last executing test programs: 1.246619509s ago: executing program 2 (id=3): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x40, 0x22, 0x2, {0x2, 0x2}}, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000003e69d2d585cd49e8b6c24e7f1df74a40d6780dd9ad98ecda7b631ddc53adb1fc496288747cae5f8c35743c7cb17697f2e0f358c3e6018a14b516738b2108c55fad23025340df4e310dc1544af21e50fcc5a312322e02b0f3a3e0388dfdfb2cdc780eb221348f2abfdb58c9285c8a40d0ebe6c5d0e3e402dee4399977f7e5604d02ff5eb1e00785eb2ad2352c802631b28021ce43425c44f609ec2eeb96827295e9694b35c741e10cb1b7539d2470d04cf63e5d64d0e520300"/204], 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x168, &(0x7f0000000040)=ANY=[@ANYBLOB="6101004e689544c1da98352f1b429a6bc18632b77a2d3cbde3674b55f60dacce1dc20b15344706373e7092260f2a140adacb43471f78a2953c86ea97f25ca4e653c6e9eb60aaa79ba486e1e2b3d38c1a7b7f6bd915dd21ca98dc1bba06d794c01d86a7e17c98d7419432727193b57947d0c1413b30cf58b8bbc6ad110ac116c7bbb909abbee5cc16e913b9ea09e5c10332a37dbb894c0f1f0e49119efd5254017dc6791d6fbbbf6cfdcb8db76970c734bd07c63aaaba8fdac19cca6e9ca6374a892c825206840b973a3e918fcd93c7c4a29db5092cfdf67831ec4609b535d5e275180bc211851e2dbb33bdcda15263236ae9fe900532867ffb8859bf5cca3cd41a49344fee18afd64879f8db0bddabca5ceebfbff53fc0df5ee3016958b84a94e0802b756a138c3428c3d95c39ae74143e6e6e9d83c725bd3346982df996eca6b0e8ec5bb02bed7d347bfb56f30fb20d12ebc137ba85ac52706dec22eb6e551af174cafe5abb7065"]) (async) syz_usb_connect(0x5, 0xdd, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3], 0x0) (async) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001002fe70009046b00016a93f000090588ae", @ANYRESOCT=0x0], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") (async) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586", @ANYBLOB="f3a72a993eddbaad367b359c82208953143c9c12d974df0e4a458113e8b2e878dc721561ed0b4585c3be5de8808d9d4a5999e223787927e585855f85192e78c7bbe6180e5eb7c78b5b566cd265115490a8814f2e2129b4a83362423ff60c3dde37a6c04cd52b3424ea09fcb2c3c3717e0ae6c4074c6c80fbba13b6793cbcef70d8d2bd7d9c2eeb743d505a3fc1466ce92405feaac19e8bd97fb8748d3f054b6adfdf12ba8dbe707401e489aedc384b77bb2b986e0f3ccd94e82a89f4da844dca9db1827012cad26f5da6769ae2929240179a35fbd8"], 0x0) (async) r6 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async) syz_usb_connect$midi(0x0, 0x41, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4095, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x8, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x6, 0x9, 0x9, {0x14, 0x25, 0x1, 0x10, "1f59073e0e0ff42ebe9a5c569472d5aa"}}}]}}}}}]}}, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="120101020000004030144b474000010203010902270001000000010904000001010320fa0724030120000c0905010200028005000525010120c415c70c336d934bbc6537223651ee358e5e31"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000700)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x9}}]}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x198, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000cc6e32040d313023202ec010203010902120001fc216004090455f100a4838008"], 0x0) 846.489748ms ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03f7"], 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x83, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x13, 0x6, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="3e48f25de3c03f76bf48d388b76417e3b3781ddd49f685ccc10079e7d55a0c6c5cff7ad3d9115301c82f0c59fb1d28f84159f37643a44becd85c411a1604a7f84c5c73957b8bc906b8dccec7ba1988ead506768cff029a08a0cfe7990a2278579dc9242339e853e35085ff65b82d35e3faf47a273547555d2c12635351236d2c2d3fcc441d86664f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 785.955ms ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010102000000106d0432c540000102030109022d21ffff7101226a0f097f00000000103f08090502030004720f05b287aa746bf630a3c674d3d82dce0271aaf26a0d7e3bceb542f16f8f71b78b1da1ed"], &(0x7f0000000900)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xda, 0x1, 0x9, 0x8, 0xfb}, 0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="050f1c0002892d6df6585bf3eda3f0c6c7c98227c2ce0403100b0000733d6c84e8428be6f7c7fc8f014a4bfe8f7923a2a3ff69f16e747a86280399c5ef12c6b715082a1271bd38a3cacd0fca6fb739b991851eeea894c549"], 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x409}}]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x50, 0x3e, "", [{{0x9, 0x4, 0x0, 0x79, 0x1, 0x3, 0x1, 0x1, 0x44, {0x9, 0x21, 0x8, 0x77, 0x1, {0x22, 0xfae}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x2, "551e5827"}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000640)=""/161) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0xcc, 0xb3, 0x43, 0x40, 0x40a, 0x2, 0x9ce5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x51, 0x36, 0xbb, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x20, 0x22, 0xe8, {0xe8, 0x31, "63ea3e713d0a11936c659bb5be7c7f0662ad01f9ed2b8277782c282783dd79afa5295295e0cfcaf7e73efd9c77e9bab429d8e2c32d1351efea31728decb3e4716ff9437157d58e47197ea1ebaccf3c74d7235e5425e2c824a2b416d2e25ef2e6e01c5445d9ec168445c676cc50090756b4ccfed179d4ee2f70b34e317ae80b095a8ae183aa208d8918fd8634155ce35b2caf61357dec7ee5a707708c8aa81c55edef6570ba55b933244b8f60162fd1fd6a395d9e70e351f3c1d3c0daa3c17d71c081e3973caa48c14f7ab7384c1d098ab77ca94f12e04ef9a02cdb6c24a30dd2f491b5ab572a"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x40, 0x1, 0xb9, "146952c5c9582875cf6efbe456c227e6411c58107aaf8a51ada488d9b3ec8c5f6b7c5f297fd39c44a1f6109479c15c76c3d4633c9eaf021967951ea0aeb2e7add4973dc4be1a346f4ac98dda933d0821a51af58d94ca8fd684f56f3feee0261d8cb450e6133d814b5d9b9de3f3f4e52b843bd961031dc76f6b90800cdefef50778869abcaaf73a8d6f5f802317e42e3fe2ec4d31748e71137197086fa0133929c9577cd799770a4c1c7ed390a307f8b1228c18147378979e71"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d00)={0xc0, 0x5, 0x1, '{'}, &(0x7f0000000d40)={0x40, 0x5, 0x1, "c6"}}) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000200)={0x652, "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"}) 681.990903ms ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x36, &(0x7f00000015c0)={{0x12, 0x1, 0x150, 0x20, 0xe3, 0x5a, 0x8, 0x5e1, 0x408, 0x3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xff, 0x28, 0x9, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x56, 0x23, 0x4e, 0x4, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0xff, 0x10}}]}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x52, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a02ff03040505090505"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x10, 0x20, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "7e1ea4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x1e}, [@country_functional={0x6, 0x24, 0x7, 0x6, 0x8e13}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x4, 0x56}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x7f6, 0xa, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xac, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x5, 0x8f}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x17, 0x8, 0x4, 0x20, 0x3}, 0xae, &(0x7f0000000240)={0x5, 0xf, 0xae, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfff}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x0, "dda66e23c95672216cffbc4cd522c369b58f5f2711f7b85e25164a3432025e9163624301eb113b1d51cee4b746adf03db64231f3f34871ad8631dde868acefaf2acde1e25bba68eee4eadcfe5873c50df49ffd7209945eadb9cd616a5af7cd4e3b157a8cd608f5"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0xc5ad, 0xf00, 0xcf1, [0xff60, 0xc0, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0xc2, 0x1, 0x7, 0xf, 0xfff8, [0xff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x4, 0xfff}]}, 0x8, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "5fe7b5135416bd3977220e8a7049b938fc700c5c3a9da06323b47b5d12531d0872a278cae1cbefe9068a1d2dd6dc8a94554454caddbf2f77044dec15a7f603582aeb1380ec990dbff6cd45a7469e1693baf7dc43119d67157c61ba1d6427f1687050a3d6a5f55ecf85ad372b7cce781ef412f1e82b2f0ac94bf0794d80a1a13587a792b421f2fbf0273841e6046f136abd8a0bdf63e323cd84bdbe3c559bc28e82ab3fdd4b89b0ce7947dee4e6694f6475f256e2ba5a7bdcb59c7c8c4fbec5912673bfd64da47db11adbbf45a28dbe6c659c05fc6dea072f5672a9f39d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x97, &(0x7f0000000500)=@string={0x97, 0x3, "37374013771b1c895a8326e9175d22205235757f2b294b304de5d56e7f5159d5b992f96ce67d062c4a29c79e417b90dd3afad5f831703ce83601f1284eed735df65c2ad3f2d398572b4e64c47d9a8dbe0a887fb9d02200ef2f3f064db86d8f065492865a54805e966b20df94c66888dc60634502a25f7252b1772ac45dc8fd52a311f918ce62b512f46dc43b0adeef98574ef8603b"}}, {0xc3, &(0x7f00000005c0)=@string={0xc3, 0x3, "76c4f8f05d21134803f2a8865e583139a216c84eed6d2364ce3408a10f8c210ce1707fc061810e3e7cf94027cd10c1cfd2fc53241c24c49cb53544a48166694e16395633675fd3c0ad110fc7948ca70de7b639b3d81b76f9c11025aeaaeefc2ccd8fe42a6268bd5131eb58721733df9b99fd3b12412c51bf7f95196d78c8f427700b4497c230b6b5c5fc2e7d96f4dc2489260b244a26d4b10a9f4b3bd94f6b57589b8fac84d4c4fef68a633cbe6c99ca9c0812b410039891ba2efea55770bf8888"}}, {0x72, &(0x7f00000006c0)=@string={0x72, 0x3, "28249cdffcb50c38d1902f65356e80e41d12cbfe7d620bcedf2559db04d3c4c27901c768b61dbd84a5ce7f9d66d593de1d92fbffa2ec8f8bef7f011a805ea9cd5786c6fdae288204700d25a1af0b7149ba2008f9c0ee2ea4f647cc5d0da492ff0b8a794a96c3bf73b4127552c0229707"}}, {0x97, &(0x7f0000000800)=@string={0x97, 0x3, "77524ade3aedc70e440d4853ce650126bef202080a839ee1e9e78851cfb0d54a51ae99fcba77a44044933bfe99c745cee3ebff8abfba503b2307adf26e20aa333756fe9d2eff0ef092f5fb86cd9b353295f9c887bab9967e046d0fd43466dfd7edc339819b91eec31121b711dce16011f42e77894c11ec63cfaacba8d43f1189f8d1f6fcae7453e52d35473ad8a5324a1b2eb2f3e5"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") write$char_usb(r2, &(0x7f0000000200)="5502000000000000", 0x8) 453.386569ms ago: executing program 4 (id=5): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x60, 0x22, 0xd9, {0xd9, 0x2b, "add5f92d1f3435079c0c9e4f0b5b4460da0eadedce948b38a8dcd935ff8e3faa255907acd99c8bba851c6a5bfde7f16377178c152dd00ca100d678112933edf8d22f33413af7049b2f5eaae3bd609e67f46536784c63a3c2bd508d6d44910a209ca4368d8802dff8f2de7f8251d1e73a3be4a63c83cc6cb919e470e4d4365843ac761ac5bed9554f4bd84b628f0e4ed9c641a050efeeec37308cc66b4156fc755d19144a7a95ff989b1da9c5ff0ea5bf83ee1e7afa65c61463f581aaee8def2b72cbceedcb63956135fd216409f405073c25680424246f"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x20, 0x8, 0x1f, "cd7d828a010e80278f7283b882b4f1b1aee48ae9de2854dafbe4aead12be18"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x5, 0x9, 0x9, 0xffff, 0x9, 0x2, 0x800, 0x101, 0x6, 0x7, 0xbaa2, 0x3ff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xe678}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xb27a}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)={0x0, 0x0, 0x4, "04ab6e31"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)={0x40, 0x31, 0x7, "3287246db1b2de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=6): syz_usb_connect(0x5, 0x3d5, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102a11f0208820542007fba010203010902c303010602a0f6090487020cc4cbba09092105000501229d0c09050700ff0300080707250108feffff0725010007001009050804039f0c0401072501080200000905000100020702070725010c010010090500104000c30607760e33bd04f92211de4a13c05a081bd8e3491c55aa549f97d1c895c5376a4690018a219ae7ce0bb50c9f25664a4182ba82c3580b24aed6aefb173567571bac866de7bc39835d3600a4a322c9893fa1b4abf32d0ccfbb0bbba07b20580ccbcd2ffc848eab3dff3f92360954090506002000000308a83b10587abbe582c1f0609cf40f3f740f748e4c81e29b02a6d4ae5c4f9d45376f38866a0a3261380c8cea218f389ca374128e16b0aa93e604e51b072920b55f8e8175f1075f5a8b0089943c3c7b71ff7fa97f6818245108f2ec9fbedecd18edc09126f747c8e12abbc78a459124799677db550c43998b06d4613aca3e793ffa7e21a1e2213b6b0767a519a580187615b3f13bb6b6bedd2f856f5d3fd17f23be58092bc399355c390725010807010009058001080009010209050a08ff030207ff9222c5433a52645f7da841c8e5976348d7ea9a17c2604594c23d7fc1c5f7dea526372649a3a330b85382480b36428a2f5ce362579c99922ff3b439c67d4cda91f126066b82104129edf4d8af95bd66c6b1e063d94c036a824ea2f911dfe3571b033e018ce8dbf150a0af2db52a110c80b9ef525e9d5f430372870bc78ec4420e5c5409058f6a7453bd7824d1b9b7b61fb75a0905010000020a08807c07d4e0f881ae4a0bc5145bf45b53941b0d8efa48a0f69bf31a45e00fc15550739193c3531e70e5c49d86cb2ad70bb21bba48c5ab7f268ed428426e327789497cc8178c67fbc635406586c403cbbbfafa27ec1eac899eb77d5a01d82c46c37f465bb0671851b95ff786c2c6e8b7352a6b97e61e9e9ded0018f7223109e67f0020000095ff0905000c0800f00103d40fbf4cbf925fe0649509c6c3fdea580af216d4368b1d043394cf9a063961b47e562c2973122b271aac88ad20b06e6617285ccbb561aa88786ce8deb5adf9a82b72d457645a2ceebbcf910810c60dfa5893bd4869ab1cfeba4bb0268a5e2d1d77f437cf6b66fb6ca8bc6e6214f7f46e27780bd97c69dbe73a7d4e86d5c6f8ec2e02c88ac7a0f36df4b5aedfb650800b60b54f672891a281b94c86ac9b56e1b7b556fcfc91bda8d396e10b9f567559a2d26a39993f7ddaa10a2e265795fd3194babead32dcf4041cd983d41d352a4d625c6ed22f0725010c0606000905000c0800be090809050f0808009f04010b3a2683a0a76cb894673f0725010c01880039d1b6acc95ab53de189231a"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hidraw(0x0, 0x9, 0x400000) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 47.273547][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 47.273571][ T28] audit: type=1400 audit(1787053828.086:77): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.303863][ T28] audit: type=1400 audit(1787053828.116:78): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.315185][ T2961] cgroup: Unknown subsys name 'net' [ 47.333772][ T28] audit: type=1400 audit(1787053828.146:79): avc: denied { unmount } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.493338][ T2961] cgroup: Unknown subsys name 'cpuset' [ 47.505015][ T2961] cgroup: Unknown subsys name 'rlimit' [ 47.668838][ T28] audit: type=1400 audit(1787053828.476:80): avc: denied { setattr } for pid=2961 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.707892][ T28] audit: type=1400 audit(1787053828.476:81): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 47.732969][ T28] audit: type=1400 audit(1787053828.486:82): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 47.787466][ T2964] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 47.797030][ T28] audit: type=1400 audit(1787053828.616:83): avc: denied { relabelto } for pid=2964 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 47.823119][ T28] audit: type=1400 audit(1787053828.616:84): avc: denied { write } for pid=2964 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.861488][ T28] audit: type=1400 audit(1787053828.676:85): avc: denied { read } for pid=2961 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.887950][ T28] audit: type=1400 audit(1787053828.676:86): avc: denied { open } for pid=2961 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.895936][ T2961] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.106166][ T3023] modprobe (3023) used greatest stack depth: 23784 bytes left [ 62.768312][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 62.768339][ T28] audit: type=1400 audit(1787053843.577:93): avc: denied { create } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.829582][ T28] audit: type=1400 audit(1787053843.577:94): avc: denied { write } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.939650][ T28] audit: type=1400 audit(1787053843.747:95): avc: denied { read } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.812913][ T28] audit: type=1400 audit(1787053882.617:96): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/root/syzkaller.CJQtK2/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 101.877616][ T28] audit: type=1400 audit(1787053882.617:97): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.949230][ T28] audit: type=1400 audit(1787053882.617:98): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/root/syzkaller.CJQtK2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.022266][ T28] audit: type=1400 audit(1787053882.617:99): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.093384][ T28] audit: type=1400 audit(1787053882.617:100): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/root/syzkaller.CJQtK2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.177324][ T28] audit: type=1400 audit(1787053882.617:101): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/root/syzkaller.CJQtK2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.245662][ T28] audit: type=1400 audit(1787053882.667:102): avc: denied { unmount } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.309062][ T28] audit: type=1400 audit(1787053882.677:103): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 102.333846][ T2979] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.432040][ T28] audit: type=1400 audit(1787053883.237:104): avc: denied { read write } for pid=2979 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.528141][ T28] audit: type=1400 audit(1787053883.237:105): avc: denied { open } for pid=2979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.663099][ T5211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.728395][ T5211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.923287][ T766] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.101600][ T766] usb 3-1: Using ep0 maxpacket: 16 [ 103.108315][ T766] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 103.121329][ T766] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.132641][ T766] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.144654][ T766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.163723][ T766] usb 3-1: Product: syz [ 103.170897][ T766] usb 3-1: Manufacturer: syz [ 103.182290][ T766] usb 3-1: SerialNumber: syz [ 103.195903][ T766] usb 3-1: config 0 descriptor?? [ 103.210511][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.280518][ T119] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.300465][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.370787][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 103.378597][ T11] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 103.389582][ T11] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 103.397815][ T11] usb 1-1: config 0 has no interface number 0 [ 103.404025][ T11] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 103.415748][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.430193][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.438379][ T119] usb 4-1: Using ep0 maxpacket: 16 [ 103.444551][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.453510][ T11] usb 1-1: Product: syz [ 103.458820][ T119] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.468625][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 103.475483][ T11] usb 1-1: Manufacturer: syz [ 103.480998][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 103.491013][ T11] usb 1-1: SerialNumber: syz [ 103.494637][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 103.501850][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.513834][ T5229] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.523508][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 103.535054][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.545267][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 103.557042][ T11] usb 1-1: config 0 descriptor?? [ 103.564323][ T119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.569779][ T766] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 103.580972][ T11] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 103.597254][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 103.607460][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.615767][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.642647][ T766] imon:send_packet: packet tx failed (-71) [ 103.644321][ T119] usb 4-1: config 0 descriptor?? [ 103.656144][ T5227] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 103.663927][ T766] imon 3-1:0.0: panel buttons/knobs setup failed [ 103.673906][ T5227] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 103.694969][ T5227] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 103.713067][ T5229] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 103.733103][ T9] mdc800 2-1:1.0: Found Mustek MDC800 on USB. [ 103.754981][ T5229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 103.771112][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.791766][ T5229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.802294][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.811686][ T766] rc_core: IR keymap rc-imon-pad not found [ 103.822409][ T766] Registered IR keymap rc-empty [ 103.834936][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.841184][ T766] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 103.870518][ T766] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 103.890869][ T11] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 103.896279][ T766] imon:send_packet: packet tx failed (-71) [ 103.915604][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.927238][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.942197][ T766] imon 3-1:0.0: remote input dev register failed [ 103.950228][ T766] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 103.988751][ T766] imon 3-1:0.0: unable to initialize intf0, err 0 [ 103.999990][ T766] imon:imon_probe: failed to initialize context! [ 104.002488][ T11] usb 1-1: USB disconnect, device number 2 [ 104.018884][ T766] imon 3-1:0.0: unable to register, err -19 [ 104.075077][ T766] usb 3-1: USB disconnect, device number 2 [ 104.090233][ T11] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 104.109513][ T11] cypress_m8 1-1:0.35: device disconnected [ 104.165608][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.182013][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.195312][ T5227] [ 104.197699][ T5227] ====================================================== [ 104.204749][ T5227] WARNING: possible circular locking dependency detected [ 104.211812][ T5227] syzkaller #0 Not tainted [ 104.216253][ T5227] ------------------------------------------------------ [ 104.223298][ T5227] syz.1.2/5227 is trying to acquire lock: [ 104.229053][ T5227] ffff88810de8a218 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x22/0x450 [ 104.238675][ T5227] [ 104.238675][ T5227] but task is already holding lock: [ 104.246080][ T5227] ffffffff8a3395a8 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 104.254350][ T5227] [ 104.254350][ T5227] which lock already depends on the new lock. [ 104.254350][ T5227] [ 104.264789][ T5227] [ 104.264789][ T5227] the existing dependency chain (in reverse order) is: [ 104.273862][ T5227] [ 104.273862][ T5227] -> #1 (minor_rwsem){++++}-{4:4}: [ 104.281289][ T5227] lock_acquire+0x1b9/0x370 [ 104.286377][ T5227] down_write+0x8b/0x1f0 [ 104.291198][ T5227] usb_register_dev+0x11d/0x570 [ 104.296641][ T5227] mdc800_usb_probe+0x382/0x6d0 [ 104.302070][ T5227] usb_probe_interface+0x386/0x9b0 [ 104.307766][ T5227] really_probe+0x241/0xa60 [ 104.312847][ T5227] __driver_probe_device+0x20e/0x450 [ 104.318737][ T5227] driver_probe_device+0x4a/0x140 [ 104.324333][ T5227] __device_attach_driver+0x1df/0x320 [ 104.330309][ T5227] bus_for_each_drv+0x159/0x1e0 [ 104.335745][ T5227] __device_attach+0x1e4/0x4d0 [ 104.341095][ T5227] device_initial_probe+0xaf/0xd0 [ 104.346807][ T5227] bus_probe_device+0x64/0x160 [ 104.352150][ T5227] device_add+0x121d/0x1970 [ 104.357252][ T5227] usb_set_configuration+0xd97/0x1c60 [ 104.363214][ T5227] usb_generic_driver_probe+0xa1/0xe0 [ 104.369265][ T5227] usb_probe_device+0xef/0x400 [ 104.374616][ T5227] really_probe+0x241/0xa60 [ 104.379698][ T5227] __driver_probe_device+0x20e/0x450 [ 104.385567][ T5227] driver_probe_device+0x4a/0x140 [ 104.391207][ T5227] __device_attach_driver+0x1df/0x320 [ 104.397164][ T5227] bus_for_each_drv+0x159/0x1e0 [ 104.402584][ T5227] __device_attach+0x1e4/0x4d0 [ 104.407938][ T5227] device_initial_probe+0xaf/0xd0 [ 104.413549][ T5227] bus_probe_device+0x64/0x160 [ 104.418877][ T5227] device_add+0x121d/0x1970 [ 104.423969][ T5227] usb_new_device.part.0+0xcc2/0x1686 [ 104.429931][ T5227] hub_event.cold+0x51a/0xe9d [ 104.435187][ T5227] process_one_work+0xa23/0x1940 [ 104.440716][ T5227] worker_thread+0x5ef/0xe50 [ 104.445875][ T5227] kthread+0x370/0x450 [ 104.450523][ T5227] ret_from_fork+0x69a/0xc80 [ 104.455692][ T5227] ret_from_fork_asm+0x1a/0x30 [ 104.461036][ T5227] [ 104.461036][ T5227] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 104.468825][ T5227] check_prev_add+0xeb/0xe60 [ 104.473995][ T5227] __lock_acquire+0x136c/0x1a40 [ 104.476096][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.479425][ T5227] lock_acquire+0x1b9/0x370 [ 104.479473][ T5227] __mutex_lock+0x1a4/0x1bd0 [ 104.498010][ T5227] mdc800_device_open+0x22/0x450 [ 104.501244][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.503568][ T5227] usb_open+0x189/0x220 [ 104.516006][ T5227] chrdev_open+0x234/0x6a0 [ 104.521000][ T5227] do_dentry_open+0x68b/0x14b0 [ 104.526355][ T5227] vfs_open+0x82/0x3f0 [ 104.529140][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.530994][ T5227] path_openat+0x2873/0x4280 [ 104.531028][ T5227] do_file_open+0x20e/0x430 [ 104.531055][ T5227] do_sys_openat2+0x10f/0x1e0 [ 104.531089][ T5227] __x64_sys_openat+0x12d/0x210 [ 104.560235][ T5227] do_syscall_64+0x10b/0x7f0 [ 104.565411][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.569219][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.571882][ T5227] [ 104.571882][ T5227] other info that might help us debug this: [ 104.571882][ T5227] [ 104.571896][ T5227] Possible unsafe locking scenario: [ 104.571896][ T5227] [ 104.597384][ T5227] CPU0 CPU1 [ 104.602788][ T5227] ---- ---- [ 104.608193][ T5227] rlock(minor_rwsem); [ 104.609890][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.612398][ T5227] lock(&mdc800->io_lock); [ 104.612426][ T5227] lock(minor_rwsem); [ 104.612475][ T5227] lock(&mdc800->io_lock); [ 104.632884][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.634454][ T5227] [ 104.634454][ T5227] *** DEADLOCK *** [ 104.634454][ T5227] [ 104.634466][ T5227] 1 lock held by syz.1.2/5227: [ 104.659650][ T5227] #0: ffffffff8a3395a8 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 104.668366][ T5227] [ 104.668366][ T5227] stack backtrace: [ 104.674337][ T5227] CPU: 1 UID: 0 PID: 5227 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.674379][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.674408][ T5227] Call Trace: [ 104.674423][ T5227] [ 104.674435][ T5227] dump_stack_lvl+0x100/0x190 [ 104.674489][ T5227] print_circular_bug.cold+0x178/0x1c7 [ 104.674526][ T5227] check_noncircular+0x146/0x160 [ 104.674573][ T5227] check_prev_add+0xeb/0xe60 [ 104.674625][ T5227] __lock_acquire+0x136c/0x1a40 [ 104.674672][ T5227] ? lockdep_unlock+0x5a/0xc0 [ 104.674707][ T5227] lock_acquire+0x1b9/0x370 [ 104.674748][ T5227] ? mdc800_device_open+0x22/0x450 [ 104.674793][ T5227] ? __pfx___might_resched+0x10/0x10 [ 104.674837][ T5227] __mutex_lock+0x1a4/0x1bd0 [ 104.674871][ T5227] ? mdc800_device_open+0x22/0x450 [ 104.674912][ T5227] ? mdc800_device_open+0x22/0x450 [ 104.674958][ T5227] ? __pfx___mutex_lock+0x10/0x10 [ 104.674994][ T5227] ? __pfx___might_resched+0x10/0x10 [ 104.675037][ T5227] ? down_read+0x13b/0x4c0 [ 104.675073][ T5227] ? __pfx_down_read+0x10/0x10 [ 104.675111][ T5227] ? __pfx_mdc800_device_open+0x10/0x10 [ 104.675152][ T5227] ? mdc800_device_open+0x22/0x450 [ 104.675193][ T5227] mdc800_device_open+0x22/0x450 [ 104.675234][ T5227] ? __pfx_mdc800_device_open+0x10/0x10 [ 104.675276][ T5227] usb_open+0x189/0x220 [ 104.675308][ T5227] ? __pfx_usb_open+0x10/0x10 [ 104.675338][ T5227] chrdev_open+0x234/0x6a0 [ 104.675369][ T5227] ? __pfx_chrdev_open+0x10/0x10 [ 104.675397][ T5227] ? path_get+0x61/0x80 [ 104.675435][ T5227] do_dentry_open+0x68b/0x14b0 [ 104.675485][ T5227] ? __pfx_chrdev_open+0x10/0x10 [ 104.675520][ T5227] vfs_open+0x82/0x3f0 [ 104.675556][ T5227] path_openat+0x2873/0x4280 [ 104.675596][ T5227] ? __pfx_path_openat+0x10/0x10 [ 104.675643][ T5227] do_file_open+0x20e/0x430 [ 104.675675][ T5227] ? __pfx_do_file_open+0x10/0x10 [ 104.675719][ T5227] ? alloc_fd+0x471/0x7a0 [ 104.675751][ T5227] ? do_getname+0x191/0x390 [ 104.675791][ T5227] do_sys_openat2+0x10f/0x1e0 [ 104.675829][ T5227] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.675873][ T5227] __x64_sys_openat+0x12d/0x210 [ 104.675912][ T5227] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.675960][ T5227] do_syscall_64+0x10b/0x7f0 [ 104.676001][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.676036][ T5227] RIP: 0033:0x7ff99611e90e [ 104.676062][ T5227] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.676110][ T5227] RSP: 002b:00007ff994bb6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.676142][ T5227] RAX: ffffffffffffffda RBX: 00007ff994bb76c0 RCX: 00007ff99611e90e [ 104.676164][ T5227] RDX: 0000000000000002 RSI: 00007ff994bb6c00 RDI: ffffffffffffff9c [ 104.676186][ T5227] RBP: 00007ff9961f5024 R08: 0000000000000000 R09: 0000000000000000 [ 104.676206][ T5227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.676224][ T5227] R13: 00007ff9963e6038 R14: 00007ff9963e5fa0 R15: 00007ffec633d208 [ 104.676255][ T5227] [ 104.976051][ T119] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 104.993406][ T119] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 105.007783][ T119] microsoft 0003:045E:07DA.0001: usage index exceeded [ 105.017603][ T5229] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 105.027506][ T119] microsoft 0003:045E:07DA.0001: item 0 2 2 2 parsing failed [ 105.049543][ T5229] usb 5-1: USB disconnect, device number 2 [ 105.057437][ T119] microsoft 0003:045E:07DA.0001: parse failed [ 105.066698][ T119] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 105.180739][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.189171][ T766] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.190342][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.207250][ T119] usb 4-1: USB disconnect, device number 2 [ 105.340440][ T766] usb 3-1: Using ep0 maxpacket: 8 [ 105.347317][ T766] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.355323][ T766] usb 3-1: New USB device found, idVendor=0582, idProduct=0042, bcdDevice=ba.7f [ 105.365522][ T766] usb 3-1: config 6 has an invalid interface number: 135 but max is 0 [ 105.373860][ T766] usb 3-1: config 6 has an invalid descriptor of length 155, skipping remainder of the config [ 105.384212][ T766] usb 3-1: config 6 has no interface number 0 [ 105.390412][ T766] usb 3-1: config 6 interface 135 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 105.401454][ T766] usb 3-1: config 6 interface 135 altsetting 2 endpoint 0x8 has invalid maxpacket 40707, setting to 64 [ 105.412600][ T766] usb 3-1: config 6 interface 135 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 105.423806][ T766] usb 3-1: config 6 interface 135 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 105.434912][ T766] usb 3-1: config 6 interface 135 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.448135][ T766] usb 3-1: config 6 interface 135 has no altsetting 0 [ 105.456838][ T766] usb 3-1: Dual-Role OTG device on HNP port [ 105.463085][ T766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.471197][ T766] usb 3-1: Product: syz [ 105.475400][ T766] usb 3-1: Manufacturer: syz [ 105.480005][ T766] usb 3-1: SerialNumber: syz [ 105.695236][ T766] usb 3-1: USB disconnect, device number 3 [ 106.062276][ T119] usb 2-1: USB disconnect, device number 2 [ 106.073137][ T119] mdc800 2-1:1.0: Mustek MDC800 disconnected from USB.