usb 5-1: SerialNumber: syz [ 1916.662387][ T9] usb 5-1: config 0 descriptor?? [ 1916.677712][ T28] usb 1-1: New USB device found, idVendor=052b, idProduct=d001, bcdDevice=c0.ba [ 1916.686814][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.694941][ T28] usb 1-1: Product: syz [ 1916.699145][ T28] usb 1-1: Manufacturer: syz [ 1916.703737][ T28] usb 1-1: SerialNumber: syz [ 1916.710941][ T28] usb 1-1: config 0 descriptor?? [ 1916.718549][ T9] hub 5-1:0.0: USB hub found [ 1916.737446][T11934] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1916.887416][ T721] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1916.907653][T11934] usb 3-1: device descriptor read/8, error -71 10:09:58 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000095d08470508ebddc30102c5fff8a7000000000009ae8c00"/41], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x822b01) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect$uac1(0x3, 0xca, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0xff, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x20}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "6d0ae6"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x2, 0x7f, 0x0, 0x3f, 0x17}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x2, 0x6, [0x7, 0x4, 0x2, 0x7, 0x7, 0xa], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0xff, "dca3b318778f49"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x9, "", "e8cf34"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffe, 0x5, 0x7f, "2e6db00426"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x80, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x76, 0x2, 0x80, 0x0, 'v', '\b'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x6, 0x70, {0x7, 0x25, 0x1, 0x2, 0x8, 0x1000}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x1, 0x20, 0x20}, 0xe5, &(0x7f0000000280)={0x5, 0xf, 0xe5, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x9, 0xef63}, @generic={0xc1, 0x10, 0x2, "b33cee34fe5d4b50cfd69830426dc647e95dc75ffd7622ce359c111068e2aaffa4092a440ff36116d86c3205cdfc92722a5a1a2fe5033c419562d3464e1d6785162eb5e81ca919605dea702515f16513d5238f2cfd2a1a5923f5aa24e58b3db89768de098ee1fdd24c100db715a1d2c1d1a97bb6d101de8d84941ac117dba4d11427be50be95243e7379272183be7134690d5d9efca010d5d2c3ae683ef123dac3c4d09eb64f3fd798b3246c9e36c02a5a80070cf6dbb7411154d856da17"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffffb, 0xff0f, 0x9, [0x30, 0xf, 0xfff0]}]}, 0x6, [{0xca, &(0x7f0000000380)=@string={0xca, 0x3, "e44228072557c73556bf502557286ed6c33bf6b7b3ec152690cb2fa9fa6fe6f8b0f0241917708124f15e03fa5ba50850ed3df4fa40c578e6219f79e304bbd3189788d84a9717ae901f3bc243808dbfbfab5ad3098eee06b9940143252735c6a9c39c74d47678fc19f2e2bbdb1a15ec76d35371e6766d87866e600cc5d9055f7de9f67edd9372ee305fbfa3e574b45d546f457efa5763d6bd62c4835882b28d06964e538c601544565ded003af3018c649775f39ca0591403f52ebf6054b41901caa1287f0912a114"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xeeb1}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x413}}, {0xc4, &(0x7f0000000500)=@string={0xc4, 0x3, "f76a80affa137f59261e342ac8854455d572fc3f35884cd6533a439b2fab54209f20e11b97c8a3a69639fc7055704e91da8160e0f4bbe83980a394d64eb737fa560780fceb3ef3e92cf60dd9df571bff7c58ef27edeff0e0d6161ce408160680f601c672b3f05711906dd5c42d34ad18dafdd306e28f7d8712135626f00219201bf3ebb666b60b23115ac447d611a546747980a24028e543d1b48748f244cfe5e410d088b66c719c4d5a3cd8a6cb075e03f3c128d64c09d804425f24826a61aa92cf"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "eb228b0c24c8f34ee43eead28703"}}]}) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1916.937451][ T9] hub 5-1:0.0: 1 port detected [ 1916.956018][ T2359] usb 1-1: USB disconnect, device number 76 10:09:58 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000095d08470508ebddc30102c5fff8a7000000000009ae8c00"/41], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x822b01) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$uac1(0x3, 0xca, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0xff, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x20}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "6d0ae6"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x2, 0x7f, 0x0, 0x3f, 0x17}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x2, 0x6, [0x7, 0x4, 0x2, 0x7, 0x7, 0xa], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0xff, "dca3b318778f49"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x9, "", "e8cf34"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffe, 0x5, 0x7f, "2e6db00426"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x80, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x76, 0x2, 0x80, 0x0, 'v', '\b'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x6, 0x70, {0x7, 0x25, 0x1, 0x2, 0x8, 0x1000}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x1, 0x20, 0x20}, 0xe5, &(0x7f0000000280)={0x5, 0xf, 0xe5, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x9, 0xef63}, @generic={0xc1, 0x10, 0x2, "b33cee34fe5d4b50cfd69830426dc647e95dc75ffd7622ce359c111068e2aaffa4092a440ff36116d86c3205cdfc92722a5a1a2fe5033c419562d3464e1d6785162eb5e81ca919605dea702515f16513d5238f2cfd2a1a5923f5aa24e58b3db89768de098ee1fdd24c100db715a1d2c1d1a97bb6d101de8d84941ac117dba4d11427be50be95243e7379272183be7134690d5d9efca010d5d2c3ae683ef123dac3c4d09eb64f3fd798b3246c9e36c02a5a80070cf6dbb7411154d856da17"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffffb, 0xff0f, 0x9, [0x30, 0xf, 0xfff0]}]}, 0x6, [{0xca, &(0x7f0000000380)=@string={0xca, 0x3, "e44228072557c73556bf502557286ed6c33bf6b7b3ec152690cb2fa9fa6fe6f8b0f0241917708124f15e03fa5ba50850ed3df4fa40c578e6219f79e304bbd3189788d84a9717ae901f3bc243808dbfbfab5ad3098eee06b9940143252735c6a9c39c74d47678fc19f2e2bbdb1a15ec76d35371e6766d87866e600cc5d9055f7de9f67edd9372ee305fbfa3e574b45d546f457efa5763d6bd62c4835882b28d06964e538c601544565ded003af3018c649775f39ca0591403f52ebf6054b41901caa1287f0912a114"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xeeb1}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x413}}, {0xc4, &(0x7f0000000500)=@string={0xc4, 0x3, "f76a80affa137f59261e342ac8854455d572fc3f35884cd6533a439b2fab54209f20e11b97c8a3a69639fc7055704e91da8160e0f4bbe83980a394d64eb737fa560780fceb3ef3e92cf60dd9df571bff7c58ef27edeff0e0d6161ce408160680f601c672b3f05711906dd5c42d34ad18dafdd306e28f7d8712135626f00219201bf3ebb666b60b23115ac447d611a546747980a24028e543d1b48748f244cfe5e410d088b66c719c4d5a3cd8a6cb075e03f3c128d64c09d804425f24826a61aa92cf"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "eb228b0c24c8f34ee43eead28703"}}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000095d08470508ebddc30102c5fff8a7000000000009ae8c00"/41], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x822b01) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect$uac1(0x3, 0xca, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0xff, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x20}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "6d0ae6"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x2, 0x7f, 0x0, 0x3f, 0x17}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x2, 0x6, [0x7, 0x4, 0x2, 0x7, 0x7, 0xa], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0xff, "dca3b318778f49"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x9, "", "e8cf34"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffe, 0x5, 0x7f, "2e6db00426"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x80, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x76, 0x2, 0x80, 0x0, 'v', '\b'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x6, 0x70, {0x7, 0x25, 0x1, 0x2, 0x8, 0x1000}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x1, 0x20, 0x20}, 0xe5, &(0x7f0000000280)={0x5, 0xf, 0xe5, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x9, 0xef63}, @generic={0xc1, 0x10, 0x2, "b33cee34fe5d4b50cfd69830426dc647e95dc75ffd7622ce359c111068e2aaffa4092a440ff36116d86c3205cdfc92722a5a1a2fe5033c419562d3464e1d6785162eb5e81ca919605dea702515f16513d5238f2cfd2a1a5923f5aa24e58b3db89768de098ee1fdd24c100db715a1d2c1d1a97bb6d101de8d84941ac117dba4d11427be50be95243e7379272183be7134690d5d9efca010d5d2c3ae683ef123dac3c4d09eb64f3fd798b3246c9e36c02a5a80070cf6dbb7411154d856da17"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffffb, 0xff0f, 0x9, [0x30, 0xf, 0xfff0]}]}, 0x6, [{0xca, &(0x7f0000000380)=@string={0xca, 0x3, "e44228072557c73556bf502557286ed6c33bf6b7b3ec152690cb2fa9fa6fe6f8b0f0241917708124f15e03fa5ba50850ed3df4fa40c578e6219f79e304bbd3189788d84a9717ae901f3bc243808dbfbfab5ad3098eee06b9940143252735c6a9c39c74d47678fc19f2e2bbdb1a15ec76d35371e6766d87866e600cc5d9055f7de9f67edd9372ee305fbfa3e574b45d546f457efa5763d6bd62c4835882b28d06964e538c601544565ded003af3018c649775f39ca0591403f52ebf6054b41901caa1287f0912a114"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xeeb1}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x413}}, {0xc4, &(0x7f0000000500)=@string={0xc4, 0x3, "f76a80affa137f59261e342ac8854455d572fc3f35884cd6533a439b2fab54209f20e11b97c8a3a69639fc7055704e91da8160e0f4bbe83980a394d64eb737fa560780fceb3ef3e92cf60dd9df571bff7c58ef27edeff0e0d6161ce408160680f601c672b3f05711906dd5c42d34ad18dafdd306e28f7d8712135626f00219201bf3ebb666b60b23115ac447d611a546747980a24028e543d1b48748f244cfe5e410d088b66c719c4d5a3cd8a6cb075e03f3c128d64c09d804425f24826a61aa92cf"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "eb228b0c24c8f34ee43eead28703"}}]}) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) (async) 10:09:58 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040250500a440000000010109023a00010100000009040000120206004231e0495d1ffe55000524240f01000000000000000000090582020002040000090503020002"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') (rerun: 32) [ 1917.049840][ T8] usb 2-1: USB disconnect, device number 75 [ 1917.117947][T11934] usb 3-1: device descriptor read/8, error -71 [ 1917.287480][ T721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.298436][ T721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.308229][ T721] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1917.321116][ T721] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 10:09:59 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004025030109020a000101000000090400000007010000090501020000000000"], &(0x7f0000000140)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}, 0x2, [{0x6f, &(0x7f00000000c0)=@string={0x6f, 0x3, "92a28ef3b60c3eb989e61ecc29e8a450dbf6c5b2a1df0731ea16e649cc717e4911a85409a68ba54e8c7c04b2d00dd6a4975d6bfd04244c276790987bc92669055b684ddb22325b460e6d01180f0dc295c41b9c6b1f545e4dd4a875d983a86bc3a02843b55b7da7cc3bff15849e"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100adaf680f7fe41f4e1c0200000020118e803735c1032505a8a440000102030109020b616f00c8240001010410050904000201070101010905010210007e8103090582b1"], &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0xd2, 0xff, 0x40, 0x1}, 0x4, &(0x7f0000000200)={0x5, 0xf, 0x36, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x7, 0x2, 0x550f, 0xe0}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x5, 0x5, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0xac, 0x4, 0x99, 0x7f, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x3f, 0x8}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004025030109020a000101000000090400000007010000090501020000000000"], &(0x7f0000000140)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}, 0x2, [{0x6f, &(0x7f00000000c0)=@string={0x6f, 0x3, "92a28ef3b60c3eb989e61ecc29e8a450dbf6c5b2a1df0731ea16e649cc717e4911a85409a68ba54e8c7c04b2d00dd6a4975d6bfd04244c276790987bc92669055b684ddb22325b460e6d01180f0dc295c41b9c6b1f545e4dd4a875d983a86bc3a02843b55b7da7cc3bff15849e"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4}}]}) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100adaf680f7fe41f4e1c0200000020118e803735c1032505a8a440000102030109020b616f00c8240001010410050904000201070101010905010210007e8103090582b1"], &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0xd2, 0xff, 0x40, 0x1}, 0x4, &(0x7f0000000200)={0x5, 0xf, 0x36, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x7, 0x2, 0x550f, 0xe0}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x5, 0x5, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0xac, 0x4, 0x99, 0x7f, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x3f, 0x8}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}]}) (async) [ 1917.330314][ T721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.342471][ T721] usb 6-1: config 0 descriptor?? 10:09:59 executing program 0: syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x1b, 0xcb, 0x20, 0x52b, 0xd001, 0xc0ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) [ 1917.507476][ T8] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1917.617486][T11934] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1917.728583][T25786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.737368][T25786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.746177][T25786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.750413][ T28] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1917.755767][T25786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.827561][ T2359] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1917.835399][T11934] usb 3-1: device descriptor read/8, error -71 [ 1917.907468][ T8] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1917.917703][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1917.997381][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 1918.007565][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a400, bcdDevice= 0.40 [ 1918.016654][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1918.022056][T25790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.024690][ T8] usb 2-1: SerialNumber: syz [ 1918.037107][T25790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.117528][ T28] usb 1-1: config 0 has no interfaces? [ 1918.177638][T11934] usb 3-1: device descriptor read/8, error -71 [ 1918.183979][ T2359] usb 4-1: no configurations [ 1918.188635][ T2359] usb 4-1: can't read configurations, error -22 [ 1918.277595][ T28] usb 1-1: New USB device found, idVendor=052b, idProduct=d001, bcdDevice=c0.ba [ 1918.286699][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.294799][ T28] usb 1-1: Product: syz [ 1918.299110][ T28] usb 1-1: Manufacturer: syz [ 1918.303699][ T28] usb 1-1: SerialNumber: syz [ 1918.307784][T11934] usb usb3-port1: unable to enumerate USB device [ 1918.312518][ T28] usb 1-1: config 0 descriptor?? [ 1918.347538][ T721] usbhid 6-1:0.0: can't add hid device: -71 [ 1918.347744][ T2359] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1918.353650][ T721] usbhid: probe of 6-1:0.0 failed with error -71 [ 1918.375690][ T721] usb 6-1: USB disconnect, device number 92 [ 1918.389112][ T8] usb 2-1: bad CDC descriptors [ 1918.561907][ T8] usb 1-1: USB disconnect, device number 77 [ 1918.657563][ T2359] usb 4-1: no configurations [ 1918.662202][ T2359] usb 4-1: can't read configurations, error -22 [ 1918.669278][ T2359] usb usb4-port1: attempt power cycle 10:10:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) (async) ioctl$EVIOCSREP(r1, 0x80085502, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES8=r0], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f0000000100)=ANY=[]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:10:00 executing program 0: syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x1b, 0xcb, 0x20, 0x52b, 0xd001, 0xc0ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x1b, 0xcb, 0x20, 0x52b, 0xd001, 0xc0ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) (async) [ 1919.067415][ T8] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1919.117507][ T2359] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1919.247516][ T2359] usb 4-1: no configurations [ 1919.252128][ T2359] usb 4-1: can't read configurations, error -22 [ 1919.377389][ T721] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1919.407462][ T2359] usb 4-1: new high-speed USB device number 34 using dummy_hcd 10:10:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf010902240001000000000904000009030000000921000000012222000905810314"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000580)={0x60, 0x10, 0xb6, {0xb6, 0x30, "8bd9df9d86e91a1abb2d72858c6a4ccb37811794408211ab555386ed5b17411916d2dcf19a1cf005e66861da166ca5d4e89e1154aaa88f1175a7941c99cb991c8d1ccc764641bab6baf13c2c662d91e9268841af38609f8942f0a7932e4bbbe76a000fff96dc12b8b2c798d118b3de2a264940ab2162910e5cd03bf0ae4d35e4954a793ccdc13d4f30f60e2bef1846328bbcdcdc102a053b736c9814d8c8112626c8de61e6d3187925b99338a61c3a090f893ec6"}}, &(0x7f0000000440)={0x0, 0x3, 0x76, @string={0x76, 0x3, "4a26ec2f2a15443c1923fd1c11ac0b54cf80626e73154fd24ff6b54148506bc54c674ac8f75aad7250a1ece92ca01399212a35b45bd32a496d42d684d4a229506cdecc1bff1d5b07042689104953330508ac8b9ca9904fdfba5dec0ffbf05bcc986676c034c9efc960ae5483f892ae9049bef3c8"}}, &(0x7f0000000700)={0x0, 0xf, 0xe7, {0x5, 0xf, 0xe7, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6, 0xf000, 0x6, [0xff0000, 0xc000]}, @generic={0x8e, 0x10, 0x4, "d79a42e6886e0f4f4a47f98b1838021add85590cf31ed791ad077a3cc838d5759f56adb98463f7001418725f016c44fb03610583d43d21d81a715a5354a063d4ae7dd4372e95e5d1e4af392d31d4b6fc4491052af8dc6dda71fc3151468a6507caf7e0fd155c953b4662164666f3503983b1f710a27e22fac6e81e70c2e8eaea73ddcfd5a286fa7a810242"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x4, 0x7fff, 0x1d}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ea96879d6416e65119ca8097c4d29f22"}, @ss_container_id={0x14, 0x10, 0x4, 0x2d, "d2839a80717c8c2b6c523a48582f1a51"}, @generic={0xd, 0x10, 0xb, "8f784cb561e744f20bc5"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x4, 0x7f, "82cd2a73", "b8da8519"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x0, 0x1, 0x1, 0x4}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000800)={0x40, 0x18, 0x62, "954a2b0c16ed5a39b9fb9c44fc33911f6a643e383d957cadf767ebf4caa6ceaf23bb2b7439888f3d030a8e22827a135400db75488e9963fd83b1473d741e4052c9e482cc7e5b3325cb2492dd5bfdc3b38404f59e80e7e04d9a7b688db0c907553f20"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x5}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x9, 0x1}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "b94e"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xf801}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, ' 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 1c [ 1971.227691][T11934] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1971.240280][ T5676] RSP: 0018:ffffc9000d0cf9d8 EFLAGS: 00010286 [ 1971.240314][ T5676] RAX: 0000000000000000 RBX: ffff8881162d5900 RCX: ffffffff811733b9 [ 1971.250768][T11934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 1971.256835][ T5676] RDX: ffff888108ed5700 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 1971.264879][T11934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1971.276011][ T5676] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1971.283998][T11934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1971.293959][ T5676] R10: 0000000000000001 R11: 00000000003717b0 R12: 00000000c0053c00 [ 1971.293979][ T5676] R13: 0000000000000010 R14: ffff8881414de000 R15: ffff88814112e000 [ 1971.331016][ T5676] FS: 0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 1971.340024][ T5676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1971.346644][ T5676] CR2: 00007effdfff7070 CR3: 000000011264a000 CR4: 00000000003506f0 [ 1971.354665][ T5676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1971.362705][ T5676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1971.370732][ T5676] Call Trace: [ 1971.374029][ T5676] [ 1971.376968][ T5676] ? show_regs+0x8f/0xa0 [ 1971.381342][ T5676] ? __warn+0xe6/0x380 [ 1971.385443][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.390571][ T5676] ? report_bug+0x3bc/0x580 [ 1971.395107][ T5676] ? handle_bug+0x3c/0x70 [ 1971.399516][ T5676] ? exc_invalid_op+0x17/0x40 [ 1971.404214][ T5676] ? asm_exc_invalid_op+0x1a/0x20 [ 1971.409311][ T5676] ? __warn_printk+0x199/0x350 [ 1971.414100][ T5676] ? __warn_printk+0x1a6/0x350 [ 1971.418945][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.423993][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.429078][ T5676] usb_tx_block+0x241/0x2e0 [ 1971.433645][ T5676] if_usb_prog_firmware+0x565/0x1030 [ 1971.439022][ T5676] ? if_usb_send_fw_pkt.isra.0+0x540/0x540 [ 1971.444867][ T5676] ? assign_fw+0x5f0/0x5f0 [ 1971.449366][ T5676] ? main_firmware_cb+0x1b0/0x1b0 [ 1971.454429][ T5676] helper_firmware_cb+0x1ef/0x290 [ 1971.457817][T11934] usb 2-1: New USB device found, idVendor=02ab, idProduct=7801, bcdDevice=64.ae [ 1971.459547][ T5676] request_firmware_work_func+0x13a/0x240 [ 1971.468647][T11934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.474320][ T5676] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 1971.482322][T11934] usb 2-1: Product: syz [ 1971.488658][ T5676] process_one_work+0x884/0x15c0 [ 1971.492786][T11934] usb 2-1: Manufacturer: syz [ 1971.497740][ T5676] ? lock_sync+0x190/0x190 [ 1971.502312][T11934] usb 2-1: SerialNumber: syz [ 1971.506700][ T5676] ? init_worker_pool+0x770/0x770 [ 1971.516537][ T5676] ? assign_work+0x1a0/0x240 [ 1971.517064][T11934] usb 2-1: config 0 descriptor?? [ 1971.521229][ T5676] worker_thread+0x8b9/0x1290 [ 1971.530880][ T5676] ? __kthread_parkme+0x14b/0x220 [ 1971.532042][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.535918][ T5676] ? process_one_work+0x15c0/0x15c0 [ 1971.535955][ T5676] kthread+0x33c/0x440 [ 1971.535983][ T5676] ? _raw_spin_unlock_irq+0x23/0x50 [ 1971.543499][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.548671][ T5676] ? kthread_complete_and_exit+0x40/0x40 [ 1971.552740][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.557921][ T5676] ret_from_fork+0x45/0x80 [ 1971.557960][ T5676] ? kthread_complete_and_exit+0x40/0x40 [ 1971.565325][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.570989][ T5676] ret_from_fork_asm+0x11/0x20 [ 1971.578355][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.582727][ T5676] [ 1971.588377][ T5300] plantronics 0003:047F:FFFF.0111: unknown main item tag 0x0 [ 1971.595739][ T5676] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1971.595752][ T5676] CPU: 1 PID: 5676 Comm: kworker/1:7 Not tainted 6.7.0-rc5-syzkaller-00167-g5962ded777d6 #0 [ 1971.595778][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1971.595794][ T5676] Workqueue: events request_firmware_work_func [ 1971.595825][ T5676] Call Trace: [ 1971.595835][ T5676] [ 1971.595842][ T5676] dump_stack_lvl+0xd9/0x1b0 [ 1971.595874][ T5676] panic+0x6dc/0x790 [ 1971.595902][ T5676] ? panic_smp_self_stop+0xa0/0xa0 [ 1971.595932][ T5676] ? show_trace_log_lvl+0x363/0x4f0 [ 1971.595957][ T5676] ? check_panic_on_warn+0x1f/0xb0 [ 1971.595987][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.596015][ T5676] check_panic_on_warn+0xab/0xb0 [ 1971.596045][ T5676] __warn+0xf2/0x380 [ 1971.596073][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.596099][ T5676] report_bug+0x3bc/0x580 [ 1971.596130][ T5676] handle_bug+0x3c/0x70 [ 1971.596157][ T5676] exc_invalid_op+0x17/0x40 [ 1971.596186][ T5676] asm_exc_invalid_op+0x1a/0x20 [ 1971.596221][ T5676] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 1971.596249][ T5676] Code: 46 4c fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 5b c0 4a fd 48 89 de 48 c7 c7 60 d0 ee 86 c6 05 54 e5 22 05 01 e8 75 ff 13 fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 1c [ 1971.596274][ T5676] RSP: 0018:ffffc9000d0cf9d8 EFLAGS: 00010286 [ 1971.596293][ T5676] RAX: 0000000000000000 RBX: ffff8881162d5900 RCX: ffffffff811733b9 [ 1971.596310][ T5676] RDX: ffff888108ed5700 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 1971.596326][ T5676] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1971.596341][ T5676] R10: 0000000000000001 R11: 00000000003717b0 R12: 00000000c0053c00 [ 1971.596356][ T5676] R13: 0000000000000010 R14: ffff8881414de000 R15: ffff88814112e000 [ 1971.596375][ T5676] ? __warn_printk+0x199/0x350 [ 1971.596403][ T5676] ? __warn_printk+0x1a6/0x350 [ 1971.596433][ T5676] ? usb_submit_urb+0x14cb/0x1720 [ 1971.596462][ T5676] usb_tx_block+0x241/0x2e0 [ 1971.596497][ T5676] if_usb_prog_firmware+0x565/0x1030 [ 1971.596530][ T5676] ? if_usb_send_fw_pkt.isra.0+0x540/0x540 [ 1971.596562][ T5676] ? assign_fw+0x5f0/0x5f0 [ 1971.596586][ T5676] ? main_firmware_cb+0x1b0/0x1b0 [ 1971.596613][ T5676] helper_firmware_cb+0x1ef/0x290 [ 1971.596642][ T5676] request_firmware_work_func+0x13a/0x240 [ 1971.596669][ T5676] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 1971.596698][ T5676] process_one_work+0x884/0x15c0 [ 1971.596729][ T5676] ? lock_sync+0x190/0x190 [ 1971.596753][ T5676] ? init_worker_pool+0x770/0x770 [ 1971.596783][ T5676] ? assign_work+0x1a0/0x240 [ 1971.596811][ T5676] worker_thread+0x8b9/0x1290 [ 1971.596841][ T5676] ? __kthread_parkme+0x14b/0x220 [ 1971.596866][ T5676] ? process_one_work+0x15c0/0x15c0 [ 1971.596895][ T5676] kthread+0x33c/0x440 [ 1971.596920][ T5676] ? _raw_spin_unlock_irq+0x23/0x50 [ 1971.596950][ T5676] ? kthread_complete_and_exit+0x40/0x40 [ 1971.596978][ T5676] ret_from_fork+0x45/0x80 [ 1971.597013][ T5676] ? kthread_complete_and_exit+0x40/0x40 [ 1971.597040][ T5676] ret_from_fork_asm+0x11/0x20 [ 1971.597072][ T5676] [ 1971.600557][ T5676] Kernel Offset: disabled