Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2024/01/28 14:28:03 fuzzer started 2024/01/28 14:28:03 dialing manager at 10.128.0.163:30014 [ 47.392126][ T2487] cgroup: Unknown subsys name 'net' [ 47.533476][ T2487] cgroup: Unknown subsys name 'rlimit' 2024/01/28 14:28:07 syscalls: 90 2024/01/28 14:28:07 code coverage: enabled 2024/01/28 14:28:07 comparison tracing: enabled 2024/01/28 14:28:07 extra coverage: enabled 2024/01/28 14:28:07 delay kcov mmap: enabled 2024/01/28 14:28:07 setuid sandbox: enabled 2024/01/28 14:28:07 namespace sandbox: enabled 2024/01/28 14:28:07 Android sandbox: /sys/fs/selinux/policy does not exist 2024/01/28 14:28:07 fault injection: enabled 2024/01/28 14:28:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/01/28 14:28:07 net packet injection: /dev/net/tun does not exist 2024/01/28 14:28:07 net device setup: enabled 2024/01/28 14:28:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/01/28 14:28:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/01/28 14:28:07 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/01/28 14:28:07 USB emulation: enabled 2024/01/28 14:28:07 hci packet injection: /dev/vhci does not exist 2024/01/28 14:28:07 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/01/28 14:28:07 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2024/01/28 14:28:07 swap file: enabled 2024/01/28 14:28:07 fetching corpus: 0, signal 0/0 (executing program) 2024/01/28 14:28:07 fetching corpus: 0, signal 0/0 (executing program) [ 51.187500][ T2487] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/01/28 14:28:08 starting 5 fuzzer processes 14:29:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 14:29:06 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0466917de0f4d5a1d48a7a347fe2b84536a0e21b43d0e89c09fd5e51524fa3c5d890d0f2c0835b833cb7994c15d429df553e653fcfd0b6aa5f86d563e61bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f0608"]) [ 109.810953][ T721] usb 3-1: new high-speed USB device number 2 using dummy_hcd 14:29:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000200)) 14:29:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) 14:29:06 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 110.090381][ T721] usb 3-1: Using ep0 maxpacket: 16 [ 110.180627][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.230571][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.241771][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.251659][ T721] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 110.260808][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.277319][ T721] usb 3-1: config 0 descriptor?? [ 110.410503][ T1897] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 110.420698][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 110.430771][ T4776] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.542522][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.553542][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.564600][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.574676][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.584432][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.640717][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 110.647198][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 110.660663][ T721] usb 3-1: USB disconnect, device number 2 [ 110.671005][ T4776] usb 2-1: Using ep0 maxpacket: 8 [ 110.676432][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.685648][ T26] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.693912][ T26] usb 5-1: Manufacturer: syz [ 110.702377][ T26] usb 5-1: config 0 descriptor?? [ 110.730899][ T1897] usb 4-1: not running at top speed; connect to a high speed hub 14:29:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000200)) [ 110.811032][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.822860][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.832997][ T1897] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.890730][ T4776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.901857][ T4776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.911836][ T4776] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 111.001568][ T1897] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 111.010802][ T1897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.018858][ T1897] usb 4-1: Product: syz [ 111.023204][ T1897] usb 4-1: Manufacturer: syz [ 111.027843][ T1897] usb 4-1: SerialNumber: syz [ 111.034283][ T26] rc_core: IR keymap rc-hauppauge not found [ 111.040269][ T26] Registered IR keymap rc-empty [ 111.048068][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.080694][ T4776] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.089859][ T4776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.098034][ T4776] usb 2-1: Manufacturer: ᐇ [ 111.102727][ T4776] usb 2-1: SerialNumber: syz [ 111.110850][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.143572][ T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 111.159080][ T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 111.160476][ T721] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.184717][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.221057][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.260664][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.291095][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.321045][ T1897] usbhid 4-1:1.0: can't add hid device: -22 [ 111.327323][ T1897] usbhid: probe of 4-1:1.0 failed with error -22 [ 111.334213][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.347272][ T1897] usb 4-1: USB disconnect, device number 2 [ 111.370664][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.400464][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.420453][ T721] usb 3-1: Using ep0 maxpacket: 16 [ 111.420848][ T4776] cdc_ncm 2-1:1.0: bind() failure [ 111.431828][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.445930][ T4776] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 111.452943][ T4776] cdc_ncm 2-1:1.1: bind() failure [ 111.463665][ T4776] usb 2-1: USB disconnect, device number 2 [ 111.470602][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.500861][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 14:29:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000200)) [ 111.541001][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.547125][ T26] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 111.552338][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.560057][ T26] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.578698][ T721] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 111.587872][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.639621][ T1897] usb 5-1: USB disconnect, device number 2 [ 111.649414][ T721] usb 3-1: config 0 descriptor?? 14:29:08 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 14:29:08 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) 14:29:08 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0466917de0f4d5a1d48a7a347fe2b84536a0e21b43d0e89c09fd5e51524fa3c5d890d0f2c0835b833cb7994c15d429df553e653fcfd0b6aa5f86d563e61bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f0608"]) [ 112.130486][ T4776] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 112.137790][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.145285][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.152398][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.159508][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.166617][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.173776][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.181289][ T721] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 112.199438][ T721] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 112.254398][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd 14:29:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000200)) [ 112.343372][ T1897] usb 3-1: USB disconnect, device number 3 [ 112.500388][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 112.510499][ T721] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.511370][ T4776] usb 4-1: not running at top speed; connect to a high speed hub [ 112.620640][ T4776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.631820][ T4776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.641626][ T4776] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.700676][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.711718][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.722257][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 112.770562][ T721] usb 5-1: Using ep0 maxpacket: 16 14:29:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 112.850778][ T4776] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 112.859932][ T4776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.868160][ T4776] usb 4-1: Product: syz [ 112.872429][ T4776] usb 4-1: Manufacturer: syz [ 112.877090][ T4776] usb 4-1: SerialNumber: syz [ 112.891293][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.901067][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.909170][ T9] usb 2-1: Manufacturer: ᐇ [ 112.914524][ T9] usb 2-1: SerialNumber: syz [ 112.919839][ T721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.930618][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.941727][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.951696][ T721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.961461][ T721] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.050703][ T721] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.060195][ T721] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.068321][ T721] usb 5-1: Manufacturer: syz [ 113.076509][ T721] usb 5-1: config 0 descriptor?? 14:29:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 113.181547][ T1897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.200949][ T4776] usbhid 4-1:1.0: can't add hid device: -22 [ 113.207170][ T4776] usbhid: probe of 4-1:1.0 failed with error -22 [ 113.227194][ T4776] usb 4-1: USB disconnect, device number 3 [ 113.310744][ T9] cdc_ncm 2-1:1.0: bind() failure [ 113.327993][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 113.334971][ T9] cdc_ncm 2-1:1.1: bind() failure [ 113.360526][ T9] usb 2-1: USB disconnect, device number 3 [ 113.421582][ T1897] usb 3-1: Using ep0 maxpacket: 16 [ 113.480429][ T721] rc_core: IR keymap rc-hauppauge not found [ 113.486506][ T721] Registered IR keymap rc-empty [ 113.492551][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.520559][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.540832][ T1897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.551994][ T1897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.561923][ T1897] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 113.562552][ T721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 113.571030][ T1897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.581492][ T1897] usb 3-1: config 0 descriptor?? [ 113.584033][ T4792] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.607418][ T721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 113.627262][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 14:29:09 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 113.670625][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.710740][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.751704][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 14:29:10 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) [ 113.799639][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.845515][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.870396][ T4792] usb 1-1: Using ep0 maxpacket: 16 [ 113.882564][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.921467][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.950810][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.960775][ T1897] usbhid 3-1:0.0: can't add hid device: -71 [ 113.967061][ T1897] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.980144][ T1897] usb 3-1: USB disconnect, device number 4 [ 113.991197][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.011275][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.022447][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.032474][ T4792] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 114.041648][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.049847][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 114.065354][ T721] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 114.073471][ T721] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.088608][ T4792] usb 1-1: config 0 descriptor?? [ 114.101192][ T721] usb 5-1: USB disconnect, device number 3 [ 114.154707][ T4803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.401766][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 114.420645][ T4803] usb 2-1: Using ep0 maxpacket: 8 [ 114.450769][ T4792] usbhid 1-1:0.0: can't add hid device: -71 [ 114.456892][ T4792] usbhid: probe of 1-1:0.0 failed with error -71 [ 114.472726][ T4792] usb 1-1: USB disconnect, device number 2 [ 114.500440][ T1897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.520786][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.531950][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.542143][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 14:29:10 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0466917de0f4d5a1d48a7a347fe2b84536a0e21b43d0e89c09fd5e51524fa3c5d890d0f2c0835b833cb7994c15d429df553e653fcfd0b6aa5f86d563e61bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f0608"]) [ 114.692420][ T4803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.703563][ T4803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.715702][ T4803] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 114.730799][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 114.739950][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.740487][ T1897] usb 3-1: Using ep0 maxpacket: 16 [ 114.748137][ T9] usb 4-1: Product: syz [ 114.757421][ T9] usb 4-1: Manufacturer: syz [ 114.762220][ T9] usb 4-1: SerialNumber: syz [ 114.870744][ T1897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.881779][ T1897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.890661][ T4803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.891649][ T1897] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 114.900641][ T4803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.909646][ T1897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.917681][ T4803] usb 2-1: Manufacturer: ᐇ [ 114.930520][ T4803] usb 2-1: SerialNumber: syz [ 114.934953][ T1897] usb 3-1: config 0 descriptor?? [ 114.990496][ T4776] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.010560][ T4792] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.071312][ T9] usbhid 4-1:1.0: can't add hid device: -22 [ 115.077420][ T9] usbhid: probe of 4-1:1.0 failed with error -22 [ 115.088589][ T9] usb 4-1: USB disconnect, device number 4 [ 115.230432][ T4776] usb 5-1: Using ep0 maxpacket: 16 [ 115.240811][ T4803] cdc_ncm 2-1:1.0: bind() failure [ 115.252534][ T4803] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 115.259414][ T4803] cdc_ncm 2-1:1.1: bind() failure [ 115.271294][ T4803] usb 2-1: USB disconnect, device number 4 [ 115.311694][ T4792] usb 1-1: Using ep0 maxpacket: 16 [ 115.351122][ T4776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.361831][ T4776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.372821][ T4776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.382540][ T4776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.392339][ T4776] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.417333][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.424503][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.431551][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.438560][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.445944][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.452994][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.459975][ T1897] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 115.460760][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.474115][ T1897] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 115.478242][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.499170][ T4792] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 115.508432][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.520602][ T4776] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 115.521790][ T4792] usb 1-1: config 0 descriptor?? [ 115.529778][ T4776] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 115.542871][ T4776] usb 5-1: Manufacturer: syz 14:29:11 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 115.555797][ T4776] usb 5-1: config 0 descriptor?? [ 115.649660][ T26] usb 3-1: USB disconnect, device number 5 14:29:12 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) [ 115.900514][ T1897] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 115.912663][ T4776] rc_core: IR keymap rc-hauppauge not found [ 115.918656][ T4776] Registered IR keymap rc-empty [ 115.923893][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.960556][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.991982][ T4776] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 116.008274][ T4776] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 116.026324][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.037348][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.044527][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.051564][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.058583][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.060707][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.065637][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.079996][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.087812][ T4792] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 116.099641][ T4792] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 116.111345][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.140900][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 14:29:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 116.170424][ T4803] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.170580][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.210605][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.220759][ T1897] usb 4-1: not running at top speed; connect to a high speed hub [ 116.250591][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.264744][ T26] usb 1-1: USB disconnect, device number 3 [ 116.282498][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.310804][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.322095][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.332019][ T1897] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.345452][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.380504][ T4776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.413583][ T4776] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 116.421718][ T4776] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.440504][ T4803] usb 2-1: Using ep0 maxpacket: 8 [ 116.440768][ T4776] usb 5-1: USB disconnect, device number 4 [ 116.510863][ T1897] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 116.519985][ T1897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.528128][ T1897] usb 4-1: Product: syz [ 116.532594][ T1897] usb 4-1: Manufacturer: syz [ 116.537244][ T1897] usb 4-1: SerialNumber: syz [ 116.541649][ T4792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.690619][ T4803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.702405][ T4803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.712315][ T4803] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 14:29:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 116.810714][ T4792] usb 3-1: Using ep0 maxpacket: 16 [ 116.850900][ T1897] usbhid 4-1:1.0: can't add hid device: -22 [ 116.857111][ T1897] usbhid: probe of 4-1:1.0 failed with error -22 [ 116.876622][ T1897] usb 4-1: USB disconnect, device number 5 [ 116.921060][ T4803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.930219][ T4803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.938331][ T4803] usb 2-1: Manufacturer: ᐇ [ 116.943423][ T4803] usb 2-1: SerialNumber: syz [ 116.971807][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.982862][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.992943][ T4792] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 117.002091][ T4792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:29:13 executing program 4: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0466917de0f4d5a1d48a7a347fe2b84536a0e21b43d0e89c09fd5e51524fa3c5d890d0f2c0835b833cb7994c15d429df553e653fcfd0b6aa5f86d563e61bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f0608"]) [ 117.017769][ T4792] usb 3-1: config 0 descriptor?? [ 117.171522][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.240747][ T4803] cdc_ncm 2-1:1.0: bind() failure [ 117.252141][ T4803] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 117.259049][ T4803] cdc_ncm 2-1:1.1: bind() failure [ 117.276823][ T4803] usb 2-1: USB disconnect, device number 5 14:29:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 117.331139][ T721] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.380675][ T4792] usbhid 3-1:0.0: can't add hid device: -71 [ 117.386841][ T4792] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.402218][ T4792] usb 3-1: USB disconnect, device number 6 [ 117.430426][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 117.571078][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.582098][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.591940][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 117.601171][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.610646][ T721] usb 5-1: Using ep0 maxpacket: 16 [ 117.620024][ T9] usb 1-1: config 0 descriptor?? [ 117.740595][ T721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.752616][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.763670][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.773608][ T721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 14:29:14 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) [ 117.783468][ T721] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.796526][ T4811] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.891142][ T721] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.900411][ T721] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.908417][ T721] usb 5-1: Manufacturer: syz [ 117.917143][ T721] usb 5-1: config 0 descriptor?? [ 117.950794][ T4792] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.990746][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 117.996860][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 118.007201][ T9] usb 1-1: USB disconnect, device number 4 [ 118.060405][ T4811] usb 4-1: Using ep0 maxpacket: 16 [ 118.110434][ T1897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.226205][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.237237][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.247667][ T4811] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 118.257269][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.265806][ T4792] usb 3-1: Using ep0 maxpacket: 16 [ 118.274536][ T4811] usb 4-1: config 0 descriptor?? [ 118.310926][ T721] rc_core: IR keymap rc-hauppauge not found [ 118.317004][ T721] Registered IR keymap rc-empty [ 118.326919][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.350468][ T1897] usb 2-1: Using ep0 maxpacket: 8 [ 118.370539][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.410628][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.421627][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.431488][ T4792] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 118.440591][ T4792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.450169][ T721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 118.465783][ T721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 118.483059][ T4792] usb 3-1: config 0 descriptor?? [ 118.496354][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.540993][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.550473][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.550722][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.569025][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.579157][ T1897] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 118.580662][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.620587][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.630823][ T4811] usbhid 4-1:0.0: can't add hid device: -71 [ 118.636935][ T4811] usbhid: probe of 4-1:0.0 failed with error -71 [ 118.652845][ T4811] usb 4-1: USB disconnect, device number 6 [ 118.674236][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.711196][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.740613][ T1897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.749832][ T1897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.757970][ T1897] usb 2-1: Manufacturer: ᐇ [ 118.761027][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.762640][ T1897] usb 2-1: SerialNumber: syz [ 118.790719][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 118.796192][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.841051][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.870889][ T721] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.913898][ T721] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 118.922109][ T721] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.930780][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.941810][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.951839][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 118.960949][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.974785][ T721] usb 5-1: USB disconnect, device number 5 [ 118.989905][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 118.997020][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.004090][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.011180][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.018201][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.025297][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.032376][ T4792] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 119.061508][ T9] usb 1-1: config 0 descriptor?? [ 119.091962][ T4792] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 119.120487][ T4811] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.123841][ T1897] cdc_ncm 2-1:1.0: bind() failure [ 119.154586][ T1897] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 119.161657][ T1897] cdc_ncm 2-1:1.1: bind() failure [ 119.193891][ T1897] usb 2-1: USB disconnect, device number 6 [ 119.222191][ T4776] usb 3-1: USB disconnect, device number 7 [ 119.380439][ T4811] usb 4-1: Using ep0 maxpacket: 16 14:29:15 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 119.500578][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.511693][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.522155][ T4811] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 119.531628][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.573005][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.580053][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.587109][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.594263][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.601330][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.608451][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.615501][ T9] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 119.625846][ T4811] usb 4-1: config 0 descriptor?? [ 119.636092][ T9] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 14:29:15 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) 14:29:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 119.773732][ T9] usb 1-1: USB disconnect, device number 5 [ 119.844541][ T4776] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 120.020605][ T1897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.115731][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.122885][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.129941][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.137077][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.144157][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.151293][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.158312][ T4811] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 120.165417][ T721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.176812][ T4811] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 120.220635][ T4776] usb 5-1: not running at top speed; connect to a high speed hub [ 120.300505][ T1897] usb 2-1: Using ep0 maxpacket: 8 [ 120.320655][ T4776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.331762][ T4776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.337910][ T4811] usb 4-1: USB disconnect, device number 7 14:29:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 120.341564][ T4776] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.410393][ T721] usb 3-1: Using ep0 maxpacket: 16 [ 120.540653][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.550805][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.551676][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.562501][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.562738][ T4776] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 120.572312][ T721] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 120.583909][ T4776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.593024][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.602161][ T4776] usb 5-1: Product: syz [ 120.602187][ T4776] usb 5-1: Manufacturer: syz [ 120.602211][ T4776] usb 5-1: SerialNumber: syz [ 120.602789][ T1897] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.620232][ T721] usb 3-1: config 0 descriptor?? [ 120.690534][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.790914][ T1897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.800157][ T1897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.808293][ T1897] usb 2-1: Manufacturer: ᐇ [ 120.813002][ T1897] usb 2-1: SerialNumber: syz 14:29:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 120.930678][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 120.943613][ T4776] usbhid 5-1:1.0: can't add hid device: -22 [ 120.949880][ T4776] usbhid: probe of 5-1:1.0 failed with error -22 [ 120.971127][ T4776] usb 5-1: USB disconnect, device number 6 [ 121.020827][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 121.027013][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.050626][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.054032][ T721] usb 3-1: USB disconnect, device number 8 [ 121.061712][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.061788][ T26] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 121.061827][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.102846][ T26] usb 1-1: config 0 descriptor?? [ 121.121621][ T1897] cdc_ncm 2-1:1.0: bind() failure [ 121.149536][ T1897] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 121.157133][ T1897] cdc_ncm 2-1:1.1: bind() failure [ 121.187014][ T1897] usb 2-1: USB disconnect, device number 7 [ 121.310444][ T4778] usb 4-1: new high-speed USB device number 8 using dummy_hcd 14:29:17 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 121.470650][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 121.477382][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.489028][ T26] usb 1-1: USB disconnect, device number 6 [ 121.531229][ T721] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.560479][ T4778] usb 4-1: Using ep0 maxpacket: 16 14:29:17 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc03f, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) [ 121.720833][ T4778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.732220][ T4778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.742213][ T4778] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 121.751340][ T4778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.762817][ T4778] usb 4-1: config 0 descriptor?? [ 121.771006][ T721] usb 3-1: Using ep0 maxpacket: 16 [ 121.800466][ T4811] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 121.890542][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.901553][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.911462][ T721] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 121.920591][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.932721][ T721] usb 3-1: config 0 descriptor?? [ 121.960457][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.970519][ T1897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.120697][ T4811] usb 5-1: not running at top speed; connect to a high speed hub [ 122.131201][ T4778] usbhid 4-1:0.0: can't add hid device: -71 [ 122.137380][ T4778] usbhid: probe of 4-1:0.0 failed with error -71 [ 122.147835][ T4778] usb 4-1: USB disconnect, device number 8 [ 122.200608][ T4811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.210445][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 122.214231][ T4811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.226786][ T4811] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.230376][ T1897] usb 2-1: Using ep0 maxpacket: 8 [ 122.350719][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.362291][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.372252][ T26] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 122.381412][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.393481][ T26] usb 1-1: config 0 descriptor?? [ 122.413243][ T4811] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 122.422562][ T4811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.433680][ T4811] usb 5-1: Product: syz [ 122.437944][ T4811] usb 5-1: Manufacturer: syz [ 122.443074][ T4811] usb 5-1: SerialNumber: syz [ 122.451216][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.458274][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.465620][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.472714][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.479702][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.480828][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.486769][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.498896][ T1897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.505969][ T721] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 122.517552][ T1897] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 122.536453][ T721] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 122.622013][ T721] usb 3-1: USB disconnect, device number 9 [ 122.671126][ T4778] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.710885][ T1897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.720083][ T1897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.728182][ T1897] usb 2-1: Manufacturer: ᐇ [ 122.732891][ T1897] usb 2-1: SerialNumber: syz [ 122.800874][ T4811] usbhid 5-1:1.0: can't add hid device: -22 [ 122.806940][ T4811] usbhid: probe of 5-1:1.0 failed with error -22 [ 122.818388][ T4811] usb 5-1: USB disconnect, device number 7 [ 122.896296][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.903628][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.910694][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.919562][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.926658][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.933755][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.940843][ T26] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 122.952740][ T26] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 122.970426][ T4778] usb 4-1: Using ep0 maxpacket: 16 [ 123.020704][ T1897] cdc_ncm 2-1:1.0: bind() failure [ 123.031677][ T1897] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 123.038567][ T1897] cdc_ncm 2-1:1.1: bind() failure [ 123.049426][ T1897] usb 2-1: USB disconnect, device number 8 [ 123.090877][ T4778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.102021][ T4778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.112367][ T4778] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 123.121698][ T4778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.127821][ T4811] usb 1-1: USB disconnect, device number 7 [ 123.156288][ T4778] usb 4-1: config 0 descriptor?? 14:29:19 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x8, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x2000, {}, 0xfffffffffffffe5c, 0x0}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf9, &(0x7f0000000200)="978016d72e1a70e9666fa444580d3ce4c7c2d0da738f9e44054442775d8e584a316bacef3b495ee537b3f82587bef4c7fd03510704e3f4190bc90686ead9fe40005d2d1a8611790844745da788b0b85f7f53d4c7f43b88d4c0695d35326547e3281b6ee204e771fce2b2ad25535a3991c6f12369b7c2cfe7c3ea5bb81f632c074f579424c11bafc6385ea2ba2da43fb3e432d2b034832a37f4f3c801109249ea6d294b34c6bc2e99b6172f6c4e479b29fff647d22e0ad8e8255b498ba1e71c7deaf864d781c6e0a71df59267ae9cc8eb428d6fb03981f70ee42a21568697deed1d2546facd202cba0e94d8ef965b6341945f7b4721e612e68c") syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 14:29:19 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) [ 123.530413][ T721] usb 3-1: new high-speed USB device number 10 using dummy_hcd 14:29:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003ec0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "c16c7ef5"}, 0x0, 0x0, 0x0, 0x0}) [ 123.634009][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.641152][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.648169][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.656073][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.663343][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.670493][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 123.677517][ T4778] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 14:29:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "f278f2"}, 0x0}) [ 123.690454][ T1897] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 123.745064][ T4778] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 123.842032][ T4811] usb 4-1: USB disconnect, device number 9 [ 123.920653][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.931706][ T721] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.941352][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.952837][ T721] usb 3-1: config 0 descriptor?? [ 123.980581][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.020808][ T1897] usb 5-1: not running at top speed; connect to a high speed hub [ 124.030571][ T4776] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.100673][ T1897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.111800][ T1897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.121676][ T1897] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.250511][ T26] usb 2-1: Using ep0 maxpacket: 32 14:29:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 124.301505][ T1897] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 124.310684][ T1897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.318704][ T1897] usb 5-1: Product: syz [ 124.323219][ T1897] usb 5-1: Manufacturer: syz [ 124.327876][ T1897] usb 5-1: SerialNumber: syz [ 124.401495][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.413193][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.423831][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.433371][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.441555][ T4776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.452532][ T4776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.462428][ T4776] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 124.471549][ T4776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.484591][ T26] usb 2-1: config 0 descriptor?? [ 124.493688][ T4776] usb 1-1: config 0 descriptor?? [ 124.524992][ T26] hub 2-1:0.0: USB hub found [ 124.630913][ T1897] usbhid 5-1:1.0: can't add hid device: -22 [ 124.637037][ T1897] usbhid: probe of 5-1:1.0 failed with error -22 [ 124.647781][ T1897] usb 5-1: USB disconnect, device number 8 [ 124.660529][ T4811] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.730775][ T26] hub 2-1:0.0: 1 port detected [ 124.940455][ T4811] usb 4-1: Using ep0 maxpacket: 16 [ 124.986100][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 124.993125][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 124.999963][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 125.007206][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 125.007249][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 125.007285][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 125.007320][ T4776] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 125.012145][ T4776] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 125.060899][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.072128][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:29:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 125.082194][ T4811] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 125.092118][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.103498][ T4811] usb 4-1: config 0 descriptor?? [ 125.380815][ T4776] hub 2-1:0.0: activate --> -90 [ 125.407504][ T4792] usb 1-1: USB disconnect, device number 8 [ 125.450850][ T4811] usbhid 4-1:0.0: can't add hid device: -71 [ 125.456996][ T4811] usbhid: probe of 4-1:0.0 failed with error -71 [ 125.465589][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.477191][ T4811] usb 4-1: USB disconnect, device number 10 [ 125.710462][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 125.830721][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 14:29:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "f278f2"}, 0x0}) [ 125.940947][ T4811] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.000649][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 126.009770][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.018045][ T9] usb 5-1: Product: syz [ 126.022287][ T9] usb 5-1: Manufacturer: syz [ 126.027123][ T9] usb 5-1: SerialNumber: syz [ 126.035374][ T9] usb 5-1: config 0 descriptor?? [ 126.061173][ T4859] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 126.082367][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 126.088352][ T9] hub: probe of 5-1:0.0 failed with error -5 [ 126.099275][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 126.200403][ T4811] usb 4-1: Using ep0 maxpacket: 16 14:29:22 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x8, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x2000, {}, 0xfffffffffffffe5c, 0x0}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf9, &(0x7f0000000200)="978016d72e1a70e9666fa444580d3ce4c7c2d0da738f9e44054442775d8e584a316bacef3b495ee537b3f82587bef4c7fd03510704e3f4190bc90686ead9fe40005d2d1a8611790844745da788b0b85f7f53d4c7f43b88d4c0695d35326547e3281b6ee204e771fce2b2ad25535a3991c6f12369b7c2cfe7c3ea5bb81f632c074f579424c11bafc6385ea2ba2da43fb3e432d2b034832a37f4f3c801109249ea6d294b34c6bc2e99b6172f6c4e479b29fff647d22e0ad8e8255b498ba1e71c7deaf864d781c6e0a71df59267ae9cc8eb428d6fb03981f70ee42a21568697deed1d2546facd202cba0e94d8ef965b6341945f7b4721e612e68c") syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) [ 126.231267][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.243216][ T1897] usb 2-1: USB disconnect, device number 9 [ 126.260623][ T4776] usb 2-1-port1: cannot reset (err = -71) [ 126.267960][ T4776] usb 2-1-port1: attempt power cycle [ 126.300670][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 126.306911][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 126.322453][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.333903][ T4778] usb 5-1: USB disconnect, device number 9 [ 126.339924][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.350240][ T4811] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 126.360086][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.378727][ T721] usb 3-1: USB disconnect, device number 10 [ 126.422617][ T4811] usb 4-1: config 0 descriptor?? [ 126.691640][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.702872][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.712720][ T26] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 126.721849][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.733375][ T26] usb 1-1: config 0 descriptor?? 14:29:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003ec0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "c16c7ef5"}, 0x0, 0x0, 0x0, 0x0}) [ 126.741442][ T721] usb 3-1: new high-speed USB device number 11 using dummy_hcd 14:29:23 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 126.906000][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.913674][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.920759][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.927750][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.934839][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.941847][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.948831][ T4811] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 126.960407][ T4811] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 127.113784][ T4811] usb 4-1: USB disconnect, device number 11 [ 127.122271][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.133275][ T721] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.142517][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.152606][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.175256][ T721] usb 3-1: config 0 descriptor?? [ 127.191031][ T1897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.226335][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.233638][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.240690][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.247523][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.254389][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.261262][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.268073][ T26] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 127.279231][ T26] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 127.400467][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 127.490416][ T1897] usb 2-1: Using ep0 maxpacket: 32 [ 127.520987][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 127.646162][ T26] usb 1-1: USB disconnect, device number 9 [ 127.668422][ T1897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.679804][ T1897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:29:23 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 127.690116][ T1897] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.692745][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 127.699265][ T1897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.708335][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.708388][ T9] usb 5-1: Product: syz [ 127.708413][ T9] usb 5-1: Manufacturer: syz [ 127.708443][ T9] usb 5-1: SerialNumber: syz [ 127.754913][ T9] usb 5-1: config 0 descriptor?? [ 127.763813][ T1897] usb 2-1: config 0 descriptor?? [ 127.794081][ T4867] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 127.812841][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 127.818013][ T1897] hub 2-1:0.0: USB hub found [ 127.818856][ T9] hub: probe of 5-1:0.0 failed with error -5 [ 127.837473][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 128.039340][ T9] usb 5-1: USB disconnect, device number 10 [ 128.047963][ T4811] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.050693][ T1897] hub 2-1:0.0: 1 port detected [ 128.055690][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 14:29:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "f278f2"}, 0x0}) [ 128.320732][ T4811] usb 4-1: Using ep0 maxpacket: 32 [ 128.451538][ T4811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 14:29:24 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 128.520490][ T4792] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.621534][ T4811] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 128.630787][ T4811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.638807][ T4811] usb 4-1: Product: syz [ 128.643094][ T4811] usb 4-1: Manufacturer: syz [ 128.647779][ T4811] usb 4-1: SerialNumber: syz [ 128.660740][ T4811] usb 4-1: config 0 descriptor?? [ 128.680908][ T4869] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 128.702103][ T4811] hub 4-1:0.0: bad descriptor, ignoring hub [ 128.708101][ T4811] hub: probe of 4-1:0.0 failed with error -5 [ 128.725673][ T4811] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 128.740560][ T26] hub 2-1:0.0: activate --> -90 [ 128.870601][ T1897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.891029][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.902055][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.912067][ T4792] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 128.921214][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.933936][ T4792] usb 1-1: config 0 descriptor?? [ 128.946063][ T4776] usb 4-1: USB disconnect, device number 12 [ 128.950523][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 129.130404][ T1897] usb 5-1: Using ep0 maxpacket: 32 [ 129.280669][ T1897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 14:29:25 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x8, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x2000, {}, 0xfffffffffffffe5c, 0x0}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf9, &(0x7f0000000200)="978016d72e1a70e9666fa444580d3ce4c7c2d0da738f9e44054442775d8e584a316bacef3b495ee537b3f82587bef4c7fd03510704e3f4190bc90686ead9fe40005d2d1a8611790844745da788b0b85f7f53d4c7f43b88d4c0695d35326547e3281b6ee204e771fce2b2ad25535a3991c6f12369b7c2cfe7c3ea5bb81f632c074f579424c11bafc6385ea2ba2da43fb3e432d2b034832a37f4f3c801109249ea6d294b34c6bc2e99b6172f6c4e479b29fff647d22e0ad8e8255b498ba1e71c7deaf864d781c6e0a71df59267ae9cc8eb428d6fb03981f70ee42a21568697deed1d2546facd202cba0e94d8ef965b6341945f7b4721e612e68c") syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) [ 129.380654][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 129.386826][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 129.433087][ T721] usb 3-1: USB disconnect, device number 11 [ 129.440525][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.447433][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.454910][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.461862][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.468663][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.475573][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 14:29:25 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 129.481014][ T1897] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 129.482422][ T4792] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 129.491505][ T1897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.491551][ T1897] usb 5-1: Product: syz [ 129.510975][ T1897] usb 5-1: Manufacturer: syz [ 129.515725][ T1897] usb 5-1: SerialNumber: syz [ 129.556532][ T1897] usb 5-1: config 0 descriptor?? [ 129.558242][ T4792] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 129.600949][ T4874] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 129.616742][ T4778] usb 2-1: USB disconnect, device number 14 [ 129.623084][ T26] usb 2-1-port1: cannot reset (err = -71) [ 129.629816][ T26] usb 2-1-port1: attempt power cycle [ 129.637451][ T1897] hub 5-1:0.0: bad descriptor, ignoring hub [ 129.643499][ T1897] hub: probe of 5-1:0.0 failed with error -5 [ 129.659010][ T1897] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 129.848581][ T4792] usb 1-1: USB disconnect, device number 10 [ 129.860263][ T1897] usb 5-1: USB disconnect, device number 11 [ 129.870436][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 129.872791][ T721] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.900913][ T4776] usb 4-1: new high-speed USB device number 13 using dummy_hcd 14:29:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003ec0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "c16c7ef5"}, 0x0, 0x0, 0x0, 0x0}) [ 130.160466][ T4776] usb 4-1: Using ep0 maxpacket: 32 [ 130.280772][ T4776] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 130.301141][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.312164][ T721] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.321284][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.332755][ T721] usb 3-1: config 0 descriptor?? 14:29:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "f278f2"}, 0x0}) 14:29:26 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 130.451363][ T4776] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 130.460848][ T4776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.468905][ T4776] usb 4-1: Product: syz [ 130.473202][ T4776] usb 4-1: Manufacturer: syz [ 130.477857][ T4776] usb 4-1: SerialNumber: syz [ 130.498218][ T4776] usb 4-1: config 0 descriptor?? [ 130.521208][ T4878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.542916][ T4776] hub 4-1:0.0: bad descriptor, ignoring hub [ 130.548937][ T4776] hub: probe of 4-1:0.0 failed with error -5 [ 130.559618][ T4776] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 130.569354][ T4778] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 130.760409][ T4792] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.766786][ T4776] usb 4-1: USB disconnect, device number 13 [ 130.774184][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 130.807274][ T1897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.815100][ T4778] usb 2-1: Using ep0 maxpacket: 32 [ 130.980576][ T4778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.991647][ T4778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.001491][ T4778] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.010627][ T4778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.022840][ T4778] usb 2-1: config 0 descriptor?? [ 131.063554][ T4778] hub 2-1:0.0: USB hub found [ 131.090529][ T1897] usb 5-1: Using ep0 maxpacket: 32 [ 131.140879][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.151877][ T4792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.161765][ T4792] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 131.170902][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.182603][ T4792] usb 1-1: config 0 descriptor?? [ 131.221118][ T1897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 14:29:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) [ 131.291020][ T4778] hub 2-1:0.0: 1 port detected [ 131.410585][ T1897] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.419707][ T1897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.427971][ T1897] usb 5-1: Product: syz [ 131.432259][ T1897] usb 5-1: Manufacturer: syz [ 131.436919][ T1897] usb 5-1: SerialNumber: syz [ 131.445251][ T1897] usb 5-1: config 0 descriptor?? [ 131.481166][ T4884] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 131.514269][ T1897] hub 5-1:0.0: bad descriptor, ignoring hub [ 131.520256][ T1897] hub: probe of 5-1:0.0 failed with error -5 [ 131.531297][ T1897] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 131.590395][ T4811] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 131.665817][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.672987][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.679834][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.686765][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.693665][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.700546][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.707373][ T4792] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 131.731154][ T4792] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 131.771298][ T9] usb 5-1: USB disconnect, device number 12 [ 131.840546][ T4811] usb 4-1: Using ep0 maxpacket: 32 [ 131.961401][ T4811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 131.980768][ T4778] hub 2-1:0.0: activate --> -90 [ 132.089284][ T1897] usb 1-1: USB disconnect, device number 11 [ 132.131026][ T4811] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 132.140192][ T4811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.148346][ T4811] usb 4-1: Product: syz [ 132.152854][ T4811] usb 4-1: Manufacturer: syz [ 132.157504][ T4811] usb 4-1: SerialNumber: syz [ 132.167034][ T4811] usb 4-1: config 0 descriptor?? [ 132.191070][ T4886] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.212130][ T4811] hub 4-1:0.0: bad descriptor, ignoring hub [ 132.218193][ T4811] hub: probe of 4-1:0.0 failed with error -5 [ 132.229063][ T4811] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 14:29:28 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:29:28 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x8, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x2000, {}, 0xfffffffffffffe5c, 0x0}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf9, &(0x7f0000000200)="978016d72e1a70e9666fa444580d3ce4c7c2d0da738f9e44054442775d8e584a316bacef3b495ee537b3f82587bef4c7fd03510704e3f4190bc90686ead9fe40005d2d1a8611790844745da788b0b85f7f53d4c7f43b88d4c0695d35326547e3281b6ee204e771fce2b2ad25535a3991c6f12369b7c2cfe7c3ea5bb81f632c074f579424c11bafc6385ea2ba2da43fb3e432d2b034832a37f4f3c801109249ea6d294b34c6bc2e99b6172f6c4e479b29fff647d22e0ad8e8255b498ba1e71c7deaf864d781c6e0a71df59267ae9cc8eb428d6fb03981f70ee42a21568697deed1d2546facd202cba0e94d8ef965b6341945f7b4721e612e68c") syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) [ 132.442003][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 132.448173][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 132.480154][ T4776] usb 4-1: USB disconnect, device number 14 [ 132.480619][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 132.520171][ T721] usb 3-1: USB disconnect, device number 12 14:29:28 executing program 0: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 132.634222][ T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.852347][ T9] usb 2-1: USB disconnect, device number 19 [ 132.870622][ T4778] usb 2-1-port1: cannot reset (err = -71) [ 132.877491][ T4778] usb 2-1-port1: attempt power cycle [ 132.910443][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 132.910465][ T721] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.960441][ T4811] usb 1-1: new low-speed USB device number 12 using dummy_hcd 14:29:29 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 133.070933][ T26] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 133.079743][ T26] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 133.090052][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.281237][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.292364][ T721] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.301570][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.311043][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.318609][ T721] usb 3-1: config 0 descriptor?? [ 133.320138][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.320176][ T26] usb 5-1: Product: syz [ 133.325447][ T4792] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 133.333229][ T26] usb 5-1: Manufacturer: syz [ 133.333259][ T26] usb 5-1: SerialNumber: syz 14:29:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003ec0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "c16c7ef5"}, 0x0, 0x0, 0x0, 0x0}) [ 133.380832][ T4811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.391063][ T4811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.401286][ T4811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 133.412721][ T4811] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.422029][ T4811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.461252][ T4893] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.487308][ T4811] hub 1-1:1.0: bad descriptor, ignoring hub [ 133.493422][ T4811] hub: probe of 1-1:1.0 failed with error -5 [ 133.505894][ T4811] cdc_wdm 1-1:1.0: skipping garbage [ 133.511303][ T4811] cdc_wdm 1-1:1.0: skipping garbage [ 133.535733][ T4811] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 133.752324][ T26] usb 5-1: 0:2 : does not exist [ 133.770728][ T26] usb 5-1: USB disconnect, device number 13 [ 133.790593][ T4792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.800688][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.810644][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 133.830725][ T4792] usb 4-1: not running at top speed; connect to a high speed hub [ 133.911294][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.922548][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.932583][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.942463][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.070444][ T9] usb 2-1: Using ep0 maxpacket: 32 14:29:30 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 134.110612][ T4792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.119766][ T4792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.127903][ T4792] usb 4-1: Product: syz [ 134.132252][ T4792] usb 4-1: Manufacturer: syz [ 134.136872][ T4792] usb 4-1: SerialNumber: syz [ 134.220658][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.231775][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.241791][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.250936][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.262204][ T9] usb 2-1: config 0 descriptor?? [ 134.282754][ T4893] usb 1-1: reset low-speed USB device number 12 using dummy_hcd [ 134.311015][ T9] hub 2-1:0.0: USB hub found [ 134.420905][ T4792] cdc_ncm 4-1:1.0: bind() failure [ 134.431804][ T4792] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 134.438668][ T4792] cdc_ncm 4-1:1.1: bind() failure [ 134.449419][ T4792] usb 4-1: USB disconnect, device number 15 [ 134.456405][ T4811] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 134.530704][ T9] hub 2-1:0.0: 1 port detected [ 134.710463][ T4811] usb 5-1: Using ep0 maxpacket: 8 [ 134.811234][ T4898] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 14:29:31 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 134.860626][ T4811] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 134.869454][ T4811] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 134.879743][ T4811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.091301][ T4811] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.100528][ T4811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.108594][ T4811] usb 5-1: Product: syz [ 135.112926][ T4811] usb 5-1: Manufacturer: syz [ 135.117557][ T4811] usb 5-1: SerialNumber: syz [ 135.200755][ T9] hub 2-1:0.0: activate --> -90 [ 135.220636][ T4792] usb 4-1: new full-speed USB device number 16 using dummy_hcd 14:29:31 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 135.471059][ T4811] usb 5-1: 0:2 : does not exist [ 135.484308][ T4811] usb 5-1: USB disconnect, device number 14 [ 135.544632][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.561033][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 135.567152][ T721] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.582511][ T721] usb 3-1: USB disconnect, device number 13 [ 135.650905][ T4792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.690696][ T4792] usb 4-1: not running at top speed; connect to a high speed hub [ 135.770849][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.781934][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.792304][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.802166][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 14:29:32 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 136.020985][ T4792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.030107][ T4792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.038467][ T4792] usb 4-1: Product: syz [ 136.042802][ T4792] usb 4-1: Manufacturer: syz [ 136.043492][ T4778] usb 2-1: USB disconnect, device number 24 [ 136.047420][ T4792] usb 4-1: SerialNumber: syz [ 136.047751][ T9] usb 2-1-port1: cannot reset (err = -71) [ 136.064090][ T721] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 136.077570][ T9] usb 2-1-port1: attempt power cycle [ 136.270456][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 136.350954][ T4792] cdc_ncm 4-1:1.0: bind() failure [ 136.363482][ T4792] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 136.370787][ T4792] cdc_ncm 4-1:1.1: bind() failure [ 136.381420][ T4792] usb 4-1: USB disconnect, device number 16 [ 136.470556][ T721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.510633][ T721] usb 3-1: not running at top speed; connect to a high speed hub [ 136.530378][ T26] usb 5-1: Using ep0 maxpacket: 8 14:29:32 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 136.590946][ T721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.602065][ T721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.635214][ T721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.645110][ T721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.660636][ T26] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 136.669924][ T26] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 136.680512][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.850877][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.860029][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.868137][ T26] usb 5-1: Product: syz [ 136.870855][ T721] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.872386][ T26] usb 5-1: Manufacturer: syz [ 136.881469][ T721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.886054][ T26] usb 5-1: SerialNumber: syz 14:29:33 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 136.894104][ T721] usb 3-1: Product: syz [ 136.903601][ T721] usb 3-1: Manufacturer: syz [ 136.908259][ T721] usb 3-1: SerialNumber: syz [ 136.990439][ T4778] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 137.220935][ T26] usb 5-1: 0:2 : does not exist [ 137.230427][ T4778] usb 2-1: Using ep0 maxpacket: 8 [ 137.231282][ T721] cdc_ncm 3-1:1.0: bind() failure [ 137.242463][ T26] usb 5-1: USB disconnect, device number 15 [ 137.248516][ T4792] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 137.275456][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.294109][ T721] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 137.301123][ T721] cdc_ncm 3-1:1.1: bind() failure [ 137.325985][ T721] usb 3-1: USB disconnect, device number 14 [ 137.350562][ T4778] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 137.630694][ T4778] usb 2-1: string descriptor 0 read error: -22 [ 137.637164][ T4778] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 137.646481][ T4778] usb 2-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 137.657617][ T4778] usb 2-1: config 0 descriptor?? 14:29:33 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 137.680543][ T4792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.720654][ T4792] usb 4-1: not running at top speed; connect to a high speed hub 14:29:34 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 137.821058][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.832173][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.847177][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.857228][ T4792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.909186][ T721] usb 2-1: USB disconnect, device number 29 [ 138.020915][ T4778] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 138.030708][ T4792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.039974][ T4792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.048122][ T4792] usb 4-1: Product: syz [ 138.052569][ T4792] usb 4-1: Manufacturer: syz [ 138.057184][ T4792] usb 4-1: SerialNumber: syz [ 138.090620][ T26] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 138.270379][ T4778] usb 5-1: Using ep0 maxpacket: 8 [ 138.360795][ T4792] cdc_ncm 4-1:1.0: bind() failure [ 138.371564][ T4792] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 138.378566][ T4792] cdc_ncm 4-1:1.1: bind() failure [ 138.389753][ T4792] usb 4-1: USB disconnect, device number 17 14:29:34 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 138.411329][ T4778] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 138.420150][ T4778] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.430656][ T4778] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.580637][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.620591][ T26] usb 3-1: not running at top speed; connect to a high speed hub [ 138.640664][ T4778] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.649843][ T4778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.657965][ T4778] usb 5-1: Product: syz [ 138.662321][ T4778] usb 5-1: Manufacturer: syz [ 138.667059][ T4778] usb 5-1: SerialNumber: syz [ 138.710770][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.721859][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.736583][ T26] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.746416][ T26] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.760394][ T721] usb 2-1: new high-speed USB device number 30 using dummy_hcd 14:29:35 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 138.970695][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.979895][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.988046][ T26] usb 3-1: Product: syz [ 138.992351][ T26] usb 3-1: Manufacturer: syz [ 138.996967][ T26] usb 3-1: SerialNumber: syz [ 139.000378][ T721] usb 2-1: Using ep0 maxpacket: 8 [ 139.050961][ T4778] usb 5-1: 0:2 : does not exist [ 139.070454][ T4778] usb 5-1: USB disconnect, device number 16 [ 139.092013][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.120977][ T721] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 139.190439][ T1897] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 139.300914][ T26] cdc_ncm 3-1:1.0: bind() failure [ 139.312979][ T26] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 139.319883][ T26] cdc_ncm 3-1:1.1: bind() failure [ 139.332574][ T26] usb 3-1: USB disconnect, device number 15 [ 139.372128][ T721] usb 2-1: string descriptor 0 read error: -22 [ 139.378686][ T721] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 139.387902][ T721] usb 2-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 139.400631][ T721] usb 2-1: config 0 descriptor?? 14:29:35 executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) 14:29:35 executing program 0: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 139.485198][ T4776] usb 1-1: USB disconnect, device number 12 [ 139.656505][ T1897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.701834][ T1897] usb 4-1: not running at top speed; connect to a high speed hub [ 139.712978][ T4778] usb 2-1: USB disconnect, device number 30 14:29:36 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) [ 139.810957][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.822203][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.834874][ T1897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 139.844782][ T1897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.900486][ T26] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 139.908177][ T4776] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 140.010709][ T1897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.019863][ T1897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.027985][ T1897] usb 4-1: Product: syz [ 140.032277][ T1897] usb 4-1: Manufacturer: syz [ 140.036924][ T1897] usb 4-1: SerialNumber: syz [ 140.150406][ T4842] usb 3-1: new full-speed USB device number 16 using dummy_hcd 14:29:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 140.301443][ T4776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.311765][ T4776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.320850][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.331045][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.340988][ T4776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 140.352053][ T4776] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.361515][ T4776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.369811][ T1897] cdc_ncm 4-1:1.0: bind() failure [ 140.375731][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 140.386833][ T26] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.396090][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.410605][ T1897] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 140.417502][ T1897] cdc_ncm 4-1:1.1: bind() failure [ 140.442631][ T1897] usb 4-1: USB disconnect, device number 18 [ 140.461012][ T4925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.482635][ T4924] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.483669][ T4776] hub 1-1:1.0: bad descriptor, ignoring hub [ 140.496135][ T4776] hub: probe of 1-1:1.0 failed with error -5 [ 140.506499][ T26] hub 5-1:1.0: bad descriptor, ignoring hub [ 140.512628][ T26] hub: probe of 5-1:1.0 failed with error -5 [ 140.520996][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 140.526327][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 140.535731][ T4776] cdc_wdm 1-1:1.0: skipping garbage [ 140.541104][ T4776] cdc_wdm 1-1:1.0: skipping garbage [ 140.556093][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 140.568455][ T4776] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 140.575045][ T4778] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 140.610596][ T4842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.651382][ T4842] usb 3-1: not running at top speed; connect to a high speed hub [ 140.740597][ T4842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.751873][ T4842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.762817][ T4842] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.772701][ T4842] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 14:29:37 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 140.850501][ T4778] usb 2-1: Using ep0 maxpacket: 8 [ 140.900800][ T721] usb 1-1: USB disconnect, device number 13 [ 140.952094][ T4842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.961584][ T4842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.969615][ T4842] usb 3-1: Product: syz [ 140.974090][ T4842] usb 3-1: Manufacturer: syz [ 140.978776][ T4842] usb 3-1: SerialNumber: syz [ 140.983672][ T4778] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 141.210747][ T1897] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 141.230566][ T4778] usb 2-1: string descriptor 0 read error: -22 [ 141.237593][ T4778] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 141.246813][ T4778] usb 2-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 141.263923][ T4778] usb 2-1: config 0 descriptor?? [ 141.270665][ T4842] cdc_ncm 3-1:1.0: bind() failure [ 141.283248][ T4842] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 141.290141][ T4842] cdc_ncm 3-1:1.1: bind() failure [ 141.305542][ T4842] usb 3-1: USB disconnect, device number 16 [ 141.332874][ T4925] usb 5-1: reset low-speed USB device number 17 using dummy_hcd [ 141.527864][ T4778] usb 2-1: USB disconnect, device number 31 [ 141.571266][ T1897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.581910][ T1897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.591426][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 141.602456][ T1897] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 141.611651][ T1897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.641510][ T4934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.663384][ T1897] hub 4-1:1.0: bad descriptor, ignoring hub [ 141.669493][ T1897] hub: probe of 4-1:1.0 failed with error -5 [ 141.677090][ T1897] cdc_wdm 4-1:1.0: skipping garbage [ 141.682483][ T1897] cdc_wdm 4-1:1.0: skipping garbage 14:29:38 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 141.861405][ T4932] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 141.925492][ T1897] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 141.971445][ T1897] usb 4-1: USB disconnect, device number 19 14:29:38 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 142.130503][ T4778] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 142.161694][ T26] usb 5-1: USB disconnect, device number 17 [ 142.181048][ T4811] usb 5-1: Failed to suspend device, error -71 [ 142.300410][ T721] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 142.390399][ T4778] usb 3-1: Using ep0 maxpacket: 8 [ 142.395662][ T4842] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 142.521177][ T4778] usb 3-1: config index 0 descriptor too short (expected 82, got 18) 14:29:38 executing program 0: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 142.570395][ T1897] usb 4-1: new low-speed USB device number 20 using dummy_hcd 14:29:38 executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 142.641344][ T4842] usb 2-1: Using ep0 maxpacket: 8 [ 142.650546][ T721] usb 1-1: device descriptor read/all, error -71 [ 142.760520][ T4778] usb 3-1: string descriptor 0 read error: -22 [ 142.767172][ T4778] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 142.776454][ T4778] usb 3-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 142.785005][ T4842] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 142.796498][ T4778] usb 3-1: config 0 descriptor?? [ 142.930714][ T1897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.940961][ T1897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.953083][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 142.964448][ T1897] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.973690][ T1897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.981839][ T26] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 143.011244][ T4934] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 143.030630][ T4842] usb 2-1: string descriptor 0 read error: -22 [ 143.037106][ T4842] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 143.046287][ T4842] usb 2-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 143.050643][ T721] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 143.060671][ T1897] hub 4-1:1.0: bad descriptor, ignoring hub [ 143.068574][ T1897] hub: probe of 4-1:1.0 failed with error -5 [ 143.076725][ T1897] cdc_wdm 4-1:1.0: skipping garbage [ 143.082051][ T1897] cdc_wdm 4-1:1.0: skipping garbage [ 143.091571][ T4842] usb 2-1: config 0 descriptor?? [ 143.099832][ T1897] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 143.121773][ T4778] usb 3-1: USB disconnect, device number 17 [ 143.340540][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.351258][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.361061][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 143.372098][ T26] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.375488][ T4792] usb 2-1: USB disconnect, device number 32 [ 143.381207][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.395799][ T4811] usb 4-1: USB disconnect, device number 20 [ 143.401881][ T4944] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 143.431279][ T26] hub 5-1:1.0: bad descriptor, ignoring hub [ 143.437316][ T26] hub: probe of 5-1:1.0 failed with error -5 [ 143.475975][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 143.481928][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 143.490640][ T721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.492673][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 143.500845][ T721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.500944][ T721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 143.501021][ T721] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.501061][ T721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.541119][ T4942] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.584084][ T721] hub 1-1:1.0: bad descriptor, ignoring hub [ 143.590333][ T721] hub: probe of 1-1:1.0 failed with error -5 [ 143.597751][ T721] cdc_wdm 1-1:1.0: skipping garbage [ 143.603209][ T721] cdc_wdm 1-1:1.0: skipping garbage [ 143.611714][ T721] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 14:29:39 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:29:40 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) 14:29:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 143.971078][ T26] usb 1-1: USB disconnect, device number 15 [ 144.040967][ T4792] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 144.121429][ T4811] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 144.201734][ T4944] usb 5-1: reset low-speed USB device number 18 using dummy_hcd [ 144.280725][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 144.310828][ T4792] usb 3-1: Using ep0 maxpacket: 8 [ 144.470848][ T4792] usb 3-1: config index 0 descriptor too short (expected 82, got 18) [ 144.510617][ T4811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.521071][ T4811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.530925][ T4811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 144.541984][ T4811] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.551111][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.559171][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 144.591161][ T4951] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 144.625704][ T4811] hub 4-1:1.0: bad descriptor, ignoring hub [ 144.631853][ T4811] hub: probe of 4-1:1.0 failed with error -5 [ 144.639080][ T4811] cdc_wdm 4-1:1.0: skipping garbage [ 144.644664][ T4811] cdc_wdm 4-1:1.0: skipping garbage [ 144.681312][ T4947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 144.723744][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.739764][ T4811] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 144.760528][ T4792] usb 3-1: string descriptor 0 read error: -22 [ 144.767280][ T4792] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 144.776573][ T4792] usb 3-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 144.789495][ T4792] usb 3-1: config 0 descriptor?? [ 144.920571][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 144.929712][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.937897][ T9] usb 2-1: Product: syz [ 144.942164][ T9] usb 2-1: Manufacturer: syz [ 144.946813][ T9] usb 2-1: SerialNumber: syz [ 144.972919][ T4811] usb 5-1: USB disconnect, device number 18 [ 145.021987][ T4792] usb 4-1: USB disconnect, device number 21 [ 145.044811][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 145.090828][ T26] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 145.101917][ T9] usb 3-1: USB disconnect, device number 18 [ 145.246344][ T4811] usb 2-1: USB disconnect, device number 33 [ 145.420437][ T4792] usb 4-1: new low-speed USB device number 22 using dummy_hcd 14:29:41 executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 145.470633][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.480870][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.489861][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 145.501380][ T26] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.510503][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.541113][ T4952] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 145.564675][ T26] hub 1-1:1.0: bad descriptor, ignoring hub [ 145.570783][ T26] hub: probe of 1-1:1.0 failed with error -5 [ 145.581672][ T26] cdc_wdm 1-1:1.0: skipping garbage 14:29:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ee39c508c016df05c981490203010902520001009e1f00090400000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 145.586963][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 145.598942][ T26] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 14:29:41 executing program 0: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 145.820587][ T4792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.830816][ T4792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.839789][ T4792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 145.850803][ T4792] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.859909][ T4792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.868057][ T4811] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 145.911353][ T4951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.940852][ T4792] hub 4-1:1.0: bad descriptor, ignoring hub [ 145.946869][ T4792] hub: probe of 4-1:1.0 failed with error -5 [ 145.953900][ T4792] cdc_wdm 4-1:1.0: skipping garbage 14:29:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 145.959183][ T4792] cdc_wdm 4-1:1.0: skipping garbage [ 145.968084][ T4792] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 145.970643][ T26] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.092402][ T9] usb 1-1: reset low-speed USB device number 16 using dummy_hcd [ 146.230399][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 146.270764][ T721] usb 4-1: USB disconnect, device number 22 [ 146.310727][ T4811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.322262][ T4811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.331897][ T4811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 146.343128][ T4811] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 146.351024][ T26] usb 3-1: config index 0 descriptor too short (expected 82, got 18) [ 146.352331][ T4811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.368639][ T4792] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 146.401188][ T4958] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 146.433801][ T4811] hub 5-1:1.0: bad descriptor, ignoring hub [ 146.439797][ T4811] hub: probe of 5-1:1.0 failed with error -5 [ 146.447142][ T4811] cdc_wdm 5-1:1.0: skipping garbage [ 146.452514][ T4811] cdc_wdm 5-1:1.0: skipping garbage [ 146.460205][ T4811] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 146.600511][ T26] usb 3-1: string descriptor 0 read error: -22 [ 146.607264][ T26] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=81.c9 [ 146.616456][ T26] usb 3-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 146.621545][ T4962] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 146.628548][ T26] usb 3-1: config 0 descriptor?? [ 146.640687][ T4792] usb 2-1: Using ep0 maxpacket: 8 14:29:42 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0100000000000000000006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd1, 0x4d, 0x65, 0x0, 0x3eb, 0x2109, 0xe2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xd4, 0x4b}}]}}]}}, 0x0) [ 146.780745][ T4792] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.795690][ T4778] usb 5-1: USB disconnect, device number 19 [ 146.904832][ T4811] usb 3-1: USB disconnect, device number 19 [ 146.980623][ T4792] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 146.989726][ T4792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.997866][ T4792] usb 2-1: Product: syz [ 147.002273][ T4792] usb 2-1: Manufacturer: syz [ 147.007002][ T4792] usb 2-1: SerialNumber: syz [ 147.040553][ T9] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 147.064891][ T4792] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 147.170653][ T4778] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 147.283976][ T26] usb 2-1: USB disconnect, device number 34 14:29:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 147.420541][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.430870][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.439877][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 147.451009][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 147.452744][ T4962] usb 1-1: reset low-speed USB device number 16 using dummy_hcd [ 147.460252][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.521842][ T4967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.530639][ T4778] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.541296][ T4778] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.550357][ T4778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 147.554915][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 147.561481][ T4778] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 147.561523][ T4778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.581120][ T4958] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.585068][ T9] hub: probe of 4-1:1.0 failed with error -5 [ 147.609706][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 147.615067][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 147.615372][ T4778] hub 5-1:1.0: bad descriptor, ignoring hub [ 147.626337][ T4778] hub: probe of 5-1:1.0 failed with error -5 [ 147.635348][ T4778] cdc_wdm 5-1:1.0: skipping garbage [ 147.640777][ T4778] cdc_wdm 5-1:1.0: skipping garbage [ 147.821184][ T4811] usb 3-1: new high-speed USB device number 20 using dummy_hcd 14:29:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 148.031342][ T4968] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 148.062696][ T4811] usb 3-1: Using ep0 maxpacket: 8 [ 148.074718][ T9] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 148.082865][ T4778] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 148.133412][ T4778] usb 5-1: USB disconnect, device number 20 [ 148.180646][ T4811] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.281186][ T4792] usb 1-1: USB disconnect, device number 16 [ 148.351286][ T4811] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 148.360479][ T4811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.368519][ T4811] usb 3-1: Product: syz [ 148.372769][ T4811] usb 3-1: Manufacturer: syz [ 148.377426][ T4811] usb 3-1: SerialNumber: syz [ 148.383080][ T721] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 148.436311][ T4811] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 148.461348][ T9] usb 4-1: reset low-speed USB device number 23 using dummy_hcd 14:29:44 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 148.630433][ T721] usb 2-1: Using ep0 maxpacket: 8 [ 148.684011][ T4842] usb 3-1: USB disconnect, device number 20 14:29:45 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 148.760891][ T721] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.930627][ T721] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 148.939827][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.948095][ T721] usb 2-1: Product: syz [ 148.950390][ T4971] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.952356][ T721] usb 2-1: Manufacturer: syz [ 148.964211][ T721] usb 2-1: SerialNumber: syz [ 148.972942][ T4778] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 149.023849][ T721] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 149.130448][ T4792] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 149.249908][ T4842] usb 2-1: USB disconnect, device number 35 [ 149.259021][ T4778] usb 5-1: Using ep0 maxpacket: 8 [ 149.310932][ T721] usb 4-1: USB disconnect, device number 23 [ 149.371836][ T4792] usb 1-1: Using ep0 maxpacket: 16 14:29:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 149.420586][ T4778] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.429111][ T4778] usb 5-1: config 179 has no interface number 0 [ 149.436333][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 149.447555][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 149.458924][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.470162][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 149.481735][ T4778] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.490872][ T4792] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.495043][ T4778] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 149.505938][ T4792] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.515000][ T4778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.590971][ T4975] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) [ 149.700585][ T4792] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 149.709732][ T4792] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 149.718140][ T4792] usb 1-1: Product: syz [ 149.722391][ T4792] usb 1-1: Manufacturer: syz [ 149.727059][ T4792] usb 1-1: SerialNumber: syz [ 149.735895][ T4792] usb 1-1: config 0 descriptor?? 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) [ 149.800516][ T4842] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 149.803621][ T4792] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 149.831445][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.841965][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) 14:29:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) [ 150.052938][ T4842] usb 3-1: Using ep0 maxpacket: 8 [ 150.076695][ T4778] usb 5-1: USB disconnect, device number 21 [ 150.090437][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.098881][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 14:29:46 executing program 3: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)=ANY=[@ANYBLOB="6bf565ee060900f0000018000000000068"]) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x10f242) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000240)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000240)) 14:29:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80004506, 0x0) [ 150.170797][ T4792] rc_core: IR keymap rc-imon-pad not found [ 150.176728][ T4792] Registered IR keymap rc-empty [ 150.182980][ T4792] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 150.190604][ T4842] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.193203][ T4792] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol 14:29:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80004506, 0x0) 14:29:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80004506, 0x0) [ 150.294123][ T4792] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 150.308813][ T4792] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 150.326325][ T4792] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:17> initialized [ 150.360401][ T721] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 150.371663][ T4842] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 150.380994][ T4842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.389064][ T4842] usb 3-1: Product: syz [ 150.393833][ T4842] usb 3-1: Manufacturer: syz [ 150.398830][ T4842] usb 3-1: SerialNumber: syz 14:29:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80004506, 0x0) [ 150.455872][ T4842] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 150.471100][ T4977] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 150.505416][ T4792] usb 1-1: USB disconnect, device number 17 [ 150.520377][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 14:29:46 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 14:29:46 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 150.640370][ T721] usb 2-1: Using ep0 maxpacket: 8 [ 150.717452][ T26] usb 3-1: USB disconnect, device number 21 [ 150.780759][ T721] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.931854][ T4842] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 150.971049][ T721] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 150.980228][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.980433][ T4778] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 150.988335][ T721] usb 2-1: Product: syz [ 150.988370][ T721] usb 2-1: Manufacturer: syz [ 150.988395][ T721] usb 2-1: SerialNumber: syz 14:29:47 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 151.034127][ T721] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 151.200381][ T4842] usb 4-1: Using ep0 maxpacket: 8 [ 151.254528][ T721] usb 2-1: USB disconnect, device number 36 [ 151.273044][ T4778] usb 5-1: Using ep0 maxpacket: 8 [ 151.330580][ T4842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.341595][ T4842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.352756][ T4842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.362577][ T4842] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.372512][ T4842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.382232][ T4842] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 151.392326][ T4778] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.400679][ T4778] usb 5-1: config 179 has no interface number 0 [ 151.407036][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.418258][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 14:29:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000003600)={{0x12, 0x1, 0x0, 0x2e, 0x4d, 0xb9, 0x0, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2d, 0x51}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 151.429674][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.441421][ T4778] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.452935][ T4778] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.466419][ T4778] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.475580][ T4778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.483748][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 151.561209][ T5008] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 151.630811][ T4842] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.639930][ T4842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.648376][ T4842] usb 4-1: Product: syz [ 151.652825][ T4842] usb 4-1: Manufacturer: syz [ 151.658886][ T4842] usb 4-1: SerialNumber: syz [ 151.790753][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 151.801163][ T721] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 151.805718][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.819013][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.921322][ T26] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.932343][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.940999][ T4842] cdc_ncm 4-1:1.0: bind() failure [ 151.952130][ T4842] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 151.958989][ T4842] cdc_ncm 4-1:1.1: bind() failure [ 151.972903][ T4842] usb 4-1: USB disconnect, device number 24 14:29:48 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 152.046319][ T4792] usb 5-1: USB disconnect, device number 22 [ 152.053689][ T721] usb 3-1: Using ep0 maxpacket: 8 [ 152.060366][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.100728][ T26] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 152.110628][ T26] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 152.118963][ T26] usb 1-1: Product: syz [ 152.123359][ T26] usb 1-1: Manufacturer: syz [ 152.128074][ T26] usb 1-1: SerialNumber: syz [ 152.137505][ T26] usb 1-1: config 0 descriptor?? [ 152.187806][ T26] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 152.190643][ T721] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.365244][ T4778] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 152.390906][ T721] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 152.400067][ T721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.408229][ T721] usb 3-1: Product: syz 14:29:48 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 152.412480][ T721] usb 3-1: Manufacturer: syz [ 152.417105][ T721] usb 3-1: SerialNumber: syz [ 152.474486][ T721] usbhid 3-1:1.0: couldn't find an input interrupt endpoint 14:29:48 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 152.540472][ T26] rc_core: IR keymap rc-imon-pad not found [ 152.546361][ T26] Registered IR keymap rc-empty [ 152.551848][ T26] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 152.562169][ T26] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 152.621819][ T4778] usb 2-1: Using ep0 maxpacket: 16 [ 152.642692][ T26] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 152.655502][ T26] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 152.673104][ T26] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:18> initialized [ 152.722683][ T4792] usb 3-1: USB disconnect, device number 22 [ 152.750660][ T4778] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.762503][ T4778] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.773579][ T4842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 152.846244][ T5010] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 152.856054][ T26] usb 1-1: USB disconnect, device number 18 [ 152.880450][ T721] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 152.970611][ T4778] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 152.979915][ T4778] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 152.988290][ T4778] usb 2-1: Product: syz [ 152.992670][ T4778] usb 2-1: Manufacturer: syz [ 152.997352][ T4778] usb 2-1: SerialNumber: syz [ 153.005707][ T4778] usb 2-1: config 0 descriptor?? [ 153.056903][ T4778] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 153.068973][ T4842] usb 4-1: Using ep0 maxpacket: 8 [ 153.120441][ T721] usb 5-1: Using ep0 maxpacket: 8 [ 153.190595][ T4842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.201659][ T4842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.211946][ T4842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.221777][ T4842] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.231580][ T4842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.240893][ T721] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.241267][ T4842] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.249554][ T721] usb 5-1: config 179 has no interface number 0 [ 153.265793][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.277147][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.288451][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.299752][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.311442][ T721] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.324818][ T721] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.334077][ T721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.361043][ T5019] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 14:29:49 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 153.411313][ T4778] rc_core: IR keymap rc-imon-pad not found [ 153.417342][ T4778] Registered IR keymap rc-empty [ 153.423604][ T4842] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.433174][ T4842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.441892][ T4842] usb 4-1: Product: syz [ 153.446144][ T4842] usb 4-1: Manufacturer: syz [ 153.450841][ T4842] usb 4-1: SerialNumber: syz 14:29:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 153.456061][ T4778] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 153.466441][ T4778] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 153.542752][ T4778] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 153.562386][ T4778] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 153.581305][ T4778] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:37> initialized [ 153.629300][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.640877][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.741776][ T5014] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 153.761352][ T4778] usb 2-1: USB disconnect, device number 37 [ 153.762030][ T721] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 153.780423][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 153.852004][ T4842] cdc_ncm 4-1:1.0: bind() failure [ 153.860768][ T4792] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 153.869002][ T26] usb 5-1: USB disconnect, device number 23 [ 153.880437][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.887338][ T4842] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 153.888841][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.895709][ T4842] cdc_ncm 4-1:1.1: bind() failure [ 153.931148][ T4842] usb 4-1: USB disconnect, device number 25 [ 154.040437][ T721] usb 1-1: Using ep0 maxpacket: 16 [ 154.130766][ T4792] usb 3-1: Using ep0 maxpacket: 16 [ 154.180654][ T721] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.191673][ T721] usb 1-1: config 0 interface 0 has no altsetting 0 14:29:50 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 154.280710][ T4792] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.291834][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0 14:29:50 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 14:29:50 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 154.391851][ T721] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 154.401044][ T721] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 154.409278][ T721] usb 1-1: Product: syz [ 154.414067][ T721] usb 1-1: Manufacturer: syz [ 154.418732][ T721] usb 1-1: SerialNumber: syz [ 154.444535][ T721] usb 1-1: config 0 descriptor?? [ 154.490804][ T4792] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 154.499945][ T4792] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 154.508437][ T4792] usb 3-1: Product: syz [ 154.512770][ T4792] usb 3-1: Manufacturer: syz [ 154.517441][ T4792] usb 3-1: SerialNumber: syz [ 154.528083][ T721] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 154.543220][ T4792] usb 3-1: config 0 descriptor?? [ 154.596271][ T4792] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 154.620587][ T4842] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 154.680440][ T26] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 154.730405][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 154.820571][ T721] rc_core: IR keymap rc-imon-pad not found [ 154.826632][ T721] Registered IR keymap rc-empty [ 154.831777][ T721] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 154.842009][ T721] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 154.870381][ T4842] usb 2-1: Using ep0 maxpacket: 16 [ 154.920447][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 154.920649][ T4792] rc_core: IR keymap rc-imon-pad not found [ 154.931736][ T4792] Registered IR keymap rc-empty [ 154.936987][ T4792] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 154.947308][ T4792] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 154.958272][ T721] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 154.971301][ T721] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 154.983375][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 154.993765][ T4842] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.994258][ T721] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:19> initialized [ 155.004865][ T4842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.060714][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.071766][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.073792][ T4792] rc rc1: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 155.094152][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.104169][ T26] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.114053][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.123275][ T4792] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input25 [ 155.123907][ T26] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 155.135185][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.152682][ T9] usb 5-1: config 179 has no interface number 0 [ 155.165919][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.177253][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.188622][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.195785][ T5022] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 155.199855][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.219160][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.231855][ T4842] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 155.232620][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 155.241697][ T4842] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 155.249722][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.257432][ T4842] usb 2-1: Product: syz [ 155.266572][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 155.270711][ T4842] usb 2-1: Manufacturer: syz [ 155.278655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.283079][ T4842] usb 2-1: SerialNumber: syz [ 155.288445][ T1897] usb 1-1: USB disconnect, device number 19 [ 155.292864][ T5024] imon:display_open: display port is already open [ 155.301934][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 155.347494][ T4792] imon 3-1:0.0: iMON device (15c2:0045, intf0) on usb<3:23> initialized [ 155.370367][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 155.387221][ T4792] usb 3-1: USB disconnect, device number 23 [ 155.393010][ T4842] usb 2-1: config 0 descriptor?? [ 155.393289][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 155.430956][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.440102][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.448494][ T26] usb 4-1: Product: syz [ 155.451059][ T5030] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 155.452768][ T26] usb 4-1: Manufacturer: syz [ 155.464636][ T26] usb 4-1: SerialNumber: syz [ 155.499377][ T4842] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 155.705043][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.714159][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.790577][ T4842] rc_core: IR keymap rc-imon-pad not found [ 155.796537][ T4842] Registered IR keymap rc-empty [ 155.801763][ T4842] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 155.812102][ T4842] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol 14:29:52 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 155.850681][ T26] cdc_ncm 4-1:1.0: bind() failure [ 155.863412][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 155.870490][ T26] cdc_ncm 4-1:1.1: bind() failure [ 155.888151][ T26] usb 4-1: USB disconnect, device number 26 [ 155.930611][ T1897] usb 5-1: USB disconnect, device number 24 [ 155.940406][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.941422][ T4842] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 155.948785][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 14:29:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 155.981664][ T4842] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 156.004159][ T4842] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:38> initialized [ 156.149075][ T5026] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 156.161489][ T4792] usb 2-1: USB disconnect, device number 38 [ 156.170367][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 156.230771][ T4776] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 156.350811][ T4842] usb 3-1: new high-speed USB device number 24 using dummy_hcd 14:29:52 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 14:29:52 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 156.481305][ T4776] usb 1-1: Using ep0 maxpacket: 16 [ 156.600688][ T4842] usb 3-1: Using ep0 maxpacket: 16 [ 156.630645][ T4776] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.641670][ T4776] usb 1-1: config 0 interface 0 has no altsetting 0 14:29:53 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) [ 156.730544][ T1897] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 156.750825][ T4842] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.761880][ T4842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.790911][ T4792] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 156.810728][ T4776] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 156.819912][ T4776] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 156.828541][ T4776] usb 1-1: Product: syz [ 156.832801][ T4776] usb 1-1: Manufacturer: syz [ 156.837445][ T4776] usb 1-1: SerialNumber: syz [ 156.849029][ T4776] usb 1-1: config 0 descriptor?? [ 156.896603][ T4776] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 156.960617][ T4842] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 156.969755][ T4842] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 156.978084][ T4842] usb 3-1: Product: syz [ 156.982351][ T4842] usb 3-1: Manufacturer: syz [ 156.987001][ T4842] usb 3-1: SerialNumber: syz [ 156.991767][ T1897] usb 4-1: Using ep0 maxpacket: 8 [ 157.000145][ T4842] usb 3-1: config 0 descriptor?? [ 157.046559][ T4842] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 157.070898][ T26] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 157.080664][ T4792] usb 5-1: Using ep0 maxpacket: 8 [ 157.111114][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.122341][ T1897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.133279][ T1897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.143174][ T1897] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 157.153069][ T1897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.162903][ T1897] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 157.200619][ T4792] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.209057][ T4792] usb 5-1: config 179 has no interface number 0 [ 157.215899][ T4792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.220872][ T4776] rc_core: IR keymap rc-imon-pad not found [ 157.227487][ T4792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.233067][ T4776] Registered IR keymap rc-empty [ 157.234540][ T4776] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 157.245127][ T4792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.249732][ T4776] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 157.260425][ T4792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.292697][ T4792] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.306082][ T4792] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.315413][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.330541][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 157.341015][ T5044] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 157.350763][ T1897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.359972][ T1897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.368126][ T1897] usb 4-1: Product: syz [ 157.372439][ T1897] usb 4-1: Manufacturer: syz [ 157.377099][ T1897] usb 4-1: SerialNumber: syz [ 157.383828][ T4776] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 157.398171][ T4776] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 157.426822][ T4776] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:20> initialized [ 157.450705][ T4842] rc_core: IR keymap rc-imon-pad not found [ 157.456617][ T4842] Registered IR keymap rc-empty [ 157.463351][ T4842] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 157.473753][ T4842] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 157.483383][ T26] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.494440][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.552942][ T4842] rc rc1: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 157.583872][ T4842] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input31 [ 157.594979][ T5037] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 157.625548][ T4792] usb 1-1: USB disconnect, device number 20 [ 157.630425][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 157.640976][ T4842] imon 3-1:0.0: iMON device (15c2:0045, intf0) on usb<3:24> initialized [ 157.660641][ T26] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 157.669810][ T26] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 157.674593][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.678220][ T26] usb 2-1: Product: syz [ 157.687572][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.690709][ T26] usb 2-1: Manufacturer: syz [ 157.703074][ T26] usb 2-1: SerialNumber: syz [ 157.749429][ T26] usb 2-1: config 0 descriptor?? [ 157.779726][ T4842] usb 3-1: USB disconnect, device number 24 [ 157.787054][ T1897] cdc_ncm 4-1:1.0: bind() failure [ 157.792302][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 157.830570][ T26] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 157.890418][ T1897] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 157.897376][ T1897] cdc_ncm 4-1:1.1: bind() failure [ 157.922642][ T721] usb 5-1: USB disconnect, device number 25 [ 157.927555][ T1897] usb 4-1: USB disconnect, device number 27 [ 157.940361][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 157.948802][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 14:29:54 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 158.160519][ T26] rc_core: IR keymap rc-imon-pad not found [ 158.166463][ T26] Registered IR keymap rc-empty [ 158.173034][ T26] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 158.183298][ T26] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol 14:29:54 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154500f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffffd6) 14:29:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x955}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 158.301931][ T26] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.314776][ T26] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 158.332359][ T26] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:39> initialized 14:29:54 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 158.529101][ T5046] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 158.540529][ T1897] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.567995][ T4792] usb 2-1: USB disconnect, device number 39 [ 158.580452][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 158.760423][ T721] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 158.800401][ T1897] usb 1-1: Using ep0 maxpacket: 8 [ 158.830407][ T26] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 158.880480][ T4842] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 158.920691][ T1897] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.929101][ T1897] usb 1-1: config 179 has no interface number 0 [ 158.936047][ T1897] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.947190][ T1897] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.958606][ T1897] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.969843][ T1897] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.981348][ T1897] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.994842][ T1897] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.004009][ T1897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.020465][ T721] usb 3-1: Using ep0 maxpacket: 16 [ 159.040947][ T5051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 14:29:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.130975][ T4842] usb 5-1: Using ep0 maxpacket: 8 [ 159.160745][ T721] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.172192][ T721] usb 3-1: config 0 interface 0 has no altsetting 0 14:29:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.250661][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.261851][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.271726][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.284910][ T4842] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.293286][ T4842] usb 5-1: config 179 has no interface number 0 [ 159.311489][ T4842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.322854][ T4842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.334227][ T4842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.345706][ T4842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.350826][ T721] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice= 7.f3 [ 159.357199][ T4842] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.366294][ T721] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 159.366331][ T721] usb 3-1: Product: syz [ 159.366354][ T721] usb 3-1: Manufacturer: syz [ 159.366380][ T721] usb 3-1: SerialNumber: syz [ 159.374070][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.379722][ T4842] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.405007][ T721] usb 3-1: config 0 descriptor?? [ 159.409991][ T4842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.415952][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:29:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.465668][ T5057] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 159.481589][ T721] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 14:29:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.570756][ T26] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 159.579910][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.588452][ T26] usb 4-1: Product: syz [ 159.593580][ T26] usb 4-1: Manufacturer: syz [ 159.598219][ T26] usb 4-1: SerialNumber: syz [ 159.660820][ T4842] usb 1-1: USB disconnect, device number 21 [ 159.670488][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.731535][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.744187][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.840380][ T721] rc_core: IR keymap rc-imon-pad not found [ 159.846372][ T721] Registered IR keymap rc-empty [ 159.855241][ T721] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 159.865519][ T721] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 159.966519][ T4842] usb 5-1: USB disconnect, device number 26 [ 159.968234][ T721] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 159.980471][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 159.990996][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.021160][ T721] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 160.052534][ T721] imon 3-1:0.0: iMON device (15c2:0045, intf0) on usb<3:25> initialized 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) [ 160.190636][ T26] usbhid 4-1:1.0: can't add hid device: -71 [ 160.196932][ T26] usbhid: probe of 4-1:1.0 failed with error -71 [ 160.208794][ T5054] imon:lcd_write: invalid payload size: 2147479552 (expected 8) [ 160.220843][ T721] usb 3-1: USB disconnect, device number 25 [ 160.230418][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 14:29:56 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 160.241765][ T26] usb 4-1: USB disconnect, device number 28 [ 160.292811][ T5038] udevd[5038]: setting mode of /dev/input/event5 to 020660 failed: No such file or directory [ 160.323854][ T5038] udevd[5038]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) 14:29:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x501e00) 14:29:56 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 14:29:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f00000006c0)={0x1, "df"}) 14:29:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x955}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 160.640416][ T4792] usb 1-1: new high-speed USB device number 22 using dummy_hcd 14:29:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) [ 160.850793][ T721] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 160.891088][ T4792] usb 1-1: Using ep0 maxpacket: 8 [ 160.950446][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 160.971294][ T4811] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 161.020632][ T4792] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.029031][ T4792] usb 1-1: config 179 has no interface number 0 [ 161.036207][ T4792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 161.047395][ T4792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 161.058745][ T4792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.070013][ T4792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 161.081526][ T4792] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.094857][ T4792] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.103991][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.112241][ T4803] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 161.141339][ T5084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.171079][ T721] usb 5-1: Using ep0 maxpacket: 8 [ 161.301541][ T721] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.309876][ T721] usb 5-1: config 179 has no interface number 0 [ 161.316319][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 161.327784][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 161.339116][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.350629][ T721] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 161.362150][ T721] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.375639][ T721] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.384883][ T721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.408329][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.419429][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.423666][ T5092] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 161.434905][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.445137][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.454967][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.464399][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.472685][ T4803] usb 3-1: Using ep0 maxpacket: 32 [ 161.478095][ T4811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.489099][ T4811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.499481][ T4811] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.524874][ T9] usb 2-1: config 0 descriptor?? [ 161.642571][ T721] usb 1-1: USB disconnect, device number 22 [ 161.650417][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 161.658852][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 161.694551][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.703592][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.712300][ T4811] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 161.721711][ T4811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.729772][ T4811] usb 4-1: Product: syz [ 161.734151][ T4811] usb 4-1: Manufacturer: syz [ 161.738816][ T4811] usb 4-1: SerialNumber: syz [ 161.810793][ T4803] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=4f.cb [ 161.819953][ T4803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.828024][ T4803] usb 3-1: Product: syz [ 161.832443][ T4803] usb 3-1: Manufacturer: syz [ 161.837095][ T4803] usb 3-1: SerialNumber: syz [ 161.850440][ T4803] usb 3-1: config 0 descriptor?? [ 161.904301][ T4803] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 161.922918][ T26] usb 5-1: USB disconnect, device number 27 [ 161.940525][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 162.060621][ T9] usb 2-1: string descriptor 0 read error: -71 [ 162.071234][ T9] usb 2-1: USB disconnect, device number 40 [ 162.124104][ T4803] usb 3-1: USB disconnect, device number 26 [ 162.128305][ T897] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 162.142769][ T897] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 162.151687][ T897] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 162.161304][ T897] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw 14:29:58 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000000904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) [ 162.171427][ T897] pvrusb2: Failure uploading firmware1 [ 162.177026][ T897] pvrusb2: Device initialization was not successful. [ 162.184135][ T897] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 162.196648][ T4803] pvrusb2: Device being rendered inoperable [ 162.330983][ T4811] usbhid 4-1:1.0: can't add hid device: -71 [ 162.337089][ T4811] usbhid: probe of 4-1:1.0 failed with error -71 [ 162.347370][ T4811] usb 4-1: USB disconnect, device number 29 14:29:58 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:58 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:58 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:58 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) [ 162.574687][ T721] usb 1-1: new high-speed USB device number 23 using dummy_hcd 14:29:58 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) 14:29:58 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:58 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:59 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) 14:29:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x955}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) [ 162.850424][ T721] usb 1-1: Using ep0 maxpacket: 8 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) [ 162.981336][ T4811] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 163.007998][ T721] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.016882][ T721] usb 1-1: config 179 has no interface number 0 [ 163.025225][ T721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.036505][ T721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.048053][ T721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.059293][ T721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) [ 163.070918][ T721] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.084228][ T721] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.093358][ T721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.121352][ T5102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.132408][ T26] usb 5-1: new high-speed USB device number 28 using dummy_hcd 14:29:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/139) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x101082) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/38) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x100) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/208) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/109) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/147) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000500)={0x1f, 0x86, &(0x7f0000000440)="67a4f6ab9ae823af30d18e3513ce4cb91dbb91ece49a2118fae279f14bad607c26849a720d58ee613fa1000242b9072b02e9e0547457fc48fd49a9027e9dd54f95052795b64bfd7fbe50938c60c9d0a2e561abbaad4fb24d5ebdc67c698f0048aa5669107b3d7b41ecbf7f9c83cc8f67f7653010d830b389760c3696876a83135e6c377c7aaa"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000580)=""/84) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/184) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000006c0)=""/175) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x77]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0xc00, 0x1]) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/177) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0x1000) r2 = syz_open_dev$hiddev(&(0x7f0000000940), 0x3, 0x80402) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000980)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000009c0)=""/225) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000c00)=0x40) 14:29:59 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGPHYS(r0, 0x80045b09, 0x0) [ 163.181272][ T4803] usb 4-1: new high-speed USB device number 30 using dummy_hcd 14:29:59 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1f, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001d40)={0x14, 0x0, &(0x7f0000001d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x44, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 163.310677][ T4811] usb 3-1: Using ep0 maxpacket: 32 [ 163.375567][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.386029][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 163.395271][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.580759][ T4803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.591845][ T4803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.601947][ T4803] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.613526][ T4842] usb 1-1: USB disconnect, device number 23 [ 163.615179][ T721] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 163.630395][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.660713][ T4811] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=4f.cb [ 163.669989][ T4811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.670689][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=4f.cb [ 163.678113][ T4811] usb 3-1: Product: syz [ 163.687178][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.691335][ T4811] usb 3-1: Manufacturer: syz [ 163.699308][ T26] usb 5-1: Product: syz [ 163.703918][ T4811] usb 3-1: SerialNumber: syz [ 163.709954][ T4811] usb 3-1: config 0 descriptor?? [ 163.712750][ T26] usb 5-1: Manufacturer: syz [ 163.712778][ T26] usb 5-1: SerialNumber: syz [ 163.733631][ T26] usb 5-1: config 0 descriptor?? [ 163.755224][ T4811] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 163.774462][ T26] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 163.840588][ T4803] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 163.849737][ T4803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.857841][ T4803] usb 4-1: Product: syz [ 163.862096][ T4803] usb 4-1: Manufacturer: syz [ 163.866714][ T4803] usb 4-1: SerialNumber: syz [ 163.920457][ T721] usb 2-1: Using ep0 maxpacket: 32 [ 163.974900][ T897] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 163.991943][ T4811] usb 3-1: USB disconnect, device number 27 [ 163.997982][ T897] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 163.998003][ T897] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 163.998016][ T897] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 164.026186][ T897] pvrusb2: Failure uploading firmware1 [ 164.031797][ T897] pvrusb2: Device initialization was not successful. [ 164.038507][ T897] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 164.048255][ T4811] pvrusb2: Device being rendered inoperable [ 164.051435][ T26] usb 5-1: USB disconnect, device number 28 [ 164.055011][ T721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.061304][ T26] pvrusb2: Device being rendered inoperable [ 164.071114][ T721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.097834][ T721] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.107789][ T721] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 164.117682][ T721] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 14:30:00 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)="53ab", 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x57) write$char_usb(r1, &(0x7f0000000080)='w', 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 164.320761][ T721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.329897][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.338215][ T721] usb 2-1: Product: syz [ 164.342610][ T721] usb 2-1: Manufacturer: syz [ 164.347266][ T721] usb 2-1: SerialNumber: syz [ 164.470629][ T4803] usbhid 4-1:1.0: can't add hid device: -71 [ 164.476744][ T4803] usbhid: probe of 4-1:1.0 failed with error -71 [ 164.489431][ T4803] usb 4-1: USB disconnect, device number 30 14:30:00 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) 14:30:00 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) [ 164.552314][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 164.822041][ T5138] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 164.870815][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 164.890691][ T4811] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 164.910819][ T4792] usb 5-1: new high-speed USB device number 29 using dummy_hcd 14:30:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x955}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 164.951581][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.961694][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.972743][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.050598][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.059624][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.070680][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.090685][ T721] cdc_ncm 2-1:1.0: bind() failure [ 165.120639][ T721] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 165.130807][ T4811] usb 3-1: Using ep0 maxpacket: 32 [ 165.140891][ T721] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 165.150950][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.160038][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.171331][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.178031][ T4792] usb 5-1: Using ep0 maxpacket: 32 [ 165.183580][ T721] usbtest: probe of 2-1:1.1 failed with error -71 [ 165.196372][ T721] usb 2-1: USB disconnect, device number 41 [ 165.260949][ T4803] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 165.280915][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.289925][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.301148][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.381530][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.392486][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.403659][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.450729][ T4811] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=4f.cb [ 165.459842][ T4811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.468046][ T4811] usb 3-1: Product: syz [ 165.472275][ T4811] usb 3-1: Manufacturer: syz [ 165.476892][ T4811] usb 3-1: SerialNumber: syz [ 165.481747][ T4792] usb 5-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=4f.cb [ 165.490969][ T4792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.498982][ T4792] usb 5-1: Product: syz [ 165.503239][ T4792] usb 5-1: Manufacturer: syz [ 165.507877][ T4792] usb 5-1: SerialNumber: syz [ 165.516206][ T4811] usb 3-1: config 0 descriptor?? [ 165.526646][ T4792] usb 5-1: config 0 descriptor?? 14:30:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1f, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001d40)={0x14, 0x0, &(0x7f0000001d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x44, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 165.550688][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.559778][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.570974][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.584641][ T4811] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 165.595420][ T4792] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 165.680616][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.689776][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.700892][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.707792][ T4803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.718879][ T4803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.728839][ T4803] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.780898][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.796769][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.808092][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.816680][ T897] usb 5-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 165.831759][ T4792] usb 5-1: USB disconnect, device number 29 [ 165.839259][ T4811] usb 3-1: USB disconnect, device number 28 [ 165.840690][ T897] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 165.854049][ T897] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 165.854785][ T4811] pvrusb2: Device being rendered inoperable [ 165.863134][ T897] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 165.863157][ T897] pvrusb2: Failure uploading firmware1 [ 165.863167][ T897] pvrusb2: Device initialization was not successful. [ 165.863183][ T897] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 165.901403][ T4792] pvrusb2: Device being rendered inoperable [ 165.922138][ T4811] ================================================================== [ 165.930268][ T4811] BUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 [ 165.938775][ T4811] Read of size 4 at addr ffff88810b3a76d8 by task kworker/0:5/4811 [ 165.946709][ T4811] [ 165.949056][ T4811] CPU: 0 PID: 4811 Comm: kworker/0:5 Not tainted 6.8.0-rc1-syzkaller-00046-gf1a27f081c1f #0 [ 165.959162][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 165.969252][ T4811] Workqueue: usb_hub_wq hub_event [ 165.974333][ T4811] Call Trace: [ 165.977626][ T4811] [ 165.980382][ T26] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 165.980560][ T4811] dump_stack_lvl+0xd9/0x1b0 [ 165.980613][ T4811] print_report+0xc4/0x620 [ 165.997485][ T4811] ? __virt_addr_valid+0x5e/0x580 [ 166.002633][ T4811] ? __phys_addr+0xc6/0x140 [ 166.007336][ T4811] kasan_report+0xda/0x110 [ 166.011976][ T4811] ? pvr2_context_set_notify+0x2c4/0x310 [ 166.017675][ T4811] ? pvr2_context_set_notify+0x2c4/0x310 [ 166.023364][ T4811] pvr2_context_set_notify+0x2c4/0x310 [ 166.028865][ T4811] pvr2_context_disconnect+0x94/0xb0 [ 166.034202][ T4811] pvr_disconnect+0x80/0xf0 [ 166.038786][ T4811] usb_unbind_interface+0x1e5/0x960 [ 166.044054][ T4811] ? kernfs_find_ns+0x2e9/0x3e0 [ 166.048968][ T4811] ? usb_autopm_get_interface+0xe0/0xe0 [ 166.054590][ T4811] device_remove+0x11f/0x170 [ 166.059219][ T4811] device_release_driver_internal+0x44a/0x610 [ 166.065412][ T4811] bus_remove_device+0x22c/0x420 [ 166.070390][ T4811] device_del+0x39a/0xa50 [ 166.074764][ T4811] ? __device_link_del+0x380/0x380 [ 166.079936][ T4811] usb_disable_device+0x36c/0x7f0 [ 166.085033][ T4811] usb_disconnect+0x2e1/0x910 [ 166.089740][ T4811] hub_event+0x1be0/0x4f40 [ 166.094217][ T4811] ? hub_port_debounce+0x3d0/0x3d0 [ 166.099402][ T4811] ? debug_check_no_locks_held+0x80/0x170 [ 166.105253][ T4811] ? lock_sync+0x190/0x190 [ 166.109730][ T4811] ? reacquire_held_locks+0x4b0/0x4b0 [ 166.115249][ T4811] process_one_work+0x884/0x15c0 [ 166.120232][ T4811] ? hub_port_debounce+0x3d0/0x3d0 [ 166.125529][ T4811] ? init_worker_pool+0x770/0x770 [ 166.130597][ T4811] ? assign_work+0x1a0/0x240 [ 166.135237][ T4811] worker_thread+0x8b9/0x1290 [ 166.139977][ T4811] ? __kthread_parkme+0x14b/0x220 [ 166.145023][ T4811] ? process_one_work+0x15c0/0x15c0 [ 166.150252][ T4811] kthread+0x33c/0x440 [ 166.154373][ T4811] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.159703][ T4811] ? kthread_complete_and_exit+0x40/0x40 [ 166.165377][ T4811] ret_from_fork+0x45/0x80 [ 166.169956][ T4811] ? kthread_complete_and_exit+0x40/0x40 [ 166.175663][ T4811] ret_from_fork_asm+0x11/0x20 [ 166.180473][ T4811] [ 166.183715][ T4811] [ 166.186075][ T4811] Allocated by task 4811: [ 166.190422][ T4811] kasan_save_stack+0x33/0x50 [ 166.195146][ T4811] kasan_save_track+0x14/0x30 [ 166.199916][ T4811] __kasan_kmalloc+0x87/0x90 [ 166.204546][ T4811] pvr2_context_create+0x53/0x2a0 [ 166.209641][ T4811] pvr_probe+0x25/0xe0 [ 166.213746][ T4811] usb_probe_interface+0x307/0x9c0 [ 166.219060][ T4811] really_probe+0x234/0xc90 [ 166.223639][ T4811] __driver_probe_device+0x1de/0x4b0 [ 166.229918][ T4811] driver_probe_device+0x4c/0x1a0 [ 166.234999][ T4811] __device_attach_driver+0x1d4/0x300 [ 166.240435][ T4811] bus_for_each_drv+0x157/0x1d0 [ 166.245321][ T4811] __device_attach+0x1e8/0x4b0 [ 166.250116][ T4811] bus_probe_device+0x17c/0x1c0 [ 166.255000][ T4811] device_add+0x117e/0x1aa0 [ 166.259529][ T4811] usb_set_configuration+0x10cb/0x1c40 [ 166.265021][ T4811] usb_generic_driver_probe+0xad/0x110 [ 166.270507][ T4811] usb_probe_device+0xec/0x3e0 [ 166.275331][ T4811] really_probe+0x234/0xc90 [ 166.279860][ T4811] __driver_probe_device+0x1de/0x4b0 [ 166.285175][ T4811] driver_probe_device+0x4c/0x1a0 [ 166.290227][ T4811] __device_attach_driver+0x1d4/0x300 [ 166.295644][ T4811] bus_for_each_drv+0x157/0x1d0 [ 166.300716][ T4811] __device_attach+0x1e8/0x4b0 [ 166.305505][ T4811] bus_probe_device+0x17c/0x1c0 [ 166.310381][ T4811] device_add+0x117e/0x1aa0 [ 166.314953][ T4811] usb_new_device+0xd80/0x19f0 [ 166.319831][ T4811] hub_event+0x2e62/0x4f40 [ 166.324296][ T4811] process_one_work+0x884/0x15c0 [ 166.329295][ T4811] worker_thread+0x8b9/0x1290 [ 166.334037][ T4811] kthread+0x33c/0x440 [ 166.338159][ T4811] ret_from_fork+0x45/0x80 [ 166.342732][ T4811] ret_from_fork_asm+0x11/0x20 [ 166.347567][ T4811] [ 166.349942][ T4811] Freed by task 897: [ 166.353869][ T4811] kasan_save_stack+0x33/0x50 [ 166.358618][ T4811] kasan_save_track+0x14/0x30 [ 166.363370][ T4811] kasan_save_free_info+0x3f/0x60 [ 166.368455][ T4811] __kasan_slab_free+0x106/0x1b0 [ 166.373482][ T4811] kfree+0x105/0x330 [ 166.377439][ T4811] pvr2_context_thread_func+0x69d/0x960 [ 166.380638][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 166.383051][ T4811] kthread+0x33c/0x440 [ 166.383093][ T4811] ret_from_fork+0x45/0x80 [ 166.383142][ T4811] ret_from_fork_asm+0x11/0x20 [ 166.401586][ T4811] [ 166.403956][ T4811] The buggy address belongs to the object at ffff88810b3a7600 [ 166.403956][ T4811] which belongs to the cache kmalloc-256 of size 256 [ 166.418103][ T4811] The buggy address is located 216 bytes inside of [ 166.418103][ T4811] freed 256-byte region [ffff88810b3a7600, ffff88810b3a7700) [ 166.432128][ T4811] 14:30:02 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) 14:30:02 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xb2, 0xae, 0x20, 0x2040, 0x7510, 0x4fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0xd8, 0x1d}}]}}]}}, 0x0) [ 166.434492][ T4811] The buggy address belongs to the physical page: [ 166.440935][ T4811] page:ffffea00042ce980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b3a6 [ 166.451230][ T4811] head:ffffea00042ce980 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 166.460277][ T4811] anon flags: 0x200000000000840(slab|head|node=0|zone=2) [ 166.467357][ T4811] page_type: 0xffffffff() [ 166.471761][ T4811] raw: 0200000000000840 ffff888100041b40 0000000000000000 0000000000000001 [ 166.480430][ T4811] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 166.489102][ T4811] page dumped because: kasan: bad access detected [ 166.495561][ T4811] page_owner tracks the page as allocated [ 166.501325][ T4811] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2500, tgid 2500 (syz-executor.1), ts 119710636834, free_ts 119521849780 [ 166.521290][ T4811] post_alloc_hook+0x2cf/0x340 [ 166.526136][ T4811] get_page_from_freelist+0x139a/0x3460 [ 166.531758][ T4811] __alloc_pages+0x1d0/0x4a0 [ 166.536423][ T4811] allocate_slab+0xa3/0x360 [ 166.540980][ T4811] ___slab_alloc+0x4d2/0x1950 [ 166.545718][ T4811] __slab_alloc.constprop.0+0x56/0xa0 [ 166.551146][ T4811] __kmalloc_node+0x177/0x4b0 [ 166.555851][ T4811] memcg_alloc_slab_cgroups+0xa9/0x170 [ 166.561338][ T4811] __memcg_slab_post_alloc_hook+0xa3/0x340 [ 166.567240][ T4811] kmem_cache_alloc+0x354/0x370 [ 166.572114][ T4811] anon_vma_clone+0xe1/0x5d0 [ 166.576727][ T4811] anon_vma_fork+0x7a/0x610 [ 166.581276][ T4811] copy_process+0x9306/0x9920 [ 166.586005][ T4811] kernel_clone+0xfc/0x850 [ 166.590485][ T4811] __do_sys_clone+0xba/0x100 [ 166.595097][ T4811] do_syscall_64+0x78/0x1c0 [ 166.599634][ T4811] page last free pid 4811 tgid 4811 stack trace: [ 166.605971][ T4811] free_unref_page_prepare+0x503/0xae0 [ 166.611497][ T4811] free_unref_page+0x33/0x2c0 [ 166.616215][ T4811] rcu_core+0x830/0x1c50 [ 166.620489][ T4811] __do_softirq+0x20a/0x94b [ 166.625051][ T4811] [ 166.627385][ T4811] Memory state around the buggy address: [ 166.633052][ T4811] ffff88810b3a7580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.641157][ T4811] ffff88810b3a7600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.649234][ T4811] >ffff88810b3a7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.657320][ T4811] ^ [ 166.664387][ T4811] ffff88810b3a7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.672616][ T4811] ffff88810b3a7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.680653][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.680773][ T4811] ================================================================== [ 166.681178][ T4811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.681194][ T4811] CPU: 0 PID: 4811 Comm: kworker/0:5 Not tainted 6.8.0-rc1-syzkaller-00046-gf1a27f081c1f #0 [ 166.681230][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 166.681251][ T4811] Workqueue: usb_hub_wq hub_event [ 166.681286][ T4811] Call Trace: [ 166.681296][ T4811] [ 166.681307][ T4811] dump_stack_lvl+0xd9/0x1b0 [ 166.681353][ T4811] panic+0x6dc/0x790 [ 166.681395][ T4811] ? panic_smp_self_stop+0xa0/0xa0 [ 166.681440][ T4811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.681494][ T4811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.681550][ T4811] check_panic_on_warn+0xab/0xb0 [ 166.681595][ T4811] end_report+0x108/0x150 [ 166.681646][ T4811] kasan_report+0xea/0x110 [ 166.681706][ T4811] ? pvr2_context_set_notify+0x2c4/0x310 [ 166.681757][ T4811] ? pvr2_context_set_notify+0x2c4/0x310 [ 166.681809][ T4811] pvr2_context_set_notify+0x2c4/0x310 [ 166.681859][ T4811] pvr2_context_disconnect+0x94/0xb0 [ 166.681909][ T4811] pvr_disconnect+0x80/0xf0 [ 166.681952][ T4811] usb_unbind_interface+0x1e5/0x960 [ 166.682001][ T4811] ? kernfs_find_ns+0x2e9/0x3e0 [ 166.682057][ T4811] ? usb_autopm_get_interface+0xe0/0xe0 [ 166.682106][ T4811] device_remove+0x11f/0x170 [ 166.682148][ T4811] device_release_driver_internal+0x44a/0x610 [ 166.682199][ T4811] bus_remove_device+0x22c/0x420 [ 166.682241][ T4811] device_del+0x39a/0xa50 [ 166.682297][ T4811] ? __device_link_del+0x380/0x380 [ 166.682355][ T4811] usb_disable_device+0x36c/0x7f0 [ 166.682403][ T4811] usb_disconnect+0x2e1/0x910 [ 166.682437][ T4811] hub_event+0x1be0/0x4f40 [ 166.682481][ T4811] ? hub_port_debounce+0x3d0/0x3d0 [ 166.682515][ T4811] ? debug_check_no_locks_held+0x80/0x170 [ 166.682551][ T4811] ? lock_sync+0x190/0x190 [ 166.682585][ T4811] ? reacquire_held_locks+0x4b0/0x4b0 [ 166.682628][ T4811] process_one_work+0x884/0x15c0 [ 166.682680][ T4811] ? hub_port_debounce+0x3d0/0x3d0 [ 166.682713][ T4811] ? init_worker_pool+0x770/0x770 [ 166.682759][ T4811] ? assign_work+0x1a0/0x240 [ 166.682800][ T4811] worker_thread+0x8b9/0x1290 [ 166.682846][ T4811] ? __kthread_parkme+0x14b/0x220 [ 166.682881][ T4811] ? process_one_work+0x15c0/0x15c0 [ 166.682924][ T4811] kthread+0x33c/0x440 [ 166.682960][ T4811] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.683002][ T4811] ? kthread_complete_and_exit+0x40/0x40 [ 166.683042][ T4811] ret_from_fork+0x45/0x80 [ 166.683095][ T4811] ? kthread_complete_and_exit+0x40/0x40 [ 166.683135][ T4811] ret_from_fork_asm+0x11/0x20 [ 166.683182][ T4811] [ 166.691933][ T4811] Kernel Offset: disabled