as invalid wMaxPacketSize 0 [ 396.448532][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 396.458126][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.466733][ T12] usb 4-1: config 0 descriptor?? [ 396.677164][ T168] usbhid 6-1:0.0: can't add hid device: -71 [ 396.683133][ T168] usbhid: probe of 6-1:0.0 failed with error -71 [ 396.690781][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 396.696723][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 396.705540][ T114] usb 1-1: USB disconnect, device number 125 [ 396.712518][ T168] usb 6-1: USB disconnect, device number 49 [ 396.797113][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 396.803193][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 396.811341][ T12] usb 4-1: USB disconnect, device number 25 [ 397.167054][ T168] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 397.174638][ T114] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 397.267054][ T12] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 397.537178][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.548336][ T168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.559278][ T168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.570072][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.580238][ T168] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 397.589585][ T114] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 397.598963][ T168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.607315][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.616107][ T114] usb 1-1: config 0 descriptor?? [ 397.622951][ T168] usb 6-1: config 0 descriptor?? [ 397.637767][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.648804][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.659208][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 397.669835][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.680098][ T12] usb 4-1: config 0 descriptor?? [ 398.207166][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 398.213116][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 398.220996][ T114] usb 1-1: USB disconnect, device number 126 [ 398.377099][ T12] usb 4-1: language id specifier not provided by device, defaulting to English [ 398.787253][ T168] uclogic 0003:5543:006E.0049: failed retrieving Huion firmware version: -71 [ 398.796073][ T168] uclogic 0003:5543:006E.0049: failed probing parameters: -71 [ 398.805920][ T168] uclogic: probe of 0003:5543:006E.0049 failed with error -71 [ 398.814652][ T168] usb 6-1: USB disconnect, device number 50 [ 398.837120][ T12] uclogic 0003:5543:006E.004A: failed retrieving Huion firmware version: -71 [ 398.845913][ T12] uclogic 0003:5543:006E.004A: failed probing parameters: -71 [ 398.855350][ T12] uclogic: probe of 0003:5543:006E.004A failed with error -71 [ 398.864324][ T12] usb 4-1: USB disconnect, device number 26 21:04:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 21:04:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x0) 21:04:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$TIOCNXCL(r4, 0x540d) 21:04:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}]}, 0x40}}, 0x0) 21:04:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}]}, 0x40}}, 0x0) 21:04:13 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)='ip6tnl0\x00') 21:04:13 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) clone(0x2000a004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x96, 0x20, 0xff, 0x9}) ioctl$PIO_FONTX(r4, 0x4b66, &(0x7f0000000000)={0x200, 0x0, &(0x7f00000004c0)="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"}) 21:04:13 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000340)={0x1000000}) fcntl$setstatus(r0, 0x4, 0x0) 21:04:13 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) [ 399.547118][ T90] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 399.547136][ T12] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 399.587091][ T92] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 399.907128][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.918133][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.927167][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.928203][ T90] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 399.940606][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.948269][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.958534][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 399.965925][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.975534][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.986272][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.997455][ T12] usb 1-1: config 0 descriptor?? [ 400.003653][ T90] usb 6-1: config 0 descriptor?? [ 400.019497][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 400.030832][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.039818][ T92] usb 4-1: config 0 descriptor?? [ 400.347073][ T90] usbhid 6-1:0.0: can't add hid device: -71 [ 400.353043][ T90] usbhid: probe of 6-1:0.0 failed with error -71 [ 400.361038][ T90] usb 6-1: USB disconnect, device number 51 [ 400.367236][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 400.373311][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 400.377214][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 400.381373][ T12] usb 1-1: USB disconnect, device number 127 [ 400.387884][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 400.399406][ T92] usb 4-1: USB disconnect, device number 27 [ 400.817059][ T90] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 400.837087][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 400.847167][ T92] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 401.177123][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.188077][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.197822][ T90] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 401.206843][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.214948][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.217130][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.226613][ T90] usb 6-1: config 0 descriptor?? [ 401.240302][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.241640][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.252303][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 401.265769][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 401.271389][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.281107][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.291106][ T12] usb 1-1: config 0 descriptor?? [ 401.303019][ T92] usb 4-1: config 0 descriptor?? [ 401.917116][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 401.923106][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 401.931058][ T12] usb 1-1: USB disconnect, device number 2 [ 402.417104][ T90] uclogic 0003:5543:006E.004B: failed retrieving Huion firmware version: -71 [ 402.425911][ T90] uclogic 0003:5543:006E.004B: failed probing parameters: -71 [ 402.435391][ T90] uclogic: probe of 0003:5543:006E.004B failed with error -71 [ 402.444331][ T90] usb 6-1: USB disconnect, device number 52 [ 402.451000][ T92] uclogic 0003:5543:006E.004C: failed retrieving Huion firmware version: -71 [ 402.460391][ T92] uclogic 0003:5543:006E.004C: failed probing parameters: -71 [ 402.469665][ T92] uclogic: probe of 0003:5543:006E.004C failed with error -71 [ 402.479584][ T92] usb 4-1: USB disconnect, device number 28 21:04:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:17 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/148, 0x94}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 21:04:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 21:04:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$TIOCNXCL(r4, 0x540d) 21:04:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x2, &(0x7f00000001c0)=""/234, 0xea) 21:04:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 21:04:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000003c0)=@ipx, 0x80, 0x0, 0x22}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:04:17 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) [ 403.157086][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 403.177053][ T92] usb 6-1: new high-speed USB device number 53 using dummy_hcd 21:04:17 executing program 2: 21:04:17 executing program 2: [ 403.227089][ T90] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 403.517117][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.528237][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.538230][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 403.547357][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.555996][ T12] usb 1-1: config 0 descriptor?? [ 403.557926][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.571966][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.581724][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 403.590862][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.601719][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.609737][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.619764][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 403.629062][ T92] usb 6-1: config 0 descriptor?? [ 403.634115][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.642926][ T90] usb 4-1: config 0 descriptor?? [ 403.897106][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 403.903056][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 403.910537][ T12] usb 1-1: USB disconnect, device number 3 [ 403.967258][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 403.973224][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 403.980972][ T92] usb 6-1: USB disconnect, device number 53 [ 403.987090][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 403.993036][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 404.000736][ T90] usb 4-1: USB disconnect, device number 29 [ 404.367071][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 404.447068][ T92] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 404.457175][ T90] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 404.737156][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.748059][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.758488][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 404.767803][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.776375][ T12] usb 1-1: config 0 descriptor?? [ 404.807142][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.818186][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.831836][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.842822][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.853009][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 404.862363][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 404.871660][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.879959][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.889021][ T92] usb 6-1: config 0 descriptor?? [ 404.895254][ T90] usb 4-1: config 0 descriptor?? [ 405.367162][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 405.373217][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 405.383764][ T12] usb 1-1: USB disconnect, device number 4 [ 406.047214][ T92] uclogic 0003:5543:006E.004D: failed retrieving Huion firmware version: -71 [ 406.057184][ T90] uclogic 0003:5543:006E.004E: failed retrieving Huion firmware version: -71 [ 406.065959][ T90] uclogic 0003:5543:006E.004E: failed probing parameters: -71 [ 406.073500][ T92] uclogic 0003:5543:006E.004D: failed probing parameters: -71 [ 406.081023][ T92] uclogic: probe of 0003:5543:006E.004D failed with error -71 [ 406.088548][ T90] uclogic: probe of 0003:5543:006E.004E failed with error -71 [ 406.098010][ T92] usb 6-1: USB disconnect, device number 54 [ 406.104527][ T90] usb 4-1: USB disconnect, device number 30 21:04:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:20 executing program 2: 21:04:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 21:04:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$TIOCNXCL(r4, 0x540d) 21:04:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:20 executing program 2: 21:04:20 executing program 2: 21:04:20 executing program 2: 21:04:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:04:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 21:04:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000000)="480e003f0000007e5bc536944def", 0x0, 0x6000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 406.807110][ T92] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 406.817073][ T12] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 406.817190][ T90] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 407.167146][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.178089][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.187136][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.188938][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.199200][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.210748][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 407.219717][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 407.229171][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.237764][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.248027][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.258139][ T12] usb 6-1: config 0 descriptor?? [ 407.269095][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 407.278931][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.287125][ T92] usb 1-1: config 0 descriptor?? [ 407.294061][ T90] usb 4-1: config 0 descriptor?? [ 407.607136][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 407.613129][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 407.620932][ T12] usb 6-1: USB disconnect, device number 55 [ 407.628653][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 407.634576][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 407.640972][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 407.646892][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 407.655355][ T90] usb 4-1: USB disconnect, device number 31 [ 407.661844][ T92] usb 1-1: USB disconnect, device number 5 [ 408.077093][ T12] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 408.117108][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 408.124752][ T90] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 408.437157][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.448048][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.457788][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 408.466814][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.475611][ T12] usb 6-1: config 0 descriptor?? [ 408.477704][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.491563][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.502462][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.512234][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.522006][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 408.531099][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 408.540199][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.548246][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.557010][ T92] usb 1-1: config 0 descriptor?? [ 408.562224][ T90] usb 4-1: config 0 descriptor?? [ 409.147160][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 409.153120][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 409.161619][ T92] usb 1-1: USB disconnect, device number 6 [ 409.617159][ T12] uclogic 0003:5543:006E.004F: failed retrieving Huion firmware version: -71 [ 409.626112][ T12] uclogic 0003:5543:006E.004F: failed probing parameters: -71 [ 409.633682][ T12] uclogic: probe of 0003:5543:006E.004F failed with error -71 [ 409.642151][ T12] usb 6-1: USB disconnect, device number 56 [ 409.727117][ T90] uclogic 0003:5543:006E.0050: failed retrieving Huion firmware version: -71 [ 409.735964][ T90] uclogic 0003:5543:006E.0050: failed probing parameters: -71 [ 409.743490][ T90] uclogic: probe of 0003:5543:006E.0050 failed with error -71 [ 409.752012][ T90] usb 4-1: USB disconnect, device number 32 21:04:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, 0x0, 0x0) 21:04:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 21:04:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:04:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x1d7, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 21:04:24 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1d9f08", 0x4, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 21:04:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[], 0x1d0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000600), 0x4) 21:04:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaa1486dd60fea72600840600ab00fe8000000000000000000000000000aa"], 0xbe) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:04:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="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", 0x29b}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430c907ece20848", 0x54}, {&(0x7f0000000640)="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", 0x1be}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[], 0x1d0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480b41ba7860005cf65ac618ded8974895abeaf414834ff921b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xf8, 0x0, 0x27) 21:04:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 410.367079][ T12] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 410.387084][ T90] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 410.477087][ T168] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 410.727159][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.738107][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.747882][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 410.756913][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.765769][ T12] usb 1-1: config 0 descriptor?? [ 410.777202][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.788116][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.798590][ T90] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 410.807983][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.816612][ T90] usb 6-1: config 0 descriptor?? [ 410.837167][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.848109][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.858025][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 410.867552][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.876068][ T168] usb 4-1: config 0 descriptor?? [ 411.107120][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 411.113097][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 411.120658][ T12] usb 1-1: USB disconnect, device number 7 [ 411.167133][ T90] usbhid 6-1:0.0: can't add hid device: -71 [ 411.173116][ T90] usbhid: probe of 6-1:0.0 failed with error -71 [ 411.180586][ T90] usb 6-1: USB disconnect, device number 57 [ 411.217121][ T168] usbhid 4-1:0.0: can't add hid device: -71 [ 411.223083][ T168] usbhid: probe of 4-1:0.0 failed with error -71 [ 411.230478][ T168] usb 4-1: USB disconnect, device number 33 [ 411.577095][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 411.637077][ T90] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 411.687067][ T168] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 411.937133][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.948050][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.958497][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 411.967951][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.976522][ T12] usb 1-1: config 0 descriptor?? [ 412.007164][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.018339][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.028111][ T90] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 412.037153][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.045664][ T90] usb 6-1: config 0 descriptor?? [ 412.047469][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.064398][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.074607][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 412.084035][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.092931][ T168] usb 4-1: config 0 descriptor?? [ 412.557155][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 412.563138][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 412.571308][ T12] usb 1-1: USB disconnect, device number 8 [ 413.217193][ T90] uclogic 0003:5543:006E.0051: failed retrieving Huion firmware version: -71 [ 413.226011][ T90] uclogic 0003:5543:006E.0051: failed probing parameters: -71 [ 413.233587][ T90] uclogic: probe of 0003:5543:006E.0051 failed with error -71 [ 413.242087][ T90] usb 6-1: USB disconnect, device number 58 [ 413.257168][ T168] uclogic 0003:5543:006E.0052: failed retrieving Huion firmware version: -71 [ 413.265984][ T168] uclogic 0003:5543:006E.0052: failed probing parameters: -71 [ 413.273648][ T168] uclogic: probe of 0003:5543:006E.0052 failed with error -71 [ 413.282689][ T168] usb 4-1: USB disconnect, device number 34 21:04:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:28 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100000001190500000000000000000a000000440001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000020000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007"], 0x138}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x14) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={@mcast1, @private1={0xfc, 0x1, [], 0x1}, @empty, 0x38000000, 0x3, 0xcfc, 0x400, 0x3, 0x200, r2}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="355482456fcbbde50dd8a863e03ac5ed1141f0f8832cb9a8e05e1899e55b8add4a", 0x21}, {&(0x7f00000002c0)="154c8e71ab789186e99c8c42084c4d6cd41591b356edbb0a1ec6d53d599c626f102f2fdeaf2daa2cc92c7388a2d0a657d54e6c00172f2d354c542284d7447ba82e4775b32c9f7d02e7467a196b87ba3cae8eb2cfd02ca2dcaafd8dd78fabdaeba856f14c0d312122dae288b6d64a51a52558eb9c2a64e14196dbcb742166453ed7563a78731893eefd16dac33a728e50bc1172144de832aefd", 0x99}, {&(0x7f0000000740)="805c55959abf4fc6c9d552554da54a8a7b1e0c4867d9fbf83a66f7b4c72d473132233cf1ee521924d8708980fc3577947af85c23aac2ebedb2ad2ad5d8d5d7b78840ea7486748ab57c97c0bbeac25f2b9ab90c3ce0c3e5901b78cfcccb49d3b5b1529aceb8d276d9a40d64d73cf124ee5687dcd52e887d3fff9ef02593a1a6b7d97a061ef5b0f67462daf2b27857f955d1e090521713a591544bcf9f204f76a86c7dd0ea37bdfd18a65d6c0d1f414470e4d6957ecf262cba02a84f7b465e79044155eb82455c0e71d03b", 0xca}, {&(0x7f0000000380)="e5be4c229c869f34ba80f1a9699743c7f33a414a9cbd32d17817b1cc61fb6cbc1bd678e2a3dc38abdb7efdd5b2aa", 0x2e}], 0x4, 0x369df5f6b828fdea) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4002085}, 0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r6, 0xc573de0d27bdfe6f}, 0x14}}, 0x0) 21:04:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:04:28 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'Bz\x00', 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ff112d", 0x0, 0x29, 0x0, @mcast1, @loopback, [@dstopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]}]}}}}}}}, 0x0) 21:04:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:28 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 21:04:28 executing program 4: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00'}) [ 413.705600][ T9994] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480b41ba7860005cf65ac618ded8974895abeaf414834ff921b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xf8, 0x0, 0x27) 21:04:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[], 0x1d0}}, 0x0) 21:04:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) 21:04:28 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 413.967104][ T168] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 413.974775][ T12] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 414.007102][ T90] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 414.327147][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.338093][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.348982][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.359674][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.369783][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 414.377171][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.379616][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 414.389895][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.399432][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.408632][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 414.419590][ T168] usb 1-1: config 0 descriptor?? [ 414.425620][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.435896][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.446608][ T90] usb 4-1: config 0 descriptor?? [ 414.453483][ T12] usb 6-1: config 0 descriptor?? [ 414.797115][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 414.797130][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 414.803081][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 414.811383][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 414.817294][ T90] usb 4-1: USB disconnect, device number 35 [ 414.823072][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 414.833422][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 414.840792][ T168] usb 1-1: USB disconnect, device number 9 [ 414.848006][ T12] usb 6-1: USB disconnect, device number 59 [ 415.287131][ T90] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 415.297087][ T168] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 415.304701][ T12] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 415.647174][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.658117][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.668067][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 415.677196][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.677222][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.688116][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.698938][ T90] usb 4-1: config 0 descriptor?? [ 415.708985][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.721580][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.731345][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 415.740398][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 415.749446][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.757446][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.766266][ T12] usb 6-1: config 0 descriptor?? [ 415.771375][ T168] usb 1-1: config 0 descriptor?? [ 416.337118][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 416.343094][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 416.351026][ T168] usb 1-1: USB disconnect, device number 10 [ 416.867145][ T90] uclogic 0003:5543:006E.0053: failed retrieving Huion firmware version: -71 [ 416.875971][ T90] uclogic 0003:5543:006E.0053: failed probing parameters: -71 [ 416.883656][ T90] uclogic: probe of 0003:5543:006E.0053 failed with error -71 [ 416.892759][ T90] usb 4-1: USB disconnect, device number 36 [ 416.917213][ T12] uclogic 0003:5543:006E.0054: failed retrieving Huion firmware version: -71 [ 416.926113][ T12] uclogic 0003:5543:006E.0054: failed probing parameters: -71 [ 416.935303][ T12] uclogic: probe of 0003:5543:006E.0054 failed with error -71 [ 416.944065][ T12] usb 6-1: USB disconnect, device number 60 21:04:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:31 executing program 4: 21:04:31 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 21:04:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:04:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:31 executing program 4: 21:04:31 executing program 4: 21:04:31 executing program 4: 21:04:31 executing program 4: 21:04:31 executing program 4: 21:04:31 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 417.677096][ T90] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 417.684689][ T92] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 417.687084][ T12] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 418.047157][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.058212][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.067243][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.069081][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.080143][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.091816][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.099630][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 418.109934][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 418.118357][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.127801][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 418.138208][ T12] usb 4-1: config 0 descriptor?? [ 418.149491][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.157757][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.166287][ T92] usb 6-1: config 0 descriptor?? [ 418.175193][ T90] usb 1-1: config 0 descriptor?? [ 418.487171][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 418.493146][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 418.500750][ T12] usb 4-1: USB disconnect, device number 37 [ 418.508599][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 418.514579][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 418.520974][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 418.526904][ T90] usbhid: probe of 1-1:0.0 failed with error -71 [ 418.535399][ T92] usb 6-1: USB disconnect, device number 61 [ 418.541817][ T90] usb 1-1: USB disconnect, device number 11 [ 418.957100][ T12] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 418.997135][ T92] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 419.004744][ T90] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 419.317136][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.328109][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.337872][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 419.346892][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.355658][ T12] usb 4-1: config 0 descriptor?? [ 419.367195][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.378122][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.389584][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.400509][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.410664][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 419.420275][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 419.429667][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.437931][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.446681][ T90] usb 1-1: config 0 descriptor?? [ 419.453498][ T92] usb 6-1: config 0 descriptor?? [ 420.207160][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 420.213128][ T90] usbhid: probe of 1-1:0.0 failed with error -71 [ 420.221295][ T90] usb 1-1: USB disconnect, device number 12 [ 420.517263][ T12] uclogic 0003:5543:006E.0055: failed retrieving Huion firmware version: -71 [ 420.526100][ T12] uclogic 0003:5543:006E.0055: failed probing parameters: -71 [ 420.533636][ T12] uclogic: probe of 0003:5543:006E.0055 failed with error -71 [ 420.542155][ T12] usb 4-1: USB disconnect, device number 38 [ 420.597363][ T92] uclogic 0003:5543:006E.0056: failed retrieving Huion firmware version: -71 [ 420.606172][ T92] uclogic 0003:5543:006E.0056: failed probing parameters: -71 [ 420.613854][ T92] uclogic: probe of 0003:5543:006E.0056 failed with error -71 [ 420.622392][ T92] usb 6-1: USB disconnect, device number 62 21:04:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:04:35 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') dup3(r2, r3, 0x0) 21:04:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0) 21:04:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x88002) 21:04:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="0400050900000302666174000404040a02", 0x11}], 0x2208015, &(0x7f00000004c0)=ANY=[]) 21:04:35 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 421.099153][T10127] input: syz1 as /devices/virtual/input/input56 21:04:35 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000c40)='tmpfs\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) [ 421.148375][T10148] input: syz1 as /devices/virtual/input/input57 21:04:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110700000000000000000600000008000300", @ANYRES32=r4], 0x24}}, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0), 0x0) [ 421.245168][T10156] tmpfs: Unsupported parameter 'mpol' [ 421.289133][T10156] tmpfs: Unsupported parameter 'mpol' [ 421.367200][ T168] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 421.374813][ T114] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 421.382383][ T12] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 421.747224][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.758167][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.769058][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.779911][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.789650][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.799402][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.809153][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 421.818206][ T114] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 421.827253][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 421.836274][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.844287][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.852307][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.861613][ T12] usb 6-1: config 0 descriptor?? [ 421.866855][ T168] usb 4-1: config 0 descriptor?? [ 421.872141][ T114] usb 1-1: config 0 descriptor?? [ 422.197196][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 422.203162][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 422.210692][ T168] usbhid 4-1:0.0: can't add hid device: -71 [ 422.216607][ T168] usbhid: probe of 4-1:0.0 failed with error -71 [ 422.223909][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 422.229857][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 422.238521][ T12] usb 6-1: USB disconnect, device number 63 [ 422.245484][ T114] usb 1-1: USB disconnect, device number 13 [ 422.252914][ T168] usb 4-1: USB disconnect, device number 39 [ 422.657115][ T12] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 422.707088][ T114] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 422.714697][ T168] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 423.017178][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.028152][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.038627][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 423.048032][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.056593][ T12] usb 6-1: config 0 descriptor?? [ 423.067171][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.078204][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.089136][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.100948][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.110716][ T114] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 423.119786][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 423.128868][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.137104][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.145875][ T114] usb 1-1: config 0 descriptor?? [ 423.150996][ T168] usb 4-1: config 0 descriptor?? [ 423.907193][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 423.913223][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 423.920745][ T114] usb 1-1: USB disconnect, device number 14 [ 424.217204][ T12] uclogic 0003:5543:006E.0057: failed retrieving Huion firmware version: -71 [ 424.226061][ T12] uclogic 0003:5543:006E.0057: failed probing parameters: -71 [ 424.235129][ T12] uclogic: probe of 0003:5543:006E.0057 failed with error -71 [ 424.243891][ T12] usb 6-1: USB disconnect, device number 64 [ 424.307171][ T168] uclogic 0003:5543:006E.0058: failed retrieving Huion firmware version: -71 [ 424.316915][ T168] uclogic 0003:5543:006E.0058: failed probing parameters: -71 [ 424.325951][ T168] uclogic: probe of 0003:5543:006E.0058 failed with error -71 [ 424.334634][ T168] usb 4-1: USB disconnect, device number 40 21:04:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 21:04:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000100)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="110000001a000102"], 0x1c}], 0x1}, 0x0) 21:04:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 424.693716][T10207] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 21:04:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:39 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560d, &(0x7f0000000000)) 21:04:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 21:04:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000007000000000000f4000085000000200000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x4f, &(0x7f0000000100)="7f3d5e7a9e3efa339e3c7b7f07d2", 0x0, 0x409}, 0x28) [ 424.977111][ T12] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 424.984743][ T168] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 425.067090][ T92] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 425.337140][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.348091][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.358945][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.369737][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.379896][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 425.389236][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 425.398593][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.406849][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.416028][ T12] usb 6-1: config 0 descriptor?? [ 425.421832][ T168] usb 1-1: config 0 descriptor?? [ 425.427239][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.438193][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.447974][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 425.456985][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.466107][ T92] usb 4-1: config 0 descriptor?? [ 425.757246][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 425.763246][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 425.769231][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 425.776295][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 425.783594][ T168] usb 1-1: USB disconnect, device number 15 [ 425.789933][ T12] usb 6-1: USB disconnect, device number 65 [ 425.799574][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 425.805522][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 425.812837][ T92] usb 4-1: USB disconnect, device number 41 [ 426.237098][ T168] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 426.257147][ T12] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 426.277191][ T92] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 426.597229][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.608154][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.617950][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.628803][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 426.637858][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.647226][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.647600][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.659263][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.666430][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 426.676927][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 426.685877][ T168] usb 1-1: config 0 descriptor?? [ 426.698387][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.699101][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.715386][ T92] usb 4-1: config 0 descriptor?? [ 426.715902][ T12] usb 6-1: config 0 descriptor?? [ 427.457177][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 427.463144][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 427.471520][ T168] usb 1-1: USB disconnect, device number 16 [ 427.867182][ T92] uclogic 0003:5543:006E.0059: failed retrieving Huion firmware version: -71 [ 427.876074][ T92] uclogic 0003:5543:006E.0059: failed probing parameters: -71 [ 427.877191][ T12] uclogic 0003:5543:006E.005A: failed retrieving Huion firmware version: -71 [ 427.883948][ T92] uclogic: probe of 0003:5543:006E.0059 failed with error -71 [ 427.895772][ T12] uclogic 0003:5543:006E.005A: failed probing parameters: -71 [ 427.901619][ T92] usb 4-1: USB disconnect, device number 42 [ 427.909171][ T12] uclogic: probe of 0003:5543:006E.005A failed with error -71 [ 427.930120][ T12] usb 6-1: USB disconnect, device number 66 21:04:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f00000001c0)="03042a01093060254003002cfff57b016d2763bd56373780398d537500e506a7ffe4ec55e0654786a70100935ba514d40808f7a000801610002fd08d49a47eff71bc413152611f99bf00a9010000081eb1da21bad1843e770afd6e9ef5837dbd0000000053", 0xff56, 0x4000000, 0x0, 0x0) 21:04:42 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b4c, &(0x7f0000000000)) 21:04:42 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 21:04:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 428.637141][ T168] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 428.644787][ T12] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 428.653184][ T114] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 428.997187][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.008176][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.017931][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 429.026936][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.035018][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.045911][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.057009][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.067093][ T168] usb 4-1: config 0 descriptor?? [ 429.072185][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.081978][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 429.091075][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 429.101109][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.109711][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.118625][ T114] usb 6-1: config 0 descriptor?? [ 429.125398][ T12] usb 1-1: config 0 descriptor?? [ 429.407218][ T168] usbhid 4-1:0.0: can't add hid device: -71 [ 429.413222][ T168] usbhid: probe of 4-1:0.0 failed with error -71 [ 429.421304][ T168] usb 4-1: USB disconnect, device number 43 [ 429.457208][ T114] usbhid 6-1:0.0: can't add hid device: -71 [ 429.463149][ T114] usbhid: probe of 6-1:0.0 failed with error -71 [ 429.469663][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 429.475572][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 429.483098][ T114] usb 6-1: USB disconnect, device number 67 [ 429.490332][ T12] usb 1-1: USB disconnect, device number 17 [ 429.877102][ T168] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 429.937171][ T114] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 429.947505][ T12] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 430.237181][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.248104][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.258641][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 430.268109][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.276675][ T168] usb 4-1: config 0 descriptor?? [ 430.297281][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.308216][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.319834][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.330505][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.340645][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 430.349986][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 430.359275][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.367673][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.376601][ T114] usb 6-1: config 0 descriptor?? [ 430.384267][ T12] usb 1-1: config 0 descriptor?? [ 431.147212][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 431.153172][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 431.161458][ T12] usb 1-1: USB disconnect, device number 18 [ 431.437237][ T168] uclogic 0003:5543:006E.005B: failed retrieving Huion firmware version: -71 [ 431.446135][ T168] uclogic 0003:5543:006E.005B: failed probing parameters: -71 [ 431.455289][ T168] uclogic: probe of 0003:5543:006E.005B failed with error -71 [ 431.464249][ T168] usb 4-1: USB disconnect, device number 44 [ 431.547216][ T114] uclogic 0003:5543:006E.005C: failed retrieving Huion firmware version: -71 [ 431.556018][ T114] uclogic 0003:5543:006E.005C: failed probing parameters: -71 [ 431.563562][ T114] uclogic: probe of 0003:5543:006E.005C failed with error -71 [ 431.572120][ T114] usb 6-1: USB disconnect, device number 68 21:04:46 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:46 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @local}, {0x1, @multicast}, 0x2, {0x2, 0x0, @broadcast}, 'ipvlan1\x00'}) 21:04:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:46 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 21:04:46 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:46 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0xfffc, 0x0, 0x0, 0x86}]}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:46 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:46 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:46 executing program 1: 21:04:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:46 executing program 1: [ 432.287140][ T114] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 432.307133][ T92] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 432.314714][ T90] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 432.647271][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.658193][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.668663][ T114] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 432.678086][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.686650][ T114] usb 1-1: config 0 descriptor?? [ 432.697190][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.708164][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.719149][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.728891][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.738669][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 432.747707][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 432.756716][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.764816][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.773664][ T90] usb 4-1: config 0 descriptor?? [ 432.778841][ T92] usb 6-1: config 0 descriptor?? [ 433.027187][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 433.036355][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 433.044559][ T114] usb 1-1: USB disconnect, device number 19 [ 433.117308][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 433.123235][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 433.129824][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 433.142972][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 433.149499][ T90] usb 4-1: USB disconnect, device number 45 [ 433.156501][ T92] usb 6-1: USB disconnect, device number 69 [ 433.497118][ T114] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 433.617148][ T90] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 433.624812][ T92] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 433.867213][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.878113][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.887863][ T114] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 433.896869][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.905555][ T114] usb 1-1: config 0 descriptor?? [ 433.997258][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.008175][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.019023][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.028760][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.038543][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 434.047585][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 434.056596][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.064582][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.073365][ T90] usb 4-1: config 0 descriptor?? [ 434.080254][ T92] usb 6-1: config 0 descriptor?? [ 434.667203][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 434.673180][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 434.681269][ T114] usb 1-1: USB disconnect, device number 20 21:04:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 435.227190][ T92] uclogic 0003:5543:006E.005E: failed retrieving Huion firmware version: -71 [ 435.236067][ T90] uclogic 0003:5543:006E.005D: failed retrieving Huion firmware version: -71 [ 435.245016][ T92] uclogic 0003:5543:006E.005E: failed probing parameters: -71 [ 435.252794][ T90] uclogic 0003:5543:006E.005D: failed probing parameters: -71 [ 435.260434][ T92] uclogic: probe of 0003:5543:006E.005E failed with error -71 [ 435.267952][ T90] uclogic: probe of 0003:5543:006E.005D failed with error -71 [ 435.277562][ T92] usb 6-1: USB disconnect, device number 70 [ 435.284125][ T90] usb 4-1: USB disconnect, device number 46 [ 435.437204][T10412] usb 1-1: new high-speed USB device number 21 using dummy_hcd 21:04:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:50 executing program 1: 21:04:50 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x0, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) chown(0x0, 0x0, 0x0) 21:04:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:50 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x808, &(0x7f0000000140)) [ 435.797172][T10412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.815286][T10412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.826085][T10412] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 435.835423][T10412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:04:50 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 435.844740][T10412] usb 1-1: config 0 descriptor?? [ 435.987204][ T114] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 435.997119][ T92] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 436.187155][T10412] usbhid 1-1:0.0: can't add hid device: -71 [ 436.193135][T10412] usbhid: probe of 1-1:0.0 failed with error -71 [ 436.201360][T10412] usb 1-1: USB disconnect, device number 21 [ 436.347220][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.358243][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.368627][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 436.378392][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.386976][ T114] usb 4-1: config 0 descriptor?? [ 436.397182][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.408163][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.418249][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 436.427486][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.436019][ T92] usb 6-1: config 0 descriptor?? [ 436.657155][T10412] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 436.717198][ T114] usbhid 4-1:0.0: can't add hid device: -71 [ 436.723145][ T114] usbhid: probe of 4-1:0.0 failed with error -71 [ 436.731487][ T114] usb 4-1: USB disconnect, device number 47 [ 436.787286][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 436.793260][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 436.800619][ T92] usb 6-1: USB disconnect, device number 71 [ 437.017229][T10412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.028158][T10412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.038719][T10412] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 437.048137][T10412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.057001][T10412] usb 1-1: config 0 descriptor?? [ 437.197127][ T114] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 437.287121][ T92] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 437.557239][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.568113][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.577861][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 437.586917][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.595654][ T114] usb 4-1: config 0 descriptor?? [ 437.647214][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.658152][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.667898][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 437.676914][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.685723][ T92] usb 6-1: config 0 descriptor?? [ 437.797187][T10412] usbhid 1-1:0.0: can't add hid device: -71 [ 437.803132][T10412] usbhid: probe of 1-1:0.0 failed with error -71 [ 437.811210][T10412] usb 1-1: USB disconnect, device number 22 21:04:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00'], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 438.537121][ T168] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 438.737240][ T114] uclogic 0003:5543:006E.005F: failed retrieving Huion firmware version: -71 [ 438.746129][ T114] uclogic 0003:5543:006E.005F: failed probing parameters: -71 [ 438.753699][ T114] uclogic: probe of 0003:5543:006E.005F failed with error -71 [ 438.762182][ T114] usb 4-1: USB disconnect, device number 48 [ 438.837189][ T92] uclogic 0003:5543:006E.0060: failed retrieving Huion firmware version: -71 [ 438.846021][ T92] uclogic 0003:5543:006E.0060: failed probing parameters: -71 [ 438.855208][ T92] uclogic: probe of 0003:5543:006E.0060 failed with error -71 [ 438.863932][ T92] usb 6-1: USB disconnect, device number 72 [ 438.897186][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.908228][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.918148][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 438.927207][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.935806][ T168] usb 1-1: config 0 descriptor?? 21:04:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:53 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) sendfile(r0, r0, 0x0, 0x200fff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:53 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 439.277132][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 439.283091][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 439.290432][ T168] usb 1-1: USB disconnect, device number 23 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:53 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 439.597197][ T114] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 439.604936][ T12] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 439.757139][ T168] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 439.967229][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.978170][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.989045][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.999064][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.008819][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 440.017934][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 440.026942][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.035021][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.043846][ T12] usb 6-1: config 0 descriptor?? [ 440.050776][ T114] usb 4-1: config 0 descriptor?? [ 440.137254][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.148133][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.158520][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 440.167812][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.176345][ T168] usb 1-1: config 0 descriptor?? [ 440.387153][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 440.393113][ T114] usbhid 4-1:0.0: can't add hid device: -71 [ 440.399056][ T114] usbhid: probe of 4-1:0.0 failed with error -71 [ 440.406108][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 440.415131][ T12] usb 6-1: USB disconnect, device number 73 [ 440.421730][ T114] usb 4-1: USB disconnect, device number 49 [ 440.887353][ T12] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 440.894951][ T114] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 440.927186][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 440.933201][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 440.940759][ T168] usb 1-1: USB disconnect, device number 24 [ 441.257226][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.268238][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.279261][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.289855][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.299945][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 441.309250][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 441.318575][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.326768][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.336004][ T12] usb 6-1: config 0 descriptor?? [ 441.343321][ T114] usb 4-1: config 0 descriptor?? 21:04:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00'], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 441.687165][ T92] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 442.047198][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.058119][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.067873][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 442.076880][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.085585][ T92] usb 1-1: config 0 descriptor?? [ 442.427144][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 442.433148][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 442.441662][ T92] usb 1-1: USB disconnect, device number 25 [ 442.497191][ T12] uclogic 0003:5543:006E.0061: failed retrieving Huion firmware version: -71 [ 442.506013][ T12] uclogic 0003:5543:006E.0061: failed probing parameters: -71 [ 442.513778][ T114] uclogic 0003:5543:006E.0062: failed retrieving Huion firmware version: -71 [ 442.522686][ T12] uclogic: probe of 0003:5543:006E.0061 failed with error -71 [ 442.530278][ T114] uclogic 0003:5543:006E.0062: failed probing parameters: -71 [ 442.538792][ T12] usb 6-1: USB disconnect, device number 74 [ 442.545267][ T114] uclogic: probe of 0003:5543:006E.0062 failed with error -71 [ 442.554254][ T114] usb 4-1: USB disconnect, device number 50 [ 442.897172][ T92] usb 1-1: new high-speed USB device number 26 using dummy_hcd 21:04:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:57 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:04:57 executing program 1: 21:04:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:04:57 executing program 1: 21:04:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:04:57 executing program 1: 21:04:57 executing program 1: 21:04:57 executing program 1: 21:04:57 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 443.257204][T10412] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 443.257213][ T114] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 443.272388][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.283296][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.293035][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 443.302107][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.310880][ T92] usb 1-1: config 0 descriptor?? [ 443.617199][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.628081][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.638532][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 443.647202][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.648236][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.658601][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.667912][ T114] usb 4-1: config 0 descriptor?? [ 443.678106][T10412] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 443.693541][T10412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.702293][T10412] usb 6-1: config 0 descriptor?? [ 444.017226][ T114] usbhid 4-1:0.0: can't add hid device: -71 [ 444.023277][ T114] usbhid: probe of 4-1:0.0 failed with error -71 [ 444.030815][ T114] usb 4-1: USB disconnect, device number 51 [ 444.057169][T10412] usbhid 6-1:0.0: can't add hid device: -71 [ 444.063189][T10412] usbhid: probe of 6-1:0.0 failed with error -71 [ 444.070940][T10412] usb 6-1: USB disconnect, device number 75 [ 444.077207][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 444.083217][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 444.091233][ T92] usb 1-1: USB disconnect, device number 26 [ 444.487160][ T114] usb 4-1: new high-speed USB device number 52 using dummy_hcd 21:04:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00'], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 444.537170][T10412] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 444.817221][ T72] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 444.847175][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.858086][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.868530][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 444.877880][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.886477][ T114] usb 4-1: config 0 descriptor?? [ 444.897254][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.908106][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.918149][T10412] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 444.927192][T10412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.935708][T10412] usb 6-1: config 0 descriptor?? [ 445.177175][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.188170][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.198569][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 445.207913][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.218994][ T72] usb 1-1: config 0 descriptor?? [ 445.557188][ T72] usbhid 1-1:0.0: can't add hid device: -71 [ 445.563158][ T72] usbhid: probe of 1-1:0.0 failed with error -71 [ 445.571289][ T72] usb 1-1: USB disconnect, device number 27 [ 446.027148][ T72] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 446.047248][ T114] uclogic 0003:5543:006E.0063: failed retrieving Huion firmware version: -71 [ 446.056110][ T114] uclogic 0003:5543:006E.0063: failed probing parameters: -71 [ 446.065221][ T114] uclogic: probe of 0003:5543:006E.0063 failed with error -71 [ 446.074020][ T114] usb 4-1: USB disconnect, device number 52 [ 446.087178][T10412] uclogic 0003:5543:006E.0064: failed retrieving Huion firmware version: -71 [ 446.095990][T10412] uclogic 0003:5543:006E.0064: failed probing parameters: -71 [ 446.103920][T10412] uclogic: probe of 0003:5543:006E.0064 failed with error -71 [ 446.113111][T10412] usb 6-1: USB disconnect, device number 76 [ 446.387181][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.398094][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.408585][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 446.418047][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.426668][ T72] usb 1-1: config 0 descriptor?? 21:05:00 executing program 1: 21:05:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:00 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) pipe(&(0x7f0000000300)) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100), 0x0, 0x0) 21:05:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:01 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') r1 = memfd_create(&(0x7f0000000300)='\xe9\x04@\x95\xb97\x1c\x15u=\x97\xd64B\xec_\xf1\t\x1c\xa9\x06\xca\xed\xfeK\xfe\x83*\x1e\x9dX6*\xaf\xf3Bb+\x87\xc3\x94\r\xa6U\x84g\xfc+\xc1\f\xb8\t\x01\x89\tJ\xfd\x1a}\x11\xcb\xef\x84\x8d\xd1\"y\xcc\xc86\x1e\xec\xadjm\xae\xd7>\xdeMwH\xa7n4\rD\xe3F\xecM\v\xb0\xf7\x11\x96\x1d\xba\rc\xf2-:\r\x92>-9-!\x8b\xea\x80}\xc2I\xba\xb9\x12;\xd01\xcaw\xedm\xca&\x02P\x01\x95K@M(\xebJB%\xf0\xff\x92c}\x025e7X\xf7t\xdfu\xef\n\x8bi\xc1JS\xa0\xfe\x88\xf1{6\xf8\x00\x9a\xbb\xfelU\x9f\xa7\xb1n=\\\x97;\xe2\x80d\xd4(h2\xaa\xa1\xaa\xe4\xa5p\xe2V!', 0x0) sendfile(r1, r0, 0x0, 0xfffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:05:01 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c000000950000000000000054cf463898be1c0533d16e0e0ad9ae38a251c01fe83d878aa1f4ea1c6a6dc2809d0e12efde6f86ea0f5f8712f90c6e29763845d423bbb0dd67874484099891ce1b4623af22e843972d37bd63c6d4961c0000b1233e3ce9bb5794b2874b73851f5a20d3b382f72c9330d2f64015221900"/153], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x0) [ 446.688045][T10678] syz-executor.1 (10678) used greatest stack depth: 21872 bytes left [ 446.857137][ T114] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 446.864786][ T12] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 447.187189][ T72] usbhid 1-1:0.0: can't add hid device: -71 [ 447.193205][ T72] usbhid: probe of 1-1:0.0 failed with error -71 [ 447.200684][ T72] usb 1-1: USB disconnect, device number 28 [ 447.217177][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.229194][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.240037][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.250857][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.260770][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 447.269846][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 447.278910][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.287132][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.295833][ T114] usb 6-1: config 0 descriptor?? [ 447.301025][ T12] usb 4-1: config 0 descriptor?? 21:05:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:02 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:02 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="0480"], 0x1ec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 447.658678][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 447.664816][ T114] usbhid 6-1:0.0: can't add hid device: -71 [ 447.671095][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 447.672655][T10696] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.677520][ T114] usbhid: probe of 6-1:0.0 failed with error -71 [ 447.701741][ T12] usb 4-1: USB disconnect, device number 53 [ 447.709310][ T114] usb 6-1: USB disconnect, device number 77 [ 447.957161][ T72] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 448.107148][ T12] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 448.114779][ T114] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 448.317205][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.328085][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.338495][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 448.347805][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.356326][ T72] usb 1-1: config 0 descriptor?? [ 448.507211][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.518278][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.529144][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.538898][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.548661][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 448.557719][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 448.566723][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.574729][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.583545][ T114] usb 6-1: config 0 descriptor?? [ 448.588733][ T12] usb 4-1: config 0 descriptor?? [ 448.697162][ T72] usbhid 1-1:0.0: can't add hid device: -71 [ 448.703403][ T72] usbhid: probe of 1-1:0.0 failed with error -71 [ 448.711121][ T72] usb 1-1: USB disconnect, device number 29 [ 449.167156][ T72] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 449.527219][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.538157][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.548588][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 449.557987][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.566533][ T72] usb 1-1: config 0 descriptor?? [ 449.737236][ T12] uclogic 0003:5543:006E.0066: failed retrieving Huion firmware version: -71 [ 449.746057][ T12] uclogic 0003:5543:006E.0066: failed probing parameters: -71 [ 449.753788][ T114] uclogic 0003:5543:006E.0065: failed retrieving Huion firmware version: -71 [ 449.762559][ T114] uclogic 0003:5543:006E.0065: failed probing parameters: -71 [ 449.770076][ T114] uclogic: probe of 0003:5543:006E.0065 failed with error -71 [ 449.777623][ T12] uclogic: probe of 0003:5543:006E.0066 failed with error -71 [ 449.786983][ T114] usb 6-1: USB disconnect, device number 78 [ 449.793717][ T12] usb 4-1: USB disconnect, device number 54 21:05:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)) 21:05:04 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 21:05:04 executing program 4: unshare(0x40000000) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 450.487154][T10412] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 450.497701][ T72] usb 1-1: string descriptor 0 read error: -71 [ 450.503979][ T92] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 450.517273][ T72] uclogic 0003:5543:006E.0067: failed retrieving string descriptor #200: -71 [ 450.526082][ T72] uclogic 0003:5543:006E.0067: failed retrieving pen parameters: -71 [ 450.537029][ T72] uclogic 0003:5543:006E.0067: failed probing pen v2 parameters: -71 [ 450.546330][ T72] uclogic 0003:5543:006E.0067: failed probing parameters: -71 [ 450.554603][ T72] uclogic: probe of 0003:5543:006E.0067 failed with error -71 [ 450.563515][ T72] usb 1-1: USB disconnect, device number 30 [ 450.847227][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.858140][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.868787][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.879660][T10412] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 21:05:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:05 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 450.889204][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.899272][T10412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.907567][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 450.916565][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.925634][T10412] usb 6-1: config 0 descriptor?? [ 450.932102][ T92] usb 4-1: config 0 descriptor?? 21:05:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 451.247177][ T72] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 451.257384][ T114] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 451.267221][T10412] usbhid 6-1:0.0: can't add hid device: -71 [ 451.273312][T10412] usbhid: probe of 6-1:0.0 failed with error -71 [ 451.279803][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 451.285730][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 451.293050][T10412] usb 6-1: USB disconnect, device number 79 [ 451.300148][ T92] usb 4-1: USB disconnect, device number 55 [ 451.617419][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.628452][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.637224][ T114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.639871][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 451.649062][ T114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.658969][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.667931][ T114] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 451.679300][ T72] usb 1-1: config 0 descriptor?? [ 451.686018][ T114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.698547][ T114] usb 2-1: config 0 descriptor?? [ 451.747233][T10412] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 451.757602][ T92] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 452.017164][ T72] usbhid 1-1:0.0: can't add hid device: -71 [ 452.023159][ T72] usbhid: probe of 1-1:0.0 failed with error -71 [ 452.031597][ T72] usb 1-1: USB disconnect, device number 31 [ 452.047210][ T114] usbhid 2-1:0.0: can't add hid device: -71 [ 452.053153][ T114] usbhid: probe of 2-1:0.0 failed with error -71 [ 452.060650][ T114] usb 2-1: USB disconnect, device number 3 [ 452.157240][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.168259][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.179316][T10412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.189886][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.199920][T10412] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 452.209242][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 452.218643][T10412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.226910][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.235978][T10412] usb 6-1: config 0 descriptor?? [ 452.242140][ T92] usb 4-1: config 0 descriptor?? [ 452.537140][ T72] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 452.897196][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.908099][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.918534][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 452.928074][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.936666][ T72] usb 1-1: config 0 descriptor?? [ 453.387287][ T92] uclogic 0003:5543:006E.0069: failed retrieving Huion firmware version: -71 [ 453.396189][ T92] uclogic 0003:5543:006E.0069: failed probing parameters: -71 [ 453.406040][T10412] uclogic 0003:5543:006E.0068: failed retrieving Huion firmware version: -71 [ 453.414830][T10412] uclogic 0003:5543:006E.0068: failed probing parameters: -71 [ 453.423788][T10412] uclogic: probe of 0003:5543:006E.0068 failed with error -71 [ 453.431633][ T92] uclogic: probe of 0003:5543:006E.0069 failed with error -71 [ 453.441285][ T92] usb 4-1: USB disconnect, device number 56 [ 453.448029][T10412] usb 6-1: USB disconnect, device number 80 21:05:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:05:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 453.863531][ T72] usb 1-1: string descriptor 0 read error: -71 [ 453.887214][ T72] uclogic 0003:5543:006E.006A: failed retrieving string descriptor #200: -71 [ 453.900541][ T72] uclogic 0003:5543:006E.006A: failed retrieving pen parameters: -71 21:05:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 453.918762][ T72] uclogic 0003:5543:006E.006A: failed probing pen v2 parameters: -71 [ 453.928319][ T72] uclogic 0003:5543:006E.006A: failed probing parameters: -71 [ 453.935847][ T72] uclogic: probe of 0003:5543:006E.006A failed with error -71 [ 453.946356][ T72] usb 1-1: USB disconnect, device number 32 21:05:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 454.147241][ T114] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 454.157221][ T3165] usb 6-1: new high-speed USB device number 81 using dummy_hcd 21:05:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 454.507235][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.518205][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.529053][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.538785][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.548550][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 454.557627][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 454.566654][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.574642][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.583316][ T114] usb 4-1: config 0 descriptor?? [ 454.588880][ T3165] usb 6-1: config 0 descriptor?? [ 454.607192][ T72] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 454.927200][ T3165] usbhid 6-1:0.0: can't add hid device: -71 [ 454.933155][ T3165] usbhid: probe of 6-1:0.0 failed with error -71 [ 454.939552][ T114] usbhid 4-1:0.0: can't add hid device: -71 [ 454.945493][ T114] usbhid: probe of 4-1:0.0 failed with error -71 [ 454.953316][ T3165] usb 6-1: USB disconnect, device number 81 [ 454.959712][ T114] usb 4-1: USB disconnect, device number 57 [ 454.969086][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.980042][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.989800][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 454.998846][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.007429][ T72] usb 1-1: config 0 descriptor?? [ 455.347172][ T72] usbhid 1-1:0.0: can't add hid device: -71 [ 455.353239][ T72] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.360579][ T72] usb 1-1: USB disconnect, device number 33 [ 455.417234][ T3165] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 455.424851][ T114] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 455.787224][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.798148][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.808993][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.819698][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.827148][ T72] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 455.830176][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 455.846037][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 455.855078][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.863166][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.872146][ T114] usb 4-1: config 0 descriptor?? [ 455.877756][ T3165] usb 6-1: config 0 descriptor?? [ 456.197200][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.208233][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.217975][ T72] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 456.226979][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.235709][ T72] usb 1-1: config 0 descriptor?? [ 456.577306][ T3165] usb 6-1: string descriptor 0 read error: -22 [ 456.797211][ T3165] uclogic 0003:5543:006E.006B: failed retrieving string descriptor #200: -71 [ 456.806002][ T3165] uclogic 0003:5543:006E.006B: failed retrieving pen parameters: -71 [ 456.814477][ T3165] uclogic 0003:5543:006E.006B: failed probing pen v2 parameters: -71 [ 456.822649][ T3165] uclogic 0003:5543:006E.006B: failed probing parameters: -71 [ 456.830343][ T3165] uclogic: probe of 0003:5543:006E.006B failed with error -71 [ 456.839193][ T3165] usb 6-1: USB disconnect, device number 82 [ 457.027219][ T114] uclogic 0003:5543:006E.006C: failed retrieving Huion firmware version: -71 [ 457.036034][ T114] uclogic 0003:5543:006E.006C: failed probing parameters: -71 [ 457.043957][ T114] uclogic: probe of 0003:5543:006E.006C failed with error -71 [ 457.052581][ T114] usb 4-1: USB disconnect, device number 58 [ 457.167229][ T72] usb 1-1: string descriptor 0 read error: -71 [ 457.187231][ T72] uclogic 0003:5543:006E.006D: failed retrieving string descriptor #200: -71 [ 457.196163][ T72] uclogic 0003:5543:006E.006D: failed retrieving pen parameters: -71 [ 457.204270][ T72] uclogic 0003:5543:006E.006D: failed probing pen v2 parameters: -71 [ 457.212412][ T72] uclogic 0003:5543:006E.006D: failed probing parameters: -71 [ 457.219924][ T72] uclogic: probe of 0003:5543:006E.006D failed with error -71 [ 457.228628][ T72] usb 1-1: USB disconnect, device number 34 21:05:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:11 executing program 4: unshare(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:11 executing program 4: unshare(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 21:05:12 executing program 4: unshare(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 21:05:12 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) [ 457.777228][ T72] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 457.787152][ T114] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 457.787291][ T92] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 457.917253][ T3165] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 458.137246][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.147195][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.148163][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.159294][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.170320][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.178686][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 458.190139][ T72] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 458.198743][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.208239][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.217852][ T114] usb 6-1: config 0 descriptor?? [ 458.231224][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.239664][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 458.249256][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.257462][ T72] usb 2-1: config 0 descriptor?? [ 458.264305][ T92] usb 4-1: config 0 descriptor?? [ 458.277306][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.288619][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.298400][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 458.307473][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.315998][ T3165] usb 1-1: config 0 descriptor?? [ 458.567224][ T114] usbhid 6-1:0.0: can't add hid device: -71 [ 458.573247][ T114] usbhid: probe of 6-1:0.0 failed with error -71 [ 458.581714][ T114] usb 6-1: USB disconnect, device number 83 [ 458.617261][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 458.623214][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 458.629305][ T72] usbhid: probe of 2-1:0.0 failed with error -71 [ 458.636599][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 458.644131][ T92] usb 4-1: USB disconnect, device number 59 [ 458.650409][ T72] usb 2-1: USB disconnect, device number 4 [ 458.659776][ T3165] usbhid 1-1:0.0: can't add hid device: -71 [ 458.665728][ T3165] usbhid: probe of 1-1:0.0 failed with error -71 [ 458.673451][ T3165] usb 1-1: USB disconnect, device number 35 [ 459.037144][ T114] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 459.097145][ T92] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 459.117189][ T72] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 459.127148][ T3165] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 459.397261][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.408136][ T114] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.418660][ T114] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 459.428002][ T114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.436535][ T114] usb 6-1: config 0 descriptor?? [ 459.467303][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.478456][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.488264][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.497239][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.499178][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 459.510815][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.519021][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.519051][ T72] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 459.530043][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 459.538508][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.539242][ T92] usb 4-1: config 0 descriptor?? [ 459.551656][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.556575][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.563289][ T72] usb 2-1: config 0 descriptor?? [ 459.576316][ T3165] usb 1-1: config 0 descriptor?? [ 460.137275][ T114] usb 6-1: string descriptor 0 read error: -22 [ 460.357247][ T114] uclogic 0003:5543:006E.006E: failed retrieving string descriptor #200: -71 [ 460.366034][ T114] uclogic 0003:5543:006E.006E: failed retrieving pen parameters: -71 [ 460.376584][ T114] uclogic 0003:5543:006E.006E: failed probing pen v2 parameters: -71 [ 460.386279][ T114] uclogic 0003:5543:006E.006E: failed probing parameters: -71 [ 460.394492][ T114] uclogic: probe of 0003:5543:006E.006E failed with error -71 [ 460.403365][ T114] usb 6-1: USB disconnect, device number 84 [ 460.557286][ T72] usb 2-1: string descriptor 0 read error: -71 [ 460.567948][ T3165] usb 1-1: string descriptor 0 read error: -71 [ 460.577363][ T72] uclogic 0003:5543:006E.006F: failed retrieving string descriptor #200: -71 [ 460.586271][ T72] uclogic 0003:5543:006E.006F: failed retrieving pen parameters: -71 [ 460.594516][ T72] uclogic 0003:5543:006E.006F: failed probing pen v2 parameters: -71 [ 460.597190][ T3165] uclogic 0003:5543:006E.0071: failed retrieving string descriptor #200: -71 [ 460.602753][ T72] uclogic 0003:5543:006E.006F: failed probing parameters: -71 [ 460.613670][ T3165] uclogic 0003:5543:006E.0071: failed retrieving pen parameters: -71 [ 460.619718][ T72] uclogic: probe of 0003:5543:006E.006F failed with error -71 [ 460.627763][ T3165] uclogic 0003:5543:006E.0071: failed probing pen v2 parameters: -71 [ 460.639063][ T72] usb 2-1: USB disconnect, device number 5 [ 460.644167][ T3165] uclogic 0003:5543:006E.0071: failed probing parameters: -71 [ 460.656934][ T3165] uclogic: probe of 0003:5543:006E.0071 failed with error -71 [ 460.665658][ T3165] usb 1-1: USB disconnect, device number 36 [ 460.717281][ T92] uclogic 0003:5543:006E.0070: failed retrieving Huion firmware version: -71 [ 460.726113][ T92] uclogic 0003:5543:006E.0070: failed probing parameters: -71 [ 460.734778][ T92] uclogic: probe of 0003:5543:006E.0070 failed with error -71 [ 460.744167][ T92] usb 4-1: USB disconnect, device number 60 21:05:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:15 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2}}, 0x76) 21:05:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 21:05:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:15 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2}}, 0x76) 21:05:15 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2}}, 0x76) 21:05:15 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x5c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x1, [], [@ra, @calipso={0x7, 0x8}]}]}}}, 0x8e) [ 461.467152][ T3165] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 461.477252][ T92] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 461.478090][ T114] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 461.827326][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.837220][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.838267][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.849404][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.860419][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.868944][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 461.879485][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 461.889725][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.898582][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.916223][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.916294][ T92] usb 1-1: config 0 descriptor?? [ 461.924229][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 461.938396][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.946585][ T3165] usb 6-1: config 0 descriptor?? [ 461.953462][ T114] usb 4-1: config 0 descriptor?? [ 462.267212][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 462.273224][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 462.281072][ T92] usb 1-1: USB disconnect, device number 37 [ 462.287355][ T3165] usbhid 6-1:0.0: can't add hid device: -71 [ 462.293328][ T114] usbhid 4-1:0.0: can't add hid device: -71 [ 462.299322][ T3165] usbhid: probe of 6-1:0.0 failed with error -71 [ 462.306634][ T114] usbhid: probe of 4-1:0.0 failed with error -71 [ 462.314208][ T3165] usb 6-1: USB disconnect, device number 85 [ 462.320625][ T114] usb 4-1: USB disconnect, device number 61 [ 462.747180][ T92] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 462.777170][ T114] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 462.784772][ T3165] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 463.117208][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.128123][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.137197][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.138112][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 463.150311][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.157892][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.168582][ T114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.178362][ T92] usb 1-1: config 0 descriptor?? [ 463.188425][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.201008][ T114] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 463.210072][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 463.219122][ T114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.227141][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.235813][ T3165] usb 6-1: config 0 descriptor?? [ 463.240986][ T114] usb 4-1: config 0 descriptor?? [ 463.937180][ T3165] usb 6-1: string descriptor 0 read error: -22 [ 464.157298][ T92] usb 1-1: string descriptor 0 read error: -71 [ 464.157513][ T3165] uclogic 0003:5543:006E.0074: failed retrieving string descriptor #200: -71 [ 464.172359][ T3165] uclogic 0003:5543:006E.0074: failed retrieving pen parameters: -71 [ 464.180517][ T3165] uclogic 0003:5543:006E.0074: failed probing pen v2 parameters: -71 [ 464.187213][ T92] uclogic 0003:5543:006E.0072: failed retrieving string descriptor #200: -71 [ 464.188717][ T3165] uclogic 0003:5543:006E.0074: failed probing parameters: -71 [ 464.199746][ T92] uclogic 0003:5543:006E.0072: failed retrieving pen parameters: -71 [ 464.204831][ T3165] uclogic: probe of 0003:5543:006E.0074 failed with error -71 [ 464.214231][ T92] uclogic 0003:5543:006E.0072: failed probing pen v2 parameters: -71 [ 464.222207][ T3165] usb 6-1: USB disconnect, device number 86 [ 464.230408][ T92] uclogic 0003:5543:006E.0072: failed probing parameters: -71 [ 464.243678][ T92] uclogic: probe of 0003:5543:006E.0072 failed with error -71 [ 464.252845][ T92] usb 1-1: USB disconnect, device number 38 [ 464.397328][ T114] uclogic 0003:5543:006E.0073: failed retrieving Huion firmware version: -71 [ 464.406153][ T114] uclogic 0003:5543:006E.0073: failed probing parameters: -71 [ 464.413749][ T114] uclogic: probe of 0003:5543:006E.0073 failed with error -71 [ 464.422536][ T114] usb 4-1: USB disconnect, device number 62 21:05:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:19 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x5c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x1, [], [@ra, @calipso={0x7, 0x8}]}]}}}, 0x8e) 21:05:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 21:05:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x5c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x1, [], [@ra, @calipso={0x7, 0x8}]}]}}}, 0x8e) 21:05:19 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x64, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x2, [], [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x96) 21:05:19 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:19 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x64, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x2, [], [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x96) [ 465.137172][ T92] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 465.147290][ T90] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 465.154881][ T3198] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 465.497244][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.508132][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.518048][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.528939][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.539797][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 465.548836][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.558606][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.568342][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.576596][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 465.585665][ T3198] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 465.594923][ T92] usb 1-1: config 0 descriptor?? [ 465.599998][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.608047][ T3198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.616828][ T3198] usb 6-1: config 0 descriptor?? [ 465.622176][ T90] usb 4-1: config 0 descriptor?? [ 465.937265][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 465.943239][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 465.951288][ T92] usb 1-1: USB disconnect, device number 39 [ 465.957864][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 465.963770][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 465.971149][ T3198] usbhid 6-1:0.0: can't add hid device: -71 [ 465.977856][ T3198] usbhid: probe of 6-1:0.0 failed with error -71 [ 465.985980][ T3198] usb 6-1: USB disconnect, device number 87 [ 465.993398][ T90] usb 4-1: USB disconnect, device number 63 [ 466.437157][ T92] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 466.457179][ T90] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 466.464804][ T3198] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 466.797324][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.808308][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.818782][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.829718][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.840580][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 466.850448][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.860544][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.870687][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.879173][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 466.888537][ T3198] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 466.898236][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.906422][ T92] usb 1-1: config 0 descriptor?? [ 466.912738][ T3198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.921847][ T90] usb 4-1: config 0 descriptor?? [ 466.928051][ T3198] usb 6-1: config 0 descriptor?? [ 467.617188][ T90] usb 4-1: string descriptor 0 read error: -22 [ 467.628165][ T3198] usb 6-1: string descriptor 0 read error: -22 [ 467.837170][ T90] uclogic 0003:5543:006E.0076: failed retrieving string descriptor #200: -71 [ 467.846103][ T90] uclogic 0003:5543:006E.0076: failed retrieving pen parameters: -71 [ 467.855725][ T3198] uclogic 0003:5543:006E.0077: failed retrieving string descriptor #200: -71 [ 467.864677][ T90] uclogic 0003:5543:006E.0076: failed probing pen v2 parameters: -71 [ 467.874311][ T3198] uclogic 0003:5543:006E.0077: failed retrieving pen parameters: -71 [ 467.883184][ T92] usb 1-1: string descriptor 0 read error: -71 [ 467.889396][ T90] uclogic 0003:5543:006E.0076: failed probing parameters: -71 [ 467.898510][ T3198] uclogic 0003:5543:006E.0077: failed probing pen v2 parameters: -71 [ 467.906578][ T3198] uclogic 0003:5543:006E.0077: failed probing parameters: -71 [ 467.915444][ T90] uclogic: probe of 0003:5543:006E.0076 failed with error -71 [ 467.922981][ T92] uclogic 0003:5543:006E.0075: failed retrieving string descriptor #200: -71 [ 467.932859][ T90] usb 4-1: USB disconnect, device number 64 [ 467.940429][ T3198] uclogic: probe of 0003:5543:006E.0077 failed with error -71 [ 467.948189][ T92] uclogic 0003:5543:006E.0075: failed retrieving pen parameters: -71 [ 467.959643][ T3198] usb 6-1: USB disconnect, device number 88 [ 467.965876][ T92] uclogic 0003:5543:006E.0075: failed probing pen v2 parameters: -71 [ 467.975797][ T92] uclogic 0003:5543:006E.0075: failed probing parameters: -71 [ 467.983747][ T92] uclogic: probe of 0003:5543:006E.0075 failed with error -71 [ 467.992337][ T92] usb 1-1: USB disconnect, device number 40 21:05:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:22 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x64, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x2, [], [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x96) 21:05:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 21:05:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:22 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x3, [], [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:22 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x3, [], [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:22 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:22 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 468.617153][ T12] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 468.647153][ T3198] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 468.654760][ T92] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 468.977240][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.988244][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.998209][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 469.007392][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.016024][ T12] usb 4-1: config 0 descriptor?? [ 469.027223][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.038165][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.049244][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.059006][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.068763][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 469.077839][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 469.086862][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.094847][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.103648][ T92] usb 6-1: config 0 descriptor?? [ 469.109006][ T3198] usb 1-1: config 0 descriptor?? [ 469.357186][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 469.363200][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 469.371211][ T12] usb 4-1: USB disconnect, device number 65 [ 469.457248][ T3198] usbhid 1-1:0.0: can't add hid device: -71 [ 469.463209][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 469.469145][ T3198] usbhid: probe of 1-1:0.0 failed with error -71 [ 469.476137][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 469.482644][ T3198] usb 1-1: USB disconnect, device number 41 [ 469.489632][ T92] usb 6-1: USB disconnect, device number 89 [ 469.827145][ T12] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 469.937210][ T92] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 469.944797][ T3198] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 470.197188][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.208165][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.217908][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 470.226916][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.235665][ T12] usb 4-1: config 0 descriptor?? [ 470.307394][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.318328][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.329717][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.339500][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.349252][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 470.358403][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 470.367503][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.375910][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.384565][ T92] usb 6-1: config 0 descriptor?? [ 470.389928][ T3198] usb 1-1: config 0 descriptor?? [ 470.907229][ T12] usb 4-1: string descriptor 0 read error: -22 [ 471.087263][ T92] usb 6-1: string descriptor 0 read error: -22 [ 471.127250][ T12] uclogic 0003:5543:006E.0078: failed retrieving string descriptor #200: -71 [ 471.136075][ T12] uclogic 0003:5543:006E.0078: failed retrieving pen parameters: -71 [ 471.144153][ T12] uclogic 0003:5543:006E.0078: failed probing pen v2 parameters: -71 [ 471.152294][ T12] uclogic 0003:5543:006E.0078: failed probing parameters: -71 [ 471.159954][ T12] uclogic: probe of 0003:5543:006E.0078 failed with error -71 [ 471.168564][ T12] usb 4-1: USB disconnect, device number 66 [ 471.307184][ T92] uclogic 0003:5543:006E.0079: failed retrieving string descriptor #200: -71 [ 471.315997][ T92] uclogic 0003:5543:006E.0079: failed retrieving pen parameters: -71 [ 471.325648][ T92] uclogic 0003:5543:006E.0079: failed probing pen v2 parameters: -71 [ 471.333986][ T92] uclogic 0003:5543:006E.0079: failed probing parameters: -71 [ 471.341530][ T92] uclogic: probe of 0003:5543:006E.0079 failed with error -71 [ 471.350223][ T92] usb 6-1: USB disconnect, device number 90 [ 471.367224][ T3198] usb 1-1: string descriptor 0 read error: -71 [ 471.387279][ T3198] uclogic 0003:5543:006E.007A: failed retrieving string descriptor #200: -71 [ 471.396771][ T3198] uclogic 0003:5543:006E.007A: failed retrieving pen parameters: -71 [ 471.404856][ T3198] uclogic 0003:5543:006E.007A: failed probing pen v2 parameters: -71 [ 471.413014][ T3198] uclogic 0003:5543:006E.007A: failed probing parameters: -71 [ 471.420525][ T3198] uclogic: probe of 0003:5543:006E.007A failed with error -71 [ 471.429038][ T3198] usb 1-1: USB disconnect, device number 42 21:05:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:25 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x3, [], [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:05:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:26 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:26 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x540d) 21:05:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:26 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 471.897189][ T168] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 471.904783][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd 21:05:26 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:26 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:26 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 472.137175][ T92] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 472.144793][ T3198] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 472.267229][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.278201][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 472.291047][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.302447][ T12] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 472.311997][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 472.321647][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.330006][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.339200][ T12] usb 2-1: config 0 descriptor?? [ 472.350192][ T168] usb 4-1: config 0 descriptor?? [ 472.377679][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 472.517224][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.528196][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.539047][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.548792][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.558540][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 472.567597][ T3198] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 472.576610][ T3198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.581030][ T12] usb 2-1: USB disconnect, device number 6 [ 472.586607][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.599209][ T3198] usb 6-1: config 0 descriptor?? [ 472.605096][ T92] usb 1-1: config 0 descriptor?? [ 472.687173][ T168] usbhid 4-1:0.0: can't add hid device: -71 [ 472.693151][ T168] usbhid: probe of 4-1:0.0 failed with error -71 [ 472.700828][ T168] usb 4-1: USB disconnect, device number 67 [ 472.947222][ T92] usbhid 1-1:0.0: can't add hid device: -71 [ 472.953169][ T92] usbhid: probe of 1-1:0.0 failed with error -71 [ 472.959678][ T3198] usbhid 6-1:0.0: can't add hid device: -71 [ 472.965623][ T3198] usbhid: probe of 6-1:0.0 failed with error -71 [ 472.973723][ T3198] usb 6-1: USB disconnect, device number 91 [ 472.980054][ T92] usb 1-1: USB disconnect, device number 43 [ 473.147135][ T12] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 473.157605][ T168] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 473.437226][ T3198] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 473.444905][ T92] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 473.507233][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.520097][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.530973][ T12] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 473.541137][ T168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.551271][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.559606][ T168] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 473.569213][ T168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.577515][ T12] usb 2-1: config 0 descriptor?? [ 473.588753][ T168] usb 4-1: config 0 descriptor?? [ 473.617553][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 473.837273][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.848171][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.859063][ T3198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.868811][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.878559][ T92] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 473.887617][ T3198] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 473.896626][ T3198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.904613][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.913496][ T3198] usb 6-1: config 0 descriptor?? [ 473.918807][ T92] usb 1-1: config 0 descriptor?? [ 474.287213][ T168] usb 4-1: string descriptor 0 read error: -22 [ 474.507202][ T168] uclogic 0003:5543:006E.007B: failed retrieving string descriptor #200: -71 [ 474.516027][ T168] uclogic 0003:5543:006E.007B: failed retrieving pen parameters: -71 [ 474.525815][ T168] uclogic 0003:5543:006E.007B: failed probing pen v2 parameters: -71 [ 474.534896][ T168] uclogic 0003:5543:006E.007B: failed probing parameters: -71 [ 474.543119][ T168] uclogic: probe of 0003:5543:006E.007B failed with error -71 [ 474.551931][ T168] usb 4-1: USB disconnect, device number 68 [ 474.607243][ T3198] usb 6-1: string descriptor 0 read error: -22 [ 474.825453][T10996] usb 2-1: USB disconnect, device number 7 [ 474.832634][ T3198] uclogic 0003:5543:006E.007D: failed retrieving string descriptor #200: -71 [ 474.842389][ T3198] uclogic 0003:5543:006E.007D: failed retrieving pen parameters: -71 [ 474.853591][ T3198] uclogic 0003:5543:006E.007D: failed probing pen v2 parameters: -71 [ 474.862452][ T3198] uclogic 0003:5543:006E.007D: failed probing parameters: -71 [ 474.870974][ T92] usb 1-1: string descriptor 0 read error: -71 [ 474.877316][ T3198] uclogic: probe of 0003:5543:006E.007D failed with error -71 [ 474.885849][ T3198] usb 6-1: USB disconnect, device number 92 [ 474.897227][ T92] uclogic 0003:5543:006E.007C: failed retrieving string descriptor #200: -71 [ 474.906383][ T92] uclogic 0003:5543:006E.007C: failed retrieving pen parameters: -71 [ 474.916375][ T92] uclogic 0003:5543:006E.007C: failed probing pen v2 parameters: -71 [ 474.925171][ T92] uclogic 0003:5543:006E.007C: failed probing parameters: -71 [ 474.933327][ T92] uclogic: probe of 0003:5543:006E.007C failed with error -71 [ 474.942294][ T92] usb 1-1: USB disconnect, device number 44 21:05:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:29 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 475.267177][T10412] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 475.277614][T10413] usb 3-1: new high-speed USB device number 7 using dummy_hcd 21:05:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:29 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:29 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 475.387191][T10996] usb 2-1: new high-speed USB device number 8 using dummy_hcd 21:05:29 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:29 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:05:30 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, 0x0, 0x46) [ 475.627222][ T168] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 475.647251][T10412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.658253][ T92] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 475.667244][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.681255][T10412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.691264][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.701307][T10412] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 475.710396][T10413] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 475.720446][T10412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.728503][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.737331][T10412] usb 4-1: config 0 descriptor?? [ 475.742979][T10413] usb 3-1: config 0 descriptor?? 21:05:30 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, 0x0, 0x46) [ 475.777261][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.795700][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.813651][T10996] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 475.823242][T10996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.833649][T10996] usb 2-1: config 0 descriptor?? [ 475.997213][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.008145][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.018094][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 476.027344][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.035987][ T168] usb 1-1: config 0 descriptor?? [ 476.047381][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.058373][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.068289][T10412] usbhid 4-1:0.0: can't add hid device: -71 [ 476.074207][T10412] usbhid: probe of 4-1:0.0 failed with error -71 [ 476.080738][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 476.089910][T10413] usbhid 3-1:0.0: can't add hid device: -71 [ 476.095856][T10413] usbhid: probe of 3-1:0.0 failed with error -71 [ 476.103189][T10412] usb 4-1: USB disconnect, device number 69 [ 476.109136][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.118874][T10413] usb 3-1: USB disconnect, device number 7 [ 476.125901][ T92] usb 6-1: config 0 descriptor?? [ 476.187226][T10996] usbhid 2-1:0.0: can't add hid device: -71 [ 476.193284][T10996] usbhid: probe of 2-1:0.0 failed with error -71 [ 476.202107][T10996] usb 2-1: USB disconnect, device number 8 [ 476.377195][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 476.383243][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 476.391419][ T168] usb 1-1: USB disconnect, device number 45 [ 476.467231][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 476.473225][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 476.480693][ T92] usb 6-1: USB disconnect, device number 93 [ 476.567250][T10412] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 476.587222][T10413] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 476.667147][T10996] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 476.847161][ T168] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 476.927278][T10412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.938475][ T92] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 476.946062][T10412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.955916][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.966948][T10412] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 476.976062][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.986008][T10412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.994067][T10413] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 477.003457][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.011702][T10412] usb 4-1: config 0 descriptor?? [ 477.020856][T10413] usb 3-1: config 0 descriptor?? [ 477.047210][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.059713][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.069819][T10996] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 477.079098][T10996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.088035][T10996] usb 2-1: config 0 descriptor?? [ 477.207202][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.218124][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.228242][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 477.237323][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.245913][ T168] usb 1-1: config 0 descriptor?? [ 477.297304][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.308223][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.317991][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 477.327023][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.336057][ T92] usb 6-1: config 0 descriptor?? [ 477.587281][T10413] usbhid 3-1:0.0: can't add hid device: -71 [ 477.593400][T10413] usbhid: probe of 3-1:0.0 failed with error -71 [ 477.601534][T10413] usb 3-1: USB disconnect, device number 8 [ 477.627207][T10996] usbhid 2-1:0.0: can't add hid device: -71 [ 477.633253][T10996] usbhid: probe of 2-1:0.0 failed with error -71 [ 477.641677][T10996] usb 2-1: USB disconnect, device number 9 [ 477.717225][T10412] usb 4-1: string descriptor 0 read error: -22 [ 477.937194][T10412] uclogic 0003:5543:006E.007E: failed retrieving string descriptor #200: -71 [ 477.946005][T10412] uclogic 0003:5543:006E.007E: failed retrieving pen parameters: -71 [ 477.955796][T10412] uclogic 0003:5543:006E.007E: failed probing pen v2 parameters: -71 [ 477.964643][T10412] uclogic 0003:5543:006E.007E: failed probing parameters: -71 [ 477.972855][T10412] uclogic: probe of 0003:5543:006E.007E failed with error -71 [ 477.981775][T10412] usb 4-1: USB disconnect, device number 70 [ 478.038280][ T92] usb 6-1: string descriptor 0 read error: -22 [ 478.217172][ T168] usb 1-1: string descriptor 0 read error: -71 [ 478.237289][ T168] uclogic 0003:5543:006E.007F: failed retrieving string descriptor #200: -71 [ 478.246075][ T168] uclogic 0003:5543:006E.007F: failed retrieving pen parameters: -71 [ 478.255123][ T168] uclogic 0003:5543:006E.007F: failed probing pen v2 parameters: -71 [ 478.263226][ T168] uclogic 0003:5543:006E.007F: failed probing parameters: -71 [ 478.267170][ T92] uclogic 0003:5543:006E.0080: failed retrieving string descriptor #200: -71 [ 478.271465][ T168] uclogic: probe of 0003:5543:006E.007F failed with error -71 [ 478.282949][ T92] uclogic 0003:5543:006E.0080: failed retrieving pen parameters: -71 [ 478.288841][ T168] usb 1-1: USB disconnect, device number 46 [ 478.298077][ T92] uclogic 0003:5543:006E.0080: failed probing pen v2 parameters: -71 [ 478.309707][ T92] uclogic 0003:5543:006E.0080: failed probing parameters: -71 [ 478.317921][ T92] uclogic: probe of 0003:5543:006E.0080 failed with error -71 [ 478.326572][ T92] usb 6-1: USB disconnect, device number 94 21:05:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:32 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, 0x0, 0x46) 21:05:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:05:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:33 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x46) 21:05:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:05:33 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x46) [ 478.707148][T10412] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 478.717307][ T3165] usb 4-1: new high-speed USB device number 71 using dummy_hcd 21:05:33 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x46) 21:05:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 478.977152][ T168] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 479.027222][ T92] usb 6-1: new high-speed USB device number 95 using dummy_hcd 21:05:33 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x46) [ 479.067193][T10412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.080767][T10412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.090715][T10412] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 479.097264][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.100338][T10412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.120178][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.121601][T10412] usb 3-1: config 0 descriptor?? [ 479.132598][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 479.144060][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.153408][ T3165] usb 4-1: config 0 descriptor?? [ 479.307191][ T174] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 479.367208][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.378143][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.388550][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 479.397834][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.406422][ T168] usb 1-1: config 0 descriptor?? [ 479.408281][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.422507][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.432305][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 479.441432][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.450814][ T92] usb 6-1: config 0 descriptor?? [ 479.477212][T10412] usbhid 3-1:0.0: can't add hid device: -71 [ 479.483164][T10412] usbhid: probe of 3-1:0.0 failed with error -71 [ 479.492346][T10412] usb 3-1: USB disconnect, device number 9 [ 479.507178][ T3165] usbhid 4-1:0.0: can't add hid device: -71 [ 479.513156][ T3165] usbhid: probe of 4-1:0.0 failed with error -71 [ 479.521720][ T3165] usb 4-1: USB disconnect, device number 71 [ 479.667297][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.678253][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.688697][ T174] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 479.698318][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.708062][ T174] usb 2-1: config 0 descriptor?? [ 479.757238][ T168] usbhid 1-1:0.0: can't add hid device: -71 [ 479.763209][ T168] usbhid: probe of 1-1:0.0 failed with error -71 [ 479.771258][ T168] usb 1-1: USB disconnect, device number 47 [ 479.797198][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 479.803157][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 479.811079][ T92] usb 6-1: USB disconnect, device number 95 [ 479.977197][ T3165] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 480.037183][ T174] usbhid 2-1:0.0: can't add hid device: -71 [ 480.043392][ T174] usbhid: probe of 2-1:0.0 failed with error -71 [ 480.050513][ T174] usb 2-1: USB disconnect, device number 10 [ 480.227156][ T168] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 480.267154][ T92] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 480.347194][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.358300][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.368062][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 480.377134][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.388421][ T3165] usb 4-1: config 0 descriptor?? [ 480.507155][ T174] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 480.597249][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.608159][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.618667][ T168] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 480.628222][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.636797][ T168] usb 1-1: config 0 descriptor?? [ 480.647196][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.658090][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.668007][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 480.677503][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.685982][ T92] usb 6-1: config 0 descriptor?? [ 480.867205][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.878136][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.888012][ T174] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 480.897053][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.906053][ T174] usb 2-1: config 0 descriptor?? [ 481.067189][ T3165] usb 4-1: string descriptor 0 read error: -22 [ 481.287290][ T3165] uclogic 0003:5543:006E.0081: failed retrieving string descriptor #200: -71 [ 481.296068][ T3165] uclogic 0003:5543:006E.0081: failed retrieving pen parameters: -71 [ 481.305777][ T3165] uclogic 0003:5543:006E.0081: failed probing pen v2 parameters: -71 [ 481.314838][ T3165] uclogic 0003:5543:006E.0081: failed probing parameters: -71 [ 481.322996][ T168] usb 1-1: language id specifier not provided by device, defaulting to English [ 481.332079][ T3165] uclogic: probe of 0003:5543:006E.0081 failed with error -71 [ 481.341518][ T3165] usb 4-1: USB disconnect, device number 72 [ 481.367178][ T92] usb 6-1: string descriptor 0 read error: -22 [ 481.587170][ T92] uclogic 0003:5543:006E.0083: failed retrieving string descriptor #200: -71 [ 481.595960][ T92] uclogic 0003:5543:006E.0083: failed retrieving pen parameters: -71 [ 481.604198][ T92] uclogic 0003:5543:006E.0083: failed probing pen v2 parameters: -71 [ 481.607299][ T174] usb 2-1: string descriptor 0 read error: -22 [ 481.612295][ T92] uclogic 0003:5543:006E.0083: failed probing parameters: -71 [ 481.625937][ T92] uclogic: probe of 0003:5543:006E.0083 failed with error -71 [ 481.634602][ T92] usb 6-1: USB disconnect, device number 96 21:05:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x46) 21:05:36 executing program 2: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x46) [ 481.777288][ T168] uclogic 0003:5543:006E.0082: failed retrieving Huion firmware version: -71 [ 481.790870][ T168] uclogic 0003:5543:006E.0082: failed probing parameters: -71 [ 481.804862][ T168] uclogic: probe of 0003:5543:006E.0082 failed with error -71 [ 481.818480][ T168] usb 1-1: USB disconnect, device number 48 21:05:36 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 481.847215][ T174] uclogic 0003:5543:006E.0084: failed retrieving string descriptor #200: -71 [ 481.856050][ T174] uclogic 0003:5543:006E.0084: failed retrieving pen parameters: -71 [ 481.865873][ T174] uclogic 0003:5543:006E.0084: failed probing pen v2 parameters: -71 [ 481.874917][ T174] uclogic 0003:5543:006E.0084: failed probing parameters: -71 [ 481.883687][ T174] uclogic: probe of 0003:5543:006E.0084 failed with error -71 [ 481.893164][ T174] usb 2-1: USB disconnect, device number 11 [ 482.087141][ T3165] usb 4-1: new high-speed USB device number 73 using dummy_hcd 21:05:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x46) 21:05:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000"], 0x46) 21:05:36 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000"], 0x46) 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000"], 0x46) [ 482.467333][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.481253][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.491829][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 482.501211][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.510331][ T3165] usb 4-1: config 0 descriptor?? 21:05:36 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000"], 0x46) [ 482.527148][ T92] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 482.547169][ T174] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 482.607195][T10996] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 482.847214][ T3165] usbhid 4-1:0.0: can't add hid device: -71 [ 482.853162][ T3165] usbhid: probe of 4-1:0.0 failed with error -71 [ 482.861236][ T3165] usb 4-1: USB disconnect, device number 73 [ 482.907236][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.917238][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.918321][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.929095][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.940385][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 482.949740][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 482.963861][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.966566][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.977672][ T174] usb 1-1: config 0 descriptor?? [ 482.987793][ T92] usb 6-1: config 0 descriptor?? [ 482.997268][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.008447][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.018700][T10996] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 483.032012][T10996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.041368][T10996] usb 2-1: config 0 descriptor?? [ 483.317183][ T3165] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 483.317189][ T92] usbhid 6-1:0.0: can't add hid device: -71 [ 483.317266][ T92] usbhid: probe of 6-1:0.0 failed with error -71 [ 483.327286][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 483.334738][ T92] usb 6-1: USB disconnect, device number 97 [ 483.338755][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 483.357308][ T174] usb 1-1: USB disconnect, device number 49 [ 483.417210][T10996] usbhid 2-1:0.0: can't add hid device: -71 [ 483.423206][T10996] usbhid: probe of 2-1:0.0 failed with error -71 [ 483.431058][T10996] usb 2-1: USB disconnect, device number 12 [ 483.687250][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.698435][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.709363][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 483.718895][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.728428][ T3165] usb 4-1: config 0 descriptor?? [ 483.797207][ T92] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 483.807179][ T174] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 483.897196][T10996] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 484.167215][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.178728][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.187253][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.189766][ T92] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 484.200325][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.210742][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.227335][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 484.229181][ T92] usb 6-1: config 0 descriptor?? [ 484.243195][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.252150][ T174] usb 1-1: config 0 descriptor?? [ 484.297301][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.308718][T10996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.319154][T10996] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 484.329127][T10996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.338927][T10996] usb 2-1: config 0 descriptor?? [ 484.417257][ T3165] usb 4-1: string descriptor 0 read error: -22 [ 484.637311][ T3165] uclogic 0003:5543:006E.0085: failed retrieving string descriptor #200: -71 [ 484.647982][ T3165] uclogic 0003:5543:006E.0085: failed retrieving pen parameters: -71 [ 484.656946][ T3165] uclogic 0003:5543:006E.0085: failed probing pen v2 parameters: -71 [ 484.665346][ T3165] uclogic 0003:5543:006E.0085: failed probing parameters: -71 [ 484.672919][ T3165] uclogic: probe of 0003:5543:006E.0085 failed with error -71 [ 484.681702][ T3165] usb 4-1: USB disconnect, device number 74 [ 484.907261][T10996] usbhid 2-1:0.0: can't add hid device: -71 [ 484.913807][T10996] usbhid: probe of 2-1:0.0 failed with error -71 [ 484.920489][ T92] usb 6-1: string descriptor 0 read error: -22 [ 484.927249][ T174] usb 1-1: language id specifier not provided by device, defaulting to English [ 484.928046][T10996] usb 2-1: USB disconnect, device number 13 21:05:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:39 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000"], 0x46) 21:05:39 executing program 2: pipe(&(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 485.117309][ T92] uclogic 0003:5543:006E.0086: failed retrieving string descriptor #200: -71 [ 485.127224][ T92] uclogic 0003:5543:006E.0086: failed retrieving pen parameters: -71 [ 485.150546][ T92] uclogic 0003:5543:006E.0086: failed probing pen v2 parameters: -71 21:05:39 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000"], 0x46) [ 485.165026][ T92] uclogic 0003:5543:006E.0086: failed probing parameters: -71 [ 485.174354][ T92] uclogic: probe of 0003:5543:006E.0086 failed with error -71 [ 485.184574][ T92] usb 6-1: USB disconnect, device number 98 [ 485.387354][ T174] uclogic 0003:5543:006E.0087: failed retrieving Huion firmware version: -71 [ 485.397723][ T174] uclogic 0003:5543:006E.0087: failed probing parameters: -71 [ 485.405216][ T174] uclogic: probe of 0003:5543:006E.0087 failed with error -71 [ 485.415712][ T174] usb 1-1: USB disconnect, device number 50 [ 485.427146][ T3165] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 485.457219][ T72] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 485.817335][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.830028][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.837262][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.841586][ T3165] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 21:05:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:40 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) 21:05:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 485.851946][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.865834][ T3165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.891393][ T72] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 485.899280][ T3165] usb 3-1: config 0 descriptor?? [ 485.909739][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.919556][ T72] usb 4-1: config 0 descriptor?? 21:05:40 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) 21:05:40 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:40 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) [ 486.187367][ T174] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 486.187375][T10996] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 486.247275][ T3165] usbhid 3-1:0.0: can't add hid device: -71 [ 486.254248][ T3165] usbhid: probe of 3-1:0.0 failed with error -71 [ 486.264083][ T3165] usb 3-1: USB disconnect, device number 10 [ 486.277247][ T72] usbhid 4-1:0.0: can't add hid device: -71 [ 486.284307][ T72] usbhid: probe of 4-1:0.0 failed with error -71 21:05:40 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/47], 0x46) [ 486.292581][ T72] usb 4-1: USB disconnect, device number 75 [ 486.577395][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.587265][T10996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.590085][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.601059][T10996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.612861][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 486.621395][T10996] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 486.631344][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.639681][T10996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.649411][ T174] usb 1-1: config 0 descriptor?? [ 486.665552][T10996] usb 6-1: config 0 descriptor?? [ 486.747228][ T3165] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 486.787239][ T72] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 487.007257][T10996] usbhid 6-1:0.0: can't add hid device: -71 [ 487.007262][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 487.007319][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 487.014185][T10996] usbhid: probe of 6-1:0.0 failed with error -71 [ 487.021766][ T174] usb 1-1: USB disconnect, device number 51 [ 487.034332][T10996] usb 6-1: USB disconnect, device number 99 [ 487.137389][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.147298][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.149916][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.161082][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.172330][ T3165] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 487.180805][ T72] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 487.190601][ T3165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.199223][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.209177][ T3165] usb 3-1: config 0 descriptor?? [ 487.221520][ T72] usb 4-1: config 0 descriptor?? [ 487.517221][ T174] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 487.517228][T10996] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 487.817150][ T3165] usbhid 3-1:0.0: can't add hid device: -71 [ 487.824144][ T3165] usbhid: probe of 3-1:0.0 failed with error -71 [ 487.832924][ T3165] usb 3-1: USB disconnect, device number 11 [ 487.877331][T10996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.889366][T10996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.899807][ T72] usb 4-1: string descriptor 0 read error: -22 [ 487.906160][T10996] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 487.916096][T10996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.925752][T10996] usb 6-1: config 0 descriptor?? [ 487.927665][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.942395][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.953659][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 487.962912][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.973709][ T174] usb 1-1: config 0 descriptor?? [ 488.107265][ T72] uclogic 0003:5543:006E.0088: failed retrieving string descriptor #200: -71 [ 488.116199][ T72] uclogic 0003:5543:006E.0088: failed retrieving pen parameters: -71 [ 488.125179][ T72] uclogic 0003:5543:006E.0088: failed probing pen v2 parameters: -71 [ 488.133654][ T72] uclogic 0003:5543:006E.0088: failed probing parameters: -71 [ 488.141864][ T72] uclogic: probe of 0003:5543:006E.0088 failed with error -71 [ 488.151231][ T72] usb 4-1: USB disconnect, device number 76 21:05:42 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/47], 0x46) 21:05:42 executing program 1: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/47], 0x46) 21:05:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:42 executing program 2: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) [ 488.627241][T10996] usb 6-1: string descriptor 0 read error: -22 [ 488.657344][ T174] usb 1-1: language id specifier not provided by device, defaulting to English [ 488.847273][T10996] uclogic 0003:5543:006E.0089: failed retrieving string descriptor #200: -71 [ 488.857128][T10996] uclogic 0003:5543:006E.0089: failed retrieving pen parameters: -71 [ 488.865605][T10996] uclogic 0003:5543:006E.0089: failed probing pen v2 parameters: -71 [ 488.875302][T10996] uclogic 0003:5543:006E.0089: failed probing parameters: -71 [ 488.883970][T10996] uclogic: probe of 0003:5543:006E.0089 failed with error -71 [ 488.893404][T10996] usb 6-1: USB disconnect, device number 100 [ 488.897211][ T3165] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 489.117359][ T174] uclogic 0003:5543:006E.008A: failed retrieving Huion firmware version: -71 [ 489.127506][ T174] uclogic 0003:5543:006E.008A: failed probing parameters: -71 [ 489.135302][ T174] uclogic: probe of 0003:5543:006E.008A failed with error -71 [ 489.147485][ T174] usb 1-1: USB disconnect, device number 52 [ 489.277302][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.289691][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.301748][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 489.312248][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.323143][ T3165] usb 4-1: config 0 descriptor?? 21:05:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:43 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/47], 0x46) 21:05:43 executing program 2: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) 21:05:43 executing program 1: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000"], 0x46) 21:05:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 21:05:44 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/49], 0x46) 21:05:44 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 489.687252][ T3165] usbhid 4-1:0.0: can't add hid device: -71 [ 489.694124][ T3165] usbhid: probe of 4-1:0.0 failed with error -71 [ 489.707325][ T3165] usb 4-1: USB disconnect, device number 77 21:05:44 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/49], 0x46) 21:05:44 executing program 4: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff0200"/49], 0x46) [ 489.897206][ T174] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 489.905631][T11307] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 490.007315][T11068] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 490.015033][T11069] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 490.187251][ T3165] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 490.287336][T11307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.298611][ T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.309970][T11307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.320944][ T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.331297][T11307] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 490.340730][ T174] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 490.350450][T11307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.359023][ T174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.369697][T11307] usb 1-1: config 0 descriptor?? [ 490.378163][ T174] usb 6-1: config 0 descriptor?? [ 490.387902][T11068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.399220][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.410436][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.423250][T11068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.433701][T11068] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 490.443836][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 490.453313][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.461780][T11068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.471054][T11069] usb 2-1: config 0 descriptor?? [ 490.476465][T11068] usb 3-1: config 0 descriptor?? [ 490.557241][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.568466][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.578335][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 490.587782][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.596545][ T3165] usb 4-1: config 0 descriptor?? [ 490.717228][T11307] usbhid 1-1:0.0: can't add hid device: -71 [ 490.723228][ T174] usbhid 6-1:0.0: can't add hid device: -71 [ 490.729534][T11307] usbhid: probe of 1-1:0.0 failed with error -71 [ 490.736974][ T174] usbhid: probe of 6-1:0.0 failed with error -71 [ 490.746381][T11307] usb 1-1: USB disconnect, device number 53 [ 490.753327][ T174] usb 6-1: USB disconnect, device number 101 [ 490.807248][T11069] usbhid 2-1:0.0: can't add hid device: -71 [ 490.813288][T11069] usbhid: probe of 2-1:0.0 failed with error -71 [ 490.821033][T11068] usbhid 3-1:0.0: can't add hid device: -71 [ 490.828242][T11068] usbhid: probe of 3-1:0.0 failed with error -71 [ 490.835992][T11068] usb 3-1: USB disconnect, device number 12 [ 490.843663][T11069] usb 2-1: USB disconnect, device number 14 [ 491.177181][ T174] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 491.185713][T11307] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 491.277283][ T3165] usb 4-1: string descriptor 0 read error: -22 [ 491.297202][T11069] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 491.497264][ T3165] uclogic 0003:5543:006E.008B: failed retrieving string descriptor #200: -71 [ 491.506713][ T3165] uclogic 0003:5543:006E.008B: failed retrieving pen parameters: -71 [ 491.517317][ T3165] uclogic 0003:5543:006E.008B: failed probing pen v2 parameters: -71 [ 491.525501][ T3165] uclogic 0003:5543:006E.008B: failed probing parameters: -71 [ 491.534744][ T3165] uclogic: probe of 0003:5543:006E.008B failed with error -71 [ 491.544921][ T3165] usb 4-1: USB disconnect, device number 78 [ 491.557318][T11307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.568805][ T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.580063][ T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.590080][T11307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.600265][ T174] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 491.609359][T11307] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 491.618917][ T174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.627236][T11307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.637810][T11307] usb 1-1: config 0 descriptor?? [ 491.642975][ T174] usb 6-1: config 0 descriptor?? [ 491.657207][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.668347][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.679755][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 491.689565][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.699205][T11069] usb 2-1: config 0 descriptor?? 21:05:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:05:46 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x540d) [ 492.257313][T11069] usbhid 2-1:0.0: can't add hid device: -71 [ 492.263515][T11069] usbhid: probe of 2-1:0.0 failed with error -71 [ 492.271768][T11069] usb 2-1: USB disconnect, device number 15 [ 492.287188][T10413] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 492.347231][ T174] usb 6-1: string descriptor 0 read error: -22 [ 492.567259][ T174] uclogic 0003:5543:006E.008D: failed retrieving string descriptor #200: -71 [ 492.576610][ T174] uclogic 0003:5543:006E.008D: failed retrieving pen parameters: -71 [ 492.585065][ T174] uclogic 0003:5543:006E.008D: failed probing pen v2 parameters: -71 [ 492.593823][ T174] uclogic 0003:5543:006E.008D: failed probing parameters: -71 [ 492.601516][ T174] uclogic: probe of 0003:5543:006E.008D failed with error -71 [ 492.610820][ T174] usb 6-1: USB disconnect, device number 102 [ 492.667393][T10413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.679137][T10413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.689234][T10413] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 492.698730][T10413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.711632][T10413] usb 4-1: config 0 descriptor?? [ 492.797229][T11307] uclogic 0003:5543:006E.008C: failed retrieving Huion firmware version: -71 [ 492.809422][T11307] uclogic 0003:5543:006E.008C: failed probing parameters: -71 [ 492.819522][T11307] uclogic: probe of 0003:5543:006E.008C failed with error -71 [ 492.828779][T11307] usb 1-1: USB disconnect, device number 54 [ 493.057197][T10413] usbhid 4-1:0.0: can't add hid device: -71 [ 493.063488][T10413] usbhid: probe of 4-1:0.0 failed with error -71 [ 493.072115][T10413] usb 4-1: USB disconnect, device number 79 21:05:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:47 executing program 2: pipe(&(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 493.527166][T10413] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 493.547348][T10414] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 493.557194][ T3165] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 493.565088][ T174] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 493.572905][T11069] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 493.580662][T11307] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 493.887251][T10413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.898160][T10413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.908043][T10414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.919348][T10413] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 493.928385][T10414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.938135][T10413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.946362][T10414] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 493.955665][T10413] usb 4-1: config 0 descriptor?? [ 493.959027][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.960715][T10414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.971548][T11069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.987496][T10414] usb 3-1: config 0 descriptor?? [ 493.990417][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.006181][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.017263][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.026966][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 494.035995][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.045773][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.055517][T11069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.065279][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 494.074323][ T174] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 494.083379][T11069] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 494.092411][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.100446][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.108461][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.116677][T11069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.125659][T11307] usb 6-1: config 0 descriptor?? [ 494.130858][ T3165] usb 1-1: config 0 descriptor?? [ 494.136094][ T174] usb 2-1: config 0 descriptor?? [ 494.142549][T11069] usb 5-1: config 0 descriptor?? [ 494.337196][T10414] usbhid 3-1:0.0: can't add hid device: -71 [ 494.343178][T10414] usbhid: probe of 3-1:0.0 failed with error -71 [ 494.350874][T10414] usb 3-1: USB disconnect, device number 13 [ 494.467213][ T3165] usbhid 1-1:0.0: can't add hid device: -71 [ 494.473221][ T3165] usbhid: probe of 1-1:0.0 failed with error -71 [ 494.481028][ T3165] usb 1-1: USB disconnect, device number 55 [ 494.487230][T11307] usbhid 6-1:0.0: can't add hid device: -71 [ 494.493276][T11307] usbhid: probe of 6-1:0.0 failed with error -71 [ 494.501087][T11307] usb 6-1: USB disconnect, device number 103 [ 494.577841][T11660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.588648][T11661] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.657184][T10413] usb 4-1: string descriptor 0 read error: -22 [ 494.817143][T10414] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 494.867221][T10413] uclogic 0003:5543:006E.008E: failed retrieving string descriptor #200: -71 [ 494.867294][ T174] usbhid 2-1:0.0: can't add hid device: -71 [ 494.876025][T10413] uclogic 0003:5543:006E.008E: failed retrieving pen parameters: -71 [ 494.876037][T10413] uclogic 0003:5543:006E.008E: failed probing pen v2 parameters: -71 [ 494.882419][ T174] usbhid: probe of 2-1:0.0 failed with error -71 [ 494.895234][T10413] uclogic 0003:5543:006E.008E: failed probing parameters: -71 [ 494.898249][T11069] usbhid 5-1:0.0: can't add hid device: -71 [ 494.906451][T10413] uclogic: probe of 0003:5543:006E.008E failed with error -71 [ 494.912699][T11069] usbhid: probe of 5-1:0.0 failed with error -71 [ 494.919590][T10413] usb 4-1: USB disconnect, device number 80 [ 494.927321][ T174] usb 2-1: USB disconnect, device number 16 [ 494.944385][T11069] usb 5-1: USB disconnect, device number 18 [ 494.950417][ T3165] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 494.977192][T11307] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 495.177180][T10414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.188112][T10414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.198079][T10414] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 495.207275][T10414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.215876][T10414] usb 3-1: config 0 descriptor?? 21:05:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 495.327250][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.339301][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.350007][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.361004][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 21:05:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 495.371119][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.383688][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.393614][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 495.403248][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.411523][ T3165] usb 1-1: config 0 descriptor?? [ 495.417571][T11307] usb 6-1: config 0 descriptor?? [ 495.587127][ T174] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 495.607169][T10413] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 495.657136][ T90] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 495.767228][T10414] usbhid 3-1:0.0: can't add hid device: -71 [ 495.773193][T10414] usbhid: probe of 3-1:0.0 failed with error -71 [ 495.781449][T10414] usb 3-1: USB disconnect, device number 14 [ 495.947232][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.958186][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.968702][ T174] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 495.977220][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.978462][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.988992][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.006511][T10413] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 496.008935][ T174] usb 2-1: config 0 descriptor?? [ 496.021520][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.029680][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.040882][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.050876][T10413] usb 5-1: config 0 descriptor?? [ 496.055923][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 496.065130][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.073844][ T90] usb 4-1: config 0 descriptor?? [ 496.117176][T11307] usb 6-1: string descriptor 0 read error: -22 21:05:50 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 496.337288][T11307] uclogic 0003:5543:006E.0090: failed retrieving string descriptor #200: -71 [ 496.346190][T11307] uclogic 0003:5543:006E.0090: failed retrieving pen parameters: -71 [ 496.356034][T11307] uclogic 0003:5543:006E.0090: failed probing pen v2 parameters: -71 [ 496.364292][ T174] usbhid 2-1:0.0: can't add hid device: -71 [ 496.370285][ T174] usbhid: probe of 2-1:0.0 failed with error -71 [ 496.377144][T11307] uclogic 0003:5543:006E.0090: failed probing parameters: -71 [ 496.384619][T11307] uclogic: probe of 0003:5543:006E.0090 failed with error -71 [ 496.392830][ T174] usb 2-1: USB disconnect, device number 17 [ 496.400613][T11307] usb 6-1: USB disconnect, device number 104 [ 496.409443][T10413] usbhid 5-1:0.0: can't add hid device: -71 [ 496.415360][T10413] usbhid: probe of 5-1:0.0 failed with error -71 [ 496.425022][T10413] usb 5-1: USB disconnect, device number 19 [ 496.431817][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 496.437989][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 496.448391][ T90] usb 4-1: USB disconnect, device number 81 [ 496.567175][ T3165] uclogic 0003:5543:006E.008F: failed retrieving Huion firmware version: -71 [ 496.576001][ T3165] uclogic 0003:5543:006E.008F: failed probing parameters: -71 [ 496.583870][ T3165] uclogic: probe of 0003:5543:006E.008F failed with error -71 [ 496.592544][ T3165] usb 1-1: USB disconnect, device number 56 21:05:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 496.907134][ T90] usb 4-1: new high-speed USB device number 82 using dummy_hcd 21:05:51 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:51 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x34, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 497.107139][ T3165] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 497.267149][T11307] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 497.267231][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.285579][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.295338][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 497.304376][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.312389][T10413] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 497.319960][T10414] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 497.328061][ T90] usb 4-1: config 0 descriptor?? [ 497.467243][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.478167][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.488187][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 497.497234][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.505814][ T3165] usb 6-1: config 0 descriptor?? [ 497.627206][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.638132][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.648668][T11307] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 497.658145][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.666775][T11307] usb 5-1: config 0 descriptor?? [ 497.697210][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.708150][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.719028][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.728977][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:05:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 497.738749][T10413] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 497.747871][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 497.756894][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.764915][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.773667][T10414] usb 1-1: config 0 descriptor?? [ 497.784649][T10413] usb 3-1: config 0 descriptor?? [ 497.847214][ T3165] usbhid 6-1:0.0: can't add hid device: -71 [ 497.854472][ T3165] usbhid: probe of 6-1:0.0 failed with error -71 [ 497.861920][ T3165] usb 6-1: USB disconnect, device number 105 [ 497.997200][ T90] usb 4-1: string descriptor 0 read error: -22 [ 498.008049][T11307] usbhid 5-1:0.0: can't add hid device: -71 [ 498.013966][T11307] usbhid: probe of 5-1:0.0 failed with error -71 [ 498.021922][T11307] usb 5-1: USB disconnect, device number 20 [ 498.057134][T11069] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 498.137164][T10414] usbhid 1-1:0.0: can't add hid device: -71 [ 498.143145][T10414] usbhid: probe of 1-1:0.0 failed with error -71 [ 498.151296][T10414] usb 1-1: USB disconnect, device number 57 [ 498.217173][ T90] uclogic 0003:5543:006E.0091: failed retrieving string descriptor #200: -71 [ 498.225995][ T90] uclogic 0003:5543:006E.0091: failed retrieving pen parameters: -71 [ 498.234288][ T90] uclogic 0003:5543:006E.0091: failed probing pen v2 parameters: -71 [ 498.238870][T11748] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.244526][ T90] uclogic 0003:5543:006E.0091: failed probing parameters: -71 [ 498.257898][ T90] uclogic: probe of 0003:5543:006E.0091 failed with error -71 [ 498.266552][ T90] usb 4-1: USB disconnect, device number 82 [ 498.327238][ T3165] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 498.427212][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.438129][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.448265][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 498.457339][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.465941][T11069] usb 2-1: config 0 descriptor?? [ 498.477155][T11307] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 498.557200][T10413] usbhid 3-1:0.0: can't add hid device: -71 [ 498.563170][T10413] usbhid: probe of 3-1:0.0 failed with error -71 [ 498.570503][T10413] usb 3-1: USB disconnect, device number 15 [ 498.607203][T10414] usb 1-1: new high-speed USB device number 58 using dummy_hcd 21:05:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 498.687209][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.698145][ T3165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.708762][ T3165] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 498.720123][ T3165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.729360][ T3165] usb 6-1: config 0 descriptor?? [ 498.847227][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.858238][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.868651][T11307] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 498.877935][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.886464][T11307] usb 5-1: config 0 descriptor?? [ 498.908044][T11763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 21:05:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 498.977186][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.990691][ T90] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 498.998390][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.008214][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 499.017422][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.025958][T10414] usb 1-1: config 0 descriptor?? 21:05:53 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 499.208235][T11069] usbhid 2-1:0.0: can't add hid device: -71 [ 499.214210][T11069] usbhid: probe of 2-1:0.0 failed with error -71 [ 499.224349][T11069] usb 2-1: USB disconnect, device number 18 [ 499.387281][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.398150][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.408564][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 499.417905][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.426466][ T90] usb 4-1: config 0 descriptor?? [ 499.428407][ T3165] usb 6-1: string descriptor 0 read error: -22 [ 499.457211][T11307] usbhid 5-1:0.0: can't add hid device: -71 [ 499.463244][T11307] usbhid: probe of 5-1:0.0 failed with error -71 [ 499.471618][T11307] usb 5-1: USB disconnect, device number 21 21:05:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 499.647165][ T3165] uclogic 0003:5543:006E.0092: failed retrieving string descriptor #200: -71 [ 499.655959][ T3165] uclogic 0003:5543:006E.0092: failed retrieving pen parameters: -71 [ 499.665923][ T3165] uclogic 0003:5543:006E.0092: failed probing pen v2 parameters: -71 [ 499.674741][ T3165] uclogic 0003:5543:006E.0092: failed probing parameters: -71 [ 499.683431][ T3165] uclogic: probe of 0003:5543:006E.0092 failed with error -71 [ 499.692565][ T3165] usb 6-1: USB disconnect, device number 106 [ 499.777265][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 499.783223][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 499.790912][ T90] usb 4-1: USB disconnect, device number 83 21:05:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:05:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 21:05:54 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 500.157251][T10414] uclogic 0003:5543:006E.0093: failed retrieving Huion firmware version: -71 [ 500.174390][T10414] uclogic 0003:5543:006E.0093: failed probing parameters: -71 [ 500.190112][T10414] uclogic: probe of 0003:5543:006E.0093 failed with error -71 [ 500.200269][T10414] usb 1-1: USB disconnect, device number 58 [ 500.247147][ T90] usb 4-1: new high-speed USB device number 84 using dummy_hcd 21:05:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 500.467150][T10413] usb 6-1: new high-speed USB device number 107 using dummy_hcd 21:05:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 500.607200][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.618281][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.629025][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 500.638260][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.649968][ T90] usb 4-1: config 0 descriptor?? 21:05:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 500.827197][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.838254][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.848086][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 500.857171][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.865811][T10413] usb 6-1: config 0 descriptor?? [ 500.937152][ T3165] usb 1-1: new high-speed USB device number 59 using dummy_hcd 21:05:55 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 501.207223][T10413] usbhid 6-1:0.0: can't add hid device: -71 [ 501.213332][T10413] usbhid: probe of 6-1:0.0 failed with error -71 [ 501.221644][T10413] usb 6-1: USB disconnect, device number 107 [ 501.307192][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.319462][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.329827][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 501.339237][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.347210][ T90] usb 4-1: string descriptor 0 read error: -22 [ 501.355031][ T3165] usb 1-1: config 0 descriptor?? [ 501.567230][ T90] uclogic 0003:5543:006E.0094: failed retrieving string descriptor #200: -71 [ 501.576034][ T90] uclogic 0003:5543:006E.0094: failed retrieving pen parameters: -71 [ 501.587131][ T90] uclogic 0003:5543:006E.0094: failed probing pen v2 parameters: -71 [ 501.595195][ T90] uclogic 0003:5543:006E.0094: failed probing parameters: -71 [ 501.604234][ T90] uclogic: probe of 0003:5543:006E.0094 failed with error -71 [ 501.613314][ T90] usb 4-1: USB disconnect, device number 84 [ 501.677156][T10413] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 501.687371][ T3165] usbhid 1-1:0.0: can't add hid device: -71 [ 501.693331][ T3165] usbhid: probe of 1-1:0.0 failed with error -71 [ 501.700590][ T3165] usb 1-1: USB disconnect, device number 59 21:05:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 21:05:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:05:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:56 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 502.037185][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.048063][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.063127][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 502.078803][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.088116][T10413] usb 6-1: config 0 descriptor?? [ 502.207197][ T3165] usb 1-1: new high-speed USB device number 60 using dummy_hcd 21:05:56 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 502.337133][T11307] usb 4-1: new high-speed USB device number 85 using dummy_hcd 21:05:56 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 502.577194][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.588154][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.598316][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 502.607668][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.616543][ T3165] usb 1-1: config 0 descriptor?? [ 502.707198][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.718126][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.728777][T11307] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 502.738221][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.748243][T11307] usb 4-1: config 0 descriptor?? [ 502.787208][T10413] usb 6-1: string descriptor 0 read error: -22 [ 503.007171][T10413] uclogic 0003:5543:006E.0095: failed retrieving string descriptor #200: -71 [ 503.015983][T10413] uclogic 0003:5543:006E.0095: failed retrieving pen parameters: -71 [ 503.024183][T10413] uclogic 0003:5543:006E.0095: failed probing pen v2 parameters: -71 [ 503.032302][T10413] uclogic 0003:5543:006E.0095: failed probing parameters: -71 [ 503.040281][T10413] uclogic: probe of 0003:5543:006E.0095 failed with error -71 [ 503.048841][T10413] usb 6-1: USB disconnect, device number 108 [ 503.087169][T11307] usbhid 4-1:0.0: can't add hid device: -71 [ 503.093152][T11307] usbhid: probe of 4-1:0.0 failed with error -71 [ 503.102343][T11307] usb 4-1: USB disconnect, device number 85 21:05:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 21:05:57 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:05:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 503.557128][T11307] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 503.767183][T10413] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 503.774899][ T3165] uclogic 0003:5543:006E.0096: failed retrieving Huion firmware version: -71 [ 503.784990][ T3165] uclogic 0003:5543:006E.0096: failed probing parameters: -71 [ 503.792505][ T3165] uclogic: probe of 0003:5543:006E.0096 failed with error -71 [ 503.800974][ T3165] usb 1-1: USB disconnect, device number 60 [ 503.927241][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.938104][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.947844][T11307] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 503.956853][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.965618][T11307] usb 4-1: config 0 descriptor?? [ 504.027254][ T90] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 504.127204][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.138148][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.148613][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 504.157964][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.166574][T10413] usb 6-1: config 0 descriptor?? 21:05:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:58 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:05:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 504.297171][ T90] usb 3-1: device descriptor read/64, error 18 [ 504.497291][T10413] usbhid 6-1:0.0: can't add hid device: -71 [ 504.503460][T10413] usbhid: probe of 6-1:0.0 failed with error -71 [ 504.511537][T10413] usb 6-1: USB disconnect, device number 109 [ 504.517139][ T3165] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 504.518699][T10414] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 504.567180][T11069] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 504.657223][T11307] usb 4-1: string descriptor 0 read error: -22 [ 504.687151][ T90] usb 3-1: device descriptor read/64, error 18 [ 504.877190][ T3165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.888330][T11307] uclogic 0003:5543:006E.0097: failed retrieving string descriptor #200: -71 [ 504.897132][T11307] uclogic 0003:5543:006E.0097: failed retrieving pen parameters: -71 [ 504.897254][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.905219][ T3165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.905242][ T3165] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 504.905253][ T3165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.905628][T11307] uclogic 0003:5543:006E.0097: failed probing pen v2 parameters: -71 [ 504.916470][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.933234][ T3165] usb 5-1: config 0 descriptor?? [ 504.935117][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 504.946160][T11307] uclogic 0003:5543:006E.0097: failed probing parameters: -71 [ 504.955911][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.962225][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.966446][T10414] usb 1-1: config 0 descriptor?? [ 504.976840][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.985061][ T90] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 504.992611][T11307] uclogic: probe of 0003:5543:006E.0097 failed with error -71 [ 505.007150][T10413] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 505.015819][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 505.048808][T11307] usb 4-1: USB disconnect, device number 86 [ 505.055277][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.064452][T11069] usb 2-1: config 0 descriptor?? [ 505.287197][ T90] usb 3-1: device descriptor read/64, error 18 [ 505.287228][ T3165] usbhid 5-1:0.0: can't add hid device: -71 [ 505.299454][ T3165] usbhid: probe of 5-1:0.0 failed with error -71 [ 505.306815][ T3165] usb 5-1: USB disconnect, device number 22 [ 505.307740][T11926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 21:05:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 505.337212][T10414] usbhid 1-1:0.0: can't add hid device: -71 [ 505.343248][T10414] usbhid: probe of 1-1:0.0 failed with error -71 [ 505.351485][T10414] usb 1-1: USB disconnect, device number 61 [ 505.387224][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.398189][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.409858][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 505.419316][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.428235][T10413] usb 6-1: config 0 descriptor?? [ 505.677131][ T90] usb 3-1: device descriptor read/64, error 18 [ 505.697137][ T3728] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 505.767129][ T3165] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 505.797168][ T90] usb usb3-port1: attempt power cycle [ 505.807397][T10414] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 506.057193][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.068147][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.078552][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 506.087994][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.099100][ T3728] usb 4-1: config 0 descriptor?? [ 506.127218][T10413] usb 6-1: string descriptor 0 read error: -22 [ 506.147223][ T3165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.158181][ T3165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.167215][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.170069][ T3165] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 506.180604][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.190438][ T3165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.199320][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 506.208810][ T3165] usb 5-1: config 0 descriptor?? [ 506.218322][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.229953][T10414] usb 1-1: config 0 descriptor?? [ 506.347211][T10413] uclogic 0003:5543:006E.0098: failed retrieving string descriptor #200: -71 [ 506.355990][T10413] uclogic 0003:5543:006E.0098: failed retrieving pen parameters: -71 [ 506.365764][T10413] uclogic 0003:5543:006E.0098: failed probing pen v2 parameters: -71 [ 506.374657][T10413] uclogic 0003:5543:006E.0098: failed probing parameters: -71 [ 506.383070][T10413] uclogic: probe of 0003:5543:006E.0098 failed with error -71 [ 506.392146][T10413] usb 6-1: USB disconnect, device number 110 [ 506.437490][ T3728] usbhid 4-1:0.0: can't add hid device: -71 [ 506.443467][ T3728] usbhid: probe of 4-1:0.0 failed with error -71 [ 506.451595][ T3728] usb 4-1: USB disconnect, device number 87 21:06:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 506.507209][ T90] usb 3-1: new high-speed USB device number 18 using dummy_hcd 21:06:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) [ 506.907172][ T3728] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 506.907198][ T3165] usb 5-1: string descriptor 0 read error: -22 [ 506.987125][ T90] usb 3-1: device not accepting address 18, error -71 [ 507.107188][T10413] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 507.137225][ T3165] uclogic 0003:5543:006E.0099: failed retrieving string descriptor #200: -71 [ 507.146046][ T3165] uclogic 0003:5543:006E.0099: failed retrieving pen parameters: -71 [ 507.154465][ T3165] uclogic 0003:5543:006E.0099: failed probing pen v2 parameters: -71 [ 507.163202][ T3165] uclogic 0003:5543:006E.0099: failed probing parameters: -71 [ 507.170712][ T3165] uclogic: probe of 0003:5543:006E.0099 failed with error -71 [ 507.179704][ T3165] usb 5-1: USB disconnect, device number 23 21:06:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 507.277238][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.288461][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.298248][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 507.307300][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.315850][ T3728] usb 4-1: config 0 descriptor?? [ 507.327171][T11069] usbhid 2-1:0.0: can't add hid device: -71 [ 507.333181][T11069] usbhid: probe of 2-1:0.0 failed with error -71 [ 507.340989][T11069] usb 2-1: USB disconnect, device number 19 [ 507.357174][ T90] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 507.387218][T10414] uclogic 0003:5543:006E.009A: failed retrieving Huion firmware version: -71 [ 507.396114][T10414] uclogic 0003:5543:006E.009A: failed probing parameters: -71 [ 507.405302][T10414] uclogic: probe of 0003:5543:006E.009A failed with error -71 [ 507.414388][T10414] usb 1-1: USB disconnect, device number 62 [ 507.477247][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.488166][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.498672][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 507.508062][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.516609][T10413] usb 6-1: config 0 descriptor?? [ 507.537281][ T90] usb 3-1: device descriptor read/8, error -61 21:06:02 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) dup(0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x540d) [ 507.707134][T11069] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 507.807163][ T90] usb 3-1: device descriptor read/8, error -61 21:06:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x540d) [ 507.858183][T10413] usbhid 6-1:0.0: can't add hid device: -71 [ 507.866574][T10413] usbhid: probe of 6-1:0.0 failed with error -71 [ 507.878753][T10413] usb 6-1: USB disconnect, device number 111 [ 507.927194][ T90] usb usb3-port1: unable to enumerate USB device [ 508.017196][ T3728] usb 4-1: string descriptor 0 read error: -22 21:06:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 508.077224][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.088119][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.098589][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 508.107928][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.119063][T11069] usb 2-1: config 0 descriptor?? [ 508.157183][T10414] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 508.237161][ T3728] uclogic 0003:5543:006E.009B: failed retrieving string descriptor #200: -71 [ 508.245988][ T3728] uclogic 0003:5543:006E.009B: failed retrieving pen parameters: -71 [ 508.254304][ T3728] uclogic 0003:5543:006E.009B: failed probing pen v2 parameters: -71 [ 508.262579][ T3728] uclogic 0003:5543:006E.009B: failed probing parameters: -71 [ 508.270243][ T3728] uclogic: probe of 0003:5543:006E.009B failed with error -71 [ 508.278960][ T3728] usb 4-1: USB disconnect, device number 88 [ 508.337194][T10413] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 508.407188][T11307] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 508.457224][T11069] usbhid 2-1:0.0: can't add hid device: -71 [ 508.463234][T11069] usbhid: probe of 2-1:0.0 failed with error -71 [ 508.471556][T11069] usb 2-1: USB disconnect, device number 20 [ 508.517246][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.528294][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.538269][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 508.547362][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.556031][T10414] usb 1-1: config 0 descriptor?? 21:06:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 508.697214][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.708145][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.717972][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 508.727025][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.738335][T10413] usb 6-1: config 0 descriptor?? [ 508.797170][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.808151][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.818174][T11307] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 508.827380][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.835992][T11307] usb 5-1: config 0 descriptor?? [ 508.897174][T10414] usbhid 1-1:0.0: can't add hid device: -71 [ 508.903160][T10414] usbhid: probe of 1-1:0.0 failed with error -71 [ 508.911264][T10414] usb 1-1: USB disconnect, device number 63 [ 508.937208][T11069] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.017150][ T3728] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 509.077728][T12007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 509.307169][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.318100][T11069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.328077][T11069] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 509.337135][T11069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.345761][T11069] usb 2-1: config 0 descriptor?? [ 509.367208][T10414] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 509.377351][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.388343][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.398258][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 509.407515][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.416072][ T3728] usb 4-1: config 0 descriptor?? [ 509.421210][T10413] usb 6-1: string descriptor 0 read error: -22 21:06:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 509.727192][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.738200][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.748630][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 509.758140][ T3728] usbhid 4-1:0.0: can't add hid device: -71 [ 509.764192][ T3728] usbhid: probe of 4-1:0.0 failed with error -71 [ 509.771638][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.780671][ T3728] usb 4-1: USB disconnect, device number 89 [ 509.788564][T10414] usb 1-1: config 0 descriptor?? [ 509.847203][T10413] uclogic 0003:5543:006E.009C: failed retrieving string descriptor #100: -71 [ 509.856050][T10413] uclogic 0003:5543:006E.009C: failed retrieving pen parameters: -71 [ 509.864268][T10413] uclogic 0003:5543:006E.009C: failed probing pen v1 parameters: -71 [ 509.872811][T10413] uclogic 0003:5543:006E.009C: failed probing parameters: -71 [ 509.881109][T10413] uclogic: probe of 0003:5543:006E.009C failed with error -71 [ 509.889930][T10413] usb 6-1: USB disconnect, device number 112 [ 510.027135][ T3165] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 510.047226][T11069] usb 2-1: string descriptor 0 read error: -22 [ 510.237135][ T3728] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 510.267171][T11069] uclogic 0003:5543:006E.009D: failed retrieving string descriptor #200: -71 [ 510.275987][T11069] uclogic 0003:5543:006E.009D: failed retrieving pen parameters: -71 21:06:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) [ 510.285992][T11069] uclogic 0003:5543:006E.009D: failed probing pen v2 parameters: -71 [ 510.295153][T11069] uclogic 0003:5543:006E.009D: failed probing parameters: -71 [ 510.303430][ T3165] usb 3-1: device descriptor read/64, error 18 [ 510.309666][T11069] uclogic: probe of 0003:5543:006E.009D failed with error -71 [ 510.318655][T11069] usb 2-1: USB disconnect, device number 21 [ 510.597228][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.608158][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.618073][T10413] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 510.625780][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 510.634826][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.643456][ T3728] usb 4-1: config 0 descriptor?? 21:06:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 510.707147][ T3165] usb 3-1: device descriptor read/64, error 18 [ 510.917268][T10414] uclogic 0003:5543:006E.009E: failed retrieving Huion firmware version: -71 [ 510.926218][T10414] uclogic 0003:5543:006E.009E: failed probing parameters: -71 [ 510.951076][T10414] uclogic: probe of 0003:5543:006E.009E failed with error -71 [ 510.960736][T10414] usb 1-1: USB disconnect, device number 64 21:06:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x4, {0x0, 0x712}}]}]}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) [ 510.977135][ T3165] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 510.985739][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.994647][T12062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.011112][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:06:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 511.021885][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 511.031569][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.040865][T10413] usb 6-1: config 0 descriptor?? 21:06:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 511.185379][T11307] usbhid 5-1:0.0: can't add hid device: -71 [ 511.191980][T11307] usbhid: probe of 5-1:0.0 failed with error -71 [ 511.204700][T11307] usb 5-1: USB disconnect, device number 24 21:06:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 511.257288][ T3165] usb 3-1: device descriptor read/64, error 18 [ 511.337292][ T3728] usb 4-1: string descriptor 0 read error: -22 [ 511.377197][T10413] usbhid 6-1:0.0: can't add hid device: -71 21:06:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 511.383353][T10413] usbhid: probe of 6-1:0.0 failed with error -71 [ 511.392382][T10413] usb 6-1: USB disconnect, device number 113 [ 511.557149][T11307] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 511.557177][ T3728] uclogic 0003:5543:006E.009F: failed retrieving string descriptor #200: -71 [ 511.573689][ T3728] uclogic 0003:5543:006E.009F: failed retrieving pen parameters: -71 [ 511.582493][ T3728] uclogic 0003:5543:006E.009F: failed probing pen v2 parameters: -71 [ 511.590598][ T3728] uclogic 0003:5543:006E.009F: failed probing parameters: -71 [ 511.598136][ T3728] uclogic: probe of 0003:5543:006E.009F failed with error -71 [ 511.606841][ T3728] usb 4-1: USB disconnect, device number 90 [ 511.637148][T10414] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 511.657148][ T3165] usb 3-1: device descriptor read/64, error 18 [ 511.677188][ T90] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 511.777168][ T3165] usb usb3-port1: attempt power cycle [ 511.867130][T10413] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 511.917210][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.928124][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.938078][T11307] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 511.947209][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.955826][T11307] usb 5-1: config 0 descriptor?? [ 512.007192][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.018158][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.027900][T10414] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 512.037013][T10414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.045941][T10414] usb 2-1: config 0 descriptor?? 21:06:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 512.058817][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.074228][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.084560][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 512.094557][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.103355][ T90] usb 1-1: config 0 descriptor?? [ 512.200730][T12075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 512.237189][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.248103][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.258471][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 512.267807][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.276563][T10413] usb 6-1: config 0 descriptor?? [ 512.337152][T11069] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 512.387219][T10414] usbhid 2-1:0.0: can't add hid device: -71 [ 512.393206][T10414] usbhid: probe of 2-1:0.0 failed with error -71 [ 512.401589][T10414] usb 2-1: USB disconnect, device number 22 21:06:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 512.447284][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 512.453234][ T90] usbhid: probe of 1-1:0.0 failed with error -71 [ 512.461712][ T90] usb 1-1: USB disconnect, device number 65 [ 512.487140][ T3165] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 512.597247][ T3165] usb 3-1: device descriptor read/8, error -71 [ 512.707194][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.718136][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.728112][T11069] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 512.737187][T11069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.745865][T11069] usb 4-1: config 0 descriptor?? [ 512.807176][ T3165] usb 3-1: device descriptor read/8, error -71 [ 512.927186][ T90] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 512.957181][T10413] usb 6-1: string descriptor 0 read error: -22 [ 513.087162][T11069] usbhid 4-1:0.0: can't add hid device: -71 [ 513.093167][T11069] usbhid: probe of 4-1:0.0 failed with error -71 [ 513.101219][T11069] usb 4-1: USB disconnect, device number 91 [ 513.297171][ T3165] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 513.297218][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.315731][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.325478][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 513.334515][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.343234][ T90] usb 1-1: config 0 descriptor?? [ 513.397211][T10413] uclogic 0003:5543:006E.00A0: failed retrieving string descriptor #100: -71 [ 513.406093][T10413] uclogic 0003:5543:006E.00A0: failed retrieving pen parameters: -71 [ 513.415724][T10413] uclogic 0003:5543:006E.00A0: failed probing pen v1 parameters: -71 [ 513.424688][T10413] uclogic 0003:5543:006E.00A0: failed probing parameters: -71 [ 513.433087][T10413] uclogic: probe of 0003:5543:006E.00A0 failed with error -71 [ 513.442205][T10413] usb 6-1: USB disconnect, device number 114 [ 513.507227][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.518126][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.527895][ T3165] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 513.536952][ T3165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.545706][ T3165] usb 3-1: config 0 descriptor?? [ 513.557148][T11069] usb 4-1: new high-speed USB device number 92 using dummy_hcd 21:06:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) [ 513.887166][ T3165] usbhid 3-1:0.0: can't add hid device: -71 [ 513.893250][ T3165] usbhid: probe of 3-1:0.0 failed with error -71 [ 513.902630][ T3165] usb 3-1: USB disconnect, device number 23 [ 513.917300][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.928326][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.938809][T11069] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 513.948316][T11069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.956901][T11069] usb 4-1: config 0 descriptor?? 21:06:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 514.157141][T10413] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 514.167578][T11307] usbhid 5-1:0.0: can't add hid device: -71 [ 514.173632][T11307] usbhid: probe of 5-1:0.0 failed with error -71 [ 514.181627][T11307] usb 5-1: USB disconnect, device number 25 21:06:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 514.357175][ T3165] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 514.487271][ T90] uclogic 0003:5543:006E.00A1: failed retrieving Huion firmware version: -71 [ 514.496054][ T90] uclogic 0003:5543:006E.00A1: failed probing parameters: -71 [ 514.510613][ T90] uclogic: probe of 0003:5543:006E.00A1 failed with error -71 [ 514.520614][ T90] usb 1-1: USB disconnect, device number 66 21:06:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 514.537127][T11307] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 514.557214][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.570717][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.581605][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 514.591236][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.600257][T10413] usb 6-1: config 0 descriptor?? [ 514.647509][T11069] usb 4-1: string descriptor 0 read error: -22 [ 514.717224][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.728291][ T3165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.738321][ T3165] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 514.747545][ T3165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:06:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) [ 514.777591][ T3165] usb 3-1: config 0 descriptor?? [ 514.867228][T11069] uclogic 0003:5543:006E.00A2: failed retrieving string descriptor #200: -71 [ 514.876029][T11069] uclogic 0003:5543:006E.00A2: failed retrieving pen parameters: -71 [ 514.884240][T11069] uclogic 0003:5543:006E.00A2: failed probing pen v2 parameters: -71 [ 514.902409][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.913384][T11069] uclogic 0003:5543:006E.00A2: failed probing parameters: -71 [ 514.920920][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.930840][T11069] uclogic: probe of 0003:5543:006E.00A2 failed with error -71 [ 514.938401][T11307] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 514.954008][T11069] usb 4-1: USB disconnect, device number 92 21:06:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 514.967171][T10413] usbhid 6-1:0.0: can't add hid device: -71 [ 514.970464][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.983283][T11307] usb 5-1: config 0 descriptor?? [ 514.990745][T10413] usbhid: probe of 6-1:0.0 failed with error -71 [ 515.006302][T10413] usb 6-1: USB disconnect, device number 115 21:06:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:06:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 515.240954][T12139] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 515.258046][ T174] usb 1-1: new high-speed USB device number 67 using dummy_hcd 21:06:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) [ 515.447216][T10413] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 515.477578][ T3165] usb 3-1: string descriptor 0 read error: -22 21:06:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 515.617492][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.628493][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.638454][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 515.647568][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.665184][ T174] usb 1-1: config 0 descriptor?? [ 515.697183][ T3165] uclogic 0003:5543:006E.00A3: failed retrieving string descriptor #200: -71 [ 515.706279][ T3165] uclogic 0003:5543:006E.00A3: failed retrieving pen parameters: -71 [ 515.718425][ T3165] uclogic 0003:5543:006E.00A3: failed probing pen v2 parameters: -71 [ 515.727140][ T90] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 515.727463][ T3165] uclogic 0003:5543:006E.00A3: failed probing parameters: -71 [ 515.742318][ T3165] uclogic: probe of 0003:5543:006E.00A3 failed with error -71 [ 515.752571][ T3165] usb 3-1: USB disconnect, device number 24 [ 515.857463][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.868699][T10413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.881678][T10413] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 515.892106][T10413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:06:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 515.906855][T10413] usb 6-1: config 0 descriptor?? [ 516.017184][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 516.023349][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 516.030722][ T174] usb 1-1: USB disconnect, device number 67 [ 516.087194][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.098163][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.108795][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 516.118156][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.138720][ T90] usb 4-1: config 0 descriptor?? 21:06:10 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) [ 516.477187][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 516.483139][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 516.490529][ T90] usb 4-1: USB disconnect, device number 93 [ 516.527179][ T174] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 516.607191][T10413] usb 6-1: string descriptor 0 read error: -22 [ 516.887256][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.898144][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.907889][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 516.916915][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.925651][ T174] usb 1-1: config 0 descriptor?? [ 516.947150][ T90] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 517.037164][T10413] uclogic 0003:5543:006E.00A4: failed retrieving string descriptor #100: -71 [ 517.046000][T10413] uclogic 0003:5543:006E.00A4: failed retrieving pen parameters: -71 [ 517.054464][T10413] uclogic 0003:5543:006E.00A4: failed probing pen v1 parameters: -71 [ 517.062778][T10413] uclogic 0003:5543:006E.00A4: failed probing parameters: -71 [ 517.070306][T10413] uclogic: probe of 0003:5543:006E.00A4 failed with error -71 [ 517.078939][T10413] usb 6-1: USB disconnect, device number 116 [ 517.177208][T11307] usbhid 5-1:0.0: can't add hid device: -71 [ 517.183197][T11307] usbhid: probe of 5-1:0.0 failed with error -71 [ 517.191857][T11307] usb 5-1: USB disconnect, device number 26 [ 517.327187][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.338100][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.348149][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 517.357269][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.365854][ T90] usb 4-1: config 0 descriptor?? 21:06:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:11 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 21:06:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) [ 517.545072][T12232] overlayfs: missing 'lowerdir' [ 517.827180][T11307] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 517.877184][T10413] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 518.057181][ T90] usb 4-1: string descriptor 0 read error: -22 [ 518.087238][ T174] uclogic 0003:5543:006E.00A5: failed retrieving Huion firmware version: -71 [ 518.096071][ T174] uclogic 0003:5543:006E.00A5: failed probing parameters: -71 [ 518.103624][ T174] uclogic: probe of 0003:5543:006E.00A5 failed with error -71 [ 518.112270][ T174] usb 1-1: USB disconnect, device number 68 [ 518.187221][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.198239][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.208668][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 518.218116][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.226754][T11307] usb 6-1: config 0 descriptor?? [ 518.247208][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.258363][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.268391][T10413] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 518.277480][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.286031][T10413] usb 5-1: config 0 descriptor?? [ 518.487193][ T90] uclogic 0003:5543:006E.00A6: failed retrieving string descriptor #100: -71 [ 518.496007][ T90] uclogic 0003:5543:006E.00A6: failed retrieving pen parameters: -71 [ 518.505520][ T90] uclogic 0003:5543:006E.00A6: failed probing pen v1 parameters: -71 [ 518.514521][ T90] uclogic 0003:5543:006E.00A6: failed probing parameters: -71 [ 518.522889][ T90] uclogic: probe of 0003:5543:006E.00A6 failed with error -71 21:06:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) 21:06:12 executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 518.533553][ T90] usb 4-1: USB disconnect, device number 94 [ 518.567862][T12260] overlayfs: missing 'lowerdir' [ 518.597178][T11307] usbhid 6-1:0.0: can't add hid device: -71 [ 518.603209][T11307] usbhid: probe of 6-1:0.0 failed with error -71 [ 518.611384][T11307] usb 6-1: USB disconnect, device number 117 [ 518.627220][T10413] usbhid 5-1:0.0: can't add hid device: -71 [ 518.633283][T10413] usbhid: probe of 5-1:0.0 failed with error -71 [ 518.641504][T10413] usb 5-1: USB disconnect, device number 27 [ 518.837173][ T3728] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 518.887162][T10414] usb 2-1: new high-speed USB device number 23 using dummy_hcd 21:06:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 21:06:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 519.067188][T11307] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 519.097177][T10413] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 519.207208][ T3728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.218265][ T3728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.228907][ T3728] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.238258][ T3728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.246799][ T3728] usb 1-1: config 0 descriptor?? [ 519.257177][ T174] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 519.257214][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.264824][T11069] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 519.276985][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.293923][T10414] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.303066][T10414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.311773][T10414] usb 2-1: config 0 descriptor?? [ 519.447202][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.457202][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.458155][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.468973][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.480519][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.488469][T10413] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.498380][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.509036][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.522134][T11307] usb 6-1: config 0 descriptor?? [ 519.527553][T10413] usb 5-1: config 0 descriptor?? [ 519.587184][ T3728] usbhid 1-1:0.0: can't add hid device: -71 [ 519.593225][ T3728] usbhid: probe of 1-1:0.0 failed with error -71 [ 519.600671][ T3728] usb 1-1: USB disconnect, device number 69 [ 519.647201][T10414] usbhid 2-1:0.0: can't add hid device: -71 [ 519.653233][T10414] usbhid: probe of 2-1:0.0 failed with error -71 [ 519.661732][T10414] usb 2-1: USB disconnect, device number 23 [ 519.697260][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.708187][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.719139][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.728894][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.738668][T11069] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.747762][ T174] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 519.764803][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.773207][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.781580][T11069] usb 3-1: config 0 descriptor?? [ 519.788399][ T174] usb 4-1: config 0 descriptor?? [ 520.107175][ T3728] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 520.117360][T11069] usbhid 3-1:0.0: can't add hid device: -71 [ 520.118780][T10414] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 520.123348][T11069] usbhid: probe of 3-1:0.0 failed with error -71 [ 520.137208][ T174] usbhid 4-1:0.0: can't add hid device: -71 [ 520.143224][ T174] usbhid: probe of 4-1:0.0 failed with error -71 [ 520.151715][ T174] usb 4-1: USB disconnect, device number 95 [ 520.158037][T11069] usb 3-1: USB disconnect, device number 25 [ 520.217180][T11307] usb 6-1: string descriptor 0 read error: -22 [ 520.228016][T10413] usb 5-1: string descriptor 0 read error: -22 [ 520.467205][ T3728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.478130][ T3728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.488062][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.498938][ T3728] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 520.508025][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.517804][ T3728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.526010][T10414] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 520.535310][ T3728] usb 1-1: config 0 descriptor?? [ 520.540369][T10414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.549051][T10414] usb 2-1: config 0 descriptor?? [ 520.607137][ T174] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 520.614748][T11069] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 520.657214][T11307] uclogic 0003:5543:006E.00A7: failed retrieving string descriptor #100: -71 [ 520.666174][T11307] uclogic 0003:5543:006E.00A7: failed retrieving pen parameters: -71 [ 520.674683][T11307] uclogic 0003:5543:006E.00A7: failed probing pen v1 parameters: -71 [ 520.682878][T11307] uclogic 0003:5543:006E.00A7: failed probing parameters: -71 [ 520.690656][T11307] uclogic: probe of 0003:5543:006E.00A7 failed with error -71 [ 520.699453][T11307] usb 6-1: USB disconnect, device number 118 [ 521.007218][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.019284][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.030148][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.040771][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.050926][T11069] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 521.060241][ T174] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 521.069611][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.077886][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.086691][ T174] usb 4-1: config 0 descriptor?? [ 521.093618][T11069] usb 3-1: config 0 descriptor?? 21:06:15 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:15 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 521.165591][T12318] overlayfs: missing 'lowerdir' [ 521.247173][T10414] usb 2-1: string descriptor 0 read error: -22 21:06:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r0]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r3, 0x540d) [ 521.447171][T10413] uclogic 0003:5543:006E.00A8: failed retrieving string descriptor #200: -71 [ 521.456029][T10413] uclogic 0003:5543:006E.00A8: failed retrieving pen parameters: -71 [ 521.464737][T10413] uclogic 0003:5543:006E.00A8: failed probing pen v2 parameters: -71 [ 521.472912][T10413] uclogic 0003:5543:006E.00A8: failed probing parameters: -71 [ 521.480496][T10413] uclogic: probe of 0003:5543:006E.00A8 failed with error -71 [ 521.489532][T10413] usb 5-1: USB disconnect, device number 28 [ 521.498453][T11307] usb 6-1: new high-speed USB device number 119 using dummy_hcd 21:06:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) [ 521.697815][ T3728] uclogic 0003:5543:006E.00A9: failed retrieving Huion firmware version: -71 [ 521.706609][ T3728] uclogic 0003:5543:006E.00A9: failed probing parameters: -71 [ 521.714230][ T3728] uclogic: probe of 0003:5543:006E.00A9 failed with error -71 [ 521.722973][ T3728] usb 1-1: USB disconnect, device number 70 [ 521.797293][ T174] usb 4-1: string descriptor 0 read error: -22 [ 521.857219][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.868273][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.878701][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 521.888175][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.896765][T11307] usb 6-1: config 0 descriptor?? [ 521.967143][T11068] usb 5-1: new high-speed USB device number 29 using dummy_hcd 21:06:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 522.227314][ T174] uclogic 0003:5543:006E.00AB: failed retrieving string descriptor #100: -71 [ 522.236455][ T174] uclogic 0003:5543:006E.00AB: failed retrieving pen parameters: -71 [ 522.246491][ T174] uclogic 0003:5543:006E.00AB: failed probing pen v1 parameters: -71 [ 522.255478][T11069] uclogic 0003:5543:006E.00AC: failed retrieving Huion firmware version: -71 [ 522.264272][T11307] usbhid 6-1:0.0: can't add hid device: -71 [ 522.270349][T11307] usbhid: probe of 6-1:0.0 failed with error -71 [ 522.278804][ T174] uclogic 0003:5543:006E.00AB: failed probing parameters: -71 [ 522.286286][ T174] uclogic: probe of 0003:5543:006E.00AB failed with error -71 [ 522.294723][T11069] uclogic 0003:5543:006E.00AC: failed probing parameters: -71 [ 522.303223][T11307] usb 6-1: USB disconnect, device number 119 [ 522.309412][T11069] uclogic: probe of 0003:5543:006E.00AC failed with error -71 [ 522.319794][ T174] usb 4-1: USB disconnect, device number 96 [ 522.328403][T11069] usb 3-1: USB disconnect, device number 26 [ 522.347202][T11068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.358123][T11068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.368462][T11068] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 522.378218][T11068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.386744][T11068] usb 5-1: config 0 descriptor?? 21:06:16 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) [ 522.467217][T10414] uclogic 0003:5543:006E.00AA: failed retrieving string descriptor #200: -71 [ 522.476841][T10414] uclogic 0003:5543:006E.00AA: failed retrieving pen parameters: -71 [ 522.486588][T10414] uclogic 0003:5543:006E.00AA: failed probing pen v2 parameters: -71 [ 522.488313][ T3165] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 522.496250][T10414] uclogic 0003:5543:006E.00AA: failed probing parameters: -71 [ 522.509866][T10414] uclogic: probe of 0003:5543:006E.00AA failed with error -71 [ 522.519374][T10414] usb 2-1: USB disconnect, device number 24 21:06:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 21:06:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r0]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r3, 0x540d) [ 522.731757][T11068] usbhid 5-1:0.0: can't add hid device: -71 [ 522.737891][T11068] usbhid: probe of 5-1:0.0 failed with error -71 [ 522.747353][T11307] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 522.755103][T11068] usb 5-1: USB disconnect, device number 29 [ 522.877131][T10414] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 522.877211][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.895869][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.905702][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 522.914882][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:06:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) dup(0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x540d) [ 522.924026][ T3165] usb 1-1: config 0 descriptor?? [ 523.007165][ T3728] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 523.137700][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.149009][T11307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.163195][T11307] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 523.178862][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.190801][T11307] usb 6-1: config 0 descriptor?? 21:06:17 executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:17 executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 523.218780][T11068] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 523.235438][T12384] overlayfs: failed to resolve './file0': -2 [ 523.252350][T12386] overlayfs: failed to resolve './file0': -2 [ 523.257242][ T3165] usbhid 1-1:0.0: can't add hid device: -71 [ 523.258508][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.264274][ T3165] usbhid: probe of 1-1:0.0 failed with error -71 [ 523.275326][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.286466][ T3165] usb 1-1: USB disconnect, device number 71 [ 523.291666][T10414] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 523.306246][T10414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:06:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) [ 523.314966][T10414] usb 2-1: config 0 descriptor?? [ 523.407205][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.418316][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.428765][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 523.438104][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.446739][ T3728] usb 4-1: config 0 descriptor?? [ 523.597276][T11068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.608301][T11068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.618072][T11068] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 523.627083][T11068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.635791][T11068] usb 5-1: config 0 descriptor?? [ 523.641749][T11069] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 523.697172][T10414] usbhid 2-1:0.0: can't add hid device: -71 [ 523.703240][T10414] usbhid: probe of 2-1:0.0 failed with error -71 [ 523.711545][T10414] usb 2-1: USB disconnect, device number 25 [ 523.757195][ T3165] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 523.777231][ T3728] usbhid 4-1:0.0: can't add hid device: -71 [ 523.783284][ T3728] usbhid: probe of 4-1:0.0 failed with error -71 [ 523.790874][ T3728] usb 4-1: USB disconnect, device number 97 [ 523.877180][T11307] usb 6-1: string descriptor 0 read error: -22 [ 524.007208][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.018187][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.027953][T11069] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 524.036962][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.045890][T11069] usb 3-1: config 0 descriptor?? [ 524.098446][T11307] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:006E.00AD/input/input58 [ 524.111674][T11307] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:006E.00AD/input/input59 [ 524.124167][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.137627][ T3165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.147625][ T3165] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 524.158107][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.166308][T11307] uclogic 0003:5543:006E.00AD: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.5-1/input0 [ 524.181736][ T3165] usb 1-1: config 0 descriptor?? [ 524.187140][T10414] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 524.257155][ T3728] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 524.337267][T11068] usb 5-1: string descriptor 0 read error: -22 [ 524.377219][T11069] usbhid 3-1:0.0: can't add hid device: -71 [ 524.383362][T11069] usbhid: probe of 3-1:0.0 failed with error -71 [ 524.391645][T11069] usb 3-1: USB disconnect, device number 27 [ 524.558389][T11068] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:006E.00AE/input/input60 [ 524.567204][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.576434][T11068] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:006E.00AE/input/input61 [ 524.589208][T10414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.602717][T10414] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 524.607037][T11068] uclogic 0003:5543:006E.00AE: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.4-1/input0 [ 524.621724][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.636626][T10414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.644799][ T3728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.655127][ T3728] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 524.664377][T10414] usb 2-1: config 0 descriptor?? [ 524.669453][ T3728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.678232][ T3728] usb 4-1: config 0 descriptor?? [ 524.867162][T11069] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 525.237209][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.248157][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.258143][T11069] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 525.267268][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.275849][T11069] usb 3-1: config 0 descriptor?? 21:06:19 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) [ 525.307262][T11068] usb 6-1: USB disconnect, device number 120 [ 525.317290][ T3165] uclogic 0003:5543:006E.00AF: failed retrieving Huion firmware version: -71 [ 525.333041][ T3165] uclogic 0003:5543:006E.00AF: failed probing parameters: -71 [ 525.341838][ T3165] uclogic: probe of 0003:5543:006E.00AF failed with error -71 [ 525.351410][ T3165] usb 1-1: USB disconnect, device number 72 [ 525.367231][T10414] usb 2-1: string descriptor 0 read error: -22 [ 525.377294][ T3728] usb 4-1: string descriptor 0 read error: -22 [ 525.588352][T10414] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00B0/input/input62 [ 525.601795][T10414] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00B0/input/input63 [ 525.615642][T10414] uclogic 0003:5543:006E.00B0: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.1-1/input0 21:06:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:20 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x0, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) [ 525.757156][T11068] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 525.768580][ T3165] usb 5-1: USB disconnect, device number 30 21:06:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 525.808494][ T3728] uclogic 0003:5543:006E.00B1: failed retrieving string descriptor #100: -71 [ 525.824505][ T3728] uclogic 0003:5543:006E.00B1: failed retrieving pen parameters: -71 [ 525.842483][ T3728] uclogic 0003:5543:006E.00B1: failed probing pen v1 parameters: -71 21:06:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 525.854077][ T3728] uclogic 0003:5543:006E.00B1: failed probing parameters: -71 [ 525.862628][ T3728] uclogic: probe of 0003:5543:006E.00B1 failed with error -71 [ 525.871852][ T3728] usb 4-1: USB disconnect, device number 98 [ 525.967186][T11069] usb 3-1: string descriptor 0 read error: -22 [ 526.137226][T11068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.148142][T11068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.157120][T10414] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 526.158273][T11068] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 526.177735][T11068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.186248][T11068] usb 6-1: config 0 descriptor?? [ 526.194829][T11069] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00B2/input/input64 [ 526.208194][T11069] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00B2/input/input65 [ 526.221859][T11069] uclogic 0003:5543:006E.00B2: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.2-1/input0 [ 526.527221][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.538230][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.547166][T11068] usbhid 6-1:0.0: can't add hid device: -71 [ 526.549966][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 526.558085][T11068] usbhid: probe of 6-1:0.0 failed with error -71 [ 526.567591][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.574932][T11068] usb 6-1: USB disconnect, device number 121 [ 526.583252][T10414] usb 1-1: config 0 descriptor?? 21:06:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:21 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 21:06:21 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 21:06:21 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) [ 526.799338][ T3728] usb 2-1: USB disconnect, device number 26 21:06:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) [ 526.927243][T10414] usbhid 1-1:0.0: can't add hid device: -71 [ 526.933378][T10414] usbhid: probe of 1-1:0.0 failed with error -71 [ 526.946798][T10414] usb 1-1: USB disconnect, device number 73 [ 527.047200][T11068] usb 6-1: new high-speed USB device number 122 using dummy_hcd 21:06:21 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 527.147143][T11069] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 527.257165][ T3728] usb 2-1: new high-speed USB device number 27 using dummy_hcd 21:06:21 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 527.401166][ T3165] usb 3-1: USB disconnect, device number 28 [ 527.407244][T10414] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 527.407342][T11068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.426032][T11068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.436211][T11068] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 527.445287][T11068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.454125][T11068] usb 6-1: config 0 descriptor?? [ 527.507252][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.520292][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.531630][T11069] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 527.542207][T11069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.551083][T11069] usb 4-1: config 0 descriptor?? [ 527.617237][ T3728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.628246][ T3728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.638000][ T3728] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 527.647014][ T3728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.655738][ T3728] usb 2-1: config 0 descriptor?? [ 527.777267][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.789043][T10414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.799514][T10414] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 527.808857][T10414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.818219][T10414] usb 1-1: config 0 descriptor?? [ 527.877203][T11069] usbhid 4-1:0.0: can't add hid device: -71 [ 527.883204][T11069] usbhid: probe of 4-1:0.0 failed with error -71 [ 527.891102][T11069] usb 4-1: USB disconnect, device number 99 [ 527.997184][ T3728] usbhid 2-1:0.0: can't add hid device: -71 [ 528.003291][ T3728] usbhid: probe of 2-1:0.0 failed with error -71 [ 528.011474][ T3728] usb 2-1: USB disconnect, device number 27 [ 528.137199][T11068] usb 6-1: string descriptor 0 read error: -22 [ 528.348321][T11068] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:006E.00B3/input/input66 [ 528.360107][T11069] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 528.369106][T11068] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:006E.00B3/input/input67 [ 528.389737][T11068] uclogic 0003:5543:006E.00B3: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.5-1/input0 [ 528.477171][ T3728] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 528.727214][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.738139][T11069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.748602][T11069] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 528.757973][T11069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.766550][T11069] usb 4-1: config 0 descriptor?? [ 528.837237][ T3728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.848159][ T3728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.858438][ T3728] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 528.867486][ T3728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.876074][ T3728] usb 2-1: config 0 descriptor?? [ 528.957173][T10414] uclogic 0003:5543:006E.00B4: failed retrieving Huion firmware version: -71 [ 528.965989][T10414] uclogic 0003:5543:006E.00B4: failed probing parameters: -71 [ 528.975325][T10414] uclogic: probe of 0003:5543:006E.00B4 failed with error -71 [ 528.984115][T10414] usb 1-1: USB disconnect, device number 74 [ 529.447264][T11069] usb 4-1: string descriptor 0 read error: -22 21:06:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:23 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe(&(0x7f00000000c0)) 21:06:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe(&(0x7f00000000c0)) 21:06:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x60, @string={0x60, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 529.555560][T10414] usb 6-1: USB disconnect, device number 122 [ 529.568378][ T3728] usb 2-1: string descriptor 0 read error: -22 [ 529.669085][T11069] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00B5/input/input68 [ 529.683552][T11069] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00B5/input/input69 [ 529.697329][T11069] uclogic 0003:5543:006E.00B5: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 529.778470][ T3728] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00B6/input/input70 [ 529.791665][ T3728] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00B6/input/input71 [ 529.807575][ T3728] uclogic 0003:5543:006E.00B6: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.1-1/input0 [ 529.857173][ T90] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 529.887138][T10413] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 529.897261][T11147] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 530.017126][T10414] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 530.217194][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.228288][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.238764][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 530.248285][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.259177][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.267782][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.278715][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.289262][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.299637][ T90] usb 1-1: config 0 descriptor?? [ 530.304724][T10413] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 530.314622][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 530.324024][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.332276][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.342650][T10413] usb 5-1: config 0 descriptor?? [ 530.348758][T11147] usb 3-1: config 0 descriptor?? [ 530.377199][T10414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.388851][T10414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.399934][T10414] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 530.409429][T10414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.418269][T10414] usb 6-1: config 0 descriptor?? [ 530.637181][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 530.643284][ T90] usbhid: probe of 1-1:0.0 failed with error -71 [ 530.651628][ T90] usb 1-1: USB disconnect, device number 75 [ 530.677172][T11147] usbhid 3-1:0.0: can't add hid device: -71 [ 530.683270][T11147] usbhid: probe of 3-1:0.0 failed with error -71 [ 530.690598][T10413] usbhid 5-1:0.0: can't add hid device: -71 [ 530.696553][T10413] usbhid: probe of 5-1:0.0 failed with error -71 [ 530.704756][T11147] usb 3-1: USB disconnect, device number 29 [ 530.712625][T10413] usb 5-1: USB disconnect, device number 31 [ 530.757517][T10414] usbhid 6-1:0.0: can't add hid device: -71 [ 530.763447][T10414] usbhid: probe of 6-1:0.0 failed with error -71 [ 530.771630][T10414] usb 6-1: USB disconnect, device number 123 21:06:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 530.877453][ T3728] usb 4-1: USB disconnect, device number 100 21:06:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) [ 530.991550][T11146] usb 2-1: USB disconnect, device number 28 [ 531.118012][ T90] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 531.167224][T10413] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 531.167258][T11147] usb 3-1: new high-speed USB device number 30 using dummy_hcd 21:06:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 531.227174][T10414] usb 6-1: new high-speed USB device number 124 using dummy_hcd 21:06:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:25 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) 21:06:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) 21:06:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) [ 531.316015][T12610] overlayfs: failed to resolve './file1': -2 [ 531.507249][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.518350][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.528266][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 531.537428][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.548333][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.559282][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.567366][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.577188][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.587782][ T90] usb 1-1: config 0 descriptor?? [ 531.592878][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 531.602086][T10414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.613035][T10413] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 531.622108][T10414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.632510][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.640537][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.648609][T10414] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 531.658608][T10413] usb 5-1: config 0 descriptor?? [ 531.663790][T11147] usb 3-1: config 0 descriptor?? [ 531.669029][T10414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.677816][T10414] usb 6-1: config 0 descriptor?? [ 532.367221][T10413] usb 5-1: string descriptor 0 read error: -22 [ 532.373564][T11147] usb 3-1: string descriptor 0 read error: -22 [ 532.578376][T10413] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:006E.00B9/input/input72 [ 532.591381][T11147] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00B8/input/input74 [ 532.604557][T10413] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:006E.00B9/input/input73 [ 532.623823][T11147] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00B8/input/input75 [ 532.645427][T10413] uclogic 0003:5543:006E.00B9: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.4-1/input0 [ 532.659570][T11147] uclogic 0003:5543:006E.00B8: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.2-1/input0 [ 532.737500][ T90] uclogic 0003:5543:006E.00B7: failed retrieving Huion firmware version: -71 [ 532.746356][ T90] uclogic 0003:5543:006E.00B7: failed probing parameters: -71 [ 532.755336][ T90] uclogic: probe of 0003:5543:006E.00B7 failed with error -71 [ 532.764146][ T90] usb 1-1: USB disconnect, device number 76 [ 532.837208][T10414] uclogic 0003:5543:006E.00BA: failed retrieving Huion firmware version: -71 [ 532.846015][T10414] uclogic 0003:5543:006E.00BA: failed probing parameters: -71 [ 532.855167][T10414] uclogic: probe of 0003:5543:006E.00BA failed with error -71 [ 532.864031][T10414] usb 6-1: USB disconnect, device number 124 21:06:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r4, 0x540d) 21:06:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8, 0x0, 0x38}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:28 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe(&(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x200203, 0x0) 21:06:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x40, 0x5, 0x7b, 0x10000}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe(&(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x200203, 0x0) 21:06:28 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:28 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 533.790596][T10414] usb 5-1: USB disconnect, device number 32 [ 533.797492][T11069] usb 3-1: USB disconnect, device number 30 21:06:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:28 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 533.866251][T12671] overlayfs: failed to resolve './file0': -2 [ 533.885889][T12675] overlayfs: failed to resolve './file0': -2 21:06:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) dup2(r0, 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:28 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) dup2(r0, 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 534.097184][ T90] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 534.137198][T11147] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 534.177148][T10413] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 534.457224][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.468243][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.478829][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 534.488344][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.497023][ T90] usb 1-1: config 0 descriptor?? [ 534.507237][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.518267][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.528179][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 534.539261][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.549942][T11147] usb 4-1: config 0 descriptor?? 21:06:29 executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) r2 = dup2(r0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf2504000000140002e8000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x84, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="020027bd7000fedbdf25010000f5b00005000400010000000500040042fd0000140002746f5f626f6e64003adc726cd35ad9759fe6cc5675dbf670108b1e6f1ce13271ab5692f06a6fe3120c7cc403e45dcf986f4f6ff51438ddfd234bc25a9f2ecf254000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x884) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000010) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) [ 534.557927][T10413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.568877][T10413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.579271][T10413] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 534.589304][T10413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.598340][T10413] usb 2-1: config 0 descriptor?? [ 534.837282][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 534.843291][ T90] usbhid: probe of 1-1:0.0 failed with error -71 [ 534.851382][ T90] usb 1-1: USB disconnect, device number 77 [ 534.887201][T11147] usbhid 4-1:0.0: can't add hid device: -71 [ 534.893215][T11147] usbhid: probe of 4-1:0.0 failed with error -71 [ 534.901615][T11147] usb 4-1: USB disconnect, device number 101 [ 534.937288][T10413] usbhid 2-1:0.0: can't add hid device: -71 [ 534.943396][T10413] usbhid: probe of 2-1:0.0 failed with error -71 [ 534.951736][T10413] usb 2-1: USB disconnect, device number 29 [ 535.307179][ T90] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 535.357136][T11147] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 535.407148][T10413] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 535.667217][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.678237][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.688755][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 535.698135][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.706707][ T90] usb 1-1: config 0 descriptor?? [ 535.717205][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.728248][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.738000][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 535.747008][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.759486][T11147] usb 4-1: config 0 descriptor?? [ 535.767288][T10413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.778343][T10413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.788210][T10413] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 535.798118][T10413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.806648][T10413] usb 2-1: config 0 descriptor?? [ 536.457231][T11147] usb 4-1: string descriptor 0 read error: -22 [ 536.507236][T10413] usb 2-1: string descriptor 0 read error: -22 [ 536.678340][T11147] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00BC/input/input76 [ 536.691479][T11147] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00BC/input/input77 [ 536.712260][T11147] uclogic 0003:5543:006E.00BC: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 536.729113][T10413] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00BD/input/input78 [ 536.742583][T10413] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.00BD/input/input79 [ 536.762839][T10413] uclogic 0003:5543:006E.00BD: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.1-1/input0 [ 536.867299][ T90] uclogic 0003:5543:006E.00BB: failed retrieving Huion firmware version: -71 [ 536.876283][ T90] uclogic 0003:5543:006E.00BB: failed probing parameters: -71 [ 536.886438][ T90] uclogic: probe of 0003:5543:006E.00BB failed with error -71 [ 536.895465][ T90] usb 1-1: USB disconnect, device number 78 21:06:32 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) dup2(r0, 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) [ 537.896343][ T90] usb 4-1: USB disconnect, device number 102 21:06:32 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:32 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) dup2(r0, 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000440)='./file0\x00') chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 21:06:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='\x00') syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) close(r1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00007bd443bbabef6f7805"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="001f34000000000347709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b0eb52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0}, 0x0) 21:06:32 executing program 5 (fault-call:5 fault-nth:0): unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 537.942144][T11069] usb 2-1: USB disconnect, device number 30 21:06:32 executing program 4 (fault-call:10 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 537.992201][T12756] FAULT_INJECTION: forcing a failure. [ 537.992201][T12756] name failslab, interval 1, probability 0, space 0, times 1 [ 538.008905][T12756] CPU: 1 PID: 12756 Comm: syz-executor.1 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 538.019058][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.020564][T12755] FAULT_INJECTION: forcing a failure. [ 538.020564][T12755] name failslab, interval 1, probability 0, space 0, times 1 [ 538.029097][T12756] Call Trace: [ 538.029117][T12756] dump_stack+0x14a/0x1ce [ 538.029128][T12756] ? devkmsg_release+0x11c/0x11c [ 538.029138][T12756] ? show_regs_print_info+0x12/0x12 [ 538.029155][T12756] ? avc_has_perm+0xd5/0x280 [ 538.063921][T12756] ? avc_has_perm+0x176/0x280 [ 538.068585][T12756] should_fail+0x6fb/0x860 [ 538.072983][T12756] ? setup_fault_attr+0x3d0/0x3d0 [ 538.078005][T12756] ? memset+0x1f/0x40 [ 538.081970][T12756] ? unwind_next_frame+0x1c90/0x2330 [ 538.087236][T12756] ? __alloc_skb+0x88/0x4d0 [ 538.091716][T12756] should_failslab+0x5/0x20 [ 538.096199][T12756] kmem_cache_alloc+0x36/0x260 [ 538.100951][T12756] __alloc_skb+0x88/0x4d0 [ 538.105260][T12756] ? unwind_get_return_address_ptr+0x130/0x130 [ 538.111391][T12756] alloc_skb_with_frags+0xb1/0x580 [ 538.116501][T12756] ? unwind_next_frame+0x1c90/0x2330 [ 538.121947][T12756] sock_alloc_send_pskb+0x87e/0xcc0 [ 538.127131][T12756] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.133185][T12756] ? sock_kzfree_s+0x50/0x50 [ 538.137760][T12756] ? iov_iter_advance+0x1e9/0xee0 [ 538.142783][T12756] ? arch_stack_walk+0xd8/0x120 [ 538.147618][T12756] tun_get_user+0x934/0x34e0 [ 538.152196][T12756] ? kstrtouint_from_user+0x22d/0x2b0 [ 538.157549][T12756] ? tun_do_read+0x1ed0/0x1ed0 [ 538.162295][T12756] ? __kasan_slab_free+0x1f2/0x230 [ 538.167391][T12756] ? __rcu_read_lock+0x50/0x50 [ 538.172135][T12756] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 538.178548][T12756] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.184600][T12756] ? __rcu_read_lock+0x50/0x50 [ 538.189349][T12756] ? proc_fail_nth_write+0x18f/0x250 [ 538.194626][T12756] ? proc_fail_nth_read+0x1d0/0x1d0 [ 538.199832][T12756] tun_chr_write_iter+0x121/0x1a0 [ 538.204873][T12756] __vfs_write+0x59d/0x720 [ 538.209275][T12756] ? __kernel_write+0x340/0x340 [ 538.214106][T12756] ? avc_policy_seqno+0x17/0x70 [ 538.218944][T12756] ? security_file_permission+0x128/0x300 [ 538.224643][T12756] vfs_write+0x217/0x4f0 [ 538.228870][T12756] ksys_write+0x18c/0x2c0 [ 538.233180][T12756] ? file_open_root+0x450/0x450 [ 538.238011][T12756] ? __ia32_sys_read+0x80/0x80 [ 538.242755][T12756] do_syscall_64+0xcb/0x150 [ 538.247238][T12756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.253108][T12756] RIP: 0033:0x45c1f9 [ 538.256997][T12756] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.276591][T12756] RSP: 002b:00007ff2363c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.284978][T12756] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 538.292933][T12756] RDX: 000000000000009e RSI: 0000000020000500 RDI: 0000000000000003 [ 538.300934][T12756] RBP: 00007ff2363c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 538.308890][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.317799][T12756] R13: 00007ffdbfa9b0bf R14: 00007ff2363ca9c0 R15: 000000000078bf0c [ 538.325764][T12755] CPU: 0 PID: 12755 Comm: syz-executor.5 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 538.336598][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.346633][T12755] Call Trace: [ 538.349913][T12755] dump_stack+0x14a/0x1ce [ 538.354214][T12755] ? devkmsg_release+0x11c/0x11c [ 538.359120][T12755] ? show_regs_print_info+0x12/0x12 [ 538.364287][T12755] ? avc_has_perm+0xd5/0x280 [ 538.368857][T12755] ? avc_has_perm+0x176/0x280 [ 538.373531][T12755] should_fail+0x6fb/0x860 [ 538.377918][T12755] ? setup_fault_attr+0x3d0/0x3d0 [ 538.382911][T12755] ? memset+0x1f/0x40 [ 538.386868][T12755] ? unwind_next_frame+0x1c90/0x2330 [ 538.392125][T12755] ? __alloc_skb+0x88/0x4d0 [ 538.396595][T12755] should_failslab+0x5/0x20 [ 538.401068][T12755] kmem_cache_alloc+0x36/0x260 [ 538.405800][T12755] __alloc_skb+0x88/0x4d0 [ 538.410099][T12755] ? unwind_get_return_address_ptr+0x130/0x130 [ 538.416235][T12755] alloc_skb_with_frags+0xb1/0x580 [ 538.421315][T12755] ? unwind_next_frame+0x1c90/0x2330 [ 538.426582][T12755] sock_alloc_send_pskb+0x87e/0xcc0 [ 538.431749][T12755] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.437784][T12755] ? sock_kzfree_s+0x50/0x50 [ 538.442358][T12755] ? iov_iter_advance+0x1e9/0xee0 [ 538.447351][T12755] ? arch_stack_walk+0xd8/0x120 [ 538.452170][T12755] tun_get_user+0x934/0x34e0 [ 538.456731][T12755] ? kstrtouint_from_user+0x22d/0x2b0 [ 538.462109][T12755] ? tun_do_read+0x1ed0/0x1ed0 [ 538.466839][T12755] ? __kasan_slab_free+0x1f2/0x230 [ 538.471933][T12755] ? __rcu_read_lock+0x50/0x50 [ 538.476663][T12755] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 538.483085][T12755] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.489148][T12755] ? __rcu_read_lock+0x50/0x50 [ 538.493892][T12755] ? proc_fail_nth_write+0x18f/0x250 [ 538.499145][T12755] ? proc_fail_nth_read+0x1d0/0x1d0 [ 538.504342][T12755] tun_chr_write_iter+0x121/0x1a0 [ 538.509368][T12755] __vfs_write+0x59d/0x720 [ 538.513772][T12755] ? __kernel_write+0x340/0x340 [ 538.518593][T12755] ? avc_policy_seqno+0x17/0x70 [ 538.523422][T12755] ? security_file_permission+0x128/0x300 [ 538.529108][T12755] vfs_write+0x217/0x4f0 [ 538.533330][T12755] ksys_write+0x18c/0x2c0 [ 538.537641][T12755] ? file_open_root+0x450/0x450 [ 538.542488][T12755] ? __ia32_sys_read+0x80/0x80 [ 538.547220][T12755] do_syscall_64+0xcb/0x150 [ 538.551693][T12755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.557552][T12755] RIP: 0033:0x45c1f9 [ 538.561419][T12755] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.581003][T12755] RSP: 002b:00007f45012e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.589381][T12755] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 538.597352][T12755] RDX: 0000000000000046 RSI: 00000000200001c0 RDI: 0000000000000003 [ 538.605302][T12755] RBP: 00007f45012e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 538.613241][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.621180][T12755] R13: 00007ffd6e4e614f R14: 00007f45012e89c0 R15: 000000000078bf0c [ 538.696798][T12762] FAULT_INJECTION: forcing a failure. [ 538.696798][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 538.710016][T12762] CPU: 1 PID: 12762 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 538.720194][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.730228][T12762] Call Trace: [ 538.733502][T12762] dump_stack+0x14a/0x1ce [ 538.737811][T12762] ? devkmsg_release+0x11c/0x11c [ 538.742728][T12762] ? show_regs_print_info+0x12/0x12 [ 538.747909][T12762] ? avc_has_perm_noaudit+0x30c/0x400 [ 538.753262][T12762] should_fail+0x6fb/0x860 [ 538.757660][T12762] ? setup_fault_attr+0x3d0/0x3d0 [ 538.762666][T12762] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.768712][T12762] ? htab_map_alloc+0x9b/0x15b0 [ 538.773541][T12762] should_failslab+0x5/0x20 [ 538.778026][T12762] kmem_cache_alloc_trace+0x39/0x280 [ 538.783296][T12762] htab_map_alloc+0x9b/0x15b0 [ 538.787951][T12762] ? stack_trace_save+0x1f0/0x1f0 [ 538.792950][T12762] ? __kernel_text_address+0x93/0x110 [ 538.798301][T12762] ? unwind_get_return_address+0x48/0x90 [ 538.803913][T12762] ? htab_map_alloc_check+0x314/0x410 [ 538.809265][T12762] __do_sys_bpf+0x3743/0xbf40 [ 538.813922][T12762] ? _kstrtoull+0x38d/0x490 [ 538.818403][T12762] ? kstrtouint_from_user+0x22d/0x2b0 [ 538.823753][T12762] ? kstrtol_from_user+0x320/0x320 [ 538.828840][T12762] ? __kasan_slab_free+0x1f2/0x230 [ 538.833928][T12762] ? __bpf_prog_put_rcu+0x300/0x300 [ 538.839105][T12762] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 538.845586][T12762] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.851652][T12762] ? get_pid_task+0x86/0x90 [ 538.856137][T12762] ? proc_fail_nth_write+0x18f/0x250 [ 538.861398][T12762] ? proc_fail_nth_read+0x1d0/0x1d0 [ 538.866680][T12762] ? proc_fail_nth_read+0x1d0/0x1d0 [ 538.872128][T12762] ? memset+0x1f/0x40 [ 538.876089][T12762] ? fsnotify+0x13a0/0x1460 [ 538.880572][T12762] ? __kernel_write+0x340/0x340 [ 538.885403][T12762] ? __fsnotify_parent+0x310/0x310 [ 538.890497][T12762] ? security_file_permission+0x128/0x300 [ 538.896193][T12762] ? __sb_end_write+0xa4/0xf0 [ 538.900849][T12762] ? vfs_write+0x427/0x4f0 [ 538.905240][T12762] ? fput_many+0x42/0x1a0 [ 538.909556][T12762] do_syscall_64+0xcb/0x150 [ 538.914048][T12762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.919920][T12762] RIP: 0033:0x45c1f9 [ 538.923793][T12762] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.943391][T12762] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 538.951780][T12762] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 538.959729][T12762] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 538.968633][T12762] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 538.976580][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.984530][T12762] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:06:33 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 538.992650][T11147] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 539.000391][T10413] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 539.022704][T12768] FAULT_INJECTION: forcing a failure. [ 539.022704][T12768] name failslab, interval 1, probability 0, space 0, times 0 [ 539.035366][T12768] CPU: 0 PID: 12768 Comm: syz-executor.1 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 539.045529][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.055552][T12768] Call Trace: [ 539.058816][T12768] dump_stack+0x14a/0x1ce [ 539.063114][T12768] ? devkmsg_release+0x11c/0x11c [ 539.068019][T12768] ? show_regs_print_info+0x12/0x12 [ 539.073198][T12768] should_fail+0x6fb/0x860 [ 539.077581][T12768] ? setup_fault_attr+0x3d0/0x3d0 [ 539.082574][T12768] ? alloc_skb_with_frags+0xb1/0x580 [ 539.087823][T12768] should_failslab+0x5/0x20 [ 539.092309][T12768] __kmalloc_track_caller+0x5d/0x2c0 [ 539.097562][T12768] ? kmem_cache_alloc+0x1d5/0x260 [ 539.102555][T12768] ? alloc_skb_with_frags+0xb1/0x580 [ 539.107823][T12768] __alloc_skb+0xd1/0x4d0 [ 539.112123][T12768] ? unwind_get_return_address_ptr+0x130/0x130 [ 539.118243][T12768] alloc_skb_with_frags+0xb1/0x580 [ 539.123322][T12768] ? unwind_next_frame+0x1c90/0x2330 [ 539.128574][T12768] sock_alloc_send_pskb+0x87e/0xcc0 [ 539.133745][T12768] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.139783][T12768] ? sock_kzfree_s+0x50/0x50 [ 539.144343][T12768] ? iov_iter_advance+0x1e9/0xee0 [ 539.149333][T12768] ? arch_stack_walk+0xd8/0x120 [ 539.154150][T12768] tun_get_user+0x934/0x34e0 [ 539.158708][T12768] ? kstrtouint_from_user+0x22d/0x2b0 [ 539.164044][T12768] ? tun_do_read+0x1ed0/0x1ed0 [ 539.168775][T12768] ? __kasan_slab_free+0x1f2/0x230 [ 539.173853][T12768] ? __rcu_read_lock+0x50/0x50 [ 539.178595][T12768] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 539.184986][T12768] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.191030][T12768] ? __rcu_read_lock+0x50/0x50 [ 539.195760][T12768] ? proc_fail_nth_write+0x18f/0x250 [ 539.201013][T12768] ? proc_fail_nth_read+0x1d0/0x1d0 [ 539.206176][T12768] tun_chr_write_iter+0x121/0x1a0 [ 539.211169][T12768] __vfs_write+0x59d/0x720 [ 539.215555][T12768] ? __kernel_write+0x340/0x340 [ 539.220378][T12768] ? avc_policy_seqno+0x17/0x70 [ 539.225206][T12768] ? security_file_permission+0x128/0x300 [ 539.230892][T12768] vfs_write+0x217/0x4f0 [ 539.235102][T12768] ksys_write+0x18c/0x2c0 [ 539.239419][T12768] ? file_open_root+0x450/0x450 [ 539.244237][T12768] ? __ia32_sys_read+0x80/0x80 [ 539.248970][T12768] do_syscall_64+0xcb/0x150 [ 539.253443][T12768] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.259315][T12768] RIP: 0033:0x45c1f9 [ 539.263190][T12768] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.282778][T12768] RSP: 002b:00007ff2363c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.291193][T12768] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 21:06:33 executing program 5 (fault-call:5 fault-nth:1): unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 539.299132][T12768] RDX: 000000000000009e RSI: 0000000020000500 RDI: 0000000000000003 [ 539.307082][T12768] RBP: 00007ff2363c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 539.315030][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.322989][T12768] R13: 00007ffdbfa9b0bf R14: 00007ff2363ca9c0 R15: 000000000078bf0c 21:06:33 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 539.364123][T12770] FAULT_INJECTION: forcing a failure. [ 539.364123][T12770] name failslab, interval 1, probability 0, space 0, times 0 [ 539.376981][T12770] CPU: 1 PID: 12770 Comm: syz-executor.5 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 539.387111][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.397149][T12770] Call Trace: [ 539.400422][T12770] dump_stack+0x14a/0x1ce [ 539.404722][T12770] ? devkmsg_release+0x11c/0x11c [ 539.409637][T12770] ? show_regs_print_info+0x12/0x12 [ 539.414825][T12770] should_fail+0x6fb/0x860 [ 539.419233][T12770] ? setup_fault_attr+0x3d0/0x3d0 [ 539.424252][T12770] ? alloc_skb_with_frags+0xb1/0x580 [ 539.429526][T12770] should_failslab+0x5/0x20 [ 539.429536][T12774] FAULT_INJECTION: forcing a failure. [ 539.429536][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 539.446582][T12770] __kmalloc_track_caller+0x5d/0x2c0 [ 539.451856][T12770] ? kmem_cache_alloc+0x1d5/0x260 [ 539.456866][T12770] ? alloc_skb_with_frags+0xb1/0x580 [ 539.462134][T12770] __alloc_skb+0xd1/0x4d0 [ 539.466449][T12770] ? unwind_get_return_address_ptr+0x130/0x130 [ 539.472582][T12770] alloc_skb_with_frags+0xb1/0x580 [ 539.477675][T12770] ? unwind_next_frame+0x1c90/0x2330 [ 539.482954][T12770] sock_alloc_send_pskb+0x87e/0xcc0 [ 539.488145][T12770] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.494239][T12770] ? sock_kzfree_s+0x50/0x50 [ 539.498812][T12770] ? iov_iter_advance+0x1e9/0xee0 [ 539.503819][T12770] ? arch_stack_walk+0xd8/0x120 [ 539.508653][T12770] tun_get_user+0x934/0x34e0 [ 539.513228][T12770] ? kstrtouint_from_user+0x22d/0x2b0 [ 539.518587][T12770] ? tun_do_read+0x1ed0/0x1ed0 [ 539.523345][T12770] ? __kasan_slab_free+0x1f2/0x230 [ 539.528437][T12770] ? __rcu_read_lock+0x50/0x50 [ 539.533179][T12770] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 539.539574][T12770] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.545623][T12770] ? __rcu_read_lock+0x50/0x50 [ 539.550364][T12770] ? proc_fail_nth_write+0x18f/0x250 [ 539.555626][T12770] ? proc_fail_nth_read+0x1d0/0x1d0 [ 539.560815][T12770] tun_chr_write_iter+0x121/0x1a0 [ 539.565823][T12770] __vfs_write+0x59d/0x720 [ 539.570220][T12770] ? __kernel_write+0x340/0x340 [ 539.575056][T12770] ? avc_policy_seqno+0x17/0x70 [ 539.579890][T12770] ? security_file_permission+0x128/0x300 [ 539.585601][T12770] vfs_write+0x217/0x4f0 [ 539.589837][T12770] ksys_write+0x18c/0x2c0 [ 539.594154][T12770] ? file_open_root+0x450/0x450 [ 539.598986][T12770] ? __ia32_sys_read+0x80/0x80 [ 539.603734][T12770] do_syscall_64+0xcb/0x150 [ 539.608224][T12770] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.614097][T12770] RIP: 0033:0x45c1f9 [ 539.617975][T12770] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.637568][T12770] RSP: 002b:00007f45012e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.645966][T12770] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 539.653915][T12770] RDX: 0000000000000046 RSI: 00000000200001c0 RDI: 0000000000000003 [ 539.661867][T12770] RBP: 00007f45012e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 539.669818][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.677767][T12770] R13: 00007ffd6e4e614f R14: 00007f45012e89c0 R15: 000000000078bf0c [ 539.685732][T12774] CPU: 0 PID: 12774 Comm: syz-executor.1 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 539.687166][ T90] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 539.695872][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.695876][T12774] Call Trace: [ 539.695892][T12774] dump_stack+0x14a/0x1ce [ 539.695907][T12774] ? devkmsg_release+0x11c/0x11c [ 539.726080][T12774] ? show_regs_print_info+0x12/0x12 [ 539.731276][T12774] ? fib6_table_lookup+0x3ad/0xba0 [ 539.736368][T12774] should_fail+0x6fb/0x860 [ 539.740754][T12774] ? setup_fault_attr+0x3d0/0x3d0 [ 539.745766][T12774] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 539.751572][T12774] ? dst_alloc+0x137/0x4f0 [ 539.755991][T12774] should_failslab+0x5/0x20 [ 539.760462][T12774] kmem_cache_alloc+0x36/0x260 [ 539.765198][T12774] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 539.771085][T12774] dst_alloc+0x137/0x4f0 [ 539.775307][T12774] ip6_pol_route+0xb82/0x1910 [ 539.779959][T12774] ? fib6_table_lookup+0xba0/0xba0 [ 539.785042][T12774] ? is_bpf_text_address+0x290/0x2b0 [ 539.790296][T12774] ? stack_trace_save+0x1f0/0x1f0 [ 539.795292][T12774] ? __kernel_text_address+0x93/0x110 [ 539.800735][T12774] ? arch_stack_walk+0xd8/0x120 [ 539.805562][T12774] ? ip6_route_input_lookup+0xc0/0xc0 [ 539.810902][T12774] fib6_rule_lookup+0x297/0x740 [ 539.815720][T12774] ? fib6_lookup+0x450/0x450 [ 539.820285][T12774] ? ip6t_do_table+0x190f/0x1a90 [ 539.825205][T12774] ip6_route_input+0x771/0xae0 [ 539.829939][T12774] ? ip6_multipath_l3_keys+0x810/0x810 [ 539.835387][T12774] ? sk_setup_caps+0x3d0/0x3d0 [ 539.840123][T12774] ? ip6_rcv_core+0xc1f/0x1240 [ 539.844866][T12774] ? nf_hook_slow+0x1a6/0x1f0 [ 539.849514][T12774] ipv6_rcv+0x395/0x570 [ 539.853641][T12774] ? ip6_rcv_finish+0x2d0/0x2d0 [ 539.858460][T12774] ? __kmalloc_track_caller+0x201/0x2c0 [ 539.863973][T12774] ? local_bh_enable+0x20/0x20 [ 539.868708][T12774] ? ip6_rcv_finish+0x2d0/0x2d0 [ 539.873528][T12774] __netif_receive_skb+0x20a/0x4f0 [ 539.878609][T12774] ? unwind_next_frame+0x1c90/0x2330 [ 539.883874][T12774] ? nf_ingress+0x530/0x530 [ 539.888348][T12774] ? sock_alloc_send_pskb+0xb32/0xcc0 [ 539.893688][T12774] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.899723][T12774] ? copyin+0x8e/0xb0 [ 539.903672][T12774] netif_receive_skb_internal+0x1cc/0x220 [ 539.909408][T12774] ? __virt_addr_valid+0x1fd/0x290 [ 539.914496][T12774] ? virtio_net_hdr_to_skb+0x5cf/0xc20 [ 539.919921][T12774] ? netif_receive_skb+0x2b0/0x2b0 [ 539.925002][T12774] ? _local_bh_enable+0x30/0x30 [ 539.929834][T12774] ? skb_copy_datagram_from_iter+0x5c1/0x6b0 [ 539.935797][T12774] ? arch_stack_walk+0xd8/0x120 [ 539.940613][T12774] netif_receive_skb+0x14a/0x2b0 [ 539.945520][T12774] tun_get_user+0x2926/0x34e0 [ 539.950181][T12774] ? kstrtouint_from_user+0x22d/0x2b0 [ 539.955535][T12774] ? tun_do_read+0x1ed0/0x1ed0 [ 539.960265][T12774] ? __kasan_slab_free+0x1f2/0x230 [ 539.965347][T12774] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.971383][T12774] ? __rcu_read_lock+0x50/0x50 [ 539.976115][T12774] ? proc_fail_nth_write+0x18f/0x250 [ 539.981382][T12774] ? proc_fail_nth_read+0x1d0/0x1d0 [ 539.986663][T12774] tun_chr_write_iter+0x121/0x1a0 [ 539.991661][T12774] __vfs_write+0x59d/0x720 [ 539.996060][T12774] ? __kernel_write+0x340/0x340 [ 540.000891][T12774] ? avc_policy_seqno+0x17/0x70 [ 540.005721][T12774] ? security_file_permission+0x128/0x300 [ 540.011409][T12774] vfs_write+0x217/0x4f0 [ 540.015641][T12774] ksys_write+0x18c/0x2c0 [ 540.019957][T12774] ? __ia32_sys_read+0x80/0x80 [ 540.024689][T12774] do_syscall_64+0xcb/0x150 [ 540.029653][T12774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.035513][T12774] RIP: 0033:0x45c1f9 [ 540.039375][T12774] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.058947][T12774] RSP: 002b:00007ff2363c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 21:06:34 executing program 4 (fault-call:10 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 540.067324][T12774] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 540.075266][T12774] RDX: 000000000000009e RSI: 0000000020000500 RDI: 0000000000000003 [ 540.083206][T12774] RBP: 00007ff2363c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 540.091150][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.099100][T12774] R13: 00007ffdbfa9b0bf R14: 00007ff2363ca9c0 R15: 000000000078bf0c [ 540.164771][T12777] FAULT_INJECTION: forcing a failure. [ 540.164771][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 540.177686][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 540.187862][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.197885][T12777] Call Trace: [ 540.201146][T12777] dump_stack+0x14a/0x1ce [ 540.205496][T12777] ? devkmsg_release+0x11c/0x11c [ 540.210411][T12777] ? show_regs_print_info+0x12/0x12 [ 540.215587][T12777] should_fail+0x6fb/0x860 [ 540.219975][T12777] ? setup_fault_attr+0x3d0/0x3d0 [ 540.224971][T12777] ? bpf_map_area_alloc+0x59/0xb0 [ 540.229964][T12777] should_failslab+0x5/0x20 [ 540.234436][T12777] __kmalloc+0x5f/0x2d0 [ 540.238573][T12777] bpf_map_area_alloc+0x59/0xb0 [ 540.243396][T12777] htab_map_alloc+0x4f2/0x15b0 [ 540.248145][T12777] __do_sys_bpf+0x3743/0xbf40 [ 540.252791][T12777] ? _kstrtoull+0x38d/0x490 [ 540.257361][T12777] ? kstrtouint_from_user+0x22d/0x2b0 [ 540.262712][T12777] ? kstrtol_from_user+0x320/0x320 [ 540.267802][T12777] ? __kasan_slab_free+0x1f2/0x230 [ 540.272892][T12777] ? __bpf_prog_put_rcu+0x300/0x300 [ 540.278071][T12777] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 540.284465][T12777] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.290512][T12777] ? get_pid_task+0x86/0x90 [ 540.294993][T12777] ? proc_fail_nth_write+0x18f/0x250 [ 540.300261][T12777] ? proc_fail_nth_read+0x1d0/0x1d0 [ 540.305446][T12777] ? proc_fail_nth_read+0x1d0/0x1d0 [ 540.310621][T12777] ? memset+0x1f/0x40 [ 540.314581][T12777] ? fsnotify+0x13a0/0x1460 [ 540.319077][T12777] ? __kernel_write+0x340/0x340 [ 540.323923][T12777] ? __fsnotify_parent+0x310/0x310 [ 540.329015][T12777] ? security_file_permission+0x128/0x300 [ 540.334710][T12777] ? __sb_end_write+0xa4/0xf0 [ 540.339365][T12777] ? vfs_write+0x427/0x4f0 [ 540.343772][T12777] ? fput_many+0x42/0x1a0 [ 540.348084][T12777] do_syscall_64+0xcb/0x150 [ 540.352570][T12777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.358440][T12777] RIP: 0033:0x45c1f9 [ 540.362316][T12777] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.381900][T12777] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.390290][T12777] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 540.398239][T12777] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 540.406186][T12777] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 21:06:34 executing program 1 (fault-call:4 fault-nth:3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 540.414135][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.422083][T12777] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 540.462806][T12782] FAULT_INJECTION: forcing a failure. [ 540.462806][T12782] name failslab, interval 1, probability 0, space 0, times 0 [ 540.475441][T12782] CPU: 0 PID: 12782 Comm: syz-executor.1 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 540.485578][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.495602][T12782] Call Trace: [ 540.498866][T12782] dump_stack+0x14a/0x1ce [ 540.503168][T12782] ? devkmsg_release+0x11c/0x11c [ 540.508076][T12782] ? show_regs_print_info+0x12/0x12 [ 540.513245][T12782] should_fail+0x6fb/0x860 [ 540.517643][T12782] ? setup_fault_attr+0x3d0/0x3d0 [ 540.522641][T12782] ? ip6_rt_copy_init+0x3e2/0x740 [ 540.527645][T12782] ? skb_ext_add+0x116/0x5b0 [ 540.532219][T12782] should_failslab+0x5/0x20 [ 540.536705][T12782] kmem_cache_alloc+0x36/0x260 [ 540.541451][T12782] skb_ext_add+0x116/0x5b0 [ 540.545836][T12782] secpath_set+0x9b/0x170 [ 540.550137][T12782] xfrm6_input_addr+0x71/0x530 [ 540.554873][T12782] ipv6_dest_hao+0x193/0x8b0 [ 540.559457][T12782] ip6_parse_tlv+0x458/0x7b0 [ 540.564016][T12782] ipv6_destopt_rcv+0x395/0x7b0 [ 540.568838][T12782] ip6_protocol_deliver_rcu+0xacb/0x1380 [ 540.574438][T12782] ? ip6_route_input+0x771/0xae0 [ 540.579344][T12782] ip6_input+0x208/0x260 [ 540.583582][T12782] ? ip6_protocol_deliver_rcu+0x1380/0x1380 [ 540.589504][T12782] ? ip6_input+0x260/0x260 [ 540.593892][T12782] ? ipv6_chk_mcast_addr+0x405/0x450 [ 540.599145][T12782] ip6_mc_input+0x1db/0x270 [ 540.603643][T12782] ipv6_rcv+0x3ca/0x570 [ 540.607807][T12782] ? ip6_rcv_finish+0x2d0/0x2d0 [ 540.612632][T12782] ? __kmalloc_track_caller+0x201/0x2c0 [ 540.618255][T12782] ? local_bh_enable+0x20/0x20 [ 540.622997][T12782] ? ip6_rcv_finish+0x2d0/0x2d0 [ 540.627827][T12782] __netif_receive_skb+0x20a/0x4f0 [ 540.632923][T12782] ? unwind_next_frame+0x1c90/0x2330 [ 540.638206][T12782] ? nf_ingress+0x530/0x530 [ 540.642689][T12782] ? sock_alloc_send_pskb+0xb32/0xcc0 [ 540.648032][T12782] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.654068][T12782] ? copyin+0x8e/0xb0 [ 540.658036][T12782] netif_receive_skb_internal+0x1cc/0x220 [ 540.663725][T12782] ? __virt_addr_valid+0x1fd/0x290 [ 540.668808][T12782] ? virtio_net_hdr_to_skb+0x5cf/0xc20 [ 540.674234][T12782] ? netif_receive_skb+0x2b0/0x2b0 [ 540.679326][T12782] ? _local_bh_enable+0x30/0x30 [ 540.684155][T12782] ? skb_copy_datagram_from_iter+0x5c1/0x6b0 [ 540.690119][T12782] ? arch_stack_walk+0xd8/0x120 [ 540.694953][T12782] netif_receive_skb+0x14a/0x2b0 [ 540.699878][T12782] tun_get_user+0x2926/0x34e0 [ 540.704545][T12782] ? kstrtouint_from_user+0x22d/0x2b0 [ 540.709886][T12782] ? tun_do_read+0x1ed0/0x1ed0 [ 540.714642][T12782] ? __kasan_slab_free+0x1f2/0x230 [ 540.719743][T12782] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.725797][T12782] ? __rcu_read_lock+0x50/0x50 [ 540.730532][T12782] ? proc_fail_nth_write+0x18f/0x250 [ 540.735792][T12782] ? proc_fail_nth_read+0x1d0/0x1d0 [ 540.740962][T12782] tun_chr_write_iter+0x121/0x1a0 [ 540.745962][T12782] __vfs_write+0x59d/0x720 [ 540.750358][T12782] ? __kernel_write+0x340/0x340 [ 540.755192][T12782] ? avc_policy_seqno+0x17/0x70 [ 540.760023][T12782] ? security_file_permission+0x128/0x300 [ 540.765722][T12782] vfs_write+0x217/0x4f0 [ 540.769946][T12782] ksys_write+0x18c/0x2c0 [ 540.774261][T12782] ? file_open_root+0x450/0x450 [ 540.779085][T12782] ? __ia32_sys_read+0x80/0x80 [ 540.783830][T12782] do_syscall_64+0xcb/0x150 [ 540.788316][T12782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.794224][T12782] RIP: 0033:0x45c1f9 [ 540.798096][T12782] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.817678][T12782] RSP: 002b:00007ff2363c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 540.826093][T12782] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 540.834036][T12782] RDX: 000000000000009e RSI: 0000000020000500 RDI: 0000000000000003 [ 540.841978][T12782] RBP: 00007ff2363c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 540.849956][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 540.857914][T12782] R13: 00007ffdbfa9b0bf R14: 00007ff2363ca9c0 R15: 000000000078bf0c 21:06:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:35 executing program 5 (fault-call:5 fault-nth:2): unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:35 executing program 4 (fault-call:10 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 540.907250][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.918198][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:06:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:35 executing program 1 (fault-call:4 fault-nth:4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 540.957199][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.973551][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.985592][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 540.995896][T12801] FAULT_INJECTION: forcing a failure. [ 540.995896][T12801] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 540.997148][ T90] usb 4-1: device descriptor read/all, error -71 [ 541.009735][T12801] CPU: 0 PID: 12801 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 541.022663][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 541.025574][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.025577][T12801] Call Trace: [ 541.025600][T12801] dump_stack+0x14a/0x1ce [ 541.035086][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.044641][T12801] ? devkmsg_release+0x11c/0x11c [ 541.044651][T12801] ? show_regs_print_info+0x12/0x12 [ 541.044660][T12801] should_fail+0x6fb/0x860 [ 541.044668][T12801] ? setup_fault_attr+0x3d0/0x3d0 [ 541.044684][T12801] __alloc_pages_nodemask+0x1ee/0x7c0 [ 541.048374][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.052249][T12801] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 541.052263][T12801] ? _raw_spin_lock_irqsave+0xfc/0x1e0 [ 541.103889][T12801] ? _raw_spin_lock+0x170/0x170 [ 541.108718][T12801] kmalloc_order_trace+0x2a/0xf0 [ 541.113633][T12801] __kmalloc+0x268/0x2d0 [ 541.117854][T12801] ? bpf_map_area_alloc+0x59/0xb0 [ 541.122856][T12801] bpf_map_area_alloc+0x59/0xb0 [ 541.127686][T12801] htab_map_alloc+0x7ea/0x15b0 [ 541.132429][T12801] __do_sys_bpf+0x3743/0xbf40 [ 541.137105][T12801] ? _kstrtoull+0x38d/0x490 [ 541.141587][T12801] ? kstrtouint_from_user+0x22d/0x2b0 [ 541.146937][T12801] ? kstrtol_from_user+0x320/0x320 [ 541.152025][T12801] ? __kasan_slab_free+0x1f2/0x230 [ 541.157128][T12801] ? __bpf_prog_put_rcu+0x300/0x300 [ 541.162301][T12801] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 541.168693][T12801] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.174737][T12801] ? get_pid_task+0x86/0x90 [ 541.179247][T12801] ? proc_fail_nth_write+0x18f/0x250 [ 541.184510][T12801] ? proc_fail_nth_read+0x1d0/0x1d0 [ 541.189685][T12801] ? proc_fail_nth_read+0x1d0/0x1d0 [ 541.194860][T12801] ? memset+0x1f/0x40 [ 541.198823][T12801] ? fsnotify+0x13a0/0x1460 [ 541.203307][T12801] ? __kernel_write+0x340/0x340 [ 541.208137][T12801] ? __fsnotify_parent+0x310/0x310 [ 541.213231][T12801] ? security_file_permission+0x128/0x300 [ 541.218931][T12801] ? __sb_end_write+0xa4/0xf0 [ 541.223588][T12801] ? vfs_write+0x427/0x4f0 [ 541.227980][T12801] ? fput_many+0x42/0x1a0 [ 541.232289][T12801] do_syscall_64+0xcb/0x150 [ 541.236772][T12801] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.242640][T12801] RIP: 0033:0x45c1f9 [ 541.246513][T12801] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 541.266092][T12801] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.274481][T12801] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 541.282443][T12801] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 541.290417][T12801] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 541.298375][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.306322][T12801] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 541.316302][T10413] usb 1-1: config 0 descriptor?? [ 541.340515][T11147] usb 3-1: config 0 descriptor?? [ 541.350954][T10413] usb 1-1: can't set config #0, error -71 [ 541.351369][T12788] FAULT_INJECTION: forcing a failure. [ 541.351369][T12788] name failslab, interval 1, probability 0, space 0, times 0 [ 541.358540][T10413] usb 1-1: USB disconnect, device number 79 [ 541.369246][T12788] CPU: 0 PID: 12788 Comm: syz-executor.5 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 541.369251][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.369254][T12788] Call Trace: [ 541.369270][T12788] dump_stack+0x14a/0x1ce [ 541.369284][T12788] ? devkmsg_release+0x11c/0x11c [ 541.377330][T11147] usb 3-1: can't set config #0, error -71 [ 541.385294][T12788] ? show_regs_print_info+0x12/0x12 [ 541.385306][T12788] ? fib6_table_lookup+0x3ad/0xba0 [ 541.385314][T12788] should_fail+0x6fb/0x860 [ 541.385326][T12788] ? setup_fault_attr+0x3d0/0x3d0 [ 541.401271][T11147] usb 3-1: USB disconnect, device number 31 [ 541.402949][T12788] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 541.402958][T12788] ? dst_alloc+0x137/0x4f0 [ 541.402966][T12788] should_failslab+0x5/0x20 [ 541.402980][T12788] kmem_cache_alloc+0x36/0x260 [ 541.458428][T12788] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 541.464223][T12788] dst_alloc+0x137/0x4f0 [ 541.468437][T12788] ip6_pol_route+0xb82/0x1910 [ 541.473090][T12788] ? fib6_table_lookup+0xba0/0xba0 [ 541.478175][T12788] ? is_bpf_text_address+0x290/0x2b0 [ 541.483454][T12788] ? stack_trace_save+0x1f0/0x1f0 [ 541.488462][T12788] ? __kernel_text_address+0x93/0x110 [ 541.493806][T12788] ? arch_stack_walk+0xd8/0x120 [ 541.498630][T12788] ? ip6_route_input_lookup+0xc0/0xc0 [ 541.503970][T12788] fib6_rule_lookup+0x297/0x740 [ 541.508797][T12788] ? fib6_lookup+0x450/0x450 [ 541.513396][T12788] ? ip6t_do_table+0x190f/0x1a90 [ 541.518306][T12788] ip6_route_input+0x771/0xae0 [ 541.523040][T12788] ? ip6_multipath_l3_keys+0x810/0x810 [ 541.528499][T12788] ? sk_setup_caps+0x3d0/0x3d0 [ 541.533237][T12788] ? ip6_rcv_core+0xc1f/0x1240 [ 541.537973][T12788] ? nf_hook_slow+0x1a6/0x1f0 [ 541.542638][T12788] ipv6_rcv+0x395/0x570 [ 541.546765][T12788] ? ip6_rcv_finish+0x2d0/0x2d0 [ 541.551584][T12788] ? __kmalloc_track_caller+0x201/0x2c0 [ 541.557133][T12788] ? local_bh_enable+0x20/0x20 [ 541.561875][T12788] ? ip6_rcv_finish+0x2d0/0x2d0 [ 541.566711][T12788] __netif_receive_skb+0x20a/0x4f0 [ 541.571796][T12788] ? unwind_next_frame+0x1c90/0x2330 [ 541.577050][T12788] ? nf_ingress+0x530/0x530 [ 541.581527][T12788] ? sock_alloc_send_pskb+0xb32/0xcc0 [ 541.586888][T12788] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.592937][T12788] ? copyin+0x8e/0xb0 [ 541.596893][T12788] netif_receive_skb_internal+0x1cc/0x220 [ 541.602592][T12788] ? __virt_addr_valid+0x1fd/0x290 [ 541.607144][ T90] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 541.607678][T12788] ? virtio_net_hdr_to_skb+0x5cf/0xc20 [ 541.607688][T12788] ? netif_receive_skb+0x2b0/0x2b0 [ 541.607696][T12788] ? _local_bh_enable+0x30/0x30 [ 541.607711][T12788] ? skb_copy_datagram_from_iter+0x5c1/0x6b0 [ 541.636643][T12788] ? arch_stack_walk+0xd8/0x120 [ 541.641468][T12788] netif_receive_skb+0x14a/0x2b0 [ 541.646410][T12788] tun_get_user+0x2926/0x34e0 [ 541.651063][T12788] ? kstrtouint_from_user+0x22d/0x2b0 [ 541.656411][T12788] ? tun_do_read+0x1ed0/0x1ed0 [ 541.661145][T12788] ? __kasan_slab_free+0x1f2/0x230 [ 541.666254][T12788] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.672303][T12788] ? __rcu_read_lock+0x50/0x50 [ 541.677063][T12788] ? proc_fail_nth_write+0x18f/0x250 [ 541.682350][T12788] ? proc_fail_nth_read+0x1d0/0x1d0 [ 541.687538][T12788] tun_chr_write_iter+0x121/0x1a0 [ 541.692542][T12788] __vfs_write+0x59d/0x720 [ 541.696941][T12788] ? __kernel_write+0x340/0x340 [ 541.701769][T12788] ? avc_policy_seqno+0x17/0x70 [ 541.706604][T12788] ? security_file_permission+0x128/0x300 [ 541.712295][T12788] vfs_write+0x217/0x4f0 [ 541.716507][T12788] ksys_write+0x18c/0x2c0 [ 541.720812][T12788] ? __ia32_sys_read+0x80/0x80 [ 541.725544][T12788] do_syscall_64+0xcb/0x150 [ 541.730017][T12788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.735878][T12788] RIP: 0033:0x45c1f9 [ 541.739741][T12788] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 541.757150][T11147] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 541.759320][T12788] RSP: 002b:00007f45012e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.759330][T12788] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 541.759334][T12788] RDX: 0000000000000046 RSI: 00000000200001c0 RDI: 0000000000000003 [ 541.759345][T12788] RBP: 00007f45012e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 541.766939][T10413] usb 1-1: new high-speed USB device number 80 using dummy_hcd 21:06:36 executing program 4 (fault-call:10 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 541.775253][T12788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.775258][T12788] R13: 00007ffd6e4e614f R14: 00007f45012e89c0 R15: 000000000078bf0c [ 541.879005][T12813] FAULT_INJECTION: forcing a failure. [ 541.879005][T12813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.892229][T12813] CPU: 0 PID: 12813 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 541.902345][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.912371][T12813] Call Trace: [ 541.915631][T12813] dump_stack+0x14a/0x1ce [ 541.919934][T12813] ? devkmsg_release+0x11c/0x11c [ 541.924883][T12813] ? show_regs_print_info+0x12/0x12 [ 541.930069][T12813] ? stack_trace_save+0x123/0x1f0 [ 541.935064][T12813] should_fail+0x6fb/0x860 [ 541.939457][T12813] ? setup_fault_attr+0x3d0/0x3d0 [ 541.944453][T12813] ? prep_new_page+0x2b4/0x380 [ 541.949197][T12813] __alloc_pages_nodemask+0x1ee/0x7c0 [ 541.954579][T12813] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 541.960098][T12813] ? find_next_bit+0xf7/0x120 [ 541.964747][T12813] pcpu_populate_chunk+0x149/0xd60 [ 541.969842][T12813] ? find_next_bit+0xd8/0x120 [ 541.974502][T12813] pcpu_alloc+0x91c/0x11f0 [ 541.978906][T12813] htab_map_alloc+0x8e0/0x15b0 [ 541.983661][T12813] __do_sys_bpf+0x3743/0xbf40 [ 541.988318][T12813] ? _kstrtoull+0x38d/0x490 [ 541.992802][T12813] ? kstrtouint_from_user+0x22d/0x2b0 [ 541.998152][T12813] ? kstrtol_from_user+0x320/0x320 [ 542.003244][T12813] ? __kasan_slab_free+0x1f2/0x230 [ 542.008335][T12813] ? __bpf_prog_put_rcu+0x300/0x300 [ 542.013514][T12813] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 542.019914][T12813] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.025962][T12813] ? get_pid_task+0x86/0x90 [ 542.030445][T12813] ? proc_fail_nth_write+0x18f/0x250 [ 542.035708][T12813] ? proc_fail_nth_read+0x1d0/0x1d0 [ 542.040886][T12813] ? proc_fail_nth_read+0x1d0/0x1d0 [ 542.046061][T12813] ? memset+0x1f/0x40 [ 542.050022][T12813] ? fsnotify+0x13a0/0x1460 [ 542.054507][T12813] ? __kernel_write+0x340/0x340 [ 542.059352][T12813] ? __fsnotify_parent+0x310/0x310 [ 542.064448][T12813] ? security_file_permission+0x128/0x300 [ 542.070147][T12813] ? __sb_end_write+0xa4/0xf0 [ 542.074816][T12813] ? vfs_write+0x427/0x4f0 [ 542.079213][T12813] ? fput_many+0x42/0x1a0 [ 542.083526][T12813] do_syscall_64+0xcb/0x150 [ 542.088028][T12813] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.093899][T12813] RIP: 0033:0x45c1f9 [ 542.097772][T12813] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.117358][T12813] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.125748][T12813] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 542.133699][T12813] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 542.141649][T12813] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 542.149597][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 542.158443][T12813] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 542.168369][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:06:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:36 executing program 5 (fault-call:5 fault-nth:3): unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 542.181524][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.206620][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 542.215884][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.224777][ T90] usb 4-1: config 0 descriptor?? [ 542.248468][T12819] FAULT_INJECTION: forcing a failure. [ 542.248468][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 542.261080][T12819] CPU: 0 PID: 12819 Comm: syz-executor.5 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 542.271214][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.281253][T12819] Call Trace: [ 542.284518][T12819] dump_stack+0x14a/0x1ce [ 542.288822][T12819] ? devkmsg_release+0x11c/0x11c [ 542.293738][T12819] ? show_regs_print_info+0x12/0x12 [ 542.298917][T12819] should_fail+0x6fb/0x860 [ 542.303304][T12819] ? setup_fault_attr+0x3d0/0x3d0 [ 542.308316][T12819] ? ip6_rt_copy_init+0x5b8/0x740 [ 542.313335][T12819] ? skb_ext_add+0x116/0x5b0 [ 542.317896][T12819] should_failslab+0x5/0x20 [ 542.322375][T12819] kmem_cache_alloc+0x36/0x260 [ 542.327158][T12819] skb_ext_add+0x116/0x5b0 [ 542.331565][T12819] ? fib6_table_lookup+0xba0/0xba0 [ 542.336657][T12819] xfrm_input+0x405/0x60c0 [ 542.341048][T12819] ? __rcu_read_lock+0x50/0x50 [ 542.345789][T12819] ? raw6_local_deliver+0x5a7/0xfe0 [ 542.347195][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.350973][T12819] ? xfrm_parse_spi+0x570/0x570 [ 542.350983][T12819] ? vti6_rcv+0x12c/0x3f0 [ 542.350993][T12819] xfrm6_ah_rcv+0x7b/0x100 [ 542.351011][T12819] ip6_protocol_deliver_rcu+0xacb/0x1380 [ 542.361978][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.366660][T12819] ? ip6_route_input+0x771/0xae0 [ 542.366670][T12819] ip6_input+0x208/0x260 [ 542.366682][T12819] ? ip6_protocol_deliver_rcu+0x1380/0x1380 [ 542.371615][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 542.375374][T12819] ? sk_setup_caps+0x3d0/0x3d0 [ 542.375385][T12819] ? ipv6_chk_mcast_addr+0x405/0x450 [ 542.375393][T12819] ip6_mc_input+0x1db/0x270 [ 542.375407][T12819] ipv6_rcv+0x3ca/0x570 [ 542.381312][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.390696][T12819] ? ip6_rcv_finish+0x2d0/0x2d0 [ 542.390706][T12819] ? __kmalloc_track_caller+0x201/0x2c0 [ 542.390714][T12819] ? kmem_cache_alloc+0x1d5/0x260 [ 542.390724][T12819] ? ip6_rcv_finish+0x2d0/0x2d0 [ 542.390734][T12819] __netif_receive_skb+0x20a/0x4f0 [ 542.390748][T12819] ? unwind_next_frame+0x1c90/0x2330 [ 542.398725][T10413] usb 1-1: config 0 descriptor?? [ 542.399887][T12819] ? nf_ingress+0x530/0x530 [ 542.399899][T12819] ? sock_alloc_send_pskb+0xb32/0xcc0 [ 542.399909][T12819] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.399923][T12819] ? copyin+0x8e/0xb0 [ 542.477290][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.481274][T12819] netif_receive_skb_internal+0x1cc/0x220 [ 542.481289][T12819] ? __virt_addr_valid+0x1fd/0x290 [ 542.486746][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.492698][T12819] ? virtio_net_hdr_to_skb+0x5cf/0xc20 [ 542.492707][T12819] ? netif_receive_skb+0x2b0/0x2b0 [ 542.492716][T12819] ? _local_bh_enable+0x30/0x30 [ 542.492726][T12819] ? skb_copy_datagram_from_iter+0x5c1/0x6b0 [ 542.492736][T12819] ? arch_stack_walk+0xd8/0x120 [ 542.492744][T12819] netif_receive_skb+0x14a/0x2b0 [ 542.492753][T12819] tun_get_user+0x2926/0x34e0 [ 542.492765][T12819] ? kstrtouint_from_user+0x22d/0x2b0 [ 542.492772][T12819] ? tun_do_read+0x1ed0/0x1ed0 [ 542.492780][T12819] ? __kasan_slab_free+0x1f2/0x230 [ 542.492796][T12819] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.505355][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 542.507572][T12819] ? __rcu_read_lock+0x50/0x50 [ 542.507581][T12819] ? proc_fail_nth_write+0x18f/0x250 [ 542.507590][T12819] ? proc_fail_nth_read+0x1d0/0x1d0 [ 542.507599][T12819] tun_chr_write_iter+0x121/0x1a0 [ 542.507610][T12819] __vfs_write+0x59d/0x720 [ 542.507620][T12819] ? __kernel_write+0x340/0x340 [ 542.507636][T12819] ? avc_policy_seqno+0x17/0x70 [ 542.515619][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.518422][T12819] ? security_file_permission+0x128/0x300 [ 542.518433][T12819] vfs_write+0x217/0x4f0 [ 542.518443][T12819] ksys_write+0x18c/0x2c0 [ 542.518451][T12819] ? file_open_root+0x450/0x450 [ 542.518459][T12819] ? __ia32_sys_read+0x80/0x80 [ 542.518468][T12819] do_syscall_64+0xcb/0x150 [ 542.518479][T12819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.518486][T12819] RIP: 0033:0x45c1f9 [ 542.518495][T12819] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:06:37 executing program 4 (fault-call:10 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 542.518505][T12819] RSP: 002b:00007f45012e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.534221][T11147] usb 3-1: config 0 descriptor?? [ 542.538722][T12819] RAX: ffffffffffffffda RBX: 0000000000037e80 RCX: 000000000045c1f9 [ 542.538728][T12819] RDX: 0000000000000046 RSI: 00000000200001c0 RDI: 0000000000000003 [ 542.538733][T12819] RBP: 00007f45012e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 542.538738][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 542.538743][T12819] R13: 00007ffd6e4e614f R14: 00007f45012e89c0 R15: 000000000078bf0c [ 542.787586][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 542.793524][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 542.803031][ T90] usb 4-1: USB disconnect, device number 104 [ 542.812542][T12835] FAULT_INJECTION: forcing a failure. [ 542.812542][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 542.825251][T12835] CPU: 0 PID: 12835 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 21:06:37 executing program 5 (fault-call:5 fault-nth:4): unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 542.827179][T10413] usbhid 1-1:0.0: can't add hid device: -71 [ 542.835483][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.851388][T12835] Call Trace: [ 542.851896][T10413] usbhid: probe of 1-1:0.0 failed with error -71 [ 542.854667][T12835] dump_stack+0x14a/0x1ce [ 542.854677][T12835] ? devkmsg_release+0x11c/0x11c [ 542.854685][T12835] ? show_regs_print_info+0x12/0x12 [ 542.854698][T12835] ? __kasan_kmalloc+0x12c/0x1c0 [ 542.866769][T10413] usb 1-1: USB disconnect, device number 80 [ 542.870221][T12835] ? __kmalloc+0xf7/0x2d0 [ 542.870232][T12835] ? pcpu_create_chunk+0x25/0x900 [ 542.870240][T12835] ? pcpu_alloc+0x696/0x11f0 [ 542.870249][T12835] ? htab_map_alloc+0x8e0/0x15b0 [ 542.870256][T12835] ? __do_sys_bpf+0x3743/0xbf40 [ 542.870270][T12835] should_fail+0x6fb/0x860 [ 542.914227][T12835] ? setup_fault_attr+0x3d0/0x3d0 [ 542.919232][T12835] ? __get_vm_area_node+0x19e/0x340 [ 542.924405][T12835] should_failslab+0x5/0x20 [ 542.928887][T12835] kmem_cache_alloc_trace+0x39/0x280 [ 542.934171][T12835] __get_vm_area_node+0x19e/0x340 [ 542.939177][T12835] __vmalloc_node_range+0xf0/0x7b0 [ 542.944267][T12835] ? pcpu_create_chunk+0xb7/0x900 [ 542.949270][T12835] ? pcpu_mem_zalloc+0x44/0xb0 [ 542.954032][T12835] ? __kmalloc+0xf7/0x2d0 [ 542.958344][T12835] __vmalloc+0x40/0x50 [ 542.962395][T12835] ? pcpu_create_chunk+0xb7/0x900 [ 542.968368][T12835] pcpu_create_chunk+0xb7/0x900 [ 542.973198][T12835] ? find_next_bit+0xd8/0x120 [ 542.977855][T12835] pcpu_alloc+0x696/0x11f0 [ 542.982255][T12835] htab_map_alloc+0x8e0/0x15b0 [ 542.987014][T12835] __do_sys_bpf+0x3743/0xbf40 [ 542.991670][T12835] ? _kstrtoull+0x38d/0x490 [ 542.996152][T12835] ? kstrtouint_from_user+0x22d/0x2b0 [ 543.001501][T12835] ? kstrtol_from_user+0x320/0x320 [ 543.006589][T12835] ? __kasan_slab_free+0x1f2/0x230 [ 543.011678][T12835] ? __bpf_prog_put_rcu+0x300/0x300 [ 543.016852][T12835] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 543.023258][T12835] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.029305][T12835] ? get_pid_task+0x86/0x90 [ 543.033785][T12835] ? proc_fail_nth_write+0x18f/0x250 [ 543.039060][T12835] ? proc_fail_nth_read+0x1d0/0x1d0 [ 543.044237][T12835] ? proc_fail_nth_read+0x1d0/0x1d0 [ 543.049410][T12835] ? memset+0x1f/0x40 [ 543.053370][T12835] ? fsnotify+0x13a0/0x1460 [ 543.057852][T12835] ? __kernel_write+0x340/0x340 [ 543.062693][T12835] ? __fsnotify_parent+0x310/0x310 [ 543.067800][T12835] ? security_file_permission+0x128/0x300 [ 543.073494][T12835] ? __sb_end_write+0xa4/0xf0 [ 543.078147][T12835] ? vfs_write+0x427/0x4f0 [ 543.082555][T12835] ? fput_many+0x42/0x1a0 [ 543.086867][T12835] do_syscall_64+0xcb/0x150 [ 543.091357][T12835] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.097249][T12835] RIP: 0033:0x45c1f9 [ 543.101121][T12835] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.120709][T12835] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.129187][T12835] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 543.137135][T12835] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 543.145083][T12835] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 543.153034][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 543.161000][T12835] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 543.257173][T11147] usbhid 3-1:0.0: can't add hid device: -71 [ 543.263145][T11147] usbhid: probe of 3-1:0.0 failed with error -71 [ 543.274113][T11147] usb 3-1: USB disconnect, device number 32 [ 543.417171][ T90] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 543.577203][T10413] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 543.777148][T11147] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 543.787315][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.798271][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.808026][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 543.817035][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.825851][ T90] usb 4-1: config 0 descriptor?? 21:06:38 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:38 executing program 4 (fault-call:10 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 543.947275][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.965835][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.989484][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 543.999731][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.009205][T10413] usb 1-1: config 0 descriptor?? [ 544.027868][T12868] FAULT_INJECTION: forcing a failure. [ 544.027868][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 544.040544][T12868] CPU: 1 PID: 12868 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 544.050679][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.060718][T12868] Call Trace: [ 544.064002][T12868] dump_stack+0x14a/0x1ce [ 544.068323][T12868] ? devkmsg_release+0x11c/0x11c [ 544.073280][T12868] ? show_regs_print_info+0x12/0x12 [ 544.078470][T12868] ? __kasan_kmalloc+0x189/0x1c0 [ 544.083397][T12868] should_fail+0x6fb/0x860 [ 544.087806][T12868] ? setup_fault_attr+0x3d0/0x3d0 [ 544.092822][T12868] ? alloc_vmap_area+0x164/0x1bc0 [ 544.097849][T12868] should_failslab+0x5/0x20 [ 544.102343][T12868] kmem_cache_alloc+0x36/0x260 [ 544.107098][T12868] alloc_vmap_area+0x164/0x1bc0 [ 544.111939][T12868] ? vm_map_ram+0x950/0x950 [ 544.116432][T12868] ? __get_vm_area_node+0x19e/0x340 [ 544.121620][T12868] __get_vm_area_node+0x1ef/0x340 [ 544.126623][T12868] __vmalloc_node_range+0xf0/0x7b0 [ 544.131714][T12868] ? pcpu_create_chunk+0xb7/0x900 [ 544.136716][T12868] ? pcpu_mem_zalloc+0x44/0xb0 [ 544.141457][T12868] ? __kmalloc+0xf7/0x2d0 [ 544.145764][T12868] __vmalloc+0x40/0x50 [ 544.149813][T12868] ? pcpu_create_chunk+0xb7/0x900 [ 544.154814][T12868] pcpu_create_chunk+0xb7/0x900 [ 544.159644][T12868] ? find_next_bit+0xd8/0x120 [ 544.164301][T12868] pcpu_alloc+0x696/0x11f0 [ 544.168700][T12868] htab_map_alloc+0x8e0/0x15b0 [ 544.173444][T12868] __do_sys_bpf+0x3743/0xbf40 [ 544.178099][T12868] ? _kstrtoull+0x38d/0x490 [ 544.182580][T12868] ? kstrtouint_from_user+0x22d/0x2b0 [ 544.187930][T12868] ? kstrtol_from_user+0x320/0x320 [ 544.193018][T12868] ? __kasan_slab_free+0x1f2/0x230 [ 544.198111][T12868] ? __bpf_prog_put_rcu+0x300/0x300 [ 544.203285][T12868] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 544.209694][T12868] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.215736][T12868] ? get_pid_task+0x86/0x90 [ 544.220217][T12868] ? proc_fail_nth_write+0x18f/0x250 [ 544.225476][T12868] ? proc_fail_nth_read+0x1d0/0x1d0 [ 544.230651][T12868] ? proc_fail_nth_read+0x1d0/0x1d0 [ 544.235826][T12868] ? memset+0x1f/0x40 [ 544.239787][T12868] ? fsnotify+0x13a0/0x1460 [ 544.244271][T12868] ? __kernel_write+0x340/0x340 [ 544.249113][T12868] ? __fsnotify_parent+0x310/0x310 [ 544.254207][T12868] ? security_file_permission+0x128/0x300 [ 544.259899][T12868] ? __sb_end_write+0xa4/0xf0 [ 544.264553][T12868] ? vfs_write+0x427/0x4f0 [ 544.268945][T12868] ? fput_many+0x42/0x1a0 [ 544.273255][T12868] do_syscall_64+0xcb/0x150 [ 544.277747][T12868] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.283617][T12868] RIP: 0033:0x45c1f9 [ 544.287520][T12868] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 544.307116][T12868] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.315504][T12868] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 544.323460][T12868] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 544.331421][T12868] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 544.339383][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 21:06:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004043556e00400000000001090224000100000000090400000103010000092100d035927a930f4a001001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$cgroup_devices(r2, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) [ 544.347332][T12868] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 544.367215][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 544.374276][T10413] usb 1-1: can't set config #0, error -71 [ 544.384746][ T90] usbhid: probe of 4-1:0.0 failed with error -71 [ 544.393100][T10413] usb 1-1: USB disconnect, device number 81 21:06:38 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 544.399539][ T90] usb 4-1: USB disconnect, device number 105 [ 544.427167][T11147] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 544.440137][T11147] usb 3-1: can't read configurations, error -71 21:06:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:39 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:39 executing program 4 (fault-call:10 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 544.817188][T10413] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 544.827227][T11147] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 544.839089][T12900] FAULT_INJECTION: forcing a failure. [ 544.839089][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 544.851695][T12900] CPU: 1 PID: 12900 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 544.861825][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.871874][T12900] Call Trace: [ 544.875156][T12900] dump_stack+0x14a/0x1ce [ 544.879483][T12900] ? devkmsg_release+0x11c/0x11c [ 544.884409][T12900] ? alloc_vmap_area+0x1ab1/0x1bc0 [ 544.889511][T12900] ? show_regs_print_info+0x12/0x12 [ 544.894700][T12900] should_fail+0x6fb/0x860 [ 544.899103][T12900] ? setup_fault_attr+0x3d0/0x3d0 [ 544.904121][T12900] ? __get_vm_area_node+0x19e/0x340 [ 544.909309][T12900] ? __vmalloc_node_range+0x439/0x7b0 [ 544.914672][T12900] should_failslab+0x5/0x20 [ 544.919162][T12900] __kmalloc+0x5f/0x2d0 [ 544.923310][T12900] __vmalloc_node_range+0x439/0x7b0 [ 544.928494][T12900] ? __kmalloc+0xf7/0x2d0 [ 544.932804][T12900] __vmalloc+0x40/0x50 [ 544.936855][T12900] ? pcpu_create_chunk+0xb7/0x900 [ 544.941860][T12900] pcpu_create_chunk+0xb7/0x900 [ 544.946694][T12900] ? find_next_bit+0xd8/0x120 [ 544.951350][T12900] pcpu_alloc+0x696/0x11f0 [ 544.955750][T12900] htab_map_alloc+0x8e0/0x15b0 [ 544.960609][T12900] __do_sys_bpf+0x3743/0xbf40 [ 544.965271][T12900] ? _kstrtoull+0x38d/0x490 [ 544.969751][T12900] ? kstrtouint_from_user+0x22d/0x2b0 [ 544.975100][T12900] ? kstrtol_from_user+0x320/0x320 [ 544.980201][T12900] ? __kasan_slab_free+0x1f2/0x230 [ 544.985289][T12900] ? __bpf_prog_put_rcu+0x300/0x300 [ 544.990464][T12900] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 544.996854][T12900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 545.002897][T12900] ? get_pid_task+0x86/0x90 [ 545.007378][T12900] ? proc_fail_nth_write+0x18f/0x250 [ 545.012644][T12900] ? proc_fail_nth_read+0x1d0/0x1d0 [ 545.017821][T12900] ? proc_fail_nth_read+0x1d0/0x1d0 [ 545.022998][T12900] ? memset+0x1f/0x40 [ 545.026960][T12900] ? fsnotify+0x13a0/0x1460 [ 545.031444][T12900] ? __kernel_write+0x340/0x340 [ 545.036272][T12900] ? __fsnotify_parent+0x310/0x310 [ 545.041365][T12900] ? security_file_permission+0x128/0x300 [ 545.047060][T12900] ? __sb_end_write+0xa4/0xf0 [ 545.051714][T12900] ? vfs_write+0x427/0x4f0 [ 545.056104][T12900] ? fput_many+0x42/0x1a0 [ 545.060428][T12900] do_syscall_64+0xcb/0x150 [ 545.064911][T12900] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 545.070780][T12900] RIP: 0033:0x45c1f9 [ 545.074658][T12900] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.094240][T12900] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.102631][T12900] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 545.110580][T12900] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 21:06:39 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 545.118527][T12900] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 545.126480][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 545.134429][T12900] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:39 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="800e00000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x11}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 545.507232][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.518116][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.528853][T11147] usb 3-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 545.542408][T11147] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.556416][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 545.568316][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.580081][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 545.595489][T10413] usb 1-1: config 0 descriptor?? [ 545.600869][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.610024][T11147] usb 3-1: config 0 descriptor?? [ 545.658397][T11147] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 545.858645][T11147] usb 3-1: USB disconnect, device number 34 [ 545.957188][T10413] usbhid 1-1:0.0: can't add hid device: -71 [ 545.963147][T10413] usbhid: probe of 1-1:0.0 failed with error -71 [ 545.971807][T10413] usb 1-1: USB disconnect, device number 82 [ 546.417146][T11147] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 546.427673][T10413] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 546.797232][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.808143][T11147] usb 3-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 546.818332][T11147] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.832025][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.842208][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 546.851507][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 546.860846][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.869089][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.878264][T10413] usb 1-1: config 0 descriptor?? [ 546.883759][T11147] usb 3-1: config 0 descriptor?? [ 546.927714][T11147] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 548.037263][T10413] uclogic 0003:5543:006E.00BE: failed retrieving Huion firmware version: -71 [ 548.046084][T10413] uclogic 0003:5543:006E.00BE: failed probing parameters: -71 [ 548.055041][T10413] uclogic: probe of 0003:5543:006E.00BE failed with error -71 [ 548.063799][T10413] usb 1-1: USB disconnect, device number 83 21:06:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 548.777130][T11069] usb 1-1: new high-speed USB device number 84 using dummy_hcd 21:06:43 executing program 4 (fault-call:10 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:43 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001100000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x29}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000080)="57c2ff459674ea05f9faf7fa2ec164ec051094c7f1c71df500c07dfb5ceb579b629783aceadb09436047ed817e35b342e82224960e87", 0x36}, {&(0x7f00000001c0)="8dfb53c6e1a9f31420414b5834a97dcb99c49b63e793fe3397c4cf354f0421ea7932", 0x22}, {&(0x7f0000000200)="f884774812fecacdbbb664644a2c3917bc568a6f1af67424d6c0905c99746dcbc4624e83de3e903d7e359aeb180989c70e0dab1a213c656fc13f4aa31fadd06b598e687460f15fb164dd801acc43f02b1a450a2399f4bdefaa036ef6ab1beb6eb517ce049a8987c10442e6ff5d1ceee9ee54f8bf628752bc55b212c1c5eff9903c668bcf2ce0523788dd8d2444f0403b8e39b8c0dba64a6fb637eb69d85c00b181729f77e03c6ee8c49060b316cd6f", 0xaf}, {&(0x7f00000002c0)="c830e8900dae97b9a17f2f5d5e1f075cdd7ea7a68fccc550c5f7a506719fe90437794e65d585a476b7f3758d8dd6a7f7356db76019011601908e799e43f7cf984daf4263e7f2de0c47939a838ae9c488c10efd29dc8efb3dc97d0c620f8a9a1332593ba56d13c2c06bb2b953a1ed68558c48b0210b47bda4a74c2f962fff8b66942d111479b5bb27ac50c8be714d22fa08934370f955dc1c49f96439324f076c106bc65f1a7caea8b4dc9d44c2bd8451094f84972f476cb4c9c06fa95df14d5e87a5350b45e4690bec0cfc60a798784d3c53c3009a3c7e6644a576f934c9081f61", 0xe1}, {&(0x7f0000000400)="6cbbf66f2cbe3ebd15b577cb7074e410de224fd3ad5a7f7b215df7b42d11ac819c1406f5a8df20b2f60bbefb78c649383270073a7d857081479909c9298a7643163592f0eea3e3d57e4c856092189a3855dd3fba905ec47c0a14dc12a4f4e55d60b90be6d0e8c78cb8232d275b4cf4d9d7d2f7d7063f8dc945efd5c99956d6eff0fa84fbfe4778694d6725fcaab60525807756230759333889542f5177b1dfbfa977c3e031a2a0f677d9f29f87d5796949223286c170eb2ca6044b5692cd", 0xbe}, {&(0x7f0000000540)="fd77c7967bb556e82bd47fb52369902cd532130dff09d75b7e140ec12346f8bb0607fd116335dd7421549ce266e3c549c41a04f704158527b5a524685d9029705c7bc909645346658d587194c1ccbb70d0997689f8022fe92ffa81ef0968a1008926beca59766bead674c5b8c79b3343a157edf505fc0f9ce45fb6bbda4e9cf5882219fb43756a1283ff9598566ac97b9f122014339324100d853e216dbee4a70c142b2368bbc42e8b867c898431534625496b99e7b537aa8005f65743dd02", 0xbf}, {&(0x7f0000000680)="9957369cece94d4bb34740fd66bcb54b4af3a34de908376c5d75f91bdaaa24ed0e167de6c10e314c64be2f11f8c0bf79546fab40e4ed4671404fc938605c282f7a1a5cf476156a8d0d658ff63f07bb3a4144a3ddc5e1823e06d8f0c8d6a4ee969dc6c652aac4c4d3a1577244523f79abae4a41f964dcff88e8caf37b5c7a04ebc654c0c387d34ab0aeb8ab", 0x8b}], 0x8, 0x9) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000337b3f8b74c2a60ad395ae360459d72dd9045a1cf3c362c72f1a04221167348620b30fe1fafd4e3ebdbca2fe840e360"], 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x4}]}]}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000840)={@private, @rand_addr, 0x0}, &(0x7f0000000880)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040008000000236e21e90704b7a3a10b40000100240001006c625f686173685f73746174730000000000000f000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000004000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=r7, @ANYBLOB], 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 21:06:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="400334000000000347d680f551e9efbcfb362800ee8322688eb2f5228e2ff17d149873d6f2e957a126dc586246122c1e2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adb3c100046fb3f6ee281340833e06f42270babf3dc116ad402f9ff36e8d0721d10646f00b1e60152a8a0a26cb403f42de9f6913963b7da703c3a70d14437a238e155c02155ba3"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 548.869282][T11307] usb 3-1: USB disconnect, device number 35 [ 548.943457][T12972] FAULT_INJECTION: forcing a failure. [ 548.943457][T12972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.956711][T12972] CPU: 1 PID: 12972 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 548.966835][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.976858][T12972] Call Trace: [ 548.980120][T12972] dump_stack+0x14a/0x1ce [ 548.984423][T12972] ? devkmsg_release+0x11c/0x11c [ 548.989331][T12972] ? show_regs_print_info+0x12/0x12 [ 548.994501][T12972] ? __vmalloc+0x40/0x50 [ 548.998747][T12972] ? pcpu_alloc+0x696/0x11f0 [ 549.003338][T12972] ? htab_map_alloc+0x8e0/0x15b0 [ 549.008244][T12972] ? __do_sys_bpf+0x3743/0xbf40 [ 549.013064][T12972] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 549.019100][T12972] should_fail+0x6fb/0x860 [ 549.023490][T12972] ? setup_fault_attr+0x3d0/0x3d0 [ 549.028612][T12972] __alloc_pages_nodemask+0x1ee/0x7c0 [ 549.033971][T12972] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 549.039505][T12972] ? __vmalloc_node_range+0x439/0x7b0 [ 549.044859][T12972] ? __vmalloc_node_range+0x439/0x7b0 [ 549.050210][T12972] __vmalloc_node_range+0x360/0x7b0 [ 549.055387][T12972] __vmalloc+0x40/0x50 [ 549.059437][T12972] ? pcpu_create_chunk+0xb7/0x900 [ 549.064442][T12972] pcpu_create_chunk+0xb7/0x900 [ 549.069274][T12972] ? find_next_bit+0xd8/0x120 [ 549.073926][T12972] pcpu_alloc+0x696/0x11f0 [ 549.078332][T12972] htab_map_alloc+0x8e0/0x15b0 [ 549.083079][T12972] __do_sys_bpf+0x3743/0xbf40 [ 549.087735][T12972] ? _kstrtoull+0x38d/0x490 [ 549.092239][T12972] ? kstrtouint_from_user+0x22d/0x2b0 [ 549.097589][T12972] ? kstrtol_from_user+0x320/0x320 [ 549.102676][T12972] ? __kasan_slab_free+0x1f2/0x230 [ 549.107764][T12972] ? __bpf_prog_put_rcu+0x300/0x300 [ 549.112942][T12972] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 549.119333][T12972] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 549.125378][T12972] ? get_pid_task+0x86/0x90 [ 549.129859][T12972] ? proc_fail_nth_write+0x18f/0x250 [ 549.135134][T12972] ? proc_fail_nth_read+0x1d0/0x1d0 [ 549.140311][T12972] ? proc_fail_nth_read+0x1d0/0x1d0 [ 549.145487][T12972] ? memset+0x1f/0x40 [ 549.149447][T12972] ? fsnotify+0x13a0/0x1460 [ 549.153929][T12972] ? __kernel_write+0x340/0x340 [ 549.158763][T12972] ? __fsnotify_parent+0x310/0x310 [ 549.163852][T12972] ? security_file_permission+0x128/0x300 [ 549.169548][T12972] ? __sb_end_write+0xa4/0xf0 [ 549.174204][T12972] ? vfs_write+0x427/0x4f0 [ 549.178598][T12972] ? fput_many+0x42/0x1a0 [ 549.182907][T12972] do_syscall_64+0xcb/0x150 [ 549.187391][T12972] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 549.193258][T12972] RIP: 0033:0x45c1f9 [ 549.197144][T12972] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 549.216983][T12972] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.225383][T12972] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 549.233332][T12972] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 21:06:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x2b}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 549.241281][T12972] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 549.249228][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 549.257175][T12972] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:06:43 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="003c00000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 549.337218][ T3165] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 549.357551][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.373462][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.383323][T11069] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 549.392811][T11069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.404189][T11069] usb 1-1: config 0 descriptor?? 21:06:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x2c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 549.467162][T11307] usb 3-1: new high-speed USB device number 36 using dummy_hcd 21:06:43 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="004000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x2f}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:44 executing program 4 (fault-call:10 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 549.707365][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.718365][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.733439][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 549.742633][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.750955][T11069] usbhid 1-1:0.0: can't add hid device: -71 [ 549.756929][T11069] usbhid: probe of 1-1:0.0 failed with error -71 [ 549.761055][T13005] FAULT_INJECTION: forcing a failure. [ 549.761055][T13005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.765791][ T3165] usb 4-1: config 0 descriptor?? [ 549.776458][T13005] CPU: 1 PID: 13005 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 549.776463][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.776466][T13005] Call Trace: [ 549.776487][T13005] dump_stack+0x14a/0x1ce [ 549.784167][T11069] usb 1-1: USB disconnect, device number 84 [ 549.791549][T13005] ? devkmsg_release+0x11c/0x11c [ 549.791560][T13005] ? show_regs_print_info+0x12/0x12 [ 549.791568][T13005] ? __vmalloc+0x40/0x50 [ 549.791582][T13005] ? pcpu_alloc+0x696/0x11f0 [ 549.833944][T13005] ? __do_sys_bpf+0x3743/0xbf40 [ 549.838773][T13005] ? kasan_alloc_pages+0x4a/0x60 [ 549.843703][T13005] should_fail+0x6fb/0x860 [ 549.848101][T13005] ? setup_fault_attr+0x3d0/0x3d0 [ 549.853107][T13005] __alloc_pages_nodemask+0x1ee/0x7c0 [ 549.858457][T13005] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 549.863996][T13005] ? __vmalloc_node_range+0x439/0x7b0 [ 549.869345][T13005] ? __vmalloc_node_range+0x439/0x7b0 [ 549.874695][T13005] __vmalloc_node_range+0x360/0x7b0 [ 549.879886][T13005] __vmalloc+0x40/0x50 [ 549.883939][T13005] ? pcpu_create_chunk+0xb7/0x900 [ 549.888944][T13005] pcpu_create_chunk+0xb7/0x900 [ 549.893773][T13005] ? find_next_bit+0xd8/0x120 [ 549.898426][T13005] pcpu_alloc+0x696/0x11f0 [ 549.902824][T13005] htab_map_alloc+0x8e0/0x15b0 [ 549.907567][T13005] __do_sys_bpf+0x3743/0xbf40 [ 549.912221][T13005] ? _kstrtoull+0x38d/0x490 [ 549.916719][T13005] ? kstrtouint_from_user+0x22d/0x2b0 [ 549.922068][T13005] ? kstrtol_from_user+0x320/0x320 [ 549.927160][T13005] ? __kasan_slab_free+0x1f2/0x230 [ 549.932248][T13005] ? __bpf_prog_put_rcu+0x300/0x300 [ 549.937419][T13005] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 549.943810][T13005] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 549.949854][T13005] ? get_pid_task+0x86/0x90 [ 549.954350][T13005] ? proc_fail_nth_write+0x18f/0x250 [ 549.959624][T13005] ? proc_fail_nth_read+0x1d0/0x1d0 [ 549.964822][T13005] ? proc_fail_nth_read+0x1d0/0x1d0 [ 549.970028][T13005] ? memset+0x1f/0x40 [ 549.974001][T13005] ? fsnotify+0x13a0/0x1460 [ 549.978485][T13005] ? __kernel_write+0x340/0x340 [ 549.983318][T13005] ? __fsnotify_parent+0x310/0x310 [ 549.988412][T13005] ? security_file_permission+0x128/0x300 [ 549.994113][T13005] ? __sb_end_write+0xa4/0xf0 [ 549.998771][T13005] ? vfs_write+0x427/0x4f0 [ 550.003166][T13005] ? fput_many+0x42/0x1a0 [ 550.007477][T13005] do_syscall_64+0xcb/0x150 [ 550.011962][T13005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 550.017845][T13005] RIP: 0033:0x45c1f9 [ 550.021730][T13005] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 550.041487][T13005] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.049876][T13005] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 550.057831][T13005] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 550.065783][T13005] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 550.073731][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 550.081690][T13005] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 550.108688][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.129449][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.139976][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 550.150285][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.159266][T11307] usb 3-1: config 0 descriptor?? [ 550.407180][ T3165] usbhid 4-1:0.0: can't add hid device: -71 [ 550.413166][ T3165] usbhid: probe of 4-1:0.0 failed with error -71 [ 550.421879][ T3165] usb 4-1: USB disconnect, device number 106 [ 550.497188][T11069] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 550.547472][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 550.553432][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 550.562235][T11307] usb 3-1: USB disconnect, device number 36 [ 550.877200][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.888167][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.898609][T11069] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 550.907887][T11069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.916504][T11069] usb 1-1: config 0 descriptor?? [ 550.927201][ T3165] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 551.017145][T11307] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 551.197170][ T3165] usb 4-1: device descriptor read/64, error 18 [ 551.388068][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.398999][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.409496][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 551.418909][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.427841][T11307] usb 3-1: config 0 descriptor?? [ 551.597135][ T3165] usb 4-1: device descriptor read/64, error 18 [ 551.877164][ T3165] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 552.067241][T11069] uclogic 0003:5543:006E.00BF: failed retrieving Huion firmware version: -71 [ 552.076148][T11069] uclogic 0003:5543:006E.00BF: failed probing parameters: -71 [ 552.085159][T11069] uclogic: probe of 0003:5543:006E.00BF failed with error -71 [ 552.094081][T11069] usb 1-1: USB disconnect, device number 85 21:06:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x65, @string={0x65, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f422"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:46 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e8000000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x3c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:46 executing program 4 (fault-call:10 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000334000000000347709ddd6de9efbcfb362800ea8322688eb2e088f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 552.602736][T13051] FAULT_INJECTION: forcing a failure. [ 552.602736][T13051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.616060][T13051] CPU: 1 PID: 13051 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 552.626193][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.636227][T13051] Call Trace: [ 552.639526][T13051] dump_stack+0x14a/0x1ce [ 552.643829][T13051] ? devkmsg_release+0x11c/0x11c [ 552.648742][T13051] ? show_regs_print_info+0x12/0x12 [ 552.653935][T13051] ? __vmalloc+0x40/0x50 [ 552.658156][T13051] ? pcpu_alloc+0x696/0x11f0 [ 552.662727][T13051] ? __do_sys_bpf+0x3743/0xbf40 [ 552.667557][T13051] ? kasan_alloc_pages+0x4a/0x60 [ 552.672484][T13051] should_fail+0x6fb/0x860 [ 552.676878][T13051] ? setup_fault_attr+0x3d0/0x3d0 [ 552.681884][T13051] __alloc_pages_nodemask+0x1ee/0x7c0 [ 552.687238][T13051] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 552.692761][T13051] ? __vmalloc_node_range+0x439/0x7b0 [ 552.698125][T13051] ? __vmalloc_node_range+0x439/0x7b0 [ 552.703476][T13051] __vmalloc_node_range+0x360/0x7b0 [ 552.708666][T13051] __vmalloc+0x40/0x50 [ 552.712718][T13051] ? pcpu_create_chunk+0xb7/0x900 [ 552.717719][T13051] pcpu_create_chunk+0xb7/0x900 [ 552.722555][T13051] ? find_next_bit+0xd8/0x120 [ 552.727992][T13051] pcpu_alloc+0x696/0x11f0 [ 552.732405][T13051] htab_map_alloc+0x8e0/0x15b0 [ 552.737152][T13051] __do_sys_bpf+0x3743/0xbf40 [ 552.741811][T13051] ? _kstrtoull+0x38d/0x490 [ 552.746293][T13051] ? kstrtouint_from_user+0x22d/0x2b0 [ 552.751644][T13051] ? kstrtol_from_user+0x320/0x320 [ 552.756731][T13051] ? __kasan_slab_free+0x1f2/0x230 [ 552.761820][T13051] ? __bpf_prog_put_rcu+0x300/0x300 [ 552.767024][T13051] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 552.773418][T13051] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 552.779461][T13051] ? get_pid_task+0x86/0x90 [ 552.783941][T13051] ? proc_fail_nth_write+0x18f/0x250 [ 552.789203][T13051] ? proc_fail_nth_read+0x1d0/0x1d0 [ 552.794405][T13051] ? proc_fail_nth_read+0x1d0/0x1d0 [ 552.800555][T13051] ? memset+0x1f/0x40 [ 552.804545][T13051] ? fsnotify+0x13a0/0x1460 [ 552.809039][T13051] ? __kernel_write+0x340/0x340 [ 552.813868][T13051] ? __fsnotify_parent+0x310/0x310 [ 552.818958][T13051] ? security_file_permission+0x128/0x300 [ 552.824657][T13051] ? __sb_end_write+0xa4/0xf0 [ 552.829314][T13051] ? vfs_write+0x427/0x4f0 [ 552.833706][T13051] ? fput_many+0x42/0x1a0 [ 552.838019][T13051] do_syscall_64+0xcb/0x150 [ 552.842504][T13051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 552.848379][T13051] RIP: 0033:0x45c1f9 [ 552.852289][T13051] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 552.871876][T13051] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.880265][T13051] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 552.888561][T13051] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 552.896514][T13051] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 552.904464][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 552.912412][T13051] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 553.067166][T11069] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 553.207142][ T3165] usb 4-1: device descriptor read/64, error -71 21:06:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xb05, 0x1822, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1110b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x40, 0xb, 0xa9, {0xa9, 0x22, "0222a48a5e408123cef8d071013738d098d5fac1f2b9ff7458c1359641f34facbfdaf52f453ca32a4704d487230ff3518c715da2ab8b515fa19798379285e0ac3d6b67c02df7a949ef3b47485cbfd9224430acc095f346e2bdb94b925d6911b7a9a80a0a1e772e8dcc0bed551e18c19c14dd450a9beab8296b4e8431dd20773d34ebef36ed04f5c8a1e2520d3e738fbe32ec0f1bb7950fcf328522521913509aeb7bf4696da683"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x81, 0x3f, "120fe5e7", "9c55d7ad"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1d, 0x8, 0x5, 0x6, 0x9, 0x3f, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0x8, 0x31, "af99987336818fed7f1862dc82e87b9ef1f6d2154becdffafb07d85d9baf17159d3e91ceea1e444e6e4f7967e48f6ba78e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0xa0, 0x0, [0x1e000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x25}, &(0x7f0000000580)={0x40, 0xb, 0x2, "e601"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfd26}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="979d74cb9c5b"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b962"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) 21:06:47 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000010000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:47 executing program 4 (fault-call:10 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x94}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 553.407238][T11307] usb 3-1: string descriptor 0 read error: -71 [ 553.427275][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.438363][T11307] uclogic 0003:5543:006E.00C0: failed retrieving string descriptor #200: -71 [ 553.450128][T13071] FAULT_INJECTION: forcing a failure. [ 553.450128][T13071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 553.463314][T13071] CPU: 0 PID: 13071 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 553.473431][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.483460][T13071] Call Trace: [ 553.486739][T13071] dump_stack+0x14a/0x1ce [ 553.491043][T13071] ? devkmsg_release+0x11c/0x11c [ 553.495953][T13071] ? show_regs_print_info+0x12/0x12 [ 553.501121][T13071] ? __vmalloc+0x40/0x50 [ 553.505332][T13071] ? pcpu_alloc+0x696/0x11f0 [ 553.509893][T13071] ? __do_sys_bpf+0x3743/0xbf40 [ 553.514712][T13071] ? kasan_alloc_pages+0x4a/0x60 [ 553.519652][T13071] should_fail+0x6fb/0x860 [ 553.524040][T13071] ? setup_fault_attr+0x3d0/0x3d0 [ 553.529067][T13071] __alloc_pages_nodemask+0x1ee/0x7c0 [ 553.534427][T13071] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 553.539974][T13071] ? __vmalloc_node_range+0x439/0x7b0 [ 553.545345][T13071] ? __vmalloc_node_range+0x439/0x7b0 [ 553.550712][T13071] __vmalloc_node_range+0x360/0x7b0 [ 553.555903][T13071] __vmalloc+0x40/0x50 [ 553.559953][T13071] ? pcpu_create_chunk+0xb7/0x900 [ 553.564958][T13071] pcpu_create_chunk+0xb7/0x900 [ 553.569792][T13071] ? find_next_bit+0xd8/0x120 [ 553.574447][T13071] pcpu_alloc+0x696/0x11f0 [ 553.578852][T13071] htab_map_alloc+0x8e0/0x15b0 [ 553.583599][T13071] __do_sys_bpf+0x3743/0xbf40 [ 553.588255][T13071] ? _kstrtoull+0x38d/0x490 [ 553.592737][T13071] ? kstrtouint_from_user+0x22d/0x2b0 [ 553.598084][T13071] ? kstrtol_from_user+0x320/0x320 [ 553.603171][T13071] ? __kasan_slab_free+0x1f2/0x230 [ 553.608258][T13071] ? __bpf_prog_put_rcu+0x300/0x300 [ 553.613442][T13071] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 553.619851][T13071] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 553.625898][T13071] ? get_pid_task+0x86/0x90 [ 553.630380][T13071] ? proc_fail_nth_write+0x18f/0x250 [ 553.635639][T13071] ? proc_fail_nth_read+0x1d0/0x1d0 [ 553.640814][T13071] ? proc_fail_nth_read+0x1d0/0x1d0 [ 553.645987][T13071] ? memset+0x1f/0x40 [ 553.649946][T13071] ? fsnotify+0x13a0/0x1460 [ 553.654428][T13071] ? __kernel_write+0x340/0x340 [ 553.659255][T13071] ? __fsnotify_parent+0x310/0x310 [ 553.664362][T13071] ? security_file_permission+0x128/0x300 [ 553.670055][T13071] ? __sb_end_write+0xa4/0xf0 [ 553.674737][T13071] ? vfs_write+0x427/0x4f0 [ 553.679148][T13071] ? fput_many+0x42/0x1a0 [ 553.683459][T13071] do_syscall_64+0xcb/0x150 [ 553.687947][T13071] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 553.693814][T13071] RIP: 0033:0x45c1f9 [ 553.697684][T13071] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 553.717266][T13071] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.725654][T13071] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 553.733605][T13071] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 553.741553][T13071] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 553.749502][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 553.757553][T13071] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 553.775665][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.793382][T11307] uclogic 0003:5543:006E.00C0: failed retrieving pen parameters: -71 21:06:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:48 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000020000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 553.801603][T11069] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 553.810666][T11307] uclogic 0003:5543:006E.00C0: failed probing pen v2 parameters: -71 [ 553.819284][T11069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.827311][T11307] uclogic 0003:5543:006E.00C0: failed probing parameters: -71 [ 553.834823][T11307] uclogic: probe of 0003:5543:006E.00C0 failed with error -71 [ 553.843197][T11069] usb 1-1: config 0 descriptor?? [ 553.849413][T11307] usb 3-1: USB disconnect, device number 37 21:06:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 554.007236][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.018478][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.028403][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 554.037517][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.046371][ T3165] usb 4-1: config 0 descriptor?? [ 554.187243][T11069] usbhid 1-1:0.0: can't add hid device: -71 [ 554.194721][T11069] usbhid: probe of 1-1:0.0 failed with error -71 [ 554.202105][T11307] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 554.210420][T11069] usb 1-1: USB disconnect, device number 86 [ 554.387178][ T3165] usbhid 4-1:0.0: can't add hid device: -71 [ 554.393186][ T3165] usbhid: probe of 4-1:0.0 failed with error -71 [ 554.401480][ T3165] usb 4-1: USB disconnect, device number 108 [ 554.567209][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.578343][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.588279][T11307] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 554.597359][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.607772][T11307] usb 3-1: config 0 descriptor?? [ 554.657219][T11069] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 554.857176][ T3165] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 554.887338][T11307] usb 3-1: string descriptor 0 read error: -71 [ 554.987178][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 554.993157][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 555.000479][T11307] usb 3-1: USB disconnect, device number 38 [ 555.017196][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.028119][T11069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.038442][T11069] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 555.047913][T11069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.060356][T11069] usb 1-1: config 0 descriptor?? [ 555.217228][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.228141][ T3165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.238106][ T3165] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 555.247301][ T3165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.255864][ T3165] usb 4-1: config 0 descriptor?? [ 555.447146][T11307] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 555.807216][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.818119][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.827865][T11307] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 555.836891][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.845664][T11307] usb 3-1: config 0 descriptor?? [ 555.957264][ T3165] usb 4-1: string descriptor 0 read error: -22 [ 556.179232][ T3165] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C2/input/input80 [ 556.192529][ T3165] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C2/input/input81 [ 556.216245][ T3165] uclogic 0003:5543:006E.00C2: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 556.229292][T11069] uclogic 0003:5543:006E.00C1: failed retrieving Huion firmware version: -71 [ 556.239271][T11069] uclogic 0003:5543:006E.00C1: failed probing parameters: -71 [ 556.246740][T11069] uclogic: probe of 0003:5543:006E.00C1 failed with error -71 [ 556.256759][T11069] usb 1-1: USB disconnect, device number 87 [ 556.367201][T11307] usb 3-1: string descriptor 0 read error: -22 [ 556.379839][T11147] usb 4-1: USB disconnect, device number 109 21:06:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:51 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000110000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:51 executing program 4 (fault-call:10 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 556.741570][T13137] FAULT_INJECTION: forcing a failure. [ 556.741570][T13137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.755134][T13137] CPU: 1 PID: 13137 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 556.765357][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.775391][T13137] Call Trace: [ 556.778681][T13137] dump_stack+0x14a/0x1ce [ 556.782991][T13137] ? devkmsg_release+0x11c/0x11c [ 556.787907][T13137] ? show_regs_print_info+0x12/0x12 [ 556.793100][T13137] ? __vmalloc+0x40/0x50 [ 556.797321][T13137] ? pcpu_alloc+0x696/0x11f0 [ 556.801892][T13137] ? __do_sys_bpf+0x3743/0xbf40 [ 556.806719][T13137] ? kasan_alloc_pages+0x4a/0x60 [ 556.811635][T13137] should_fail+0x6fb/0x860 [ 556.816046][T13137] ? setup_fault_attr+0x3d0/0x3d0 [ 556.821053][T13137] __alloc_pages_nodemask+0x1ee/0x7c0 [ 556.826411][T13137] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 556.831936][T13137] ? __vmalloc_node_range+0x439/0x7b0 [ 556.837306][T13137] ? __vmalloc_node_range+0x439/0x7b0 [ 556.842657][T13137] __vmalloc_node_range+0x360/0x7b0 [ 556.847839][T13137] __vmalloc+0x40/0x50 [ 556.851890][T13137] ? pcpu_create_chunk+0xb7/0x900 [ 556.856910][T13137] pcpu_create_chunk+0xb7/0x900 [ 556.861742][T13137] ? find_next_bit+0xd8/0x120 [ 556.866399][T13137] pcpu_alloc+0x696/0x11f0 [ 556.870799][T13137] htab_map_alloc+0x8e0/0x15b0 [ 556.875545][T13137] __do_sys_bpf+0x3743/0xbf40 [ 556.880214][T13137] ? _kstrtoull+0x38d/0x490 [ 556.884698][T13137] ? kstrtouint_from_user+0x22d/0x2b0 [ 556.890052][T13137] ? kstrtol_from_user+0x320/0x320 [ 556.895138][T13137] ? __kasan_slab_free+0x1f2/0x230 [ 556.900229][T13137] ? __bpf_prog_put_rcu+0x300/0x300 [ 556.905418][T13137] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 556.911824][T13137] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.917871][T13137] ? get_pid_task+0x86/0x90 [ 556.922354][T13137] ? proc_fail_nth_write+0x18f/0x250 [ 556.927614][T13137] ? proc_fail_nth_read+0x1d0/0x1d0 [ 556.932963][T13137] ? proc_fail_nth_read+0x1d0/0x1d0 [ 556.938156][T13137] ? memset+0x1f/0x40 [ 556.942117][T13137] ? fsnotify+0x13a0/0x1460 [ 556.946600][T13137] ? __kernel_write+0x340/0x340 [ 556.951446][T13137] ? __fsnotify_parent+0x310/0x310 [ 556.956551][T13137] ? security_file_permission+0x128/0x300 [ 556.962250][T13137] ? __sb_end_write+0xa4/0xf0 [ 556.966906][T13137] ? vfs_write+0x427/0x4f0 [ 556.971312][T13137] ? fput_many+0x42/0x1a0 [ 556.975623][T13137] do_syscall_64+0xcb/0x150 [ 556.980107][T13137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.985982][T13137] RIP: 0033:0x45c1f9 [ 556.989857][T13137] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 557.009439][T13137] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.017913][T13137] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 557.025893][T13137] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 557.033839][T13137] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 557.041787][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 557.049911][T13137] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 557.059406][T13139] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 557.147195][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 557.153196][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 557.160782][T11307] usb 3-1: USB disconnect, device number 39 [ 557.217148][T11147] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 557.427328][T11146] usb 4-1: new high-speed USB device number 110 using dummy_hcd 21:06:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 557.577287][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.588411][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.598797][T11147] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 557.608141][T11147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.616726][T11147] usb 1-1: config 0 descriptor?? [ 557.837146][T11307] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 557.957204][T11147] usbhid 1-1:0.0: can't add hid device: -71 [ 557.963177][T11147] usbhid: probe of 1-1:0.0 failed with error -71 [ 557.971523][T11147] usb 1-1: USB disconnect, device number 88 [ 558.217192][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.228163][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.238140][T11307] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 558.247197][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.255796][T11307] usb 3-1: config 0 descriptor?? 21:06:52 executing program 4 (fault-call:10 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:52 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000003c0000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$char_raw(r2, &(0x7f0000000e00)={"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"}, 0x1200) 21:06:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0xffffffffffffff32, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3e1b670f0011b66f43e405428d019db44165ec6a54b0e6952ed68cb97f0f910c794fbace5e8b945070693cd95de3467d848b0ebe2c6136c8a5a1e87091417ce7f7da51d3697ad5c6168295582df46a9846b8727d2d59a7d0821269c02a94c6d9328ba04e7b9652a1c67eb2da3c176941156b247b3deebbc4adf9f99a6534761df4b804bcc2eb98010b8f5b17f55a2f95f243bfd25c6b83a77c7f3e70d7e6d6c4357b9a53a86fadcaad878f", @ANYRESDEC=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1110b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1110b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "2ccb247d040c8dff3c7f6930ee2ed37e98c77c88049ea6a640d7986cfa9ce6eaab3386b1c1c3b47a1c510c82787b4f9d0df396d47bdbc44832a5f4157b70700069d927dd5d558038c5043555ae2b22e46e911e8305c4b959e9de7f636caae99ae11d6bc51f07ff3641c2ecf3b2a36a4a3796de9567b14862bbe1a6b72a9c796f627c2b5918aba5edcaa0190074402dd2a5f5beb3e79069e08c40541339b752e7659b078a0d23c91bd070e70c3af319382710edd5ff03f0342b00b242f036edc26a06a59da76fcfda62ffdaea5fed3132d9ab607a2f968cdc0c6dbed25f8bf64a3cd33e"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 558.417180][T11307] usb 3-1: string descriptor 0 read error: -71 [ 558.437308][T11147] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 558.450889][T13177] FAULT_INJECTION: forcing a failure. [ 558.450889][T13177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:06:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 558.464348][T13177] CPU: 0 PID: 13177 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 558.474485][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.484525][T13177] Call Trace: [ 558.487812][T13177] dump_stack+0x14a/0x1ce [ 558.492135][T13177] ? devkmsg_release+0x11c/0x11c [ 558.497077][T13177] ? show_regs_print_info+0x12/0x12 [ 558.502281][T13177] ? __vmalloc+0x40/0x50 [ 558.506517][T13177] ? pcpu_alloc+0x696/0x11f0 [ 558.511104][T13177] ? __do_sys_bpf+0x3743/0xbf40 [ 558.515936][T13177] ? kasan_alloc_pages+0x4a/0x60 [ 558.520844][T13177] should_fail+0x6fb/0x860 [ 558.525228][T13177] ? setup_fault_attr+0x3d0/0x3d0 [ 558.530224][T13177] __alloc_pages_nodemask+0x1ee/0x7c0 [ 558.535568][T13177] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 558.541092][T13177] ? __vmalloc_node_range+0x439/0x7b0 [ 558.546444][T13177] ? __vmalloc_node_range+0x439/0x7b0 [ 558.551804][T13177] __vmalloc_node_range+0x360/0x7b0 [ 558.556982][T13177] __vmalloc+0x40/0x50 [ 558.561032][T13177] ? pcpu_create_chunk+0xb7/0x900 [ 558.566046][T13177] pcpu_create_chunk+0xb7/0x900 [ 558.570893][T13177] ? find_next_bit+0xd8/0x120 [ 558.575554][T13177] pcpu_alloc+0x696/0x11f0 [ 558.579973][T13177] htab_map_alloc+0x8e0/0x15b0 [ 558.584719][T13177] __do_sys_bpf+0x3743/0xbf40 [ 558.589374][T13177] ? _kstrtoull+0x38d/0x490 [ 558.593857][T13177] ? kstrtouint_from_user+0x22d/0x2b0 [ 558.599210][T13177] ? kstrtol_from_user+0x320/0x320 [ 558.604303][T13177] ? __kasan_slab_free+0x1f2/0x230 [ 558.609392][T13177] ? __bpf_prog_put_rcu+0x300/0x300 [ 558.614672][T13177] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 558.621076][T13177] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.627129][T13177] ? get_pid_task+0x86/0x90 [ 558.631611][T13177] ? proc_fail_nth_write+0x18f/0x250 [ 558.636888][T13177] ? proc_fail_nth_read+0x1d0/0x1d0 [ 558.642065][T13177] ? proc_fail_nth_read+0x1d0/0x1d0 [ 558.647256][T13177] ? memset+0x1f/0x40 [ 558.651230][T13177] ? fsnotify+0x13a0/0x1460 [ 558.655713][T13177] ? __kernel_write+0x340/0x340 [ 558.660547][T13177] ? __fsnotify_parent+0x310/0x310 [ 558.665652][T13177] ? security_file_permission+0x128/0x300 [ 558.671350][T13177] ? __sb_end_write+0xa4/0xf0 [ 558.676004][T13177] ? vfs_write+0x427/0x4f0 [ 558.680413][T13177] ? fput_many+0x42/0x1a0 [ 558.684725][T13177] do_syscall_64+0xcb/0x150 [ 558.689222][T13177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.695091][T13177] RIP: 0033:0x45c1f9 [ 558.698961][T13177] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 558.718542][T13177] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.726937][T13177] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 558.734884][T13177] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 558.742852][T13177] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 558.750803][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 558.758752][T13177] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 558.837295][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 558.843304][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 558.855086][T11307] usb 3-1: USB disconnect, device number 40 21:06:53 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000400000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 559.087264][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.098196][T11146] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 559.106296][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.116081][T11147] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 559.125199][T11147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.134072][T11147] usb 1-1: config 0 descriptor?? [ 559.207160][T11307] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 559.467306][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.478212][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.488666][T11146] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 559.497973][T11146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.506580][T11146] usb 4-1: config 0 descriptor?? [ 559.567199][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.578125][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.589067][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 559.598536][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.608267][T11307] usb 3-1: config 0 descriptor?? [ 559.827238][T11147] usb 1-1: string descriptor 0 read error: -22 [ 559.847189][T11146] usbhid 4-1:0.0: can't add hid device: -71 [ 559.853256][T11146] usbhid: probe of 4-1:0.0 failed with error -71 [ 559.860741][T11146] usb 4-1: USB disconnect, device number 111 [ 559.947172][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 559.953139][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 559.960672][T11307] usb 3-1: USB disconnect, device number 41 [ 560.047203][T11147] uclogic 0003:5543:006E.00C3: failed retrieving string descriptor #200: -71 [ 560.056041][T11147] uclogic 0003:5543:006E.00C3: failed retrieving pen parameters: -71 [ 560.064162][T11147] uclogic 0003:5543:006E.00C3: failed probing pen v2 parameters: -71 [ 560.072332][T11147] uclogic 0003:5543:006E.00C3: failed probing parameters: -71 [ 560.080613][T11147] uclogic: probe of 0003:5543:006E.00C3 failed with error -71 [ 560.089390][T11147] usb 1-1: USB disconnect, device number 89 [ 560.337156][T11146] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 560.427138][T11307] usb 3-1: new high-speed USB device number 42 using dummy_hcd 21:06:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x11}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:54 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000e800000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:54 executing program 4 (fault-call:10 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 560.594990][T13224] FAULT_INJECTION: forcing a failure. [ 560.594990][T13224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.608943][T13224] CPU: 1 PID: 13224 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 560.619098][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.629155][T13224] Call Trace: [ 560.632435][T13224] dump_stack+0x14a/0x1ce [ 560.636754][T13224] ? devkmsg_release+0x11c/0x11c 21:06:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x29}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 560.641678][T13224] ? show_regs_print_info+0x12/0x12 [ 560.646867][T13224] ? __vmalloc+0x40/0x50 [ 560.651102][T13224] ? pcpu_alloc+0x696/0x11f0 [ 560.655687][T13224] ? __do_sys_bpf+0x3743/0xbf40 [ 560.660521][T13224] ? kasan_alloc_pages+0x4a/0x60 [ 560.665447][T13224] should_fail+0x6fb/0x860 [ 560.669852][T13224] ? setup_fault_attr+0x3d0/0x3d0 [ 560.674848][T13224] __alloc_pages_nodemask+0x1ee/0x7c0 [ 560.680191][T13224] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 560.685715][T13224] ? __vmalloc_node_range+0x439/0x7b0 [ 560.691070][T13224] ? __vmalloc_node_range+0x439/0x7b0 [ 560.696419][T13224] __vmalloc_node_range+0x360/0x7b0 [ 560.701600][T13224] __vmalloc+0x40/0x50 [ 560.705650][T13224] ? pcpu_create_chunk+0xb7/0x900 [ 560.710649][T13224] pcpu_create_chunk+0xb7/0x900 [ 560.715478][T13224] ? find_next_bit+0xd8/0x120 [ 560.720131][T13224] pcpu_alloc+0x696/0x11f0 [ 560.724917][T13224] htab_map_alloc+0x8e0/0x15b0 [ 560.729660][T13224] __do_sys_bpf+0x3743/0xbf40 [ 560.734315][T13224] ? _kstrtoull+0x38d/0x490 [ 560.738795][T13224] ? kstrtouint_from_user+0x22d/0x2b0 [ 560.744147][T13224] ? kstrtol_from_user+0x320/0x320 [ 560.749236][T13224] ? __kasan_slab_free+0x1f2/0x230 [ 560.754326][T13224] ? __bpf_prog_put_rcu+0x300/0x300 [ 560.759500][T13224] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 560.765890][T13224] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.771937][T13224] ? get_pid_task+0x86/0x90 [ 560.776416][T13224] ? proc_fail_nth_write+0x18f/0x250 [ 560.781679][T13224] ? proc_fail_nth_read+0x1d0/0x1d0 [ 560.786853][T13224] ? proc_fail_nth_read+0x1d0/0x1d0 [ 560.792027][T13224] ? memset+0x1f/0x40 [ 560.795985][T13224] ? fsnotify+0x13a0/0x1460 [ 560.800467][T13224] ? __kernel_write+0x340/0x340 [ 560.805293][T13224] ? __fsnotify_parent+0x310/0x310 [ 560.810386][T13224] ? security_file_permission+0x128/0x300 [ 560.816079][T13224] ? __sb_end_write+0xa4/0xf0 [ 560.820752][T13224] ? vfs_write+0x427/0x4f0 [ 560.825145][T13224] ? fput_many+0x42/0x1a0 [ 560.829455][T13224] do_syscall_64+0xcb/0x150 [ 560.833938][T13224] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.839808][T13224] RIP: 0033:0x45c1f9 [ 560.843683][T13224] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 560.863278][T13224] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.871754][T13224] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 560.879716][T13224] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 560.887674][T13224] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 560.895620][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 560.903571][T13224] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 560.997347][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.007224][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.008439][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.019409][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.030685][T11146] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 21:06:55 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7fffffff0000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 561.048206][T11146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.052431][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 561.062884][T11146] usb 4-1: config 0 descriptor?? [ 561.081019][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.087131][ T3198] usb 1-1: new high-speed USB device number 90 using dummy_hcd 21:06:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x2b}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 561.099347][T11307] usb 3-1: config 0 descriptor?? [ 561.477227][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.488215][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.498608][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 561.507931][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.516471][ T3198] usb 1-1: config 0 descriptor?? [ 561.615593][T13259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 561.623479][T13259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 561.777288][T11146] usb 4-1: string descriptor 0 read error: -22 [ 561.857171][ T3198] usbhid 1-1:0.0: can't add hid device: -71 [ 561.863208][ T3198] usbhid: probe of 1-1:0.0 failed with error -71 [ 561.870930][ T3198] usb 1-1: USB disconnect, device number 90 [ 561.998375][T11146] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C4/input/input82 [ 562.011742][T11146] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C4/input/input83 [ 562.032700][T11146] uclogic 0003:5543:006E.00C4: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 562.337142][ T3198] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 562.697264][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.708143][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.717174][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 562.718006][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 562.726225][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 562.732835][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.740981][T11307] usb 3-1: USB disconnect, device number 42 [ 562.749896][ T3198] usb 1-1: config 0 descriptor?? 21:06:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x2c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:57 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000001000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:57 executing program 4 (fault-call:10 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:06:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setfsuid(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ptrace$pokeuser(0x6, r2, 0x3076, 0x1) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 563.202032][T11307] usb 4-1: USB disconnect, device number 112 [ 563.291009][T13290] FAULT_INJECTION: forcing a failure. [ 563.291009][T13290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 563.304282][T13290] CPU: 0 PID: 13290 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 563.314462][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.324489][T13290] Call Trace: [ 563.327788][T13290] dump_stack+0x14a/0x1ce [ 563.332117][T13290] ? devkmsg_release+0x11c/0x11c [ 563.337043][T13290] ? show_regs_print_info+0x12/0x12 [ 563.342233][T13290] ? __vmalloc+0x40/0x50 [ 563.346477][T13290] ? pcpu_alloc+0x696/0x11f0 [ 563.351064][T13290] ? __do_sys_bpf+0x3743/0xbf40 [ 563.355910][T13290] ? kasan_alloc_pages+0x4a/0x60 [ 563.360833][T13290] should_fail+0x6fb/0x860 [ 563.365235][T13290] ? setup_fault_attr+0x3d0/0x3d0 [ 563.370231][T13290] __alloc_pages_nodemask+0x1ee/0x7c0 [ 563.375583][T13290] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 563.381109][T13290] ? __vmalloc_node_range+0x439/0x7b0 [ 563.386469][T13290] ? __vmalloc_node_range+0x439/0x7b0 [ 563.391820][T13290] __vmalloc_node_range+0x360/0x7b0 [ 563.397000][T13290] __vmalloc+0x40/0x50 [ 563.401054][T13290] ? pcpu_create_chunk+0xb7/0x900 [ 563.406058][T13290] pcpu_create_chunk+0xb7/0x900 [ 563.410892][T13290] ? find_next_bit+0xd8/0x120 [ 563.415548][T13290] pcpu_alloc+0x696/0x11f0 [ 563.419947][T13290] htab_map_alloc+0x8e0/0x15b0 [ 563.424712][T13290] __do_sys_bpf+0x3743/0xbf40 [ 563.429371][T13290] ? _kstrtoull+0x38d/0x490 [ 563.433852][T13290] ? kstrtouint_from_user+0x22d/0x2b0 [ 563.439204][T13290] ? kstrtol_from_user+0x320/0x320 [ 563.444305][T13290] ? __kasan_slab_free+0x1f2/0x230 [ 563.449395][T13290] ? __bpf_prog_put_rcu+0x300/0x300 [ 563.454570][T13290] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 563.460982][T13290] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 563.467027][T13290] ? get_pid_task+0x86/0x90 [ 563.471510][T13290] ? proc_fail_nth_write+0x18f/0x250 [ 563.476772][T13290] ? proc_fail_nth_read+0x1d0/0x1d0 [ 563.481978][T13290] ? proc_fail_nth_read+0x1d0/0x1d0 [ 563.487150][T13290] ? memset+0x1f/0x40 [ 563.491124][T13290] ? fsnotify+0x13a0/0x1460 [ 563.495617][T13290] ? __kernel_write+0x340/0x340 [ 563.500453][T13290] ? __fsnotify_parent+0x310/0x310 [ 563.505545][T13290] ? security_file_permission+0x128/0x300 [ 563.511283][T13290] ? __sb_end_write+0xa4/0xf0 [ 563.515950][T13290] ? vfs_write+0x427/0x4f0 [ 563.520352][T13290] ? fput_many+0x42/0x1a0 [ 563.524663][T13290] do_syscall_64+0xcb/0x150 [ 563.529147][T13290] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 563.535037][T13290] RIP: 0033:0x45c1f9 [ 563.538909][T13290] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.558496][T13290] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.566881][T13290] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 563.574830][T13290] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 563.582781][T13290] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 563.590727][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 563.598685][T13290] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 563.617268][ T3198] usb 1-1: string descriptor 0 read error: -22 [ 563.757151][T11221] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 563.837158][ T3198] uclogic 0003:5543:006E.00C5: failed retrieving string descriptor #200: -71 [ 563.846001][ T3198] uclogic 0003:5543:006E.00C5: failed retrieving pen parameters: -71 [ 563.854148][ T3198] uclogic 0003:5543:006E.00C5: failed probing pen v2 parameters: -71 [ 563.862439][ T3198] uclogic 0003:5543:006E.00C5: failed probing parameters: -71 [ 563.870111][ T3198] uclogic: probe of 0003:5543:006E.00C5 failed with error -71 [ 563.879220][ T3198] usb 1-1: USB disconnect, device number 91 [ 563.977216][T11307] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 564.127218][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.138116][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.148634][T11221] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 564.158060][T11221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.166639][T11221] usb 3-1: config 0 descriptor?? 21:06:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:06:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x2f}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:58 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000100006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:58 executing program 4 (fault-call:10 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 564.337250][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.356291][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.368335][T11307] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 564.377996][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.387254][T11307] usb 4-1: config 0 descriptor?? [ 564.402724][T13324] FAULT_INJECTION: forcing a failure. [ 564.402724][T13324] name failslab, interval 1, probability 0, space 0, times 0 [ 564.415507][T13324] CPU: 1 PID: 13324 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 564.425627][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.435669][T13324] Call Trace: [ 564.438934][T13324] dump_stack+0x14a/0x1ce [ 564.443236][T13324] ? devkmsg_release+0x11c/0x11c [ 564.448145][T13324] ? show_regs_print_info+0x12/0x12 [ 564.453312][T13324] should_fail+0x6fb/0x860 [ 564.457698][T13324] ? setup_fault_attr+0x3d0/0x3d0 [ 564.462725][T13324] ? __alloc_pages_nodemask+0x374/0x7c0 [ 564.468240][T13324] ? __get_vm_area_node+0x19e/0x340 [ 564.473407][T13324] should_failslab+0x5/0x20 [ 564.477880][T13324] kmem_cache_alloc_trace+0x39/0x280 [ 564.483132][T13324] ? vmap_page_range_noflush+0x657/0x680 [ 564.488732][T13324] __get_vm_area_node+0x19e/0x340 [ 564.493743][T13324] __vmalloc_node_range+0xf0/0x7b0 [ 564.498833][T13324] ? pcpu_create_chunk+0x104/0x900 [ 564.503923][T13324] __vmalloc+0x40/0x50 [ 564.507974][T13324] ? pcpu_create_chunk+0x104/0x900 [ 564.513066][T13324] pcpu_create_chunk+0x104/0x900 [ 564.517985][T13324] pcpu_alloc+0x696/0x11f0 [ 564.522399][T13324] htab_map_alloc+0x8e0/0x15b0 [ 564.527146][T13324] __do_sys_bpf+0x3743/0xbf40 [ 564.531803][T13324] ? _kstrtoull+0x38d/0x490 [ 564.536303][T13324] ? kstrtouint_from_user+0x22d/0x2b0 [ 564.541654][T13324] ? kstrtol_from_user+0x320/0x320 [ 564.546741][T13324] ? __kasan_slab_free+0x1f2/0x230 [ 564.551828][T13324] ? __bpf_prog_put_rcu+0x300/0x300 [ 564.557001][T13324] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 564.563394][T13324] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 564.569440][T13324] ? get_pid_task+0x86/0x90 [ 564.573922][T13324] ? proc_fail_nth_write+0x18f/0x250 [ 564.579184][T13324] ? proc_fail_nth_read+0x1d0/0x1d0 [ 564.584372][T13324] ? proc_fail_nth_read+0x1d0/0x1d0 [ 564.589559][T13324] ? memset+0x1f/0x40 [ 564.593526][T13324] ? fsnotify+0x13a0/0x1460 [ 564.598008][T13324] ? __kernel_write+0x340/0x340 [ 564.602889][T13324] ? __fsnotify_parent+0x310/0x310 [ 564.607987][T13324] ? security_file_permission+0x128/0x300 [ 564.613680][T13324] ? __sb_end_write+0xa4/0xf0 [ 564.618351][T13324] ? vfs_write+0x427/0x4f0 [ 564.622758][T13324] ? fput_many+0x42/0x1a0 [ 564.627070][T13324] do_syscall_64+0xcb/0x150 [ 564.631562][T13324] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 564.637436][T13324] RIP: 0033:0x45c1f9 [ 564.641308][T13324] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.660895][T13324] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.669283][T13324] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 564.677232][T13324] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 564.685181][T13324] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 564.693130][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 564.701097][T13324] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 564.709306][T11221] usbhid 3-1:0.0: can't add hid device: -71 [ 564.721832][T11221] usbhid: probe of 3-1:0.0 failed with error -71 21:06:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x3c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:59 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000200006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 564.738512][T11221] usb 3-1: USB disconnect, device number 43 [ 564.807171][T11307] usbhid 4-1:0.0: can't add hid device: -71 [ 564.813120][T11307] usbhid: probe of 4-1:0.0 failed with error -71 [ 564.828390][T11307] usb 4-1: USB disconnect, device number 113 21:06:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x94}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 564.877223][ T3198] usb 1-1: new high-speed USB device number 92 using dummy_hcd 21:06:59 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000001100006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:06:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:06:59 executing program 4 (fault-call:10 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 565.097171][T11221] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 565.210626][T13361] FAULT_INJECTION: forcing a failure. [ 565.210626][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 565.223380][T13361] CPU: 1 PID: 13361 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 565.233590][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.243622][T13361] Call Trace: [ 565.246898][T13361] dump_stack+0x14a/0x1ce [ 565.251212][T13361] ? devkmsg_release+0x11c/0x11c [ 565.256128][T13361] ? show_regs_print_info+0x12/0x12 [ 565.261306][T13361] ? __kasan_kmalloc+0x189/0x1c0 [ 565.266222][T13361] should_fail+0x6fb/0x860 [ 565.270673][T13361] ? setup_fault_attr+0x3d0/0x3d0 [ 565.275680][T13361] ? alloc_vmap_area+0x164/0x1bc0 [ 565.280682][T13361] should_failslab+0x5/0x20 [ 565.285163][T13361] kmem_cache_alloc+0x36/0x260 [ 565.289908][T13361] alloc_vmap_area+0x164/0x1bc0 [ 565.294738][T13361] ? vm_map_ram+0x950/0x950 [ 565.299221][T13361] ? __get_vm_area_node+0x19e/0x340 [ 565.304396][T13361] ? vmap_page_range_noflush+0x657/0x680 [ 565.310034][T13361] __get_vm_area_node+0x1ef/0x340 [ 565.315055][T13361] __vmalloc_node_range+0xf0/0x7b0 [ 565.320158][T13361] ? pcpu_create_chunk+0x104/0x900 [ 565.325426][T13361] __vmalloc+0x40/0x50 [ 565.329510][T13361] ? pcpu_create_chunk+0x104/0x900 [ 565.334596][T13361] pcpu_create_chunk+0x104/0x900 [ 565.339521][T13361] pcpu_alloc+0x696/0x11f0 [ 565.343922][T13361] htab_map_alloc+0x8e0/0x15b0 [ 565.348669][T13361] __do_sys_bpf+0x3743/0xbf40 [ 565.353324][T13361] ? _kstrtoull+0x38d/0x490 [ 565.357804][T13361] ? kstrtouint_from_user+0x22d/0x2b0 [ 565.363154][T13361] ? kstrtol_from_user+0x320/0x320 [ 565.368248][T13361] ? __kasan_slab_free+0x1f2/0x230 [ 565.373355][T13361] ? __bpf_prog_put_rcu+0x300/0x300 [ 565.378529][T13361] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 565.384921][T13361] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 565.390984][T13361] ? get_pid_task+0x86/0x90 [ 565.395463][T13361] ? proc_fail_nth_write+0x18f/0x250 [ 565.400725][T13361] ? proc_fail_nth_read+0x1d0/0x1d0 [ 565.405899][T13361] ? proc_fail_nth_read+0x1d0/0x1d0 [ 565.411070][T13361] ? memset+0x1f/0x40 [ 565.415113][T13361] ? fsnotify+0x13a0/0x1460 [ 565.419609][T13361] ? __kernel_write+0x340/0x340 [ 565.424449][T13361] ? __fsnotify_parent+0x310/0x310 [ 565.429571][T13361] ? security_file_permission+0x128/0x300 [ 565.435263][T13361] ? __sb_end_write+0xa4/0xf0 [ 565.439949][T13361] ? vfs_write+0x427/0x4f0 [ 565.444357][T13361] ? fput_many+0x42/0x1a0 [ 565.448671][T13361] do_syscall_64+0xcb/0x150 [ 565.453155][T13361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 565.459025][T13361] RIP: 0033:0x45c1f9 [ 565.462898][T13361] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.482501][T13361] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.490900][T13361] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 565.498852][T13361] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 565.506799][T13361] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 565.514751][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 565.522717][T13361] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 565.531842][T11307] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 565.577223][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.588352][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.598812][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 565.608117][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.616786][ T3198] usb 1-1: config 0 descriptor?? [ 565.707352][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.718258][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.728036][T11221] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 565.737085][T11221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.746634][T11221] usb 3-1: config 0 descriptor?? [ 565.807171][T11307] usb 4-1: device descriptor read/64, error 18 [ 565.957186][ T3198] usbhid 1-1:0.0: can't add hid device: -71 [ 565.963322][ T3198] usbhid: probe of 1-1:0.0 failed with error -71 [ 565.971213][ T3198] usb 1-1: USB disconnect, device number 92 [ 566.207149][T11307] usb 4-1: device descriptor read/64, error 18 [ 566.297236][T11221] usbhid 3-1:0.0: can't add hid device: -71 [ 566.303167][T11221] usbhid: probe of 3-1:0.0 failed with error -71 [ 566.310942][T11221] usb 3-1: USB disconnect, device number 44 [ 566.427161][ T3198] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 566.787285][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.798366][ T3198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.808858][ T3198] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 566.818146][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.826768][ T3198] usb 1-1: config 0 descriptor?? [ 567.007156][T11221] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 567.367181][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.378080][T11221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.393013][T11221] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 567.402321][T11221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.411154][T11221] usb 3-1: config 0 descriptor?? 21:07:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:01 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000003c00006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 567.517200][ T3198] usb 1-1: string descriptor 0 read error: -22 [ 567.627228][T11221] usbhid 3-1:0.0: can't add hid device: -71 [ 567.633257][T11221] usbhid: probe of 3-1:0.0 failed with error -71 [ 567.641973][T11221] usb 3-1: USB disconnect, device number 45 [ 567.747230][ T3198] uclogic 0003:5543:006E.00C6: failed retrieving string descriptor #200: -71 [ 567.756065][ T3198] uclogic 0003:5543:006E.00C6: failed retrieving pen parameters: -71 [ 567.764917][ T3198] uclogic 0003:5543:006E.00C6: failed probing pen v2 parameters: -71 [ 567.773381][ T3198] uclogic 0003:5543:006E.00C6: failed probing parameters: -71 [ 567.781728][ T3198] uclogic: probe of 0003:5543:006E.00C6 failed with error -71 [ 567.790386][ T3198] usb 1-1: USB disconnect, device number 93 21:07:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:07:02 executing program 4 (fault-call:10 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:02 executing program 3: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000480)=""/239) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESDEC], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000334000000000347709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6b2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"], 0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000080)={0x4cf9, 0x4, [{0x3, 0x1}, {0xa}, {0x9}, {0x4}]}) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xe, 0x6, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = getpid() sched_setattr(r7, &(0x7f0000000440)={0x38, 0x1, 0x4, 0x0, 0x401}, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000000c0)=r7) 21:07:02 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000004000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 568.296585][T13411] FAULT_INJECTION: forcing a failure. [ 568.296585][T13411] name failslab, interval 1, probability 0, space 0, times 0 [ 568.309464][T13411] CPU: 1 PID: 13411 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 568.319594][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.329618][T13411] Call Trace: [ 568.332920][T13411] dump_stack+0x14a/0x1ce [ 568.337222][T13411] ? devkmsg_release+0x11c/0x11c [ 568.342129][T13411] ? alloc_vmap_area+0x1ab1/0x1bc0 [ 568.347213][T13411] ? show_regs_print_info+0x12/0x12 [ 568.352381][T13411] should_fail+0x6fb/0x860 [ 568.356768][T13411] ? setup_fault_attr+0x3d0/0x3d0 [ 568.361774][T13411] ? __get_vm_area_node+0x19e/0x340 [ 568.366954][T13411] ? vmap_page_range_noflush+0x657/0x680 [ 568.372555][T13411] ? __vmalloc_node_range+0x439/0x7b0 [ 568.377895][T13411] should_failslab+0x5/0x20 [ 568.382369][T13411] __kmalloc+0x5f/0x2d0 [ 568.386506][T13411] __vmalloc_node_range+0x439/0x7b0 [ 568.391686][T13411] __vmalloc+0x40/0x50 [ 568.395736][T13411] ? pcpu_create_chunk+0x104/0x900 [ 568.400824][T13411] pcpu_create_chunk+0x104/0x900 [ 568.405744][T13411] pcpu_alloc+0x696/0x11f0 [ 568.410143][T13411] htab_map_alloc+0x8e0/0x15b0 [ 568.414888][T13411] __do_sys_bpf+0x3743/0xbf40 [ 568.419550][T13411] ? _kstrtoull+0x38d/0x490 [ 568.424032][T13411] ? kstrtouint_from_user+0x22d/0x2b0 [ 568.429383][T13411] ? kstrtol_from_user+0x320/0x320 [ 568.434471][T13411] ? __kasan_slab_free+0x1f2/0x230 [ 568.439572][T13411] ? __bpf_prog_put_rcu+0x300/0x300 [ 568.444748][T13411] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 568.451144][T13411] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 568.457188][T13411] ? get_pid_task+0x86/0x90 [ 568.461669][T13411] ? proc_fail_nth_write+0x18f/0x250 [ 568.466931][T13411] ? proc_fail_nth_read+0x1d0/0x1d0 [ 568.472109][T13411] ? proc_fail_nth_read+0x1d0/0x1d0 [ 568.477285][T13411] ? memset+0x1f/0x40 [ 568.481246][T13411] ? fsnotify+0x13a0/0x1460 [ 568.485739][T13411] ? __kernel_write+0x340/0x340 [ 568.490573][T13411] ? __fsnotify_parent+0x310/0x310 [ 568.495663][T13411] ? security_file_permission+0x128/0x300 [ 568.501373][T13411] ? __sb_end_write+0xa4/0xf0 [ 568.506029][T13411] ? vfs_write+0x427/0x4f0 [ 568.510420][T13411] ? fput_many+0x42/0x1a0 [ 568.514731][T13411] do_syscall_64+0xcb/0x150 [ 568.519237][T13411] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 568.525106][T13411] RIP: 0033:0x45c1f9 [ 568.528981][T13411] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.548562][T13411] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.556949][T13411] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 568.564913][T13411] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 568.572861][T13411] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 568.580810][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 568.588758][T13411] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:03 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000e8000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 568.747243][T11221] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 568.754861][T11307] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 568.762456][T11068] usb 4-1: new high-speed USB device number 116 using dummy_hcd 21:07:03 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000007fffffff00006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:03 executing program 4 (fault-call:10 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 569.098276][T13442] FAULT_INJECTION: forcing a failure. [ 569.098276][T13442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.111535][T13442] CPU: 0 PID: 13442 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 569.121669][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.131718][T13442] Call Trace: [ 569.134983][T13442] dump_stack+0x14a/0x1ce [ 569.139288][T13442] ? devkmsg_release+0x11c/0x11c [ 569.144201][T13442] ? show_regs_print_info+0x12/0x12 [ 569.149423][T13442] ? __vmalloc+0x40/0x50 [ 569.153649][T13442] ? pcpu_alloc+0x696/0x11f0 [ 569.158221][T13442] ? htab_map_alloc+0x8e0/0x15b0 [ 569.163141][T13442] ? __do_sys_bpf+0x3743/0xbf40 [ 569.167977][T13442] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 569.174014][T13442] should_fail+0x6fb/0x860 [ 569.178408][T13442] ? setup_fault_attr+0x3d0/0x3d0 [ 569.183482][T13442] __alloc_pages_nodemask+0x1ee/0x7c0 [ 569.188868][T13442] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 569.194397][T13442] ? __vmalloc_node_range+0x439/0x7b0 [ 569.199749][T13442] ? __vmalloc_node_range+0x439/0x7b0 [ 569.205103][T13442] __vmalloc_node_range+0x360/0x7b0 [ 569.210284][T13442] __vmalloc+0x40/0x50 [ 569.214338][T13442] ? pcpu_create_chunk+0x104/0x900 [ 569.219437][T13442] pcpu_create_chunk+0x104/0x900 [ 569.224359][T13442] pcpu_alloc+0x696/0x11f0 [ 569.228849][T13442] htab_map_alloc+0x8e0/0x15b0 [ 569.233617][T13442] __do_sys_bpf+0x3743/0xbf40 [ 569.238277][T13442] ? _kstrtoull+0x38d/0x490 [ 569.242761][T13442] ? kstrtouint_from_user+0x22d/0x2b0 [ 569.248114][T13442] ? kstrtol_from_user+0x320/0x320 [ 569.253204][T13442] ? __kasan_slab_free+0x1f2/0x230 [ 569.258313][T13442] ? __bpf_prog_put_rcu+0x300/0x300 [ 569.263488][T13442] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 569.269880][T13442] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 569.275927][T13442] ? get_pid_task+0x86/0x90 [ 569.280417][T13442] ? proc_fail_nth_write+0x18f/0x250 [ 569.285684][T13442] ? proc_fail_nth_read+0x1d0/0x1d0 [ 569.290862][T13442] ? proc_fail_nth_read+0x1d0/0x1d0 [ 569.296051][T13442] ? memset+0x1f/0x40 [ 569.300020][T13442] ? fsnotify+0x13a0/0x1460 [ 569.304513][T13442] ? __kernel_write+0x340/0x340 [ 569.309344][T13442] ? __fsnotify_parent+0x310/0x310 [ 569.314446][T13442] ? security_file_permission+0x128/0x300 [ 569.320143][T13442] ? __sb_end_write+0xa4/0xf0 [ 569.324796][T13442] ? vfs_write+0x427/0x4f0 [ 569.329188][T13442] ? fput_many+0x42/0x1a0 [ 569.333498][T13442] do_syscall_64+0xcb/0x150 [ 569.337983][T13442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 569.343853][T13442] RIP: 0033:0x45c1f9 [ 569.347726][T13442] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 569.367307][T13442] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.375696][T13442] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 569.383658][T13442] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 569.391609][T13442] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.399557][T13442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 569.407506][T13442] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 569.447245][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.458199][T11068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.469247][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.480306][T11068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.491641][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.501709][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.511824][T11068] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 569.521216][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 569.530735][T11221] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 569.540151][T11068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.548494][T11221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.556732][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.566577][T11068] usb 4-1: config 0 descriptor?? [ 569.572624][T11221] usb 1-1: config 0 descriptor?? [ 569.577845][T11307] usb 3-1: config 0 descriptor?? [ 569.917232][T11221] usbhid 1-1:0.0: can't add hid device: -71 [ 569.923216][T11068] usbhid 4-1:0.0: can't add hid device: -71 [ 569.929174][T11068] usbhid: probe of 4-1:0.0 failed with error -71 [ 569.936221][T11221] usbhid: probe of 1-1:0.0 failed with error -71 [ 569.945120][T11068] usb 4-1: USB disconnect, device number 116 [ 569.951733][T11221] usb 1-1: USB disconnect, device number 94 [ 570.110575][T13458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 570.407160][T11068] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 570.414862][T11221] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 570.787288][T11068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.798714][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.809563][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.820200][T11068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.830374][T11221] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 570.839735][T11068] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 570.849110][T11221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.857458][T11068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.866224][T11068] usb 4-1: config 0 descriptor?? [ 570.873112][T11221] usb 1-1: config 0 descriptor?? [ 571.417190][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 571.423196][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 571.431387][T11307] usb 3-1: USB disconnect, device number 46 [ 571.577223][T11068] usb 4-1: string descriptor 0 read error: -22 [ 571.583566][T11221] usb 1-1: string descriptor 0 read error: -22 [ 571.787192][T11221] uclogic 0003:5543:006E.00C7: failed retrieving string descriptor #200: -71 [ 571.796090][T11221] uclogic 0003:5543:006E.00C7: failed retrieving pen parameters: -71 [ 571.806913][T11068] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C8/input/input84 [ 571.818652][T11221] uclogic 0003:5543:006E.00C7: failed probing pen v2 parameters: -71 [ 571.826725][T11221] uclogic 0003:5543:006E.00C7: failed probing parameters: -71 [ 571.836269][T11221] uclogic: probe of 0003:5543:006E.00C7 failed with error -71 [ 571.844857][T11068] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00C8/input/input85 [ 571.858998][T11221] usb 1-1: USB disconnect, device number 95 [ 571.865778][T11068] uclogic 0003:5543:006E.00C8: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 572.005695][T11068] usb 4-1: USB disconnect, device number 117 21:07:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:07:06 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffff00006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 572.557243][T11221] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 572.767182][ T92] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 572.937206][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.948093][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.958601][T11221] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 572.967928][T11221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.976484][T11221] usb 1-1: config 0 descriptor?? [ 573.127259][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.138195][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.148579][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 573.157890][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.166427][ T92] usb 4-1: config 0 descriptor?? 21:07:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="f084d5155f8ec3737daa37ab138780c4908c21c540a5eef11df9b3ac3b7b121bac960cdb274fdfd20d6c9cf786b48b4d73759dd9f83198f69f463d38ad20569c114a2d261a53a1e47ba1081699c88f293175db5bf59a607b290777030d3b2911dc54ae472ad9a4acf64d27806963406921491c210c2692924101f21d496db22a52ee50a653d9477a3abcadf09e9ebb68bb0ffc4dddc6f236328b751e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0xf265, 0x3, 0xc, &(0x7f0000000000)="f46ef661f70123baab413215"}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x11}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000596c24f5b696476f54f5865a60d8b7f30a688af6b1d4d880c002719e754f7dc83df7a9248ac302902be8802b670ff697e6a2f83e9b4c46882168fa98980b1ea346dc155c4f68e80d045b20835be311cc8ba5a4d5f7c4245394c735cdcb68dd14a5737259ee634bb2c4d0cefed9074b9b9ab1c32d7643e28f0498ac444792cc00ec69b87af43497592dffd78448c595a2c"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:07 executing program 4 (fault-call:10 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:07 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000200000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 573.302717][T13507] FAULT_INJECTION: forcing a failure. [ 573.302717][T13507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 573.316288][T13507] CPU: 0 PID: 13507 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 573.326434][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.336481][T13507] Call Trace: [ 573.339801][T13507] dump_stack+0x14a/0x1ce [ 573.344124][T13507] ? devkmsg_release+0x11c/0x11c [ 573.349133][T13507] ? show_regs_print_info+0x12/0x12 [ 573.354306][T13507] ? __vmalloc+0x40/0x50 [ 573.358525][T13507] ? pcpu_alloc+0x696/0x11f0 [ 573.363096][T13507] ? __do_sys_bpf+0x3743/0xbf40 [ 573.367925][T13507] ? kasan_alloc_pages+0x4a/0x60 [ 573.372841][T13507] should_fail+0x6fb/0x860 [ 573.377235][T13507] ? setup_fault_attr+0x3d0/0x3d0 [ 573.382241][T13507] __alloc_pages_nodemask+0x1ee/0x7c0 [ 573.387593][T13507] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 573.394078][T13507] ? __vmalloc_node_range+0x439/0x7b0 [ 573.399427][T13507] ? __vmalloc_node_range+0x439/0x7b0 [ 573.404778][T13507] __vmalloc_node_range+0x360/0x7b0 [ 573.409976][T13507] __vmalloc+0x40/0x50 [ 573.414052][T13507] ? pcpu_create_chunk+0x104/0x900 [ 573.419148][T13507] pcpu_create_chunk+0x104/0x900 [ 573.424071][T13507] pcpu_alloc+0x696/0x11f0 [ 573.428471][T13507] htab_map_alloc+0x8e0/0x15b0 [ 573.433219][T13507] __do_sys_bpf+0x3743/0xbf40 [ 573.437874][T13507] ? _kstrtoull+0x38d/0x490 [ 573.442362][T13507] ? kstrtouint_from_user+0x22d/0x2b0 [ 573.447710][T13507] ? kstrtol_from_user+0x320/0x320 [ 573.452806][T13507] ? __kasan_slab_free+0x1f2/0x230 [ 573.457901][T13507] ? __bpf_prog_put_rcu+0x300/0x300 [ 573.463079][T13507] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 573.469472][T13507] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.475515][T13507] ? get_pid_task+0x86/0x90 [ 573.479999][T13507] ? proc_fail_nth_write+0x18f/0x250 [ 573.485262][T13507] ? proc_fail_nth_read+0x1d0/0x1d0 [ 573.490468][T13507] ? proc_fail_nth_read+0x1d0/0x1d0 [ 573.496860][T13507] ? memset+0x1f/0x40 [ 573.500823][T13507] ? fsnotify+0x13a0/0x1460 [ 573.505307][T13507] ? __kernel_write+0x340/0x340 [ 573.510145][T13507] ? __fsnotify_parent+0x310/0x310 [ 573.515236][T13507] ? security_file_permission+0x128/0x300 [ 573.520933][T13507] ? __sb_end_write+0xa4/0xf0 [ 573.525588][T13507] ? vfs_write+0x427/0x4f0 [ 573.529981][T13507] ? fput_many+0x42/0x1a0 [ 573.534300][T13507] do_syscall_64+0xcb/0x150 [ 573.538785][T13507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.544654][T13507] RIP: 0033:0x45c1f9 [ 573.548544][T13507] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.568190][T13507] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.576600][T13507] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 573.584552][T13507] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 573.592629][T13507] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 573.600608][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 573.608576][T13507] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 573.620207][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 573.621213][T11221] usbhid 1-1:0.0: can't add hid device: -71 [ 573.632232][T11221] usbhid: probe of 1-1:0.0 failed with error -71 [ 573.632373][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 573.640149][T11221] usb 1-1: USB disconnect, device number 96 [ 573.660528][ T92] usb 4-1: USB disconnect, device number 118 21:07:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x29}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:08 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001100000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 573.797323][T11307] usb 3-1: new high-speed USB device number 47 using dummy_hcd 21:07:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2b}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:08 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="003c00000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 573.997226][T11221] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 574.057148][ T92] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 574.157218][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.168250][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.178224][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 574.188156][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.197071][T11307] usb 3-1: config 0 descriptor?? [ 574.357217][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.368100][T11221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.378160][T11221] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 574.387643][T11221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.396156][T11221] usb 1-1: config 0 descriptor?? [ 574.427189][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.438291][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.448075][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 574.457082][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.466018][ T92] usb 4-1: config 0 descriptor?? [ 574.517176][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 574.523134][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 574.530418][T11307] usb 3-1: USB disconnect, device number 47 [ 574.807182][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 574.813218][ T92] usbhid: probe of 4-1:0.0 failed with error -71 [ 574.821049][ T92] usb 4-1: USB disconnect, device number 119 [ 575.037162][T11307] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 575.087248][T11221] usb 1-1: string descriptor 0 read error: -22 [ 575.277201][ T92] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 575.297190][T11221] uclogic 0003:5543:006E.00C9: failed retrieving string descriptor #200: -71 [ 575.306001][T11221] uclogic 0003:5543:006E.00C9: failed retrieving pen parameters: -71 [ 575.314287][T11221] uclogic 0003:5543:006E.00C9: failed probing pen v2 parameters: -71 [ 575.322406][T11221] uclogic 0003:5543:006E.00C9: failed probing parameters: -71 [ 575.330110][T11221] uclogic: probe of 0003:5543:006E.00C9 failed with error -71 [ 575.339081][T11221] usb 1-1: USB disconnect, device number 97 [ 575.407251][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.418123][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.428762][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 575.438197][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.446723][T11307] usb 3-1: config 0 descriptor?? [ 575.637235][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.648181][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.658325][ T92] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 575.667368][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.675995][ T92] usb 4-1: config 0 descriptor?? 21:07:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21:07:10 executing program 4 (fault-call:10 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 575.848930][T13573] FAULT_INJECTION: forcing a failure. [ 575.848930][T13573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 575.862194][T13573] CPU: 0 PID: 13573 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 575.872315][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.882351][T13573] Call Trace: [ 575.885659][T13573] dump_stack+0x14a/0x1ce [ 575.889959][T13573] ? devkmsg_release+0x11c/0x11c [ 575.894866][T13573] ? show_regs_print_info+0x12/0x12 [ 575.900032][T13573] ? __vmalloc+0x40/0x50 [ 575.904246][T13573] ? pcpu_alloc+0x696/0x11f0 [ 575.908907][T13573] ? __do_sys_bpf+0x3743/0xbf40 [ 575.913728][T13573] ? kasan_alloc_pages+0x4a/0x60 [ 575.918637][T13573] should_fail+0x6fb/0x860 [ 575.923025][T13573] ? setup_fault_attr+0x3d0/0x3d0 [ 575.928041][T13573] __alloc_pages_nodemask+0x1ee/0x7c0 [ 575.933413][T13573] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 575.938945][T13573] ? __vmalloc_node_range+0x439/0x7b0 [ 575.944304][T13573] ? __vmalloc_node_range+0x439/0x7b0 [ 575.949655][T13573] __vmalloc_node_range+0x360/0x7b0 [ 575.954833][T13573] __vmalloc+0x40/0x50 [ 575.958878][T13573] ? pcpu_create_chunk+0x104/0x900 [ 575.963978][T13573] pcpu_create_chunk+0x104/0x900 [ 575.968892][T13573] pcpu_alloc+0x696/0x11f0 [ 575.973293][T13573] htab_map_alloc+0x8e0/0x15b0 [ 575.978038][T13573] __do_sys_bpf+0x3743/0xbf40 [ 575.982695][T13573] ? _kstrtoull+0x38d/0x490 [ 575.987178][T13573] ? kstrtouint_from_user+0x22d/0x2b0 [ 575.993220][T13573] ? kstrtol_from_user+0x320/0x320 [ 575.998311][T13573] ? __kasan_slab_free+0x1f2/0x230 [ 576.003410][T13573] ? __bpf_prog_put_rcu+0x300/0x300 [ 576.008599][T13573] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 576.015007][T13573] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.021062][T13573] ? get_pid_task+0x86/0x90 [ 576.025547][T13573] ? proc_fail_nth_write+0x18f/0x250 [ 576.030813][T13573] ? proc_fail_nth_read+0x1d0/0x1d0 [ 576.035989][T13573] ? proc_fail_nth_read+0x1d0/0x1d0 [ 576.041178][T13573] ? memset+0x1f/0x40 [ 576.045148][T13573] ? fsnotify+0x13a0/0x1460 [ 576.049631][T13573] ? __kernel_write+0x340/0x340 [ 576.054459][T13573] ? __fsnotify_parent+0x310/0x310 [ 576.059550][T13573] ? security_file_permission+0x128/0x300 [ 576.065246][T13573] ? __sb_end_write+0xa4/0xf0 [ 576.069900][T13573] ? vfs_write+0x427/0x4f0 [ 576.074307][T13573] ? fput_many+0x42/0x1a0 [ 576.078620][T13573] do_syscall_64+0xcb/0x150 [ 576.083111][T13573] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.088993][T13573] RIP: 0033:0x45c1f9 [ 576.092871][T13573] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.112453][T13573] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.120839][T13573] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 576.128788][T13573] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 576.136738][T13573] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 576.144700][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 576.152648][T13573] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 576.307145][T11219] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 576.377206][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 576.384615][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 576.392611][T11307] usb 3-1: USB disconnect, device number 48 [ 576.607254][ T92] usb 4-1: string descriptor 0 read error: -22 [ 576.667242][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.678112][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.687867][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 576.696882][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.705630][T11219] usb 1-1: config 0 descriptor?? [ 576.869135][ T92] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00CA/input/input86 [ 576.887676][ T92] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00CA/input/input87 [ 576.902728][ T92] uclogic 0003:5543:006E.00CA: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 577.047226][T11219] usbhid 1-1:0.0: can't add hid device: -71 [ 577.053285][T11219] usbhid: probe of 1-1:0.0 failed with error -71 [ 577.061457][T11219] usb 1-1: USB disconnect, device number 98 [ 577.127157][T11147] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 577.487203][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.498233][T11147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.508182][T11147] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 577.517257][T11147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.525865][T11147] usb 3-1: config 0 descriptor?? [ 577.527722][T11219] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 577.767217][T11147] usbhid 3-1:0.0: can't add hid device: -71 [ 577.773221][T11147] usbhid: probe of 3-1:0.0 failed with error -71 [ 577.780468][T11147] usb 3-1: USB disconnect, device number 49 [ 577.897197][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.908110][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.917852][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 577.926900][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.935617][T11219] usb 1-1: config 0 descriptor?? 21:07:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2f}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:12 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00800e000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:12 executing program 4 (fault-call:10 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002e00)=ANY=[@ANYBLOB="c79df13c73e104a1e224ed57b2891ec5d67f78cbe1f65825409e768f3f06188cf61be742d7c116650e2be6a933fc0e6d12709ad549e9b6439c56589fda14ea2f6a46a39b162d3e4b7778bbd1e88eeaedf9727cbef4664106f42bbdff957dad09969307e22d295666226db9b154b6205e66f141ba8614ce4dfc1e0cd6f7875a9b8b44773dc2432fc0e1b8327f14d88e026889a0a3322878dd29e1e1f2d5ac2e70d8f9a11caddc6117423f1a4c900af90f377094925304a19cec75344b8f0ab39b0141b0ecdded27373abbb29db8eb3c90d67fca", @ANYRESOCT, @ANYBLOB="643bba971788e1667bf99bd0ca6d23fc0c5746946707f017ed20bb2368471c0b5d7c18726ec006a33547c62b51b369b11465b147b78d62ade23311b83ce9a408ee4792445987d8359e62247a39c3fdd2dcca9eceb2dfa05433b80ac7ef4927269919eeb292b96fc849ed908c5656339a058fa0728e1ca084f557e378328f0d2204b5f92143b1359df596ac2e905480ff70827f462075c29d141deba7cca6b902c66cedb6341feae6ad7dd0e0b1f75761198beba24a65247387f5fad993e463ce0e468c84ff1cab53d65ed95d5e45f505e9abaf58d172a418622dc7e254e83c46097782ffe1b5740d04fa1f8d34fb5cf7487636d1c7e9c95cca270585da4b0d02d452833919075532eacdc04aa26292751ca1d3d5d6f78ef5342409b2367d30fae11daf3ebeae871ff792bca5d653ccf5a0bc880fc78c2209809df07ec84d404cf7314c406ca42ea44602800e2965e277b8c382905d2a65e5ecb3483199fccbaebbee4b843d042fdab6eb0357234b92a2a229a366889125afbd539442fd7b52408e748501698f3f5b30368af8ae122760feb8fb26279c39c2b2f43eb2e31ba563bf2b4a0d963a3beba5cfbadb2ba1bc189089df6a616bcafe6e2d41606cd3bc9807077c089bfe115fef9910a670a0bf8b1ded189af19c13320762ab4dd3fc1eee3681a14f9f0eaa5138b9c9d82c820f579aaa5cfda0eacb0ed69324510310575291a8f25fd93fedd698f338e2d9899237dc78ff79874087bf962a37e293bf839f9baf3414d6c915d862e74f5ba1862384d42998eafb6c9f25bdb3fb77b4d2a0a9bb92f2ba9a3caa8c46d22a41766e115ce5ee711fe94870164c0a8f5cf4179346b2725b99183e90e0de8783139fbdf9d7050183b38b2d1c1dfb720e6b9e4056f01fba9b12278e345bf6847ee5f6672c67a540bb3d8fcc3c218e42efc7e2531a16a890fd55ae00d1d725d66e7776e1ee822e5ef9fded368f6ea3b096a92552c756317f3c7223d03313ebffb997b7a06dc227a77a0b243c8307b7d21142367ec2c441160f5b4b263909c8b4903ba254fb8f70b6c7c1c561abbf6f2460957fe684d5c38760911c8bd1788ba673d5495b7170dd7c4b3cc5fdb374cb92cdccc63d57a17d69fdff9533945e1d7088962789c46d4b4b0805867be178052ac9a444decd2cfc5628799f7079a31fdc41307310cae81ff264baa3639974b34b58058d8371e5af68288a263f7b5ae40d5432be878cb0e885473291a634c505e83aba90d0b8dbf4b5404162124c14b0b717e5be6a35f6ada7ca629e4998b4f8e702463336b32399f18127e1be7183240e51192cc5cad2d92a205a8013e5be8b6d080874418faa707ae237011d114559a707b9f4b8f5697fd5e6c403497ff1678041b6130ae0fc36aca9e39a6498b33e41cbc0545ddec07c3d3d36f884e9ecfd0767745747b8bbbbbbc35dfc014c518e29008c373bff155fa2f1c2fce68940a6cd07e0a805f378785a84e73ad75ca20edc393d6c86c8758e9503ee9ba9659cc0c8bd5b924677fbeeed9ba71431cc1a31cf02f526543567d75853c9646b7e5036432e4440ca625b9111523efa913a3268ec2e318e20bb4e5eaee1afcbaefe11851befe8f14226285f1d9a1dfba67f96ac5543dc41b4548c048c9f3bad013809c7ab2fcbb85f14f089a062649f48d5de87222879b5459398120a106b7052d4bd8db36b4530bf0b7d4535c4399910f4c4450f81a7c56d1995acf32d6d641e3a0db86813a5f94aa915241ae70d5337a47675e566381e3f71853df2e938afd68627f62d08ad146f7387507a92ec36c95c0ec26c7fdd5545cae619b4b8b1948c6ff00124d326deff9131949c14159230fa753f5f64bf8116c81b20f265a924bedf1474201f6fbb2e4a0a8c9df14f15d5b32e5051045faf8dd6e7b1b6af6009c0f03c3e926482dcab2af8ee38ea6f5435e30af7aa18779fb23b40d7dd4e183bad0506c535b8f56fe6c138b75cae77e25f0d1b810db11771b5af727467232098dc1f84c075f988ba0ee150e22c063fab27a557e608dca3dc824834e3ed5a06c839bd892adf27b6fd262b42003a9537aaebadb8cae2e62accbd70f4038c6755dfcdd6faac80c912777d480d4bec358f80b132eac5cf4dd2102e4156bdee7d8656ebec9c5d782c9a6ed1630b77be19cbf6205aaa3547463472de424db271d412ff1c87e87ccb74f31fe5f03b60fbebbacea6d2c99708dec7ded46810067a60175e122261f5811678c96113ffc8cad5000ebc711d553fe174cc9aefc747c9d4e9d3fec2b135b7c65ba7674891a37414ab6155117f663e1e9cbddbc08a9ae0fae655de7589d8fe8bc17d932bb39a5cc589ef984f13e3fe73247c385b4fcebb4a4a2147fccde43f69445de9b09e5f100f375265f65153c36b20ddef75b8a935f66aab2a77db9b154d1c6e3fddda46352b5597036b25765811b6d6b8758af1e2e961e6a9fd32d4bacad76cf3e6cf129daa62fc5e63824ff05d0bc6cc094c9aeb27e291b8bbfa96f59a0531241fcaf620531ccf2cca74bf86f2e2df026a751588298a1ecbdee75ea18c77f47e5c878276aa6d23f4e0cdf7fd723961387a9c2e8e6950d808b38a32abaed71288ea8d2bee87b44f028998465cb934b73be750f1b10385d694e3674b5eedf5e340213f41d9b50ab3300d851db5951ba1724e62465b26a937d14613a33965fd9b4f0c5526aff58d175053b4e93dbe0cd846ae4ba60005ea47ceacc433026d2e53c642e7edbf0a5f20d5764c1fe89f19d134d161550e7118f742a135e3b84547cc07e764f193a54aa08e356e86b48cecceaa7fb5b7944d67029d0a305b2e4e809c97f12de6a05acbc1f3c57e4086d13c8d1c655b3735be433f1ce324f849781719a81deb79a12ad30a3610a20372987788795803b851261c558cb6f454e63cef090b456bb0abc0d475cb84a9ca44cb593464735f13e9cc8a3bfaee8c4ec110eab6aa46c688631dea020bf379597f7dbe0653dea77ca875dea03b9fe71173f628061b465f0e0b7df9a6313f19af929360d3268ed3b116ecb5263b18895092a8b50192adae5d3215f44f099bde1c810044d1046013cf87c654a039b1493500b5876eeb4576167c0014a7b9ec020414763ac8428d89b1c1a9de5de286ac04e54447811ac674d669b9d36e09c10874015403238d928244eb7afb2815180d6d12750980fa5e19117d1d3d0052b0ed2fce53cab8f8e7bfe830ea7b13bdc1a9beaaca2f253dbbc46b466d10a8366d37e8646a56068f60c6216f0bd5fd8212acb7508f07b665539f38e4a6be1fc1b22c4d659d13a87e95374d9a0ca77d72fd5963941c384d1b3486fdbe4cc8e99f7d3d7cabccd6b7c0f7e0b1b046afa3bd06896ef385aee3261dd5c7cfc4440a6ab05e6e0355d62a70915ce838959bc585189ebb3b0988df30ad11495b8410aa07091087c3cc0aed7c2edc3cc783eefd0393cd89cb5912ccbb918b01573c15562ad2f8a5ef346cc3563b37281901d7a88b203761f20a5a7bea82cf6367cc5d0f6b67a4619a01e6b9cf7c0ccffd13f1a4b41d6541d9feef532fe2b8313a79924b7cca024a2b1f4e4f2e46041a1767650cad16e4ef9cfda790fbdfd47ef3900a518a09e0925ec39c63f79f10d3dc5e65524a6b50ef2eab365eeef3525ac6baab6433f19960433d5eb1351a0b33864ba95b29f20e5a9be639aa99ab7cd7a765cd9a42f13edf35d1a955b2766bbbbb018be5ccc37586f5c3e57ed4ac7081dc8351e6b45f0afc076b0d283c29d526eeeb1ad1c15f0445abf35ee170db4108a80c0b66492ee3e387953eec5390c1fa16e5bf0b989358d198ae83b43342b63f5ab185faf17cec4d06895f65ab630d337635dc51f611e36c9c173b880ab54a43a513a808e8a4cfc9f453de8009bd34e5501df39928f5b8360a4f0278677dda3ee5f262fb409239e6411dd0f3b342b23ff78e1acbfdc5000200b38d3995a55c801a2b0e1ef8b01bf966d6c6ea1e84919528d2eeecd7360ec6d7a544b7296b767a8cafcc6f1452e0524431cfc3f070383ed5c2e3c17d405eabd64dbe580f4f2c8951c44cfb0c1621dcae659f31915894adc223798a5becafe8aa64f6e71077e1b229cbaac25203acdaf14bc975df9bcde08db280d3f860175b8b0e21737cdb62b9cdac0bdb83edac69e2be9bdd77a729db1450897e64a29277ffbfe25921d98d8047dece5e88d610049e6f6543ac14f36686095542017bebe0d3b56d8683802bddf8ba404701557fe6c27342ab19669d82d841d82d2186600bd37c320e2e1a078f6960c7faa3387d7b03143c7ea643b9a2c2d4ef668f0d1b044054ea8c853e44097c0de5449ef56bef376d76e375cccd7582f1d4993f30110d03c152b06deee8f86286e259547c97a8c7be5f1334363b748d7e54818c7994b9513484fea6a8a172b7670d5f8c808b8aca249cec9e146944f0b6d0f912f006bdd956f69a1165d7883dcc7403943c7f0dac47c8ee87204abe108e1ef52ea3f3da8527aab76831f6949a3917b3c491c05a98e9c0578e880fe805760734cd924847501c683488f37fd141e2eacc6fa382c748a81595d08d954881d3c39b22fe5d06c784ed39ef1d96cfe9d7ef09a20b77f24ce1dda9af58a71ac9138c01a6059a2ad92054b2875a6e468ee4a8215c0469e7a01269859ef0151d75286b5f8efb0a152986c970c05d83145347cfe1e27c5b228e9fba95ef9372bb3f585edb558161080772f58199c00f73882bfabc3e0efa0560e1425b6da1d33815551f0a4e0cb3a1f8ca36c6910e752166f0799413c660d5d72128384158e89900d1330b258d838b3e585e3191fa94846fffd5c9a92dea6d949f40141fa2fb005a2bb94c39a20356b3f1fef259fd9bd76dddfd33480ef5380c54eb9a28a070cb567efb94f4233d96a75742cfa6bb1160ad5171144bee6ef6acf04ef98d1da041f5bb6d46b81f8c2d2b3f8f250cb13fbe142c95169fced84e5291f9cdd5bdfd23826aabe869ba6603016d545985111275c6d4ef10ee536f7de875fecc5ab136839618620cc4ee7b68a7836b8b5f2c705cfc4487f4359e00a8848fc97585b4c4091ea88ad05cce5d2fd7fc253d161b706b757fa06030d567237b491e0ee83742e8b461581b439f1ace8293f0707575303d98dd4fc242cc88b6b53548dd094bb037f5565609a22fcba02ac1aead76856264a7e516d100917dbbf8b53bd3fe5f701775449914f9bb3bee2ee64fad03079b5d863c850ec8d14bca141204332895722855c25e8aacdcc8476c90539143ca13273264dd871580ae08bb4443e0e310ff02177d4b830452ac484ca28a5f5f64a5de0e6abe0183382d3875f42d164656704f4d3321c3b993a95e75fc4861ffcb51985c991e707a2914ffedc1c4e3e194fa17ebce09bda2379ac09951a986c0d982776581e5d1b046b6c411bc183b18f475f22fc0e0a9f292a4c72c72c8b9921b84aee10eb12ddcd4c0a910b4a6d596be35397e02814766cb004144d0fca669577ed1cd5d82b51fad86bbe0ec198f618b92a666043cddbe4ce1b23c7fa5093b8c5f047ec5373985fe515a40e4569e40e940a1bd06c16c526299842eed36d5930ed2f9426f01d823f4c19bd07042bd4ed63fb1b2a547d41b7b7243944bd896419db6d819cf5772500db29f6994c895ea2b6313f9656f0314980bec601976d5db78946f01ec47f5b1efbf41e78db7aa025b64000ac8b6f8a4868ee02973e68714e12dde2d4b666ad1afcbb5b3619671026f96a816572e1393b7c0bc562f906b9ef3f52ea70e1c860a83a08bd513469af7384606f2d93b1597c90df4df439342c07b019a0f747b9df50c25b5e1e7a758587aea3a47aa9c493f29e2f1d44bd61e75e8d532b8287b5da700bd40889013212956f3a1874069c7289b9f37fc7144fc42c482db48f0bfe1c11fcb172ab4a73595e23a60ca5c30da174096cf011a8d596027e957878f6d30c4184ecb96eb05218521d80abf874641ae778c5f367267c88b3dddfc3bb92befebd3b8a2a5ccbd41fccbe4caf365758aa8c4e4dd50aaf2fdf9a230484f4243c5257addcbe026d582556ea71ee6646d40f75471", @ANYRESDEC, @ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:12 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 578.075199][T11147] usb 4-1: USB disconnect, device number 120 [ 578.143818][T13610] FAULT_INJECTION: forcing a failure. [ 578.143818][T13610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.157152][T13610] CPU: 1 PID: 13610 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 578.167280][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.177337][T13610] Call Trace: [ 578.180626][T13610] dump_stack+0x14a/0x1ce [ 578.184928][T13610] ? devkmsg_release+0x11c/0x11c [ 578.189851][T13610] ? show_regs_print_info+0x12/0x12 [ 578.195019][T13610] ? __vmalloc+0x40/0x50 [ 578.199233][T13610] ? pcpu_alloc+0x696/0x11f0 [ 578.203806][T13610] ? __do_sys_bpf+0x3743/0xbf40 [ 578.208632][T13610] ? kasan_alloc_pages+0x4a/0x60 [ 578.213548][T13610] should_fail+0x6fb/0x860 [ 578.217954][T13610] ? setup_fault_attr+0x3d0/0x3d0 [ 578.222952][T13610] __alloc_pages_nodemask+0x1ee/0x7c0 [ 578.228308][T13610] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 578.233884][T13610] ? __vmalloc_node_range+0x439/0x7b0 [ 578.239236][T13610] ? __vmalloc_node_range+0x439/0x7b0 [ 578.244593][T13610] __vmalloc_node_range+0x360/0x7b0 [ 578.249774][T13610] __vmalloc+0x40/0x50 [ 578.253832][T13610] ? pcpu_create_chunk+0x104/0x900 [ 578.258940][T13610] pcpu_create_chunk+0x104/0x900 [ 578.263873][T13610] pcpu_alloc+0x696/0x11f0 [ 578.268294][T13610] htab_map_alloc+0x8e0/0x15b0 [ 578.273041][T13610] __do_sys_bpf+0x3743/0xbf40 [ 578.277715][T13610] ? _kstrtoull+0x38d/0x490 [ 578.282194][T13610] ? kstrtouint_from_user+0x22d/0x2b0 [ 578.287542][T13610] ? kstrtol_from_user+0x320/0x320 [ 578.292648][T13610] ? __kasan_slab_free+0x1f2/0x230 [ 578.297746][T13610] ? __bpf_prog_put_rcu+0x300/0x300 [ 578.302936][T13610] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 578.309330][T13610] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.315375][T13610] ? get_pid_task+0x86/0x90 [ 578.319854][T13610] ? proc_fail_nth_write+0x18f/0x250 [ 578.325116][T13610] ? proc_fail_nth_read+0x1d0/0x1d0 [ 578.330291][T13610] ? proc_fail_nth_read+0x1d0/0x1d0 [ 578.335467][T13610] ? memset+0x1f/0x40 [ 578.339424][T13610] ? fsnotify+0x13a0/0x1460 [ 578.343928][T13610] ? __kernel_write+0x340/0x340 [ 578.348759][T13610] ? __fsnotify_parent+0x310/0x310 [ 578.353851][T13610] ? security_file_permission+0x128/0x300 [ 578.359581][T13610] ? __sb_end_write+0xa4/0xf0 [ 578.364238][T13610] ? vfs_write+0x427/0x4f0 [ 578.368647][T13610] ? fput_many+0x42/0x1a0 [ 578.372957][T13610] do_syscall_64+0xcb/0x150 [ 578.377443][T13610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.383315][T13610] RIP: 0033:0x45c1f9 [ 578.387188][T13610] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.406769][T13610] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.415164][T13610] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 578.423134][T13610] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 578.431100][T13610] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 578.439047][T13610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 578.447016][T13610] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x3c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:12 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000011000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x94}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:13 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00003c000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 578.727151][T11307] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 578.747400][T11219] usb 1-1: string descriptor 0 read error: -22 21:07:13 executing program 4 (fault-call:10 fault-nth:22): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 578.847153][T11147] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 578.951735][T13648] FAULT_INJECTION: forcing a failure. [ 578.951735][T13648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.965476][T13648] CPU: 0 PID: 13648 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 578.975615][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.985650][T13648] Call Trace: [ 578.988931][T13648] dump_stack+0x14a/0x1ce [ 578.993230][T13648] ? devkmsg_release+0x11c/0x11c [ 578.998660][T13648] ? show_regs_print_info+0x12/0x12 [ 579.003833][T13648] ? __vmalloc+0x40/0x50 [ 579.008063][T13648] ? pcpu_alloc+0x696/0x11f0 [ 579.012629][T13648] ? __do_sys_bpf+0x3743/0xbf40 [ 579.017457][T13648] ? kasan_alloc_pages+0x4a/0x60 [ 579.022383][T13648] should_fail+0x6fb/0x860 [ 579.026785][T13648] ? setup_fault_attr+0x3d0/0x3d0 [ 579.031803][T13648] __alloc_pages_nodemask+0x1ee/0x7c0 [ 579.037154][T13648] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 579.042701][T13648] ? __vmalloc_node_range+0x439/0x7b0 [ 579.048053][T13648] ? __vmalloc_node_range+0x439/0x7b0 [ 579.053405][T13648] __vmalloc_node_range+0x360/0x7b0 [ 579.058589][T13648] __vmalloc+0x40/0x50 [ 579.062654][T13648] ? pcpu_create_chunk+0x104/0x900 [ 579.067745][T13648] pcpu_create_chunk+0x104/0x900 [ 579.072678][T13648] pcpu_alloc+0x696/0x11f0 [ 579.077079][T13648] htab_map_alloc+0x8e0/0x15b0 [ 579.081861][T13648] __do_sys_bpf+0x3743/0xbf40 [ 579.086519][T13648] ? _kstrtoull+0x38d/0x490 [ 579.091000][T13648] ? kstrtouint_from_user+0x22d/0x2b0 [ 579.096348][T13648] ? kstrtol_from_user+0x320/0x320 [ 579.101437][T13648] ? __kasan_slab_free+0x1f2/0x230 [ 579.106527][T13648] ? __bpf_prog_put_rcu+0x300/0x300 [ 579.111701][T13648] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 579.118093][T13648] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.124138][T13648] ? get_pid_task+0x86/0x90 [ 579.128621][T13648] ? proc_fail_nth_write+0x18f/0x250 [ 579.133883][T13648] ? proc_fail_nth_read+0x1d0/0x1d0 [ 579.139090][T13648] ? proc_fail_nth_read+0x1d0/0x1d0 [ 579.144281][T13648] ? memset+0x1f/0x40 [ 579.148243][T13648] ? fsnotify+0x13a0/0x1460 [ 579.152747][T13648] ? __kernel_write+0x340/0x340 [ 579.157584][T13648] ? __fsnotify_parent+0x310/0x310 [ 579.162691][T13648] ? security_file_permission+0x128/0x300 [ 579.168386][T13648] ? __sb_end_write+0xa4/0xf0 [ 579.173038][T13648] ? vfs_write+0x427/0x4f0 [ 579.177431][T13648] ? fput_many+0x42/0x1a0 [ 579.181758][T13648] do_syscall_64+0xcb/0x150 [ 579.186244][T13648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.192112][T13648] RIP: 0033:0x45c1f9 [ 579.196506][T13648] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.216087][T13648] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.224476][T13648] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 579.232424][T13648] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 579.240374][T13648] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 579.248322][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 579.256276][T13648] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 579.265205][T11219] uclogic 0003:5543:006E.00CB: failed retrieving string descriptor #200: -71 [ 579.274503][T11307] usb 3-1: device descriptor read/64, error 18 [ 579.280860][T11219] uclogic 0003:5543:006E.00CB: failed retrieving pen parameters: -71 [ 579.289073][T11219] uclogic 0003:5543:006E.00CB: failed probing pen v2 parameters: -71 [ 579.297300][T11219] uclogic 0003:5543:006E.00CB: failed probing parameters: -71 [ 579.304821][T11219] uclogic: probe of 0003:5543:006E.00CB failed with error -71 [ 579.313650][T11219] usb 1-1: USB disconnect, device number 99 [ 579.417246][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.428174][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.438620][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 579.448069][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.456643][T11147] usb 4-1: config 0 descriptor?? 21:07:14 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000040000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x300}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:07:14 executing program 4 (fault-call:10 fault-nth:23): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 579.687155][T11307] usb 3-1: device descriptor read/64, error 18 [ 579.764696][T13667] FAULT_INJECTION: forcing a failure. [ 579.764696][T13667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.778037][T13667] CPU: 1 PID: 13667 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 579.788170][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.798199][T13667] Call Trace: [ 579.801469][T13667] dump_stack+0x14a/0x1ce [ 579.805773][T13667] ? devkmsg_release+0x11c/0x11c [ 579.810685][T13667] ? show_regs_print_info+0x12/0x12 [ 579.815855][T13667] ? __vmalloc+0x40/0x50 [ 579.820069][T13667] ? pcpu_alloc+0x696/0x11f0 [ 579.824630][T13667] ? __do_sys_bpf+0x3743/0xbf40 [ 579.829506][T13667] ? kasan_alloc_pages+0x4a/0x60 [ 579.834435][T13667] should_fail+0x6fb/0x860 [ 579.838865][T13667] ? setup_fault_attr+0x3d0/0x3d0 [ 579.843860][T13667] __alloc_pages_nodemask+0x1ee/0x7c0 [ 579.849314][T13667] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 579.854845][T13667] ? __vmalloc_node_range+0x439/0x7b0 [ 579.860201][T13667] ? __vmalloc_node_range+0x439/0x7b0 [ 579.865552][T13667] __vmalloc_node_range+0x360/0x7b0 [ 579.870738][T13667] __vmalloc+0x40/0x50 [ 579.874790][T13667] ? pcpu_create_chunk+0x104/0x900 [ 579.879878][T13667] pcpu_create_chunk+0x104/0x900 [ 579.884794][T13667] pcpu_alloc+0x696/0x11f0 [ 579.889192][T13667] htab_map_alloc+0x8e0/0x15b0 [ 579.893951][T13667] __do_sys_bpf+0x3743/0xbf40 [ 579.898605][T13667] ? _kstrtoull+0x38d/0x490 [ 579.903087][T13667] ? kstrtouint_from_user+0x22d/0x2b0 [ 579.908434][T13667] ? kstrtol_from_user+0x320/0x320 [ 579.913522][T13667] ? __kasan_slab_free+0x1f2/0x230 [ 579.918610][T13667] ? __bpf_prog_put_rcu+0x300/0x300 [ 579.923800][T13667] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 579.930193][T13667] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.936239][T13667] ? get_pid_task+0x86/0x90 [ 579.940722][T13667] ? proc_fail_nth_write+0x18f/0x250 [ 579.946824][T13667] ? proc_fail_nth_read+0x1d0/0x1d0 [ 579.952007][T13667] ? proc_fail_nth_read+0x1d0/0x1d0 [ 579.957207][T13667] ? memset+0x1f/0x40 [ 579.961171][T13667] ? fsnotify+0x13a0/0x1460 [ 579.965664][T13667] ? __kernel_write+0x340/0x340 [ 579.970496][T13667] ? __fsnotify_parent+0x310/0x310 [ 579.975592][T13667] ? security_file_permission+0x128/0x300 [ 579.981290][T13667] ? __sb_end_write+0xa4/0xf0 [ 579.985974][T13667] ? vfs_write+0x427/0x4f0 [ 579.990372][T13667] ? fput_many+0x42/0x1a0 [ 579.994683][T13667] do_syscall_64+0xcb/0x150 [ 579.999606][T13667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.005583][T13667] RIP: 0033:0x45c1f9 [ 580.009478][T13667] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.029062][T13667] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.037452][T13667] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 580.045398][T13667] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 580.053345][T13667] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 580.061321][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 580.069274][T13667] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 580.097257][T11147] usbhid 4-1:0.0: can't add hid device: -71 21:07:14 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000e80000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 580.110480][T11147] usbhid: probe of 4-1:0.0 failed with error -71 [ 580.119214][T11147] usb 4-1: USB disconnect, device number 121 [ 580.147189][T11307] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 580.154834][T11219] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 580.427161][T11307] usb 3-1: device descriptor read/64, error 18 [ 580.477181][T11147] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 580.518146][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.529048][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.538795][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 580.547905][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.556451][T11219] usb 1-1: config 0 descriptor?? [ 580.817272][T11307] usb 3-1: device descriptor read/64, error 18 [ 580.837220][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.848246][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.858044][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 580.867057][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.875845][T11147] usb 4-1: config 0 descriptor?? [ 580.897250][T11219] usbhid 1-1:0.0: can't add hid device: -71 [ 580.903238][T11219] usbhid: probe of 1-1:0.0 failed with error -71 [ 580.910914][T11219] usb 1-1: USB disconnect, device number 100 [ 580.937218][T11307] usb usb3-port1: attempt power cycle 21:07:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000080)={0x7, 'bond0\x00', {0x9}}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'bond0\x00', {0x800}, 0x100}) 21:07:15 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000100000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x500}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:15 executing program 4 (fault-call:10 fault-nth:24): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 581.171788][T13701] FAULT_INJECTION: forcing a failure. [ 581.171788][T13701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.177280][T11147] usbhid 4-1:0.0: can't add hid device: -71 [ 581.185023][T13701] CPU: 0 PID: 13701 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 581.201040][T13701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.211073][T13701] Call Trace: [ 581.214348][T13701] dump_stack+0x14a/0x1ce [ 581.218661][T13701] ? devkmsg_release+0x11c/0x11c [ 581.223582][T13701] ? show_regs_print_info+0x12/0x12 [ 581.228759][T13701] ? __vmalloc+0x40/0x50 [ 581.232979][T13701] ? pcpu_alloc+0x696/0x11f0 [ 581.237567][T13701] ? __do_sys_bpf+0x3743/0xbf40 [ 581.242401][T13701] ? kasan_alloc_pages+0x4a/0x60 [ 581.247318][T13701] should_fail+0x6fb/0x860 [ 581.251713][T13701] ? setup_fault_attr+0x3d0/0x3d0 [ 581.256717][T13701] __alloc_pages_nodemask+0x1ee/0x7c0 [ 581.262073][T13701] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 581.267601][T13701] ? __vmalloc_node_range+0x439/0x7b0 [ 581.272948][T13701] ? __vmalloc_node_range+0x439/0x7b0 [ 581.278298][T13701] __vmalloc_node_range+0x360/0x7b0 [ 581.283476][T13701] __vmalloc+0x40/0x50 [ 581.287529][T13701] ? pcpu_create_chunk+0x104/0x900 [ 581.292616][T13701] pcpu_create_chunk+0x104/0x900 [ 581.297552][T13701] pcpu_alloc+0x696/0x11f0 [ 581.301953][T13701] htab_map_alloc+0x8e0/0x15b0 [ 581.306699][T13701] __do_sys_bpf+0x3743/0xbf40 [ 581.311357][T13701] ? _kstrtoull+0x38d/0x490 [ 581.315840][T13701] ? kstrtouint_from_user+0x22d/0x2b0 [ 581.321202][T13701] ? kstrtol_from_user+0x320/0x320 [ 581.327265][T13701] ? __kasan_slab_free+0x1f2/0x230 [ 581.332354][T13701] ? __bpf_prog_put_rcu+0x300/0x300 [ 581.337527][T13701] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 581.343918][T13701] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 581.349965][T13701] ? get_pid_task+0x86/0x90 [ 581.354447][T13701] ? proc_fail_nth_write+0x18f/0x250 [ 581.359711][T13701] ? proc_fail_nth_read+0x1d0/0x1d0 [ 581.364891][T13701] ? proc_fail_nth_read+0x1d0/0x1d0 [ 581.370067][T13701] ? memset+0x1f/0x40 [ 581.374022][T13701] ? fsnotify+0x13a0/0x1460 [ 581.378503][T13701] ? __kernel_write+0x340/0x340 [ 581.383350][T13701] ? __fsnotify_parent+0x310/0x310 [ 581.388442][T13701] ? security_file_permission+0x128/0x300 [ 581.394133][T13701] ? __sb_end_write+0xa4/0xf0 [ 581.398787][T13701] ? vfs_write+0x427/0x4f0 [ 581.403207][T13701] ? fput_many+0x42/0x1a0 [ 581.407517][T13701] do_syscall_64+0xcb/0x150 [ 581.412012][T13701] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 581.417900][T13701] RIP: 0033:0x45c1f9 [ 581.421775][T13701] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.441360][T13701] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.449755][T13701] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 581.457714][T13701] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 21:07:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x600}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 581.465671][T13701] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 581.473623][T13701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 581.481572][T13701] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 581.506572][T11147] usbhid: probe of 4-1:0.0 failed with error -71 [ 581.514609][T11147] usb 4-1: USB disconnect, device number 122 21:07:16 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000200000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xe80}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 581.647218][T11219] usb 1-1: new high-speed USB device number 101 using dummy_hcd 21:07:16 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000001100000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 581.867156][T11147] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 581.867415][T11307] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 582.017293][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.028323][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.038411][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 582.047539][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.056141][T11219] usb 1-1: config 0 descriptor?? [ 582.107258][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.118391][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.128703][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 582.138022][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.146704][T11307] usb 3-1: config 0 descriptor?? [ 582.237313][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.248323][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.258330][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 582.267402][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.276000][T11147] usb 4-1: config 0 descriptor?? [ 582.487186][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 582.493170][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 582.501129][T11307] usb 3-1: USB disconnect, device number 52 [ 582.607232][T11147] usbhid 4-1:0.0: can't add hid device: -71 [ 582.613347][T11147] usbhid: probe of 4-1:0.0 failed with error -71 [ 582.620741][T11147] usb 4-1: USB disconnect, device number 123 [ 582.757215][T11219] usb 1-1: string descriptor 0 read error: -22 [ 582.957184][T11307] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 582.977274][T11219] uclogic 0003:5543:006E.00CC: failed retrieving string descriptor #200: -71 [ 582.986095][T11219] uclogic 0003:5543:006E.00CC: failed retrieving pen parameters: -71 [ 582.994230][T11219] uclogic 0003:5543:006E.00CC: failed probing pen v2 parameters: -71 [ 583.002426][T11219] uclogic 0003:5543:006E.00CC: failed probing parameters: -71 [ 583.009936][T11219] uclogic: probe of 0003:5543:006E.00CC failed with error -71 [ 583.019564][T11219] usb 1-1: USB disconnect, device number 101 [ 583.077231][T11147] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 583.317266][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.328281][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.338675][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 583.347997][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.356576][T11307] usb 3-1: config 0 descriptor?? 21:07:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:07:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x1100}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:17 executing program 4 (fault-call:10 fault-nth:25): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 583.457266][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.468197][T11147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.488104][T11147] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 583.497594][T11147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.506599][T11147] usb 4-1: config 0 descriptor?? [ 583.554877][T13761] FAULT_INJECTION: forcing a failure. [ 583.554877][T13761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.568145][T13761] CPU: 0 PID: 13761 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 583.578281][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.588306][T13761] Call Trace: [ 583.591585][T13761] dump_stack+0x14a/0x1ce [ 583.595931][T13761] ? devkmsg_release+0x11c/0x11c [ 583.600868][T13761] ? show_regs_print_info+0x12/0x12 [ 583.606116][T13761] ? __vmalloc+0x40/0x50 [ 583.610363][T13761] ? pcpu_alloc+0x696/0x11f0 [ 583.614923][T13761] ? __do_sys_bpf+0x3743/0xbf40 [ 583.619765][T13761] ? kasan_alloc_pages+0x4a/0x60 [ 583.624673][T13761] should_fail+0x6fb/0x860 [ 583.629067][T13761] ? setup_fault_attr+0x3d0/0x3d0 [ 583.634065][T13761] __alloc_pages_nodemask+0x1ee/0x7c0 [ 583.639424][T13761] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 583.644954][T13761] ? __vmalloc_node_range+0x439/0x7b0 [ 583.650307][T13761] ? __vmalloc_node_range+0x439/0x7b0 [ 583.655658][T13761] __vmalloc_node_range+0x360/0x7b0 [ 583.660838][T13761] __vmalloc+0x40/0x50 [ 583.664891][T13761] ? pcpu_create_chunk+0x104/0x900 [ 583.669982][T13761] pcpu_create_chunk+0x104/0x900 [ 583.674900][T13761] pcpu_alloc+0x696/0x11f0 [ 583.679299][T13761] htab_map_alloc+0x8e0/0x15b0 [ 583.684047][T13761] __do_sys_bpf+0x3743/0xbf40 [ 583.688703][T13761] ? _kstrtoull+0x38d/0x490 [ 583.693206][T13761] ? kstrtouint_from_user+0x22d/0x2b0 [ 583.698555][T13761] ? kstrtol_from_user+0x320/0x320 [ 583.703643][T13761] ? __kasan_slab_free+0x1f2/0x230 [ 583.708732][T13761] ? __bpf_prog_put_rcu+0x300/0x300 [ 583.713946][T13761] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 583.720370][T13761] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.726428][T13761] ? get_pid_task+0x86/0x90 [ 583.730908][T13761] ? proc_fail_nth_write+0x18f/0x250 [ 583.736185][T13761] ? proc_fail_nth_read+0x1d0/0x1d0 [ 583.741375][T13761] ? proc_fail_nth_read+0x1d0/0x1d0 [ 583.746565][T13761] ? memset+0x1f/0x40 [ 583.750527][T13761] ? fsnotify+0x13a0/0x1460 [ 583.755008][T13761] ? __kernel_write+0x340/0x340 [ 583.759859][T13761] ? __fsnotify_parent+0x310/0x310 [ 583.764952][T13761] ? security_file_permission+0x128/0x300 [ 583.770651][T13761] ? __sb_end_write+0xa4/0xf0 [ 583.776262][T13761] ? vfs_write+0x427/0x4f0 [ 583.780658][T13761] ? fput_many+0x42/0x1a0 [ 583.784971][T13761] do_syscall_64+0xcb/0x150 [ 583.789485][T13761] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.795360][T13761] RIP: 0033:0x45c1f9 [ 583.799231][T13761] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.818814][T13761] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.827221][T13761] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 583.835883][T13761] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 583.843849][T13761] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 583.851815][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 583.859783][T13761] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 584.017163][T11219] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 584.307328][T11307] usb 3-1: string descriptor 0 read error: -22 [ 584.327209][T11147] usb 4-1: string descriptor 0 read error: -22 [ 584.377252][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.388262][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.398225][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 584.407285][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.416107][T11219] usb 1-1: config 0 descriptor?? [ 584.529192][T11307] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00CD/input/input88 [ 584.539099][T11147] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00CE/input/input90 [ 584.555531][T11307] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:006E.00CD/input/input89 [ 584.560008][T11147] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00CE/input/input91 [ 584.591139][T11147] uclogic 0003:5543:006E.00CE: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 584.604302][T11307] uclogic 0003:5543:006E.00CD: input,hidraw1: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.2-1/input0 [ 584.728572][T11307] usb 3-1: USB disconnect, device number 53 [ 584.747235][T11219] usbhid 1-1:0.0: can't add hid device: -71 [ 584.753192][T11219] usbhid: probe of 1-1:0.0 failed with error -71 [ 584.761225][T11219] usb 1-1: USB disconnect, device number 102 [ 585.217200][T11219] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 585.497164][T13771] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 585.577223][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.588147][T11219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.598597][T11219] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 585.607911][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.616557][T11219] usb 1-1: config 0 descriptor?? 21:07:20 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000003c00000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2900}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:20 executing program 4 (fault-call:10 fault-nth:26): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 585.837530][T11307] usb 4-1: USB disconnect, device number 124 [ 585.867219][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:07:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x30, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_devices(r6, &(0x7f0000000700)='devices.allow\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)="2674e5b8fb64aa13242cb0ea3ef09f781ad28f280eab37d4acf9", 0x1a}, {&(0x7f0000000280)="9d4dbcc68a9f4c0eed8f9e0a2fd277e61ab0d49edea2cbc332105cbb59cd92bcd1d116807574473bbbd1a00135c476274044c0f070280053d9d6274dbdf4cfcc0310f9998bf5c3ecb2c758ce50975cdc2d0dae8c2ab584617fa5ac36536d1541d8af9562c19df23f2a34836b2b9bd51591607794b190c5bb91ec473a07fde319fa16147a10587651", 0x88}, {&(0x7f0000000340)="dcaef242c76ed63a2f308e99ff37443dee2d29db0ad0d76c77e0b58a13a05bb66ea886eb4bab37c703998bdee102f42bda1a20a4813540f2de9621f4e29dc0526f327dee0cd458f849", 0x49}, {&(0x7f0000000400)="b2ae902bcb94e4754f1e2c51cd318364d5770a73a0c9d7687cefd02c3bb1c35a933c1a97685e04b67b27af55450dd28d8832af222fff33275cb2d0f0fb7512950bc4fdcc201796c85a225b28f9ead4814f827a12ce8f7659f78d6a63381339dd606d20dbea0d1befd3889edd6b72ad8d25ae79c2ec4392ff8c595b9f6616529306c6aa9c3e90bb23c477324a609c5758f9826636544edbecc0208b8b46134750b510fc56412caac33a5d582a2becff0255f5655beb7da42da8438df21d103bcf51c9ed979ee9f72399f018fff4e90cae4582eda474ca0bd3d25852e8552f30cd707c8d8c16bb2cf3b55c621869", 0xed}, {&(0x7f0000000540)="70b5273e88a83b69072f9363f7de52f70c3cdba8736be3fbac12ba819d97ec40e6b80db6bad3577fea91e4dd0f2029b5619b9e9735d8dfb9c1d2f97e59a1cd0751564de1695eccc20e8a218ebef88d4cb384cac86dfbaf7625fb3fbd2404892df14bef5876ca0863143bd99d1d7adaa0283fb3d02c81b4a0e8c8a891d81dcb34410b80", 0x83}], 0x5, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0xffffffffffffff39, 0x1, 0x1, [r3, r4, r7, 0xffffffffffffffff]}}], 0x48, 0x40081}, 0x40) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 585.886321][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.904374][T13771] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 585.914323][T13771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.917830][T13809] FAULT_INJECTION: forcing a failure. [ 585.917830][T13809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 585.939065][T13809] CPU: 1 PID: 13809 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 585.949203][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.959229][T13809] Call Trace: [ 585.962495][T13809] dump_stack+0x14a/0x1ce [ 585.966794][T13809] ? devkmsg_release+0x11c/0x11c [ 585.971731][T13809] ? show_regs_print_info+0x12/0x12 [ 585.976912][T13809] ? __vmalloc+0x40/0x50 [ 585.981161][T13809] ? pcpu_alloc+0x696/0x11f0 [ 585.985745][T13809] ? __do_sys_bpf+0x3743/0xbf40 [ 585.990589][T13809] ? kasan_alloc_pages+0x4a/0x60 [ 585.995496][T13809] should_fail+0x6fb/0x860 [ 585.999882][T13809] ? setup_fault_attr+0x3d0/0x3d0 [ 586.004894][T13809] __alloc_pages_nodemask+0x1ee/0x7c0 [ 586.010276][T13809] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 586.015802][T13809] ? __vmalloc_node_range+0x439/0x7b0 [ 586.021154][T13809] ? __vmalloc_node_range+0x439/0x7b0 [ 586.026523][T13809] __vmalloc_node_range+0x360/0x7b0 [ 586.031699][T13809] __vmalloc+0x40/0x50 [ 586.035746][T13809] ? pcpu_create_chunk+0x104/0x900 [ 586.040837][T13809] pcpu_create_chunk+0x104/0x900 [ 586.045750][T13809] pcpu_alloc+0x696/0x11f0 [ 586.050144][T13809] htab_map_alloc+0x8e0/0x15b0 [ 586.054886][T13809] __do_sys_bpf+0x3743/0xbf40 [ 586.059540][T13809] ? _kstrtoull+0x38d/0x490 [ 586.064042][T13809] ? kstrtouint_from_user+0x22d/0x2b0 [ 586.069393][T13809] ? kstrtol_from_user+0x320/0x320 [ 586.074501][T13809] ? __kasan_slab_free+0x1f2/0x230 [ 586.079594][T13809] ? __bpf_prog_put_rcu+0x300/0x300 [ 586.084784][T13809] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 586.091178][T13809] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 586.097224][T13809] ? get_pid_task+0x86/0x90 [ 586.101703][T13809] ? proc_fail_nth_write+0x18f/0x250 [ 586.106965][T13809] ? proc_fail_nth_read+0x1d0/0x1d0 [ 586.112139][T13809] ? proc_fail_nth_read+0x1d0/0x1d0 [ 586.117313][T13809] ? memset+0x1f/0x40 [ 586.121271][T13809] ? fsnotify+0x13a0/0x1460 [ 586.125767][T13809] ? __kernel_write+0x340/0x340 [ 586.130597][T13809] ? __fsnotify_parent+0x310/0x310 [ 586.135737][T13809] ? security_file_permission+0x128/0x300 [ 586.141432][T13809] ? __sb_end_write+0xa4/0xf0 [ 586.146088][T13809] ? vfs_write+0x427/0x4f0 [ 586.150501][T13809] ? fput_many+0x42/0x1a0 [ 586.154811][T13809] do_syscall_64+0xcb/0x150 [ 586.159296][T13809] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 586.165164][T13809] RIP: 0033:0x45c1f9 [ 586.169036][T13809] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.188617][T13809] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.197020][T13809] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 586.204968][T13809] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 586.212916][T13809] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 586.220874][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 586.228829][T13809] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:20 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000004000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 586.250704][T13771] usb 3-1: config 0 descriptor?? [ 586.267289][T13771] usb 3-1: can't set config #0, error -71 [ 586.273428][T13771] usb 3-1: USB disconnect, device number 54 21:07:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2b00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:20 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000e8000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2c00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 586.477237][T11219] usb 1-1: string descriptor 0 read error: -22 [ 586.487172][T11307] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 586.687168][T13771] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 586.697246][T11219] uclogic 0003:5543:006E.00CF: failed retrieving string descriptor #200: -71 [ 586.706880][T11219] uclogic 0003:5543:006E.00CF: failed retrieving pen parameters: -71 [ 586.715160][T11219] uclogic 0003:5543:006E.00CF: failed probing pen v2 parameters: -71 [ 586.723352][T11219] uclogic 0003:5543:006E.00CF: failed probing parameters: -71 [ 586.730955][T11219] uclogic: probe of 0003:5543:006E.00CF failed with error -71 [ 586.739645][T11219] usb 1-1: USB disconnect, device number 103 [ 586.857204][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.868188][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.878623][T11307] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 586.888035][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.896676][T11307] usb 4-1: config 0 descriptor?? [ 587.087253][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.098255][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.108262][T13771] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 587.117307][T13771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.125886][T13771] usb 3-1: config 0 descriptor?? 21:07:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:07:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x2f00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:21 executing program 4 (fault-call:10 fault-nth:27): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:21 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="007fffffff00000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 587.237790][T11307] usbhid 4-1:0.0: can't add hid device: -71 [ 587.243736][T11307] usbhid: probe of 4-1:0.0 failed with error -71 [ 587.253855][T11307] usb 4-1: USB disconnect, device number 125 [ 587.254722][T13864] FAULT_INJECTION: forcing a failure. [ 587.254722][T13864] name failslab, interval 1, probability 0, space 0, times 0 [ 587.272711][T13864] CPU: 1 PID: 13864 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 587.282849][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.292879][T13864] Call Trace: [ 587.296162][T13864] dump_stack+0x14a/0x1ce [ 587.300483][T13864] ? devkmsg_release+0x11c/0x11c [ 587.305397][T13864] ? show_regs_print_info+0x12/0x12 [ 587.310597][T13864] should_fail+0x6fb/0x860 [ 587.314995][T13864] ? setup_fault_attr+0x3d0/0x3d0 [ 587.319999][T13864] ? __alloc_pages_nodemask+0x374/0x7c0 [ 587.325514][T13864] ? __get_vm_area_node+0x19e/0x340 [ 587.330680][T13864] should_failslab+0x5/0x20 [ 587.335153][T13864] kmem_cache_alloc_trace+0x39/0x280 [ 587.340407][T13864] ? vmap_page_range_noflush+0x657/0x680 [ 587.346015][T13864] __get_vm_area_node+0x19e/0x340 [ 587.351023][T13864] __vmalloc_node_range+0xf0/0x7b0 [ 587.356116][T13864] ? pcpu_create_chunk+0x162/0x900 [ 587.361218][T13864] __vmalloc+0x40/0x50 [ 587.365285][T13864] ? pcpu_create_chunk+0x162/0x900 [ 587.370376][T13864] pcpu_create_chunk+0x162/0x900 [ 587.375309][T13864] pcpu_alloc+0x696/0x11f0 [ 587.379708][T13864] htab_map_alloc+0x8e0/0x15b0 [ 587.384454][T13864] __do_sys_bpf+0x3743/0xbf40 [ 587.389123][T13864] ? _kstrtoull+0x38d/0x490 [ 587.393620][T13864] ? kstrtouint_from_user+0x22d/0x2b0 [ 587.398968][T13864] ? kstrtol_from_user+0x320/0x320 [ 587.404054][T13864] ? __kasan_slab_free+0x1f2/0x230 [ 587.409144][T13864] ? __bpf_prog_put_rcu+0x300/0x300 [ 587.414317][T13864] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 587.420707][T13864] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.426750][T13864] ? get_pid_task+0x86/0x90 [ 587.431233][T13864] ? proc_fail_nth_write+0x18f/0x250 [ 587.436513][T13864] ? proc_fail_nth_read+0x1d0/0x1d0 [ 587.441693][T13864] ? proc_fail_nth_read+0x1d0/0x1d0 [ 587.446864][T13864] ? memset+0x1f/0x40 [ 587.450825][T13864] ? fsnotify+0x13a0/0x1460 [ 587.455316][T13864] ? __kernel_write+0x340/0x340 [ 587.460150][T13864] ? __fsnotify_parent+0x310/0x310 [ 587.465265][T13864] ? security_file_permission+0x128/0x300 [ 587.470962][T13864] ? __sb_end_write+0xa4/0xf0 [ 587.475618][T13864] ? vfs_write+0x427/0x4f0 [ 587.480100][T13864] ? fput_many+0x42/0x1a0 [ 587.484414][T13864] do_syscall_64+0xcb/0x150 [ 587.488909][T13864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.494782][T13864] RIP: 0033:0x45c1f9 [ 587.498655][T13864] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.518239][T13864] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.526624][T13864] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 587.534594][T13864] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 587.542544][T13864] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 587.550521][T13864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 587.558469][T13864] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x3c00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:22 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000010000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 587.657281][T13771] usbhid 3-1:0.0: can't add hid device: -71 [ 587.663270][T13771] usbhid: probe of 3-1:0.0 failed with error -71 [ 587.673927][T13771] usb 3-1: USB disconnect, device number 55 [ 587.717206][T11147] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 587.967181][T11307] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 588.097219][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.108128][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.118796][T11147] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 588.128263][T11147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.136856][T11147] usb 1-1: config 0 descriptor?? [ 588.147160][T13771] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 588.327238][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.338354][T11307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.348123][T11307] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 588.357169][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.365741][T11307] usb 4-1: config 0 descriptor?? [ 588.477217][T11147] usbhid 1-1:0.0: can't add hid device: -71 [ 588.483294][T11147] usbhid: probe of 1-1:0.0 failed with error -71 [ 588.490813][T11147] usb 1-1: USB disconnect, device number 104 [ 588.527268][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.538282][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.549179][T13771] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 588.558456][T13771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.567059][T13771] usb 3-1: config 0 descriptor?? [ 588.947184][T11147] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 589.097192][T11307] usb 4-1: string descriptor 0 read error: -22 [ 589.307286][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.318196][T11147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.319037][T11307] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00D0/input/input92 [ 589.330876][T13771] usbhid 3-1:0.0: can't add hid device: -71 [ 589.341488][T11307] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00D0/input/input93 [ 589.349709][T13771] usbhid: probe of 3-1:0.0 failed with error -71 [ 589.369380][T11147] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 589.373644][T11307] uclogic 0003:5543:006E.00D0: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 589.386215][T13771] usb 3-1: USB disconnect, device number 56 [ 589.405604][T11147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.418470][T11147] usb 1-1: config 0 descriptor?? [ 590.067177][T11307] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 590.107230][T11147] usb 1-1: string descriptor 0 read error: -22 [ 590.327242][T11147] uclogic 0003:5543:006E.00D1: failed retrieving string descriptor #200: -71 [ 590.336092][T11147] uclogic 0003:5543:006E.00D1: failed retrieving pen parameters: -71 [ 590.345701][T11147] uclogic 0003:5543:006E.00D1: failed probing pen v2 parameters: -71 [ 590.354591][T11147] uclogic 0003:5543:006E.00D1: failed probing parameters: -71 [ 590.362813][T11147] uclogic: probe of 0003:5543:006E.00D1 failed with error -71 [ 590.371558][T11147] usb 1-1: USB disconnect, device number 105 [ 590.427385][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.438336][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.448309][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 590.457359][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.465997][T11307] usb 3-1: config 0 descriptor?? 21:07:24 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "0abda36436fad86b9f4400dcfe4be36f007f452a0f831740eb"}}, 0x0, 0x0, 0x0}, 0x0) personality(0x400000d) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) [ 590.522117][ T12] usb 4-1: USB disconnect, device number 126 21:07:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x4000}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:24 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000001006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:24 executing program 4 (fault-call:10 fault-nth:28): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 590.665704][T13928] FAULT_INJECTION: forcing a failure. [ 590.665704][T13928] name failslab, interval 1, probability 0, space 0, times 0 [ 590.678659][T13928] CPU: 1 PID: 13928 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 590.688792][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.698823][T13928] Call Trace: [ 590.702122][T13928] dump_stack+0x14a/0x1ce [ 590.706424][T13928] ? devkmsg_release+0x11c/0x11c [ 590.711342][T13928] ? show_regs_print_info+0x12/0x12 [ 590.716518][T13928] ? __kasan_kmalloc+0x189/0x1c0 [ 590.721432][T13928] should_fail+0x6fb/0x860 [ 590.725827][T13928] ? setup_fault_attr+0x3d0/0x3d0 [ 590.730835][T13928] ? alloc_vmap_area+0x164/0x1bc0 [ 590.735837][T13928] should_failslab+0x5/0x20 [ 590.740318][T13928] kmem_cache_alloc+0x36/0x260 [ 590.745063][T13928] alloc_vmap_area+0x164/0x1bc0 [ 590.749898][T13928] ? vm_map_ram+0x950/0x950 [ 590.754415][T13928] ? __get_vm_area_node+0x19e/0x340 [ 590.759596][T13928] ? vmap_page_range_noflush+0x657/0x680 [ 590.765204][T13928] __get_vm_area_node+0x1ef/0x340 [ 590.770209][T13928] __vmalloc_node_range+0xf0/0x7b0 [ 590.775297][T13928] ? pcpu_create_chunk+0x162/0x900 [ 590.780388][T13928] __vmalloc+0x40/0x50 [ 590.784438][T13928] ? pcpu_create_chunk+0x162/0x900 [ 590.789525][T13928] pcpu_create_chunk+0x162/0x900 [ 590.794454][T13928] pcpu_alloc+0x696/0x11f0 [ 590.798853][T13928] htab_map_alloc+0x8e0/0x15b0 [ 590.803597][T13928] __do_sys_bpf+0x3743/0xbf40 [ 590.808269][T13928] ? _kstrtoull+0x38d/0x490 [ 590.812748][T13928] ? kstrtouint_from_user+0x22d/0x2b0 [ 590.818100][T13928] ? kstrtol_from_user+0x320/0x320 [ 590.823200][T13928] ? __kasan_slab_free+0x1f2/0x230 [ 590.828291][T13928] ? __bpf_prog_put_rcu+0x300/0x300 [ 590.833464][T13928] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 590.839856][T13928] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 590.845899][T13928] ? get_pid_task+0x86/0x90 [ 590.850378][T13928] ? proc_fail_nth_write+0x18f/0x250 [ 590.855639][T13928] ? proc_fail_nth_read+0x1d0/0x1d0 [ 590.860815][T13928] ? proc_fail_nth_read+0x1d0/0x1d0 [ 590.866041][T13928] ? memset+0x1f/0x40 [ 590.870006][T13928] ? fsnotify+0x13a0/0x1460 [ 590.874486][T13928] ? __kernel_write+0x340/0x340 [ 590.879327][T13928] ? __fsnotify_parent+0x310/0x310 [ 590.884420][T13928] ? security_file_permission+0x128/0x300 [ 590.890113][T13928] ? __sb_end_write+0xa4/0xf0 [ 590.894767][T13928] ? vfs_write+0x427/0x4f0 [ 590.899160][T13928] ? fput_many+0x42/0x1a0 [ 590.903472][T13928] do_syscall_64+0xcb/0x150 [ 590.907956][T13928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 590.913827][T13928] RIP: 0033:0x45c1f9 [ 590.917702][T13928] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.937303][T13928] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.945698][T13928] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 590.953650][T13928] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 21:07:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x800e}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 590.961599][T13928] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 590.969546][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 590.977506][T13928] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 590.997228][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 591.003278][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 591.024856][T11307] usb 3-1: USB disconnect, device number 57 21:07:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 21:07:25 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000002006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x9400}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:25 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000011006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 591.287162][ T12] usb 4-1: new high-speed USB device number 127 using dummy_hcd 21:07:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:25 executing program 4 (fault-call:10 fault-nth:29): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 591.367183][ T174] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 591.387275][T11307] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 591.471145][T13964] FAULT_INJECTION: forcing a failure. [ 591.471145][T13964] name failslab, interval 1, probability 0, space 0, times 0 [ 591.483799][T13964] CPU: 0 PID: 13964 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 591.493934][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.503969][T13964] Call Trace: [ 591.507245][T13964] dump_stack+0x14a/0x1ce [ 591.511556][T13964] ? devkmsg_release+0x11c/0x11c [ 591.516479][T13964] ? alloc_vmap_area+0x1ab1/0x1bc0 [ 591.521573][T13964] ? show_regs_print_info+0x12/0x12 [ 591.526764][T13964] should_fail+0x6fb/0x860 [ 591.531163][T13964] ? setup_fault_attr+0x3d0/0x3d0 [ 591.536181][T13964] ? __get_vm_area_node+0x19e/0x340 [ 591.541360][T13964] ? vmap_page_range_noflush+0x657/0x680 [ 591.546970][T13964] ? __vmalloc_node_range+0x439/0x7b0 [ 591.552320][T13964] should_failslab+0x5/0x20 [ 591.556804][T13964] __kmalloc+0x5f/0x2d0 [ 591.560941][T13964] __vmalloc_node_range+0x439/0x7b0 [ 591.566120][T13964] __vmalloc+0x40/0x50 [ 591.570186][T13964] ? pcpu_create_chunk+0x162/0x900 [ 591.575278][T13964] pcpu_create_chunk+0x162/0x900 [ 591.580210][T13964] pcpu_alloc+0x696/0x11f0 [ 591.584641][T13964] htab_map_alloc+0x8e0/0x15b0 [ 591.589389][T13964] __do_sys_bpf+0x3743/0xbf40 [ 591.594048][T13964] ? _kstrtoull+0x38d/0x490 [ 591.598527][T13964] ? kstrtouint_from_user+0x22d/0x2b0 [ 591.603877][T13964] ? kstrtol_from_user+0x320/0x320 [ 591.608971][T13964] ? __kasan_slab_free+0x1f2/0x230 [ 591.614071][T13964] ? __bpf_prog_put_rcu+0x300/0x300 [ 591.619254][T13964] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 591.625659][T13964] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 591.631703][T13964] ? get_pid_task+0x86/0x90 [ 591.636207][T13964] ? proc_fail_nth_write+0x18f/0x250 [ 591.641494][T13964] ? proc_fail_nth_read+0x1d0/0x1d0 [ 591.646672][T13964] ? proc_fail_nth_read+0x1d0/0x1d0 [ 591.651846][T13964] ? memset+0x1f/0x40 [ 591.655806][T13964] ? fsnotify+0x13a0/0x1460 [ 591.660288][T13964] ? __kernel_write+0x340/0x340 [ 591.665123][T13964] ? __fsnotify_parent+0x310/0x310 [ 591.670216][T13964] ? security_file_permission+0x128/0x300 [ 591.675909][T13964] ? __sb_end_write+0xa4/0xf0 [ 591.680561][T13964] ? vfs_write+0x427/0x4f0 [ 591.684970][T13964] ? fput_many+0x42/0x1a0 [ 591.689285][T13964] do_syscall_64+0xcb/0x150 [ 591.693772][T13964] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 591.699640][T13964] RIP: 0033:0x45c1f9 [ 591.703513][T13964] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.723095][T13964] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.731484][T13964] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 591.739439][T13964] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 591.747390][T13964] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 591.755687][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 591.763638][T13964] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 591.937444][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.948408][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.958225][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 591.967269][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.975847][ T12] usb 4-1: config 0 descriptor?? [ 592.027308][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.038235][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.051983][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.063242][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.073366][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 592.082806][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 592.092202][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.100579][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.110202][T11307] usb 3-1: config 0 descriptor?? [ 592.115458][ T174] usb 1-1: config 0 descriptor?? [ 592.327195][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 592.333174][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 592.341413][ T12] usb 4-1: USB disconnect, device number 127 [ 592.467288][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 592.473230][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 592.480675][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 592.486587][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 592.495252][ T174] usb 1-1: USB disconnect, device number 106 [ 592.501921][T11307] usb 3-1: USB disconnect, device number 58 [ 592.807205][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 592.967194][T11307] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 592.974803][ T174] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 593.187247][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.198500][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.209221][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 593.218688][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.227666][ T12] usb 4-1: config 0 descriptor?? [ 593.347241][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.358172][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.369071][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.380097][T11307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.390178][T11307] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 593.399510][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 593.408991][T11307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.417634][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.426238][ T174] usb 1-1: config 0 descriptor?? [ 593.433083][T11307] usb 3-1: config 0 descriptor?? [ 593.697293][T11307] usbhid 3-1:0.0: can't add hid device: -71 [ 593.703377][T11307] usbhid: probe of 3-1:0.0 failed with error -71 [ 593.711679][T11307] usb 3-1: USB disconnect, device number 59 [ 593.987221][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 593.993197][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 594.001378][ T12] usb 4-1: USB disconnect, device number 2 [ 594.127217][ T174] usb 1-1: string descriptor 0 read error: -22 [ 594.347252][ T174] uclogic 0003:5543:006E.00D2: failed retrieving string descriptor #200: -71 [ 594.356023][ T174] uclogic 0003:5543:006E.00D2: failed retrieving pen parameters: -71 [ 594.365635][ T174] uclogic 0003:5543:006E.00D2: failed probing pen v2 parameters: -71 [ 594.374377][ T174] uclogic 0003:5543:006E.00D2: failed probing parameters: -71 [ 594.382571][ T174] uclogic: probe of 0003:5543:006E.00D2 failed with error -71 [ 594.391631][ T174] usb 1-1: USB disconnect, device number 107 [ 594.917177][T13771] usb 4-1: new high-speed USB device number 3 using dummy_hcd 21:07:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1110b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0xfffffffffffffe8b, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 21:07:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:29 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000003c006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:29 executing program 4 (fault-call:10 fault-nth:30): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) [ 595.297182][T13771] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 595.304831][T13771] usb 4-1: can't read configurations, error -71 [ 595.332708][T14024] FAULT_INJECTION: forcing a failure. [ 595.332708][T14024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.345926][T14024] CPU: 1 PID: 14024 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 595.356073][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.366102][T14024] Call Trace: [ 595.369390][T14024] dump_stack+0x14a/0x1ce [ 595.373707][T14024] ? devkmsg_release+0x11c/0x11c [ 595.378619][T14024] ? show_regs_print_info+0x12/0x12 [ 595.383786][T14024] ? __vmalloc+0x40/0x50 [ 595.388034][T14024] ? pcpu_alloc+0x696/0x11f0 [ 595.392604][T14024] ? htab_map_alloc+0x8e0/0x15b0 [ 595.397565][T14024] ? __do_sys_bpf+0x3743/0xbf40 [ 595.402392][T14024] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 595.408427][T14024] should_fail+0x6fb/0x860 [ 595.412821][T14024] ? setup_fault_attr+0x3d0/0x3d0 [ 595.417828][T14024] __alloc_pages_nodemask+0x1ee/0x7c0 [ 595.423182][T14024] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 595.428709][T14024] ? __vmalloc_node_range+0x439/0x7b0 [ 595.434059][T14024] ? __vmalloc_node_range+0x439/0x7b0 [ 595.439415][T14024] __vmalloc_node_range+0x360/0x7b0 [ 595.444602][T14024] __vmalloc+0x40/0x50 [ 595.448655][T14024] ? pcpu_create_chunk+0x162/0x900 [ 595.453753][T14024] pcpu_create_chunk+0x162/0x900 [ 595.459650][T14024] pcpu_alloc+0x696/0x11f0 [ 595.464052][T14024] htab_map_alloc+0x8e0/0x15b0 [ 595.468798][T14024] __do_sys_bpf+0x3743/0xbf40 [ 595.473465][T14024] ? _kstrtoull+0x38d/0x490 [ 595.477948][T14024] ? kstrtouint_from_user+0x22d/0x2b0 [ 595.483297][T14024] ? kstrtol_from_user+0x320/0x320 [ 595.488398][T14024] ? __kasan_slab_free+0x1f2/0x230 [ 595.493496][T14024] ? __bpf_prog_put_rcu+0x300/0x300 [ 595.498674][T14024] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 595.505065][T14024] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 595.511116][T14024] ? get_pid_task+0x86/0x90 [ 595.515596][T14024] ? proc_fail_nth_write+0x18f/0x250 [ 595.520862][T14024] ? proc_fail_nth_read+0x1d0/0x1d0 [ 595.526038][T14024] ? proc_fail_nth_read+0x1d0/0x1d0 [ 595.531214][T14024] ? memset+0x1f/0x40 [ 595.535186][T14024] ? fsnotify+0x13a0/0x1460 [ 595.539667][T14024] ? __kernel_write+0x340/0x340 [ 595.544496][T14024] ? __fsnotify_parent+0x310/0x310 [ 595.549588][T14024] ? security_file_permission+0x128/0x300 [ 595.555283][T14024] ? __sb_end_write+0xa4/0xf0 [ 595.559937][T14024] ? vfs_write+0x427/0x4f0 [ 595.564333][T14024] ? fput_many+0x42/0x1a0 [ 595.568648][T14024] do_syscall_64+0xcb/0x150 [ 595.573132][T14024] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 595.579002][T14024] RIP: 0033:0x45c1f9 [ 595.582875][T14024] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.602457][T14024] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.610848][T14024] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 595.618803][T14024] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 595.626756][T14024] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 595.634734][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 595.642684][T14024] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:30 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000040006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 595.797165][T10413] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 595.817186][ T174] usb 3-1: new high-speed USB device number 60 using dummy_hcd 21:07:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:30 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000e80006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 595.937178][T13771] usb 4-1: new high-speed USB device number 4 using dummy_hcd 21:07:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:30 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000007fffffff006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 596.157217][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.177265][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.192760][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 596.202246][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.207290][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.211929][T10413] usb 1-1: config 0 descriptor?? [ 596.228142][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.237975][ T174] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 596.246970][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.259196][ T174] usb 3-1: config 0 descriptor?? [ 596.307244][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.318364][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.328825][T13771] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 596.338165][T13771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.346675][T13771] usb 4-1: config 0 descriptor?? [ 596.567340][T10413] usbhid 1-1:0.0: can't add hid device: -71 [ 596.573457][T10413] usbhid: probe of 1-1:0.0 failed with error -71 [ 596.582070][T10413] usb 1-1: USB disconnect, device number 108 [ 596.627240][ T174] usbhid 3-1:0.0: can't add hid device: -71 [ 596.633176][ T174] usbhid: probe of 3-1:0.0 failed with error -71 [ 596.641047][ T174] usb 3-1: USB disconnect, device number 60 [ 596.687245][T13771] usbhid 4-1:0.0: can't add hid device: -71 [ 596.693349][T13771] usbhid: probe of 4-1:0.0 failed with error -71 [ 596.701188][T13771] usb 4-1: USB disconnect, device number 4 [ 597.037199][T10413] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 597.107165][ T174] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 597.157225][T13771] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 597.397253][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.408235][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.418687][T10413] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 597.428106][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.436651][T10413] usb 1-1: config 0 descriptor?? [ 597.477287][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.488376][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.498795][ T174] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 597.508098][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.516717][ T174] usb 3-1: config 0 descriptor?? [ 597.527228][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.538105][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.547849][T13771] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 597.556859][T13771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.565811][T13771] usb 4-1: config 0 descriptor?? [ 598.117212][T10413] usb 1-1: string descriptor 0 read error: -22 [ 598.247437][T14018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 598.277292][T13771] usb 4-1: string descriptor 0 read error: -71 [ 598.297307][T13771] uclogic 0003:5543:006E.00D4: failed retrieving string descriptor #200: -71 [ 598.297325][ T174] usbhid 3-1:0.0: can't add hid device: -71 [ 598.306132][T13771] uclogic 0003:5543:006E.00D4: failed retrieving pen parameters: -71 [ 598.312278][ T174] usbhid: probe of 3-1:0.0 failed with error -71 [ 598.323736][T13771] uclogic 0003:5543:006E.00D4: failed probing pen v2 parameters: -71 [ 598.328089][ T174] usb 3-1: USB disconnect, device number 61 [ 598.338543][T10413] uclogic 0003:5543:006E.00D3: failed retrieving string descriptor #200: -71 [ 598.350095][T10413] uclogic 0003:5543:006E.00D3: failed retrieving pen parameters: -71 [ 598.358924][T13771] uclogic 0003:5543:006E.00D4: failed probing parameters: -71 [ 598.366388][T13771] uclogic: probe of 0003:5543:006E.00D4 failed with error -71 [ 598.375420][T10413] uclogic 0003:5543:006E.00D3: failed probing pen v2 parameters: -71 [ 598.384270][T10413] uclogic 0003:5543:006E.00D3: failed probing parameters: -71 [ 598.393628][T13771] usb 4-1: USB disconnect, device number 5 [ 598.400114][T10413] uclogic: probe of 0003:5543:006E.00D3 failed with error -71 [ 598.410103][T10413] usb 1-1: USB disconnect, device number 109 [ 599.007169][T10413] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 599.027201][T13771] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 599.367279][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.378170][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.388065][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.398988][T10413] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 599.408045][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.418047][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.426250][T13771] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 599.437514][T10413] usb 3-1: config 0 descriptor?? [ 599.442582][T13771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.451799][T13771] usb 4-1: config 0 descriptor?? 21:07:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:34 executing program 4 (fault-call:10 fault-nth:31): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:34 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000ffffffff006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 21:07:34 executing program 2: r0 = syz_usb_connect$hid(0x1, 0xffffffffffffffc8, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x5, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x605}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x1, 0x28}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4206, r2, 0x2, 0x44) [ 599.637208][T10413] usbhid 3-1:0.0: can't add hid device: -71 [ 599.643152][T10413] usbhid: probe of 3-1:0.0 failed with error -71 [ 599.650368][T10413] usb 3-1: USB disconnect, device number 62 [ 599.731688][T14115] FAULT_INJECTION: forcing a failure. [ 599.731688][T14115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.745010][T14115] CPU: 1 PID: 14115 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 599.755141][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.765180][T14115] Call Trace: [ 599.768463][T14115] dump_stack+0x14a/0x1ce [ 599.772791][T14115] ? devkmsg_release+0x11c/0x11c 21:07:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x11}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 599.777723][T14115] ? show_regs_print_info+0x12/0x12 [ 599.782914][T14115] ? __vmalloc+0x40/0x50 [ 599.787146][T14115] ? pcpu_alloc+0x696/0x11f0 [ 599.791716][T14115] ? __do_sys_bpf+0x3743/0xbf40 [ 599.796536][T14115] ? kasan_alloc_pages+0x4a/0x60 [ 599.801476][T14115] should_fail+0x6fb/0x860 [ 599.805864][T14115] ? setup_fault_attr+0x3d0/0x3d0 [ 599.810861][T14115] __alloc_pages_nodemask+0x1ee/0x7c0 [ 599.816205][T14115] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 599.821729][T14115] ? __vmalloc_node_range+0x439/0x7b0 [ 599.827081][T14115] ? __vmalloc_node_range+0x439/0x7b0 [ 599.832440][T14115] __vmalloc_node_range+0x360/0x7b0 [ 599.837620][T14115] __vmalloc+0x40/0x50 [ 599.841670][T14115] ? pcpu_create_chunk+0x162/0x900 [ 599.846763][T14115] pcpu_create_chunk+0x162/0x900 [ 599.851697][T14115] pcpu_alloc+0x696/0x11f0 [ 599.856099][T14115] htab_map_alloc+0x8e0/0x15b0 [ 599.860846][T14115] __do_sys_bpf+0x3743/0xbf40 [ 599.865503][T14115] ? _kstrtoull+0x38d/0x490 [ 599.869985][T14115] ? kstrtouint_from_user+0x22d/0x2b0 [ 599.875336][T14115] ? kstrtol_from_user+0x320/0x320 [ 599.880423][T14115] ? __kasan_slab_free+0x1f2/0x230 [ 599.885512][T14115] ? __bpf_prog_put_rcu+0x300/0x300 [ 599.890685][T14115] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 599.897074][T14115] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 599.903122][T14115] ? get_pid_task+0x86/0x90 [ 599.907602][T14115] ? proc_fail_nth_write+0x18f/0x250 [ 599.912864][T14115] ? proc_fail_nth_read+0x1d0/0x1d0 [ 599.918085][T14115] ? proc_fail_nth_read+0x1d0/0x1d0 [ 599.923272][T14115] ? memset+0x1f/0x40 [ 599.927235][T14115] ? fsnotify+0x13a0/0x1460 [ 599.931753][T14115] ? __kernel_write+0x340/0x340 [ 599.936583][T14115] ? __fsnotify_parent+0x310/0x310 [ 599.941674][T14115] ? security_file_permission+0x128/0x300 [ 599.947367][T14115] ? __sb_end_write+0xa4/0xf0 [ 599.952022][T14115] ? vfs_write+0x427/0x4f0 [ 599.956411][T14115] ? fput_many+0x42/0x1a0 [ 599.960729][T14115] do_syscall_64+0xcb/0x150 [ 599.965212][T14115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 599.971102][T14115] RIP: 0033:0x45c1f9 [ 599.974974][T14115] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 599.994553][T14115] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.002936][T14115] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 600.010886][T14115] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 600.018834][T14115] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 600.026791][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 600.034744][T14115] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 600.044811][T13771] usbhid 4-1:0.0: can't add hid device: -71 [ 600.050821][T13771] usbhid: probe of 4-1:0.0 failed with error -71 [ 600.059836][T13771] usb 4-1: USB disconnect, device number 6 21:07:34 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x29}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 600.187196][ T174] usb 1-1: new high-speed USB device number 110 using dummy_hcd 21:07:34 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000011000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x2b}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 600.347213][T10413] usb 3-1: new low-speed USB device number 63 using dummy_hcd 21:07:34 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00003c000000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:34 executing program 4 (fault-call:10 fault-nth:32): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 600.427213][T13771] usb 4-1: new high-speed USB device number 7 using dummy_hcd 21:07:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x2c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 600.530855][T14156] FAULT_INJECTION: forcing a failure. [ 600.530855][T14156] name failslab, interval 1, probability 0, space 0, times 0 [ 600.543632][T14156] CPU: 1 PID: 14156 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 600.547229][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.553778][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.565717][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.584344][T14156] Call Trace: [ 600.584361][T14156] dump_stack+0x14a/0x1ce [ 600.584372][T14156] ? devkmsg_release+0x11c/0x11c [ 600.584379][T14156] ? show_regs_print_info+0x12/0x12 [ 600.584395][T14156] ? get_page_from_freelist+0x486/0x7c0 [ 600.587749][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 600.591963][T14156] should_fail+0x6fb/0x860 [ 600.591973][T14156] ? setup_fault_attr+0x3d0/0x3d0 [ 600.591982][T14156] ? __alloc_pages_nodemask+0x374/0x7c0 [ 600.591994][T14156] ? kcalloc+0x2b/0x50 [ 600.596965][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.602076][T14156] should_failslab+0x5/0x20 [ 600.602084][T14156] __kmalloc+0x5f/0x2d0 [ 600.602093][T14156] ? vmap_page_range_noflush+0x657/0x680 [ 600.602104][T14156] kcalloc+0x2b/0x50 [ 600.602112][T14156] pcpu_get_vm_areas+0x433/0x25d0 [ 600.602130][T14156] pcpu_create_chunk+0x543/0x900 [ 600.671510][T14156] pcpu_alloc+0x696/0x11f0 [ 600.675911][T14156] htab_map_alloc+0x8e0/0x15b0 [ 600.680659][T14156] __do_sys_bpf+0x3743/0xbf40 [ 600.685317][T14156] ? _kstrtoull+0x38d/0x490 [ 600.689799][T14156] ? kstrtouint_from_user+0x22d/0x2b0 [ 600.695146][T14156] ? kstrtol_from_user+0x320/0x320 [ 600.700241][T14156] ? __kasan_slab_free+0x1f2/0x230 [ 600.705343][T14156] ? __bpf_prog_put_rcu+0x300/0x300 [ 600.710518][T14156] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 600.716909][T14156] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 600.722954][T14156] ? get_pid_task+0x86/0x90 [ 600.727435][T14156] ? proc_fail_nth_write+0x18f/0x250 [ 600.732698][T14156] ? proc_fail_nth_read+0x1d0/0x1d0 [ 600.737874][T14156] ? proc_fail_nth_read+0x1d0/0x1d0 [ 600.743052][T14156] ? memset+0x1f/0x40 [ 600.747010][T14156] ? fsnotify+0x13a0/0x1460 [ 600.751509][T14156] ? __kernel_write+0x340/0x340 [ 600.756337][T14156] ? __fsnotify_parent+0x310/0x310 [ 600.761444][T14156] ? security_file_permission+0x128/0x300 [ 600.767141][T14156] ? __sb_end_write+0xa4/0xf0 [ 600.771797][T14156] ? vfs_write+0x427/0x4f0 [ 600.776192][T14156] ? fput_many+0x42/0x1a0 [ 600.780502][T14156] do_syscall_64+0xcb/0x150 [ 600.784987][T14156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 600.790858][T14156] RIP: 0033:0x45c1f9 [ 600.794730][T14156] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 600.814318][T14156] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.822724][T14156] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 600.830674][T14156] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 600.838623][T14156] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 600.846599][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 600.854547][T14156] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 600.876358][ T174] usb 1-1: config 0 descriptor?? 21:07:35 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000800e0000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 600.927190][T10413] usb 3-1: Invalid ep0 maxpacket: 64 [ 601.077230][T10413] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 601.107263][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.118184][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.128208][T13771] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 601.142833][T13771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.157315][T13771] usb 4-1: config 0 descriptor?? [ 601.227288][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 601.233266][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 601.241803][ T174] usb 1-1: USB disconnect, device number 110 [ 601.327172][T10413] usb 3-1: Invalid ep0 maxpacket: 64 [ 601.332588][T10413] usb usb3-port1: attempt power cycle [ 601.487251][T13771] usbhid 4-1:0.0: can't add hid device: -71 [ 601.493212][T13771] usbhid: probe of 4-1:0.0 failed with error -71 [ 601.501361][T13771] usb 4-1: USB disconnect, device number 7 [ 601.707189][ T174] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 601.967173][T13771] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 602.057185][T10413] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 602.067415][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.078324][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.088244][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 602.097323][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.105940][ T174] usb 1-1: config 0 descriptor?? [ 602.147257][T10413] usb 3-1: Invalid ep0 maxpacket: 64 [ 602.297226][T10413] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 602.327279][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.338181][T13771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.347982][T13771] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 602.357027][T13771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.365775][T13771] usb 4-1: config 0 descriptor?? [ 602.387291][T10413] usb 3-1: Invalid ep0 maxpacket: 64 [ 602.392654][T10413] usb usb3-port1: unable to enumerate USB device [ 602.797236][ T174] usb 1-1: string descriptor 0 read error: -22 [ 603.017199][ T174] uclogic 0003:5543:006E.00D5: failed retrieving string descriptor #200: -71 [ 603.025987][ T174] uclogic 0003:5543:006E.00D5: failed retrieving pen parameters: -71 [ 603.035635][ T174] uclogic 0003:5543:006E.00D5: failed probing pen v2 parameters: -71 [ 603.044906][ T174] uclogic 0003:5543:006E.00D5: failed probing parameters: -71 [ 603.047268][T13771] usb 4-1: string descriptor 0 read error: -22 [ 603.054160][ T174] uclogic: probe of 0003:5543:006E.00D5 failed with error -71 [ 603.067992][ T174] usb 1-1: USB disconnect, device number 111 [ 603.268506][T13771] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00D6/input/input94 [ 603.282894][T13771] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.00D6/input/input95 [ 603.306326][T13771] uclogic 0003:5543:006E.00D6: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 21:07:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 21:07:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x2f}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 603.469157][T13771] usb 4-1: USB disconnect, device number 8 [ 603.777196][ T174] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 604.137220][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.148132][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.158540][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 604.167991][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.176569][ T174] usb 1-1: config 0 descriptor?? [ 604.237199][T13564] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 604.517385][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 604.523320][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 604.531379][ T174] usb 1-1: USB disconnect, device number 112 [ 604.597230][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.608131][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.618815][T13564] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 604.628225][T13564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.636783][T13564] usb 4-1: config 0 descriptor?? 21:07:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:39 executing program 4 (fault-call:10 fault-nth:33): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) modify_ldt$write(0x1, &(0x7f0000000000)={0x70ce, 0x0, 0x400, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:39 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000110000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x3c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 604.758302][T14237] FAULT_INJECTION: forcing a failure. [ 604.758302][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 604.770926][T14237] CPU: 0 PID: 14237 Comm: syz-executor.4 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 604.781054][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.791078][T14237] Call Trace: [ 604.794342][T14237] dump_stack+0x14a/0x1ce [ 604.798676][T14237] ? devkmsg_release+0x11c/0x11c [ 604.803585][T14237] ? show_regs_print_info+0x12/0x12 [ 604.809453][T14237] should_fail+0x6fb/0x860 [ 604.813873][T14237] ? setup_fault_attr+0x3d0/0x3d0 [ 604.818903][T14237] ? kcalloc+0x2b/0x50 [ 604.822947][T14237] should_failslab+0x5/0x20 [ 604.827420][T14237] __kmalloc+0x5f/0x2d0 [ 604.831561][T14237] ? kcalloc+0x2b/0x50 [ 604.835603][T14237] ? vmap_page_range_noflush+0x657/0x680 [ 604.841225][T14237] kcalloc+0x2b/0x50 [ 604.845104][T14237] pcpu_get_vm_areas+0x43e/0x25d0 [ 604.850114][T14237] pcpu_create_chunk+0x543/0x900 [ 604.855034][T14237] pcpu_alloc+0x696/0x11f0 [ 604.859436][T14237] htab_map_alloc+0x8e0/0x15b0 [ 604.864181][T14237] __do_sys_bpf+0x3743/0xbf40 [ 604.868840][T14237] ? _kstrtoull+0x38d/0x490 [ 604.873321][T14237] ? kstrtouint_from_user+0x22d/0x2b0 [ 604.878668][T14237] ? kstrtol_from_user+0x320/0x320 [ 604.883755][T14237] ? __kasan_slab_free+0x1f2/0x230 [ 604.888844][T14237] ? __bpf_prog_put_rcu+0x300/0x300 [ 604.894017][T14237] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 604.900407][T14237] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 604.906450][T14237] ? get_pid_task+0x86/0x90 [ 604.910934][T14237] ? proc_fail_nth_write+0x18f/0x250 [ 604.916193][T14237] ? proc_fail_nth_read+0x1d0/0x1d0 [ 604.921368][T14237] ? proc_fail_nth_read+0x1d0/0x1d0 [ 604.926542][T14237] ? memset+0x1f/0x40 [ 604.930501][T14237] ? fsnotify+0x13a0/0x1460 [ 604.934980][T14237] ? __kernel_write+0x340/0x340 [ 604.939807][T14237] ? __fsnotify_parent+0x310/0x310 [ 604.944898][T14237] ? security_file_permission+0x128/0x300 [ 604.950590][T14237] ? __sb_end_write+0xa4/0xf0 [ 604.955248][T14237] ? vfs_write+0x427/0x4f0 [ 604.959641][T14237] ? fput_many+0x42/0x1a0 [ 604.963952][T14237] do_syscall_64+0xcb/0x150 [ 604.968437][T14237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 604.974304][T14237] RIP: 0033:0x45c1f9 [ 604.978199][T14237] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.997781][T14237] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.006169][T14237] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 605.014116][T14237] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 605.022078][T14237] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 605.030026][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 605.037974][T14237] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x94}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 605.067266][T13564] usbhid 4-1:0.0: can't add hid device: -71 [ 605.073256][T13564] usbhid: probe of 4-1:0.0 failed with error -71 [ 605.081564][T13564] usb 4-1: USB disconnect, device number 9 21:07:39 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000003c0000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 605.197249][T13771] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 605.197318][T14245] ================================================================== [ 605.212858][T14245] BUG: KASAN: slab-out-of-bounds in try_to_del_timer_sync+0x3ee/0x480 [ 605.220981][T14245] Write of size 8 at addr ffff8881d868b188 by task syz-executor.1/14245 [ 605.229276][T14245] [ 605.231586][T14245] CPU: 0 PID: 14245 Comm: syz-executor.1 Not tainted 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 605.241706][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.251736][T14245] Call Trace: [ 605.255010][T14245] dump_stack+0x14a/0x1ce [ 605.259318][T14245] ? show_regs_print_info+0x12/0x12 [ 605.264493][T14245] ? printk+0xd2/0x114 [ 605.268539][T14245] print_address_description+0x93/0x620 [ 605.274408][T14245] ? devkmsg_release+0x11c/0x11c [ 605.279320][T14245] ? try_to_wake_up+0xbf8/0xd90 [ 605.284148][T14245] ? _raw_spin_lock_irqsave+0xfc/0x1e0 [ 605.289588][T14245] __kasan_report+0x16d/0x1e0 [ 605.294247][T14245] ? try_to_del_timer_sync+0x3ee/0x480 [ 605.299684][T14245] kasan_report+0x36/0x60 [ 605.303991][T14245] try_to_del_timer_sync+0x3ee/0x480 [ 605.309255][T14245] del_timer_sync+0x74/0xe0 [ 605.313734][T14245] tun_free_netdev+0x99/0x3a0 [ 605.318495][T14245] ? find_next_bit+0xd8/0x120 [ 605.323146][T14245] ? tun_xdp+0x3d0/0x3d0 [ 605.327367][T14245] netdev_run_todo+0xbe3/0xe90 [ 605.332109][T14245] ? slab_free_freelist_hook+0xd0/0x150 [ 605.337646][T14245] ? netdev_refcnt_read+0x1a0/0x1a0 [ 605.342824][T14245] ? __sk_destruct+0x3f9/0x480 [ 605.347566][T14245] ? kfree+0x12b/0x600 [ 605.351616][T14245] ? netdev_state_change+0xa2/0x210 [ 605.356789][T14245] ? netdev_features_change+0x150/0x150 [ 605.362310][T14245] ? __module_put_and_exit+0x20/0x20 [ 605.367573][T14245] ? __sk_destruct+0x3f9/0x480 [ 605.372313][T14245] ? __sk_free+0x325/0x410 [ 605.376718][T14245] tun_chr_close+0xc0/0xd0 [ 605.381118][T14245] ? tun_chr_open+0x4a0/0x4a0 [ 605.385772][T14245] __fput+0x27d/0x6c0 [ 605.389735][T14245] task_work_run+0x176/0x1a0 [ 605.394319][T14245] prepare_exit_to_usermode+0x286/0x2e0 [ 605.399842][T14245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 605.405712][T14245] RIP: 0033:0x415d71 [ 605.409584][T14245] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 605.429253][T14245] RSP: 002b:00007ffdbfa9b130 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 605.437652][T14245] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000415d71 [ 605.445602][T14245] RDX: 0000000000000000 RSI: 0000000000001db6 RDI: 0000000000000003 [ 605.453563][T14245] RBP: 0000000000000001 R08: 000000004d505db6 R09: 000000004d505dba [ 605.461526][T14245] R10: 00007ffdbfa9b220 R11: 0000000000000293 R12: 0000000000791730 [ 605.469491][T14245] R13: 0000000000093bd7 R14: ffffffffffffffff R15: 000000000078bf0c [ 605.477445][T14245] [ 605.479748][T14245] The buggy address belongs to the page: [ 605.485358][T14245] page:ffffea000761a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 compound_mapcount: 0 [ 605.496274][T14245] flags: 0x8000000000010000(head) [ 605.501283][T14245] raw: 8000000000010000 dead000000000100 dead000000000122 0000000000000000 [ 605.509849][T14245] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 605.518402][T14245] page dumped because: kasan: bad access detected [ 605.524786][T14245] [ 605.527088][T14245] Memory state around the buggy address: [ 605.532694][T14245] ffff8881d868b080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 605.540731][T14245] ffff8881d868b100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 605.548769][T14245] >ffff8881d868b180: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 605.556990][T14245] ^ [ 605.561306][T14245] ffff8881d868b200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 605.569343][T14245] ffff8881d868b280: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 605.577399][T14245] ================================================================== [ 605.585438][T14245] Disabling lock debugging due to kernel taint 21:07:39 executing program 4 (fault-call:10 fault-nth:34): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) [ 605.597325][ T174] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 605.654893][T14253] FAULT_INJECTION: forcing a failure. [ 605.654893][T14253] name failslab, interval 1, probability 0, space 0, times 0 [ 605.667508][T14253] CPU: 1 PID: 14253 Comm: syz-executor.4 Tainted: G B 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 605.679010][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.689032][T14253] Call Trace: [ 605.692295][T14253] dump_stack+0x14a/0x1ce [ 605.696599][T14253] ? devkmsg_release+0x11c/0x11c [ 605.701507][T14253] ? show_regs_print_info+0x12/0x12 [ 605.706674][T14253] should_fail+0x6fb/0x860 [ 605.711060][T14253] ? setup_fault_attr+0x3d0/0x3d0 [ 605.716054][T14253] ? kcalloc+0x2b/0x50 [ 605.720110][T14253] ? pcpu_get_vm_areas+0x4b1/0x25d0 [ 605.725275][T14253] should_failslab+0x5/0x20 [ 605.729749][T14253] kmem_cache_alloc+0x36/0x260 [ 605.734499][T14253] pcpu_get_vm_areas+0x4b1/0x25d0 [ 605.739501][T14253] pcpu_create_chunk+0x543/0x900 [ 605.744430][T14253] pcpu_alloc+0x696/0x11f0 [ 605.748833][T14253] htab_map_alloc+0x8e0/0x15b0 [ 605.753580][T14253] __do_sys_bpf+0x3743/0xbf40 [ 605.758242][T14253] ? _kstrtoull+0x38d/0x490 [ 605.762724][T14253] ? kstrtouint_from_user+0x22d/0x2b0 [ 605.768071][T14253] ? kstrtol_from_user+0x320/0x320 [ 605.773158][T14253] ? __kasan_slab_free+0x1f2/0x230 [ 605.778874][T14253] ? __bpf_prog_put_rcu+0x300/0x300 [ 605.784053][T14253] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 605.790443][T14253] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 605.796489][T14253] ? get_pid_task+0x86/0x90 [ 605.800971][T14253] ? proc_fail_nth_write+0x18f/0x250 [ 605.806234][T14253] ? proc_fail_nth_read+0x1d0/0x1d0 [ 605.811409][T14253] ? proc_fail_nth_read+0x1d0/0x1d0 [ 605.816603][T14253] ? memset+0x1f/0x40 [ 605.820562][T14253] ? fsnotify+0x13a0/0x1460 [ 605.825042][T14253] ? __kernel_write+0x340/0x340 [ 605.829879][T14253] ? __fsnotify_parent+0x310/0x310 [ 605.834969][T14253] ? security_file_permission+0x128/0x300 [ 605.840662][T14253] ? __sb_end_write+0xa4/0xf0 [ 605.845315][T14253] ? vfs_write+0x427/0x4f0 [ 605.849707][T14253] ? fput_many+0x42/0x1a0 [ 605.854018][T14253] do_syscall_64+0xcb/0x150 [ 605.858500][T14253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 605.864367][T14253] RIP: 0033:0x45c1f9 [ 605.868241][T14253] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.887823][T14253] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.896222][T14253] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 21:07:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x300}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 605.904169][T14253] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 605.912119][T14253] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 605.920069][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 605.928021][T14253] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac [ 605.937252][T13564] usb 4-1: new high-speed USB device number 10 using dummy_hcd 21:07:40 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000400000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 606.097235][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.108146][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.118615][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 606.128264][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.141738][ T174] usb 1-1: config 0 descriptor?? [ 606.197322][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.208517][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.218917][T13771] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 606.228207][T13771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.236774][T13771] usb 3-1: config 0 descriptor?? [ 606.297330][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.308363][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.318361][T13564] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 606.327597][T13564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.336204][T13564] usb 4-1: config 0 descriptor?? [ 606.587201][T13771] usbhid 3-1:0.0: can't add hid device: -71 [ 606.593180][T13771] usbhid: probe of 3-1:0.0 failed with error -71 [ 606.600861][T13771] usb 3-1: USB disconnect, device number 67 [ 606.677371][T13564] usbhid 4-1:0.0: can't add hid device: -71 [ 606.683340][T13564] usbhid: probe of 4-1:0.0 failed with error -71 [ 606.690615][T13564] usb 4-1: USB disconnect, device number 10 [ 606.847297][ T174] usb 1-1: string descriptor 0 read error: -22 [ 607.057176][T13771] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 607.057232][ T174] uclogic 0003:5543:006E.00D7: failed retrieving string descriptor #200: -71 [ 607.073578][ T174] uclogic 0003:5543:006E.00D7: failed retrieving pen parameters: -71 [ 607.081841][ T174] uclogic 0003:5543:006E.00D7: failed probing pen v2 parameters: -71 [ 607.089946][ T174] uclogic 0003:5543:006E.00D7: failed probing parameters: -71 [ 607.097600][ T174] uclogic: probe of 0003:5543:006E.00D7 failed with error -71 [ 607.106267][ T174] usb 1-1: USB disconnect, device number 113 [ 607.147178][T13564] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 607.427258][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.438239][T13771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.448206][T13771] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 607.457261][T13771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.465923][T13771] usb 3-1: config 0 descriptor?? 21:07:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 21:07:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x500}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 607.517355][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.528297][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.538048][T13564] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 607.547096][T13564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.556102][T13564] usb 4-1: config 0 descriptor?? 21:07:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="50b84ed2c54579e41936295aa7a7c3d0d54c7502f010c1cfd005d85cddd24815d726f6d4e403bd88002656c79cded5b9a555b9a758b67b2435a3c8bbb0e676c226a40fa37f821374bf2035", @ANYBLOB="80c35017000000000000000517e84e5d46ce6ee3958a34f6f86e61d3e8e42d1f842664acb36b8d4da2f9ff6554485b109af84ce77438dadb5040d4bacc77019baa6d763c357c7f40bc8bb9b0"], 0x0, 0x0, 0x0}, 0x0) 21:07:42 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000e800000000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:42 executing program 4 (fault-call:10 fault-nth:35): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, &(0x7f00000000c0)=[r1]}, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$TIOCNXCL(r4, 0x540d) 21:07:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) truncate(&(0x7f0000000980)='./file0\x00', 0x6) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x64, {0x64, 0x3, "9f44469b77eeecdef6cd3eb5426fff782a3d113eee57a616e241567944513827c92ad335c7b6f1b351be063d05dd0e8f42f392c4abd081b4ddbc0f5d462aa89d29723eac3f3cff0723d8e3f610127696d4f19f2fb41a2431ad247724d352c78d9842"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "1b7abac30cce30654c2bd54f420b1b7b74793fd782c963c8666b351a484791216921bf78660ed8a14c5d72ccd2e29549224bfd7e62670f6312860a55ac9436e91ecd94454e27f5a3bc827c6df716999832a89b7eb10422a5e8e1f9fb97db5f748af7606596ee0a48e1981bc80f0522313c7764bfc95d23ed148e222a027c8f36f232ac9ea0c1a4daf2e415eb62dde074e8dfcc131937023c93f5"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0xc0, 0xff, "2a9d8347", "46be86ff"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x4b, 0x6b, 0xaf, 0x1000, 0xbc2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0x14, 0xbc, "e51ce399a3a4e2436235c2c00a90e6933f8fcc3acaad6a2247c96012d91855ad776d59ca553927e77d7f0d1a0eeccd3f9597605d33fd8fa21633736cda121f81d7256df492ec49b9c7a4dbba499c180509102ae4840905058ca8b79cfb00d1dd9d3623e338781b91e1499c7bf72f54d798aa77cddf5eb580f17e0fa862d507437d8e33708a743dc9b645fe416c1d13209f77522c2d2e938b412daa813fc93308a4591c6266607b97127b3be0a9f2ea593682f5c561c7ceb0f7be8097"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0xc0, 0x1, [0x0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0xb, 0x2, "f295"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={[], 0x12}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "0be7"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000000880)={0x40, 0x21, 0x1}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x34, @string={0x0, 0x3, "47709ddd6de9efbcfb362800ea8322688eb2e075f5228e2ff17d149873d6f2e957a126dc586246122c1c2d9ad32ad506b865885fc56b3b64b52b1c7f17664f3d2a47977b0ca736a51ae83d32fd299b835aa6adbbc100046fb3f6ee281340833e06f42270"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) 21:07:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x600}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) [ 607.807234][T13771] usbhid 3-1:0.0: can't add hid device: -71 [ 607.813807][T13771] usbhid: probe of 3-1:0.0 failed with error -71 [ 607.822702][T13771] usb 3-1: USB disconnect, device number 68 [ 607.847211][ T174] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 607.859138][T14311] FAULT_INJECTION: forcing a failure. [ 607.859138][T14311] name failslab, interval 1, probability 0, space 0, times 0 [ 607.871798][T14311] CPU: 1 PID: 14311 Comm: syz-executor.4 Tainted: G B 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 607.877234][T13564] usbhid 4-1:0.0: can't add hid device: -71 [ 607.883307][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.883311][T14311] Call Trace: [ 607.883330][T14311] dump_stack+0x14a/0x1ce [ 607.883347][T14311] ? devkmsg_release+0x11c/0x11c [ 607.889524][T13564] usbhid: probe of 4-1:0.0 failed with error -71 [ 607.899275][T14311] ? show_regs_print_info+0x12/0x12 [ 607.899286][T14311] should_fail+0x6fb/0x860 [ 607.899295][T14311] ? setup_fault_attr+0x3d0/0x3d0 [ 607.899306][T14311] ? pcpu_get_vm_areas+0x519/0x25d0 [ 607.899314][T14311] should_failslab+0x5/0x20 [ 607.899323][T14311] kmem_cache_alloc_trace+0x39/0x280 [ 607.899336][T14311] ? kmem_cache_alloc+0x1d5/0x260 [ 607.908793][T13564] usb 4-1: USB disconnect, device number 11 [ 607.911834][T14311] pcpu_get_vm_areas+0x519/0x25d0 [ 607.911852][T14311] pcpu_create_chunk+0x543/0x900 [ 607.911864][T14311] pcpu_alloc+0x696/0x11f0 [ 607.972753][T14311] htab_map_alloc+0x8e0/0x15b0 [ 607.977505][T14311] __do_sys_bpf+0x3743/0xbf40 [ 607.982163][T14311] ? _kstrtoull+0x38d/0x490 [ 607.986666][T14311] ? kstrtouint_from_user+0x22d/0x2b0 [ 607.992017][T14311] ? kstrtol_from_user+0x320/0x320 [ 607.997105][T14311] ? __kasan_slab_free+0x1f2/0x230 [ 608.002203][T14311] ? __bpf_prog_put_rcu+0x300/0x300 [ 608.007380][T14311] ? perf_trace_ext4_mballoc_prealloc+0x17a/0x790 [ 608.013769][T14311] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 608.019812][T14311] ? get_pid_task+0x86/0x90 [ 608.024294][T14311] ? proc_fail_nth_write+0x18f/0x250 [ 608.029577][T14311] ? proc_fail_nth_read+0x1d0/0x1d0 [ 608.034755][T14311] ? proc_fail_nth_read+0x1d0/0x1d0 [ 608.039929][T14311] ? memset+0x1f/0x40 [ 608.043890][T14311] ? fsnotify+0x13a0/0x1460 [ 608.048412][T14311] ? __kernel_write+0x340/0x340 [ 608.053247][T14311] ? __fsnotify_parent+0x310/0x310 [ 608.058342][T14311] ? security_file_permission+0x128/0x300 [ 608.064040][T14311] ? __sb_end_write+0xa4/0xf0 [ 608.068694][T14311] ? vfs_write+0x427/0x4f0 [ 608.073087][T14311] ? fput_many+0x42/0x1a0 [ 608.077411][T14311] do_syscall_64+0xcb/0x150 [ 608.081898][T14311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 608.087767][T14311] RIP: 0033:0x45c1f9 [ 608.091638][T14311] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.111222][T14311] RSP: 002b:00007f8929356c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.119614][T14311] RAX: ffffffffffffffda RBX: 0000000000001900 RCX: 000000000045c1f9 [ 608.127577][T14311] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000 [ 608.135528][T14311] RBP: 00007f8929356ca0 R08: 0000000000000000 R09: 0000000000000000 [ 608.143477][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 608.151427][T14311] R13: 00007ffc4fabb18f R14: 00007f89293579c0 R15: 000000000078bfac 21:07:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0xe80}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:42 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000001000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 21:07:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0x0, 0x1100}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x6c, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}, 0x9e) 21:07:42 executing program 5: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000002000000006061ae6e00143300fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) [ 608.397259][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.408178][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.421644][ T174] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 608.449401][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.457816][T13564] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 608.468701][T13771] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 608.469323][ T174] usb 1-1: config 0 descriptor?? [ 608.517180][ C1] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 608.524991][ C1] #PF: supervisor instruction fetch in kernel mode [ 608.531457][ C1] #PF: error_code(0x0010) - not-present page [ 608.537401][ C1] PGD 1a2bb0067 P4D 1a2bb0067 PUD 1a2bb1067 PMD 0 [ 608.543960][ C1] Oops: 0010 [#1] PREEMPT SMP KASAN [ 608.549157][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.4.52-syzkaller-00272-g0c0d417747d8 #0 [ 608.559890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.569919][ C1] RIP: 0010:0x0 [ 608.573362][ C1] Code: Bad RIP value. [ 608.577398][ C1] RSP: 0018:ffff8881db909c08 EFLAGS: 00010202 [ 608.583433][ C1] RAX: ffffffff8132ff5c RBX: 0000000000000000 RCX: ffff8881da9bdd00 [ 608.591414][ C1] RDX: 0000000080000101 RSI: 0000000000000000 RDI: ffff8881d868b180 [ 608.599367][ C1] RBP: ffff8881d868b1a0 R08: ffffffff8132fdf7 R09: ffffed103b7246e7 [ 608.607324][ C1] R10: ffffed103b7246e7 R11: 0000000000000000 R12: 0000000000000000 [ 608.615378][ C1] R13: 0000000000000101 R14: ffff8881d868b188 R15: ffff8881d868b180 [ 608.623322][ C1] FS: 0000000000000000(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 608.632218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.638768][ C1] CR2: ffffffffffffffd6 CR3: 00000001a2baf003 CR4: 00000000001606e0 [ 608.646709][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.654664][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.662607][ C1] Call Trace: [ 608.665880][ C1] [ 608.668711][ C1] call_timer_fn+0x154/0x340 [ 608.673269][ C1] expire_timers+0x35c/0x470 [ 608.677829][ C1] __run_timers+0x662/0x7b0 [ 608.682316][ C1] ? enqueue_hrtimer+0x1cf/0x230 [ 608.687221][ C1] ? detach_timer+0x260/0x260 [ 608.691863][ C1] ? __run_hrtimer+0x601/0x7a0 [ 608.696594][ C1] ? clockevents_program_event+0x214/0x2d0 [ 608.702367][ C1] ? hrtimer_interrupt+0xe75/0x10a0 [ 608.707535][ C1] run_timer_softirq+0x19/0x30 [ 608.712278][ C1] __do_softirq+0x2d5/0x725 [ 608.716750][ C1] ? __irqentry_text_end+0x1fc47b/0x1fc47b [ 608.722534][ C1] ? hrtimer_init+0x340/0x340 [ 608.727198][ C1] irq_exit+0x16d/0x180 [ 608.731337][ C1] smp_apic_timer_interrupt+0x281/0x3f0 [ 608.736852][ C1] apic_timer_interrupt+0xf/0x20 [ 608.741770][ C1] [ 608.744694][ C1] RIP: 0010:default_idle+0x1f/0x30 [ 608.749773][ C1] Code: ff e8 15 44 42 fd 90 90 90 90 90 65 8b 35 91 73 2a 7c bf 01 00 00 00 e8 0f d0 30 fd e9 07 00 00 00 0f 00 2d 6b 60 49 00 fb f4 <65> 8b 35 72 73 2a 7c bf ff ff ff ff e9 f0 cf 30 fd 41 57 41 56 53 [ 608.769349][ C1] RSP: 0018:ffff8881da9e7d78 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 608.777748][ C1] RAX: 6952ea4235d7a201 RBX: ffff8881da9bdd00 RCX: ffffffff8124c700 [ 608.785778][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 608.793724][ C1] RBP: ffff8881da9e7e80 R08: dffffc0000000000 R09: ffffed103b537ba1 [ 608.801689][ C1] R10: ffffed103b537ba1 R11: 0000000000000000 R12: ffffffff84d90fe0 [ 608.809632][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff1103b537ba0 [ 608.817297][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.817596][ C1] ? do_idle+0x1f0/0x5e0 [ 608.828527][ T174] usbhid 1-1:0.0: can't add hid device: -71 [ 608.832649][ C1] ? default_idle+0x11/0x30 [ 608.832663][ C1] do_idle+0x209/0x5e0 [ 608.838649][ T174] usbhid: probe of 1-1:0.0 failed with error -71 [ 608.843026][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 608.843040][ C1] ? schedule_idle+0x69/0x90 [ 608.847124][T13564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.858571][ C1] ? do_idle+0x5d2/0x5e0 [ 608.866508][ T174] usb 1-1: USB disconnect, device number 114 [ 608.872828][ C1] cpu_startup_entry+0x15/0x20 [ 608.872836][ C1] start_secondary+0x35d/0x3f0 [ 608.872844][ C1] ? mwait_play_dead+0x190/0x190 [ 608.872852][ C1] secondary_startup_64+0xa4/0xb0 [ 608.872860][ C1] Modules linked in: [ 608.878272][T13564] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 608.883035][ C1] CR2: 0000000000000000 [ 608.883040][ C1] ---[ end trace 57516562eca52efb ]--- [ 608.883048][ C1] RIP: 0010:0x0 [ 608.883068][ C1] Code: Bad RIP value. [ 608.895347][T13564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.897445][ C1] RSP: 0018:ffff8881db909c08 EFLAGS: 00010202 [ 608.897452][ C1] RAX: ffffffff8132ff5c RBX: 0000000000000000 RCX: ffff8881da9bdd00 [ 608.897457][ C1] RDX: 0000000080000101 RSI: 0000000000000000 RDI: ffff8881d868b180 [ 608.897461][ C1] RBP: ffff8881d868b1a0 R08: ffffffff8132fdf7 R09: ffffed103b7246e7 [ 608.897465][ C1] R10: ffffed103b7246e7 R11: 0000000000000000 R12: 0000000000000000 [ 608.897469][ C1] R13: 0000000000000101 R14: ffff8881d868b188 R15: ffff8881d868b180 [ 608.897474][ C1] FS: 0000000000000000(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 608.897479][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.897490][ C1] CR2: ffffffffffffffd6 CR3: 00000001a2baf003 CR4: 00000000001606e0 [ 608.907343][T13564] usb 4-1: config 0 descriptor?? [ 608.915353][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.915358][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.915369][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 609.037841][ C1] Kernel Offset: disabled [ 609.042147][ C1] Rebooting in 86400 seconds..