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x3, 0xff, 0x8, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x11000, 0x4, [0x3f00, 0x67]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x12, {0x12, 0x6, "e7b181ad85dbd8bb29bbdc9204465414"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000001bc0)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf0f, 0x1ff, [0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "482296771da0c7e2b180bbe42404e663"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0x66, 0x0, "88103a21", "7339e101"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x80, 0x1, 0x5, 0x1f, 0x1f, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0xf0, "aab773cefbe810d4e2f281da9975fcf966eec86e3c81cdce113b669a21fb1c2229fe36b5980ca5be994c1903b3fa1f84c7265c5034d3c4fbd1de2938bb6d32cf873a47e47c59f30891fbbcc6ca1b7490149d211f57f273db2ce4c6198ad0a469586dd9626b99e8dc9184ddb50462686c4753f36ba8b55e5c7c1901513d69709ce6de2c0667141a4453888b84f68380115f52288b8194b7369b32628d67d2c5547f0ddc2334375f28bf3078698c82c22f5450f73c8db0f602cc335733dabbd5dbcf5c7f43afd74be4da89df28e8416b0114a11360d1b5cfab45f32c02cc4a817b3b7d283d5b995cc7562d61d179b32f17"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf011]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "451b"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, '@Y'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, &(0x7f0000001800)={0x14, &(0x7f0000001780)={0x20, 0x8, 0x3e, {0x3e, 0x10, "407a7511d559305b42fe48f5a8d829250bbfa18ed0815d4aa3368ec8db08526670ad5a596111ad2a198dc8e9165c7d702276cd867aef5f6bd51b2d63"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000001a40)={0x34, &(0x7f0000001840)={0x20, 0xb, 0x41, "3f79880750fd5c48c52c245e4892076de720179b75e6f296c36772e44d77ad30e71c0fdfedd5945d22ef6fc40cccdf2f528e256daff91e77e9f270a6f4aa7211ab"}, &(0x7f00000018c0)={0x0, 0xa, 0x1}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000001940)={0x20, 0x0, 0x2}, &(0x7f00000019c0)={0x20, 0x1, 0x1, 0xc2}, &(0x7f0000001a00)={0x20, 0x0, 0x1, 0x5}}) 00:23:34 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x8, 0x0}) 00:23:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x3000000, 0x4870) 00:23:34 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x300, 0x0}) 00:23:34 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x40000) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x5, 0x202) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000000c0)="e0a3d5503624721092c8dc0f2c907b75f4c2f988df828da39999310176559fc3dc4feb116f7e9ec60cd86f6db9b9f10b7bb16bbf46870b7c86faddedb64e7f7c5a5fcf7d0518e681f5851dc7d32546637e7d2a050dfac78a188d032593fa94294bc8f4de6be49724483760acaea7a8c645001340baf2b70345e7061bdc38ecd8239a4b537c7e15c11e4554f2ad57b329", 0x90) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000080)={0x7, 0x1, 0x6, 0x400, 0xdff, 0x1ff}) r2 = syz_open_dev$hiddev(0x0, 0x8, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x80, 0x240) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x2, 0x2, 0x2, 0x8, 0x5, 0x1}) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) r4 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000300)={0x2, 0x2, 0x4}) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000240)={0x2, 0x1, 0xdf0e, 0x76f, 0x1}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000200)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000900)={{0x1, 0x200, 0xffff8001, 0x1, 0x6, 0x11}, 0x3c6, [0x6, 0x6, 0xffffffff, 0x8, 0x100, 0x4, 0x0, 0xffffffff, 0x76, 0x1, 0xf9, 0x400, 0x101, 0x9, 0x0, 0xa0ba, 0xbff8, 0x3, 0x7, 0x1, 0xf2a, 0x4, 0x5, 0xe30, 0x400, 0x8000, 0x1000, 0xffffffff, 0xff, 0x2, 0x0, 0x3f, 0x7, 0xa345, 0xfff, 0x8001, 0x2, 0x6, 0x8, 0x8001, 0x1f, 0x6, 0x80000001, 0x401, 0x6, 0x5, 0x7, 0x3, 0x400, 0x5, 0x1ff, 0x10000, 0x401, 0xc112, 0x5a29, 0x1, 0x5, 0x7fffffff, 0x0, 0x200, 0x80, 0x400, 0xd9, 0x9, 0x4, 0x9c, 0x10000, 0x40700000, 0x2, 0xeb1, 0x60880000, 0x7, 0x80000000, 0x4, 0x5, 0x9, 0x8001, 0x80000000, 0x9, 0x3a54, 0x4, 0x0, 0x6179, 0x1948, 0x4, 0x4, 0x6, 0xfffffe51, 0x0, 0x3f, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x7ff, 0x5, 0x5, 0x8001, 0xffffffff, 0x20, 0x2, 0x1000, 0x401, 0x6, 0x64d, 0xff, 0x1000, 0xb36, 0x5, 0x2, 0x7fffffff, 0x1, 0x7, 0x1, 0x0, 0x6, 0x782a, 0x301, 0xb3, 0x5, 0x9, 0x24, 0x9, 0x6, 0x400, 0xf, 0x800, 0x5, 0x4, 0x4, 0x10000, 0x7, 0x9, 0x7ff, 0x9, 0x5, 0x5afc4d1e, 0x3e3, 0x4, 0x40, 0x6, 0x8000, 0x8001, 0x8000, 0xffff, 0x5, 0x4635, 0x6, 0xfffff0d2, 0x2b8d, 0xf3c, 0x4, 0x9, 0xc9, 0x9dd, 0x200, 0x1ff, 0x0, 0x0, 0x5, 0xce3, 0x8, 0x4, 0x28, 0x4, 0x100, 0xa269, 0x10000, 0xffff, 0x1ff, 0x9, 0x6, 0x0, 0x1, 0xd0a, 0x4, 0xfa9, 0x3, 0x5, 0x8001, 0xffffffff, 0x400, 0x2, 0x2b4, 0x1ff, 0x3, 0xab, 0x0, 0x9, 0x2, 0x9, 0x9, 0x4, 0x9b, 0x0, 0x7dab3891, 0x401, 0x1, 0x19e, 0x5, 0x1f89, 0x5, 0x10000, 0x249, 0x4, 0x3, 0x1, 0x0, 0x8, 0x300, 0x8, 0x3, 0x401, 0x2, 0x0, 0x200, 0x1f, 0x9, 0x4, 0x6, 0x81, 0x0, 0x2, 0x8, 0x2, 0x8, 0x0, 0x11e7, 0x5, 0x7, 0x7fff, 0x80, 0x9, 0x5aee, 0x1b2, 0xfffffff7, 0x5, 0x8, 0x1, 0x8, 0x400, 0x5, 0x5, 0x1, 0x10000, 0x3, 0x34, 0xfff, 0x7, 0xff, 0x0, 0x1ff, 0x8, 0x6, 0x3, 0xe7f, 0x400, 0x768, 0x9a21, 0x9, 0x5, 0x0, 0x8, 0x1ae6000, 0x811c, 0xffffffff, 0x8001, 0x9, 0x0, 0x7, 0x90af, 0x0, 0x2ca, 0x20, 0x1ff, 0x3c47, 0x7fffffff, 0xf9, 0x915, 0x4, 0x3, 0x2, 0x0, 0x7ff, 0x8001, 0x7ff, 0xffffffc0, 0x8000, 0x4, 0x10000, 0xaeb, 0x80000000, 0x7, 0x7, 0x5, 0x31, 0x5, 0x1, 0x9, 0x8, 0xfffffffa, 0x8, 0x401, 0x685, 0x4, 0x6, 0x8, 0x3, 0x8, 0x7f, 0x6, 0xfffffff8, 0x7, 0x2, 0x6, 0x6, 0x0, 0x0, 0x8, 0x3, 0x6, 0x1, 0x10b0, 0x10001, 0x4, 0x5e11, 0x2, 0x81, 0xfffffff7, 0x8, 0x8, 0x8, 0x9, 0xfffff743, 0xff, 0x2, 0x8, 0x6f, 0x9, 0x0, 0x7, 0xe, 0x7, 0x7, 0x8, 0x4, 0x5, 0x5, 0x5, 0x9, 0x5, 0x20, 0x20, 0x3, 0xa3, 0x6, 0x7, 0x3, 0x7, 0xde7, 0x3f, 0xffffffff, 0x5, 0x7, 0x5, 0xfffeffff, 0x1, 0x4, 0x9, 0x9, 0x10000, 0x0, 0x8, 0x0, 0x7fffffff, 0x1, 0x5, 0x3, 0x9, 0x174, 0x2, 0x0, 0x9, 0x80000000, 0x9, 0xfffffff8, 0x4, 0x4, 0x3f, 0x0, 0x7fffffff, 0x800, 0x20, 0x5, 0x9, 0x10001, 0xa, 0x0, 0x3f, 0x81a, 0x1, 0x1f, 0x6, 0x0, 0x4, 0x40, 0x1000, 0x5, 0x0, 0x6, 0x9c9a, 0x0, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x4bcb, 0x4, 0x1, 0x3, 0x0, 0x1, 0x8001, 0xffffffff, 0x8, 0x8001, 0x9f, 0xfff, 0x3, 0x290, 0xffffffff, 0x8bd, 0x6e, 0x4, 0x1, 0xbd11, 0x1f, 0xdd, 0x7, 0x1, 0x9, 0xf47b, 0x7fffffff, 0xc665, 0x7ff, 0x4, 0x6, 0x9, 0xffff, 0x7, 0x4, 0x6, 0x1f, 0x5, 0x1, 0x81, 0x7ff, 0x8, 0x3a9, 0x90b5, 0x5, 0xfffff800, 0x7fffffff, 0x8000, 0xd29, 0x6, 0x9, 0x4, 0x6, 0x800000, 0x16, 0x2, 0x9, 0x8000, 0x1, 0x5, 0x10000, 0x6, 0x5, 0x3, 0x8, 0x3, 0xfffff801, 0x6, 0x2, 0x3cc, 0x10001, 0x4, 0x0, 0x2, 0x1, 0x3ff, 0xa4, 0xa5e3, 0x3, 0x1, 0x81, 0xfffffffb, 0xfffff6da, 0x0, 0x401, 0x9a, 0x0, 0xfffffffe, 0x6, 0x6, 0x6, 0x9, 0x1, 0xfffffffe, 0xfffffffb, 0x0, 0x9, 0x7ff, 0x7, 0x6, 0x81, 0xffffff22, 0xfff, 0xfff, 0x4, 0x8000, 0x1f, 0x6, 0x100, 0x60931d17, 0xffffffff, 0x1, 0x7, 0x69, 0xe5eb, 0x0, 0x100, 0x3f, 0x9, 0x4, 0x27d8, 0x8, 0x2, 0x5, 0x8, 0xff, 0x1, 0x335e4545, 0x3, 0x6, 0x100, 0x8, 0x1, 0x0, 0x5ed9, 0x1, 0x80000001, 0x58, 0xffffffb0, 0x56, 0x8, 0x3ff, 0x6, 0x6, 0xa9b6, 0x7fffffff, 0x0, 0xb220, 0x6, 0x2, 0xffffffff, 0x8, 0xffffffff, 0x800, 0x20, 0xd9, 0x1f, 0x6, 0x20, 0xfffff800, 0x6, 0x7fffffff, 0xbe, 0x7, 0x2, 0x7, 0x7, 0x8, 0x9a, 0x1, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x2, 0x1, 0x1, 0xfffff124, 0x1000, 0x7, 0xaab, 0x5, 0x0, 0x1, 0x4, 0x3ff, 0xff, 0x5, 0x1f, 0x6, 0xc, 0x7da9, 0x5, 0x2, 0x7, 0x81, 0x9, 0x4, 0x5, 0x5, 0x5, 0x80, 0x3, 0x6, 0x1, 0x3f, 0xff, 0x7, 0x6, 0x0, 0xf4a2, 0x9, 0x8fdc, 0x80000001, 0xffff7fff, 0x7, 0x4, 0x6, 0x7bd, 0xffffffff, 0x4, 0x80000001, 0x1ff, 0x2, 0x3, 0x4, 0x1, 0x0, 0x0, 0x8, 0xa, 0x2, 0x1, 0x0, 0x7ff, 0x10000, 0x1e, 0x8e, 0x8, 0x8, 0x5, 0x2, 0x4, 0xfb, 0x2, 0x7, 0x2, 0x3290e3fa, 0xfffffffa, 0x9, 0x8c, 0x0, 0x1ff, 0x69f0bf7f, 0x101, 0xff, 0x3, 0x8, 0x1, 0x7, 0x3f, 0x9, 0x4, 0x9, 0x3, 0x2, 0x400, 0x3, 0xffffffff, 0x8, 0x6a, 0x3, 0x6, 0x80000001, 0x8001, 0x40000000, 0x6, 0x36, 0x1, 0x10000, 0x5, 0x8, 0x800, 0x4, 0x5b18, 0x0, 0xdb40, 0x0, 0x2, 0x3, 0xebc, 0x4, 0x101, 0x1000, 0x1, 0x0, 0xfffffffe, 0x4306, 0x5, 0x3, 0x7, 0x7, 0x81, 0x1, 0x0, 0x9, 0x400, 0xab, 0xfffffffc, 0x5, 0x2, 0x1, 0x200, 0x0, 0x9d05, 0x0, 0xfffffffd, 0x86a, 0x7, 0x10001, 0x0, 0x8, 0x4, 0x5b, 0x7f, 0x10000, 0x3, 0x7, 0x8, 0x3f, 0xff, 0x9, 0x7ff, 0x7ff, 0x1, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x1000, 0x8, 0x80, 0x861, 0x54c6, 0x3, 0x6, 0xfff, 0xd3c, 0x3, 0x787c, 0x704, 0x3, 0x7ff, 0x0, 0x4, 0xf11b, 0xbf7, 0x80000000, 0x101, 0xf, 0x7, 0x6, 0x0, 0x6, 0x5, 0x9, 0xfffffff8, 0x3, 0x5, 0x1c9, 0xff, 0x8, 0xf6a8, 0xffff0000, 0x7, 0x7fff, 0x1, 0x1f, 0x2, 0xfc, 0x2, 0x8, 0xfffffffb, 0x58a, 0x7, 0x52b, 0x3, 0x40, 0x9, 0x2, 0x7, 0x1000, 0x58cf, 0x359b, 0x3, 0x8, 0x3f, 0xfffffffb, 0x101, 0x6, 0x5, 0x18, 0x8dc, 0x4, 0x8eb80817, 0x3, 0x9, 0x0, 0x1000, 0x42c, 0x9, 0x6, 0x720d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x80000001, 0x7f, 0x8000, 0x5, 0x0, 0x10000, 0x8000, 0x5c, 0x0, 0xb741, 0x709e, 0x5, 0x80000000, 0x1ff, 0x38, 0x800, 0x1000, 0x4, 0x3, 0x1ff, 0x6, 0x19e0284f, 0x968, 0x7e5, 0x9b, 0x1, 0xac31, 0x5, 0xb301, 0x5, 0xfff, 0x1, 0xfffffffd, 0x8, 0x5, 0x2, 0x7a4eff7a, 0xffffffff, 0x7, 0x80, 0x8, 0xd6fe, 0x0, 0xffffffa7, 0x48c2520f, 0x5bbf, 0xffff2f7f, 0x3, 0xff, 0x5, 0x20, 0x1, 0x4, 0x3, 0x167f03d3, 0x10000, 0x7ea41db3, 0x2, 0x1, 0x2, 0x100, 0x1, 0x2, 0x7a1, 0xee, 0x1, 0x409, 0x1, 0x8, 0x6, 0x1f, 0x3f, 0x5f7, 0x1, 0xfff, 0x3, 0xb59, 0x8, 0x400, 0x9, 0x7, 0x101, 0x1000, 0x100, 0x101, 0xffffffff, 0x80000000, 0x6, 0x8, 0xffffcee4, 0x100, 0xff, 0x8, 0x80000001, 0x7, 0x8001, 0x20, 0x0, 0xc49, 0xc03, 0x400, 0xe16, 0x6, 0xe0000000, 0x2, 0xf69, 0xfffffff7, 0x6, 0x7, 0x5, 0x80000001, 0xffffffff, 0x3, 0x3b49, 0x3f, 0x8, 0x8, 0x6a, 0x7, 0x5, 0x6c, 0x7f, 0x7, 0xdcb, 0x6, 0x3f, 0x4dbe, 0x2, 0x8000, 0x0, 0x4, 0x6cdef575, 0x5, 0x9, 0x0, 0x9, 0x1000, 0x7, 0x80000001, 0x4, 0x6da, 0x6, 0x9, 0x13e, 0x7, 0x800, 0x81, 0x8, 0x9, 0x5, 0x26, 0x80000001, 0x8, 0x407, 0x24c, 0x9, 0x80000000, 0x0, 0x1, 0x10001, 0x0, 0x3f, 0x100, 0xb32f, 0x400, 0x6, 0x400, 0x2, 0x7f, 0x9, 0x9, 0xffff, 0x1, 0x9, 0x3, 0x9, 0xaa, 0x2800, 0x3, 0x8001, 0x8, 0x0, 0x2, 0x40, 0x3af4]}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000001c0)={0x2, 0xffffffff, 0x8, 0x0, 0x0, 0x80000}) r5 = syz_open_dev$hiddev(0x0, 0x8, 0x0) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000008c0)={0x0, 0x200}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/55) 00:23:34 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffff000, 0x4870) [ 3378.706125][T28575] usb 3-1: USB disconnect, device number 13 00:23:34 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffff7f, 0x4870) 00:23:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x4000000, 0x4870) 00:23:34 executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x800) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) 00:23:34 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x5000000, 0x4870) 00:23:34 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xffffffe4, 0x4870) 00:23:34 executing program 0: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/28) [ 3379.084737][T30893] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3379.105793][T32516] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 3379.264696][T28575] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3379.484768][T32516] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3379.497653][T30893] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3379.635796][T28575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3379.645492][T28575] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3379.655205][T28575] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3379.674828][T30893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3379.684016][T30893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.692176][T30893] usb 5-1: Product: syz [ 3379.696421][T30893] usb 5-1: Manufacturer: syz [ 3379.701022][T30893] usb 5-1: SerialNumber: syz [ 3379.705958][T32516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3379.715102][T32516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.723095][T32516] usb 6-1: Product: syz [ 3379.727327][T32516] usb 6-1: Manufacturer: syz [ 3379.731924][T32516] usb 6-1: SerialNumber: syz [ 3379.954695][T28575] usb 3-1: string descriptor 0 read error: -22 [ 3379.961655][T28575] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3379.970771][T28575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3380.069001][T32516] usb 6-1: USB disconnect, device number 51 [ 3380.089021][T30893] usb 5-1: USB disconnect, device number 69 00:23:35 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x600, 0x7f, 0x3, 0xf1}}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x4870) 00:23:35 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffff6, 0x4870) 00:23:35 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/202) 00:23:35 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x500, 0x0}) 00:23:35 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x300, 0x0}) [ 3380.228057][T18465] usb 3-1: USB disconnect, device number 14 00:23:35 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x600, 0x0}) 00:23:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x7000000, 0x4870) 00:23:35 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x300, 0x0}) 00:23:35 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x1fffffffffb, 0x821f2) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/159) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/160) 00:23:35 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) r0 = syz_usb_connect(0x2, 0x349, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0xdf, 0x5f, 0x2b, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x337, 0x1, 0x1, 0x1, 0x80, 0xa0, [{{0x9, 0x4, 0x29, 0x6, 0x9, 0xff, 0x0, 0xff, 0x6, [], [{{0x9, 0x5, 0x80, 0xc, 0x200, 0x3, 0x3, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2992}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x1, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x1, 0x3, [@generic={0x20, 0x8, "cc62a56576317071e66f42891edc6e7d45a60455806d0abf87952bfe8096"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x81, 0x9, 0x0, [@generic={0x5c, 0x11, "228640e441cae4b4060d29f91251b4a0ae1135a64d0b59e8292315dc90ce8d8da18c35903b7d46b42f0b2584af7dcc18642069af4cbe84dfbdea77b860de4f3fdb6fdc7ba04c78c43f0a0da45b170d96a3e2f0d8d6412bd3b77b"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x1}]}}, {{0x9, 0x5, 0x2, 0xe, 0x20, 0x2d, 0x0, 0x1, [@generic={0xd6, 0x1, "c9209c7ce7f689c262382e53ce3e6ae23f335c63f820a99ff73e0fa1be1a271599ec02b9c370f3befd0acb1f673c0220a8770d4521eee324fa237fa96415d02104bd08ce6d387c724a8066465150a7b665ab73bdd7496f2a85982715a5316823cdeebf80dc254b538d34df5967e9f9e0734bc6c9c30e3d729520c96421500d0e6730c595ed528d023876c2145b2ee08e8fb277af3da19a30d67130e6971914357bbcffe396025c5be0d54ea0fcba252c125957b1c9f8cc62a379d278bf846e24868d7ac0217895f5aecd85c1cc53cdbe43bad899"}, @generic={0x31, 0x1e, "37e7a742eaa999b29d2843f316213bf4343bd7e0f65d0ed1f2c159c5de399e8564437f8590df771b5ecbb8eaf70cd5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x6, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7}, @generic={0x5e, 0xd, "c79ed932208351c31bad6d10b4af79c5cbde574daaa35651ef0623973b0216fd499a81ee4ee05c4883ecd3f4795b59064b3346f21d8593fc1f862683b2c7253aff16ed83fe24c6960b42d17bc2e735e5121e941041cd5fe3f8176360"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x7f, 0x7, 0x20, [@generic={0xb1, 0x21, "842acc600a3c62cc3962b8ed6dfc132622388cd0dc5ace784fa64230128214574043ad6614ec7a50995db541f3754f7d96364088fa14054ee784365804c5c08262cfaaa6f5bceffb2f4e549f437d27beed0fb1099802d0b0484ab070679701f6151fa1b4b9ca8d1bfa7b7e817528e1741e4d40f3835d9d20a2328dd0023d0d453bdfefd9a170849ef3cbfd5ebf7c1cdca71225f8ea4760018d428dd919d0cad3d94587133f90a8dff23e9a5a4f5d45"}, @generic={0x18, 0xb, "e2b3c345255ff2721b80ae03f1001c95597a67fbd252"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x58, 0x5, 0xff, 0x20, 0x8}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "8d6cc9ebaa00b90ab162659c0b94ff09"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x9, 0x1}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_connect$uac1(0x3, 0xde, &(0x7f00000019c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x1f, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x5, 0x6, 0x7}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x2, 0x1, "4ce1500d68"}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x7f, "1ca3ec7353"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x1d, "a57d592979"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x37, 0x3, "92"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x83, "a547a4"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff, 0x9, 0x9, "57c735db05583a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x1, 0x54, 0x1, "7007d4"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x800, 0x5, "ae5d58"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1f, 0x40, 0x7, {0x7, 0x25, 0x1, 0x1, 0x3f, 0x91df}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x24, 0xc1, 0xfb, {0x7, 0x25, 0x1, 0x3, 0x5, 0xf8}}}}}}}]}}, &(0x7f0000001d80)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x300, 0x35, 0xff, 0x29, 0x8, 0x80}, 0x20, &(0x7f0000001900)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x8, 0xff}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0xff, 0xf0f, 0xff, [0x3f00, 0xcf]}]}, 0x8, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x1007}}, {0x39, &(0x7f0000001ac0)=@string={0x39, 0x3, "e92270f9a311a35284247df4cb1ae8aadb779034a00ad8a728d6f76431eb7d3c0317ae1e1ef290758bd20f18006d6f6310dd8ca8cc6d56"}}, {0xb9, &(0x7f0000001b00)=@string={0xb9, 0x3, "c0da86e8144c3ac720eb10dcaa2e9b8b332b67addcf85a3ff0391f752c5377d6299a5edf64f532b432175a9fe00c0350fa7db0dd68cf9dd73a84b1a4827586e1430de114cca9cd84ab9dd9cd8649b47b1c15fbeb35ff3658d491124cc53ab88877891f65f6bac34f742a0e0dde49c2d398fa0720dc6904ceef2b28600768c2e55dd4b0635a5c05a299deef5da67e5309b19d97bfb9c51791b1e8306bd0bc0439f2f53406510fbcb7609683d3ec06dc4e848cb94eb9fd65"}}, {0x6b, &(0x7f0000001bc0)=@string={0x6b, 0x3, "01e8008a92243b8e62e16e801e0273e9b3d5023e810211492f39670853daf18f6532aa8d9913bff9ce18dec4c51143103af183f66cdd54303743061575e5276b7ae40df9c8f66783b86c6c704198ff3aebd51c3a3e18abbcc5797aeee12e6d553fb5a20c93071f174d"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x400a}}, {0x6a, &(0x7f0000001c80)=@string={0x6a, 0x3, "e9b50ff68dc24de57fc2eba67e13a492a784b081fb9fb0ee687c31277cef7bb1d28249d19eb7c77d8a042b6e9a7a2d8c26f6cefa7663ea3bedcb84077ad137dfddea1e97feb026da367b6096c06963eca697c550bc81a6b9e2e674fdba156a768babfa60e1cb212f"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0xd25881465650d6c8}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000140)={0x40, 0x3a, 0x32, {0x32, 0x23, "1e46b7075b0e03862c9354585f12138d1490a11f696f3088a1fb33a9c0c681f8e5b37b82dfb8a63880a288980c1b2692"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x33}}}, &(0x7f0000001840)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x2, "e1d6"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x85}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "7fffc0"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000001780)={0x20, 0x83, 0x2, "de19"}, &(0x7f00000017c0)={0x20, 0x84, 0x3, "70eb1c"}, &(0x7f0000001800)={0x20, 0x85, 0x3, "efb9ba"}}) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0xfe, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x8, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:23:35 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffb, 0x4870) 00:23:35 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x4870) 00:23:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x7fffffff, 0x10000) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x0, 0x3, 0x15e8, 0x1000, 0x2, 0x6}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x55, 0xfac2, 0x81, {0x6}, {0x4, 0x8}, @const={0xfff, {0x1ff, 0x7fff, 0x8, 0x80}}}) r1 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000180)=""/138) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/217) 00:23:36 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xfffffffe, 0x4870) 00:23:36 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0xc000000, 0x4870) 00:23:36 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x1000000000000, 0x4870) 00:23:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/84) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) [ 3380.784619][T28575] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3380.794648][T18465] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3380.815335][T32516] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 3381.144559][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3381.174646][T18465] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3381.234668][T32516] usb 3-1: config 1 has an invalid interface number: 41 but max is 0 [ 3381.242827][T32516] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3381.251789][T32516] usb 3-1: config 1 has no interface number 0 [ 3381.258019][T32516] usb 3-1: config 1 interface 41 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 3381.268689][T32516] usb 3-1: config 1 interface 41 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 3381.279572][T32516] usb 3-1: config 1 interface 41 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 3381.290494][T32516] usb 3-1: config 1 interface 41 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 3381.301483][T32516] usb 3-1: config 1 interface 41 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 3381.312147][T32516] usb 3-1: config 1 interface 41 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3381.315130][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3381.323075][T32516] usb 3-1: config 1 interface 41 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 3381.332122][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.342964][T32516] usb 3-1: config 1 interface 41 has no altsetting 0 [ 3381.358083][T28575] usb 6-1: Product: syz [ 3381.362270][T28575] usb 6-1: Manufacturer: syz [ 3381.366911][T28575] usb 6-1: SerialNumber: syz [ 3381.434716][T18465] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3381.443798][T18465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.451851][T18465] usb 5-1: Product: syz [ 3381.456103][T18465] usb 5-1: Manufacturer: syz [ 3381.461491][T18465] usb 5-1: SerialNumber: syz [ 3381.524683][T32516] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 3381.533789][T32516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.541968][T32516] usb 3-1: Product: syz [ 3381.546188][T32516] usb 3-1: Manufacturer: syz [ 3381.550776][T32516] usb 3-1: SerialNumber: syz 00:23:37 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x700, 0x0}) 00:23:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0x4870) [ 3381.658046][T28575] usb 6-1: USB disconnect, device number 52 00:23:37 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x10000000, 0x4870) 00:23:37 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x20000000000000, 0x4870) [ 3381.788826][T18465] usb 5-1: USB disconnect, device number 70 00:23:37 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x85e) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x1000, &(0x7f0000000740)=""/4096) r0 = syz_open_dev$evdev(&(0x7f00000018c0), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="80136da1f70236b6f466abf45db9eb97295614515651ff7cb35a8787f49b689aa02ccbf888145bf9d728137e5454371530d798c86116d6ef208b3f439969d7a5f1a743b970edc05e483c059d911688325846da16e41bde379954465661e219d870cccf48c15d6ebb07e5eef2c930cd3d5e7fd22c"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) 00:23:37 executing program 0: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x21f2) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/107) 00:23:37 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0x4870) 00:23:37 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xc0000000000000, 0x4870) 00:23:37 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x8000000, 0x4870) 00:23:37 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x6000000, 0x4870) [ 3382.034566][T28575] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3382.057743][T32516] ------------[ cut here ]------------ [ 3382.063555][T32516] usb 3-1: BOGUS urb xfer, pipe 2 != type 3 [ 3382.069881][T32516] WARNING: CPU: 1 PID: 32516 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 3382.079771][T32516] Modules linked in: 00:23:37 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0xf0ffffffffffff, 0x4870) [ 3382.083682][T32516] CPU: 1 PID: 32516 Comm: kworker/1:3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3382.092252][T32516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3382.102407][T32516] Workqueue: usb_hub_wq hub_event [ 3382.107510][T32516] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 3382.113077][T32516] Code: 7c 24 18 e8 50 8f ac fd 48 8b 7c 24 18 e8 26 a2 1a ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 fc 83 86 e8 f9 a9 fe 01 <0f> 0b e9 58 f8 ff ff e8 22 8f ac fd 48 81 c5 78 06 00 00 e9 84 f7 [ 3382.132954][T32516] RSP: 0018:ffffc90006e46c08 EFLAGS: 00010286 [ 3382.139109][T32516] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 3382.147165][T32516] RDX: 0000000000040000 RSI: ffffffff812a8b63 RDI: fffff52000dc8d73 [ 3382.155220][T32516] RBP: ffff8881411f78f0 R08: 0000000000000001 R09: 0000000000000000 [ 3382.163231][T32516] R10: ffffffff814c05fb R11: 0000000000000000 R12: 0000000000000002 [ 3382.171668][T32516] R13: ffff888109aa0460 R14: 0000000000000002 R15: ffff88814042e400 [ 3382.179724][T32516] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 3382.188733][T32516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3382.195409][T32516] CR2: 00000000014a53ad CR3: 00000001365c9000 CR4: 00000000001506e0 [ 3382.203402][T32516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3382.211545][T32516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3382.213296][ T33] kauditd_printk_skb: 43 callbacks suppressed 00:23:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0xff, 0x2a02) syz_open_dev$evdev(0xfffffffffffffffc, 0x7, 0x21f2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8082) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/88) [ 3382.213309][ T33] audit: type=1800 audit(1629937417.623:337): pid=25154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=48C7C060 dev="sda1" ino=15822 res=0 errno=0 [ 3382.219568][T32516] Call Trace: [ 3382.250397][T32516] ? lockdep_init_map_type+0x2c2/0x790 [ 3382.255963][T32516] usb_start_wait_urb+0x101/0x4c0 [ 3382.261193][T32516] ? lock_downgrade+0x6e0/0x6e0 [ 3382.266171][T32516] ? fs_reclaim_acquire+0xb2/0x160 [ 3382.271306][T32516] ? usb_api_blocking_completion+0xa0/0xa0 [ 3382.277218][T32516] ? memset+0x20/0x40 [ 3382.281230][T32516] usb_control_msg+0x31c/0x4a0 [ 3382.286095][T32516] ? usb_start_wait_urb+0x4c0/0x4c0 [ 3382.291313][T32516] ? mark_held_locks+0x9f/0xe0 [ 3382.296160][T32516] go7007_usb_onboard_write_interrupt+0x26a/0x340 [ 3382.302595][T32516] go7007_usb_interface_reset+0x139/0x540 [ 3382.308409][T32516] ? go7007_usb_i2c_master_xfer+0xb00/0xb00 [ 3382.314407][T32516] ? kfree+0xe0/0x400 [ 3382.318424][T32516] ? free_fw_priv+0x269/0x430 [ 3382.323123][T32516] go7007_load_encoder+0x11f/0x510 [ 3382.328671][T32516] ? go7007_read_interrupt+0x470/0x470 [ 3382.334173][T32516] ? fs_reclaim_release+0x9c/0xf0 [ 3382.339313][T32516] ? mutex_lock_io_nested+0xee0/0xee0 [ 3382.344944][T32516] ? snprintf+0xbb/0xf0 [ 3382.349122][T32516] go7007_boot_encoder+0x2a/0xe0 [ 3382.354259][T32516] go7007_usb_probe+0x80b/0x21f0 [ 3382.359290][T32516] ? go7007_usb_interface_reset+0x540/0x540 [ 3382.365310][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3382.371341][T32516] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3382.377240][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3382.382282][T32516] ? __pm_runtime_set_status+0x48a/0xc30 [ 3382.388216][T32516] usb_probe_interface+0x315/0x7f0 [ 3382.393696][T32516] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 3382.399238][T32516] really_probe+0x23c/0xcd0 [ 3382.403779][T32516] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3382.410107][T32516] __driver_probe_device+0x338/0x4d0 [ 3382.410256][T28575] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3382.415455][T32516] driver_probe_device+0x4c/0x1a0 [ 3382.433257][T32516] __device_attach_driver+0x20b/0x2f0 [ 3382.438687][T32516] ? driver_allows_async_probing+0x150/0x150 [ 3382.444833][T32516] bus_for_each_drv+0x15f/0x1e0 [ 3382.449795][T32516] ? bus_for_each_dev+0x1d0/0x1d0 [ 3382.455026][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3382.461044][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3382.466170][T32516] __device_attach+0x228/0x4a0 [ 3382.471047][T32516] ? device_driver_attach+0x210/0x210 [ 3382.476533][T32516] ? kobject_uevent_env+0x2bb/0x1650 [ 3382.481859][T32516] bus_probe_device+0x1e4/0x290 [ 3382.486797][T32516] device_add+0xc2f/0x2180 [ 3382.491237][T32516] ? wait_for_completion_io+0x280/0x280 [ 3382.496872][T32516] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 3382.503214][T32516] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3382.509542][T32516] usb_set_configuration+0x113f/0x1910 [ 3382.515096][T32516] usb_generic_driver_probe+0xba/0x100 [ 3382.520578][T32516] usb_probe_device+0xd9/0x2c0 [ 3382.525537][T32516] ? usb_driver_release_interface+0x180/0x180 [ 3382.531618][T32516] really_probe+0x23c/0xcd0 [ 3382.536208][T32516] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3382.542532][T32516] __driver_probe_device+0x338/0x4d0 [ 3382.547941][T32516] driver_probe_device+0x4c/0x1a0 [ 3382.553078][T32516] __device_attach_driver+0x20b/0x2f0 [ 3382.558542][T32516] ? driver_allows_async_probing+0x150/0x150 [ 3382.564601][T32516] bus_for_each_drv+0x15f/0x1e0 [ 3382.569492][T32516] ? bus_for_each_dev+0x1d0/0x1d0 [ 3382.574623][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3382.580696][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3382.585833][T32516] __device_attach+0x228/0x4a0 [ 3382.590620][T32516] ? device_driver_attach+0x210/0x210 [ 3382.596084][T32516] ? kobject_uevent_env+0x2bb/0x1650 [ 3382.601386][T32516] bus_probe_device+0x1e4/0x290 [ 3382.606321][T32516] device_add+0xc2f/0x2180 [ 3382.610777][T32516] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 3382.617117][T32516] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3382.617861][T28575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3382.623369][T32516] usb_new_device.cold+0x63f/0x108e [ 3382.623404][T32516] ? hub_disconnect+0x510/0x510 [ 3382.623432][T32516] ? rwlock_bug.part.0+0x90/0x90 [ 3382.632488][T28575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.637686][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3382.642552][T28575] usb 6-1: Product: syz [ 3382.647525][T32516] hub_event+0x2357/0x4330 [ 3382.655538][T28575] usb 6-1: Manufacturer: syz [ 3382.661500][T32516] ? hub_port_debounce+0x3c0/0x3c0 [ 3382.665675][T28575] usb 6-1: SerialNumber: syz [ 3382.670066][T32516] ? __lock_acquire+0x3241/0x54a0 [ 3382.689376][T32516] ? __do_sys_prctl+0xb10/0xfd0 [ 3382.694255][T32516] ? lock_release+0x6e0/0x6e0 [ 3382.699208][T32516] ? lock_downgrade+0x6e0/0x6e0 [ 3382.704076][T32516] ? do_raw_spin_lock+0x120/0x2b0 [ 3382.709207][T32516] process_one_work+0x98d/0x15b0 [ 3382.714265][T32516] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3382.719709][T32516] ? rwlock_bug.part.0+0x90/0x90 [ 3382.724716][T32516] worker_thread+0x658/0x11f0 [ 3382.725369][ T33] audit: type=1800 audit(1629937418.143:338): pid=25155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13982 res=0 errno=0 [ 3382.729406][T32516] ? __kthread_parkme+0x126/0x1f0 [ 3382.729443][T32516] ? process_one_work+0x15b0/0x15b0 [ 3382.729471][T32516] kthread+0x3c0/0x4a0 [ 3382.765473][T32516] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3382.770878][T32516] ? set_kthread_struct+0x130/0x130 [ 3382.776151][T32516] ret_from_fork+0x1f/0x30 [ 3382.779793][ T33] audit: type=1800 audit(1629937418.173:339): pid=25155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=13982 res=0 errno=0 [ 3382.780587][T32516] Kernel panic - not syncing: panic_on_warn set ... [ 3382.780601][T32516] CPU: 1 PID: 32516 Comm: kworker/1:3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3382.780628][T32516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3382.780645][T32516] Workqueue: usb_hub_wq hub_event [ 3382.832418][T32516] Call Trace: [ 3382.835708][T32516] dump_stack_lvl+0xcd/0x134 [ 3382.840322][T32516] panic+0x306/0x73d [ 3382.844242][T32516] ? __warn_printk+0xf3/0xf3 [ 3382.848948][T32516] ? __warn.cold+0x1a/0x44 [ 3382.853385][T32516] ? usb_submit_urb+0xed2/0x18a0 [ 3382.858420][T32516] __warn.cold+0x35/0x44 [ 3382.862694][T32516] ? usb_submit_urb+0xed2/0x18a0 [ 3382.867700][T32516] report_bug+0x1bd/0x210 [ 3382.872035][T32516] handle_bug+0x3c/0x60 [ 3382.876206][T32516] exc_invalid_op+0x14/0x40 [ 3382.880700][T32516] asm_exc_invalid_op+0x12/0x20 [ 3382.885550][T32516] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 3382.891123][T32516] Code: 7c 24 18 e8 50 8f ac fd 48 8b 7c 24 18 e8 26 a2 1a ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 fc 83 86 e8 f9 a9 fe 01 <0f> 0b e9 58 f8 ff ff e8 22 8f ac fd 48 81 c5 78 06 00 00 e9 84 f7 [ 3382.911017][T32516] RSP: 0018:ffffc90006e46c08 EFLAGS: 00010286 [ 3382.917201][T32516] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 3382.925694][T32516] RDX: 0000000000040000 RSI: ffffffff812a8b63 RDI: fffff52000dc8d73 [ 3382.933690][T32516] RBP: ffff8881411f78f0 R08: 0000000000000001 R09: 0000000000000000 [ 3382.941650][T32516] R10: ffffffff814c05fb R11: 0000000000000000 R12: 0000000000000002 [ 3382.949936][T32516] R13: ffff888109aa0460 R14: 0000000000000002 R15: ffff88814042e400 [ 3382.958111][T32516] ? __irq_work_queue_local+0xbb/0xf0 [ 3382.963481][T32516] ? vprintk+0x93/0x1c0 [ 3382.967629][T32516] ? usb_submit_urb+0xed2/0x18a0 [ 3382.972656][T32516] ? lockdep_init_map_type+0x2c2/0x790 [ 3382.978104][T32516] usb_start_wait_urb+0x101/0x4c0 [ 3382.983230][T32516] ? lock_downgrade+0x6e0/0x6e0 [ 3382.988068][T32516] ? fs_reclaim_acquire+0xb2/0x160 [ 3382.993168][T32516] ? usb_api_blocking_completion+0xa0/0xa0 [ 3382.999179][T32516] ? memset+0x20/0x40 [ 3383.003146][T32516] usb_control_msg+0x31c/0x4a0 [ 3383.007899][T32516] ? usb_start_wait_urb+0x4c0/0x4c0 [ 3383.013233][T32516] ? mark_held_locks+0x9f/0xe0 [ 3383.018104][T32516] go7007_usb_onboard_write_interrupt+0x26a/0x340 [ 3383.024529][T32516] go7007_usb_interface_reset+0x139/0x540 [ 3383.030240][T32516] ? go7007_usb_i2c_master_xfer+0xb00/0xb00 00:23:38 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x40}}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe6, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xf5, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x1800, 0x0}) 00:23:38 executing program 3: syz_open_dev$evdev(0xfffffffffffffffc, 0x13000000, 0x4870) 00:23:38 executing program 4: syz_open_dev$evdev(0xfffffffffffffffc, 0x12000000, 0x4870) 00:23:38 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x100000000000000, 0x4870) [ 3383.036140][T32516] ? kfree+0xe0/0x400 [ 3383.040111][T32516] ? free_fw_priv+0x269/0x430 [ 3383.044772][T32516] go7007_load_encoder+0x11f/0x510 [ 3383.049867][T32516] ? go7007_read_interrupt+0x470/0x470 [ 3383.055331][T32516] ? fs_reclaim_release+0x9c/0xf0 [ 3383.060373][T32516] ? mutex_lock_io_nested+0xee0/0xee0 [ 3383.065768][T32516] ? snprintf+0xbb/0xf0 [ 3383.069933][T32516] go7007_boot_encoder+0x2a/0xe0 [ 3383.074889][T32516] go7007_usb_probe+0x80b/0x21f0 [ 3383.079852][T32516] ? go7007_usb_interface_reset+0x540/0x540 [ 3383.085767][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3383.091760][T32516] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3383.097657][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3383.102692][T32516] ? __pm_runtime_set_status+0x48a/0xc30 [ 3383.108323][T32516] usb_probe_interface+0x315/0x7f0 [ 3383.113428][T32516] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 3383.118791][T32516] really_probe+0x23c/0xcd0 [ 3383.123464][T32516] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3383.129704][T32516] __driver_probe_device+0x338/0x4d0 [ 3383.134989][T32516] driver_probe_device+0x4c/0x1a0 [ 3383.140012][T32516] __device_attach_driver+0x20b/0x2f0 [ 3383.145385][T32516] ? driver_allows_async_probing+0x150/0x150 [ 3383.151363][T32516] bus_for_each_drv+0x15f/0x1e0 [ 3383.156208][T32516] ? bus_for_each_dev+0x1d0/0x1d0 [ 3383.161226][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3383.167204][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3383.172228][T32516] __device_attach+0x228/0x4a0 [ 3383.177045][T32516] ? device_driver_attach+0x210/0x210 [ 3383.182414][T32516] ? kobject_uevent_env+0x2bb/0x1650 [ 3383.187693][T32516] bus_probe_device+0x1e4/0x290 [ 3383.192547][T32516] device_add+0xc2f/0x2180 [ 3383.196960][T32516] ? wait_for_completion_io+0x280/0x280 [ 3383.202501][T32516] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 3383.208743][T32516] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3383.214984][T32516] usb_set_configuration+0x113f/0x1910 [ 3383.220442][T32516] usb_generic_driver_probe+0xba/0x100 [ 3383.225900][T32516] usb_probe_device+0xd9/0x2c0 [ 3383.230655][T32516] ? usb_driver_release_interface+0x180/0x180 [ 3383.236715][T32516] really_probe+0x23c/0xcd0 [ 3383.241225][T32516] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3383.247467][T32516] __driver_probe_device+0x338/0x4d0 [ 3383.252841][T32516] driver_probe_device+0x4c/0x1a0 [ 3383.257863][T32516] __device_attach_driver+0x20b/0x2f0 [ 3383.263253][T32516] ? driver_allows_async_probing+0x150/0x150 [ 3383.269272][T32516] bus_for_each_drv+0x15f/0x1e0 [ 3383.274133][T32516] ? bus_for_each_dev+0x1d0/0x1d0 [ 3383.279154][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3383.285302][T32516] ? trace_hardirqs_on+0x5b/0x1a0 [ 3383.290328][T32516] __device_attach+0x228/0x4a0 [ 3383.295102][T32516] ? device_driver_attach+0x210/0x210 [ 3383.300481][T32516] ? kobject_uevent_env+0x2bb/0x1650 [ 3383.305780][T32516] bus_probe_device+0x1e4/0x290 [ 3383.310639][T32516] device_add+0xc2f/0x2180 [ 3383.315067][T32516] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 3383.321322][T32516] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3383.327569][T32516] usb_new_device.cold+0x63f/0x108e [ 3383.332777][T32516] ? hub_disconnect+0x510/0x510 [ 3383.337625][T32516] ? rwlock_bug.part.0+0x90/0x90 [ 3383.342555][T32516] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3383.348529][T32516] hub_event+0x2357/0x4330 [ 3383.352955][T32516] ? hub_port_debounce+0x3c0/0x3c0 [ 3383.358062][T32516] ? __lock_acquire+0x3241/0x54a0 [ 3383.363080][T32516] ? __do_sys_prctl+0xb10/0xfd0 [ 3383.367942][T32516] ? lock_release+0x6e0/0x6e0 [ 3383.372609][T32516] ? lock_downgrade+0x6e0/0x6e0 [ 3383.377451][T32516] ? do_raw_spin_lock+0x120/0x2b0 [ 3383.382553][T32516] process_one_work+0x98d/0x15b0 [ 3383.387484][T32516] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3383.392855][T32516] ? rwlock_bug.part.0+0x90/0x90 [ 3383.397785][T32516] worker_thread+0x658/0x11f0 [ 3383.402458][T32516] ? __kthread_parkme+0x126/0x1f0 [ 3383.407482][T32516] ? process_one_work+0x15b0/0x15b0 [ 3383.412676][T32516] kthread+0x3c0/0x4a0 [ 3383.416768][T32516] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3383.421984][T32516] ? set_kthread_struct+0x130/0x130 [ 3383.427190][T32516] ret_from_fork+0x1f/0x30 [ 3383.433266][T32516] Kernel Offset: disabled [ 3383.437694][T32516] Rebooting in 86400 seconds..