INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2019/11/22 10:25:31 fuzzer started 2019/11/22 10:25:32 dialing manager at 10.128.0.105:46817 2019/11/22 10:25:33 syscalls: 87 2019/11/22 10:25:33 code coverage: enabled 2019/11/22 10:25:33 comparison tracing: enabled 2019/11/22 10:25:33 extra coverage: enabled 2019/11/22 10:25:33 setuid sandbox: enabled 2019/11/22 10:25:33 namespace sandbox: enabled 2019/11/22 10:25:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/22 10:25:33 fault injection: enabled 2019/11/22 10:25:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/22 10:25:33 net packet injection: /dev/net/tun can't be opened (open /dev/net/tun: no such device) 2019/11/22 10:25:33 net device setup: enabled 2019/11/22 10:25:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/22 10:25:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:25:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x21, {0x21, 0x0, "bedc2a5443b263640a789bdd51ea6221d59bc523b546d3b900000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)) ioctl$EVIOCREVOKE(r1, 0x40044590, 0x0) 10:25:38 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x201) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x6609, 0x0) 10:25:38 executing program 5: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x100, 0x101300) syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x4000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x7, 0x2000) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x4000) r2 = syz_open_dev$hidraw(0x0, 0x1, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x80, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xac74, 0x0, 0x4}) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000400)=ANY=[@ANYBLOB="ec0000000000000000063981ecc1f433e1cc70af1a7a61d5cf6e58887da504113c114d4f8705197b8cf52c64b0350809deb094876379fa847a41e37856c8eab31fba5e81aa25bf5f35d5e429749de136984f64afe681c26aff860e08fe21f82784d1437a56e943e5c9af0f706d1821bfbfe99f2cc11798870426b6b98be480c4ba4413215fed1a4b6606ac7f97905a23c55f91a8d7037c6a95d1f8c38a78475d49989c2e57f804a0dc43635db8616044b850eee25932e527ec84c25d134e9c909e7f935ddab5a5667dd2fc23f3bdb2507b98ff2d6248a52b3a52b9654921c11534cc1d2039c8beff323016a5f47b1150e239a73ac3fdae820e83330000000000008000"]) r4 = syz_open_dev$hiddev(0x0, 0x6, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000200)) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/../raw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r5, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000001340)='/dev/hidraw#\x00', 0xfffffffffffffffd, 0x4000) syz_open_dev$hidraw(0x0, 0x23, 0x80) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x7, 0x8, 0x8}) syz_open_dev$hidraw(0x0, 0x0, 0x2040) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x1, 0x30a00) syz_open_dev$hidraw(0x0, 0x0, 0x0) 10:25:38 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce60000000109021200010000000009048e0000090088001c92f5fbff6cf942e9999832be8a175d7f030bc99a9d0fe2439a218a423cf414b8e68b32c7c4104a1c12e8b5c2638acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1a5913f87ebc7bcab87903af7a846ed4a18efe9485d74d9f790af300bb2004fd3038f41bcdf173674e56aeb2892e5474d158ddf889059155109f7e3ce5d61ae44"], 0x0) 10:25:38 executing program 4: r0 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r0, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="75521fb4731e2974234fffb432dcdea5c36005d5e1bad8312e7976ba5ec805d964185c5a5c94432e67293c844b4eeb9c7219720a92b1bbe5326229917df91d966fd593bbd95950d81851095ef18b03ecbc18a9dfb6db86bba6397e82e5cf65fe84a512125cf6d50cc47136e0d9d2cba85f74a178843eebb306bad2738d2fe202204eb220af4b58c33f0198245a78ad1db2bbab2440fb087340011479e572546b069944d3c0dfbd9475c539c1df9a4c1bb13abb32df") syz_open_dev$hidraw(&(0x7f0000000000)='/dev//\x00\x01\x00aw#\x00', 0x0, 0x9639e335bc3a0dfc) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xe96b, 0x84000) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x0, 0x9000) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000200)="35ff849b448d54cc63deb635ad90e3e43a4de188ffeb2ea3c761e731721ef0d77a3836f91fa43bc5a50139744485de3fbcacfe50d626d4bfdc96b921bd3f84425346d085a650b5e6c654b7b04a55468436ce71b9b6a212f05884acf7cdc6e6b06c43ab633d2ed6cbb355bf6b5d5902758ab82b6c293ffa1e28cc7ec9c282d36839fc6f1b133c4c86d2dc6606e6b88fc7e31cda9ad8f306038454d3c2b3fc40d1eef4ba3f76446495efb7bc9853241e43c85e060a33") write$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000140)=""/164, 0xa4) 10:25:38 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r1, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x81102) syz_open_dev$hidraw(0x0, 0x0, 0x40) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r2, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) write$hidraw(r2, &(0x7f0000000040)="3a0ac17e00595345e24ea72cf22da8096bd8605cc6dd647252240d57e28c8faff8e17b4739f8c301d1839500"/55, 0x37) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x6609, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x40086602, 0x20004000) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x2, 0xffffffff, 0xa7, 0xaab0, 0x5, 0x8e}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x100201) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r5, &(0x7f0000000000)='4', 0x20000001) r6 = syz_open_dev$hidraw(0x0, 0x7, 0x10d4bd) write$hidraw(r6, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000180), 0x0) syzkaller login: [ 32.339538][ T1736] cgroup1: Unknown subsys name 'perf_event' [ 32.346214][ T1736] cgroup1: Unknown subsys name 'net_cls' [ 32.485000][ T1745] cgroup1: Unknown subsys name 'perf_event' [ 32.491313][ T1745] cgroup1: Unknown subsys name 'net_cls' [ 32.498438][ T1746] cgroup1: Unknown subsys name 'perf_event' [ 32.510781][ T1748] cgroup1: Unknown subsys name 'perf_event' [ 32.518623][ T1749] cgroup1: Unknown subsys name 'perf_event' [ 32.525168][ T1746] cgroup1: Unknown subsys name 'net_cls' [ 32.528176][ T1748] cgroup1: Unknown subsys name 'net_cls' [ 32.537379][ T1749] cgroup1: Unknown subsys name 'net_cls' [ 32.544224][ T1753] cgroup1: Unknown subsys name 'perf_event' [ 32.554543][ T1753] cgroup1: Unknown subsys name 'net_cls' 10:25:43 executing program 4: r0 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r0, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="75521fb4731e2974234fffb432dcdea5c36005d5e1bad8312e7976ba5ec805d964185c5a5c94432e67293c844b4eeb9c7219720a92b1bbe5326229917df91d966fd593bbd95950d81851095ef18b03ecbc18a9dfb6db86bba6397e82e5cf65fe84a512125cf6d50cc47136e0d9d2cba85f74a178843eebb306bad2738d2fe202204eb220af4b58c33f0198245a78ad1db2bbab2440fb087340011479e572546b069944d3c0dfbd9475c539c1df9a4c1bb13abb32df") syz_open_dev$hidraw(&(0x7f0000000000)='/dev//\x00\x01\x00aw#\x00', 0x0, 0x9639e335bc3a0dfc) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xe96b, 0x84000) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x0, 0x9000) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000200)="35ff849b448d54cc63deb635ad90e3e43a4de188ffeb2ea3c761e731721ef0d77a3836f91fa43bc5a50139744485de3fbcacfe50d626d4bfdc96b921bd3f84425346d085a650b5e6c654b7b04a55468436ce71b9b6a212f05884acf7cdc6e6b06c43ab633d2ed6cbb355bf6b5d5902758ab82b6c293ffa1e28cc7ec9c282d36839fc6f1b133c4c86d2dc6606e6b88fc7e31cda9ad8f306038454d3c2b3fc40d1eef4ba3f76446495efb7bc9853241e43c85e060a33") write$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000140)=""/164, 0xa4) 10:25:43 executing program 4: r0 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r0, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="75521fb4731e2974234fffb432dcdea5c36005d5e1bad8312e7976ba5ec805d964185c5a5c94432e67293c844b4eeb9c7219720a92b1bbe5326229917df91d966fd593bbd95950d81851095ef18b03ecbc18a9dfb6db86bba6397e82e5cf65fe84a512125cf6d50cc47136e0d9d2cba85f74a178843eebb306bad2738d2fe202204eb220af4b58c33f0198245a78ad1db2bbab2440fb087340011479e572546b069944d3c0dfbd9475c539c1df9a4c1bb13abb32df") syz_open_dev$hidraw(&(0x7f0000000000)='/dev//\x00\x01\x00aw#\x00', 0x0, 0x9639e335bc3a0dfc) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xe96b, 0x84000) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x0, 0x9000) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000200)="35ff849b448d54cc63deb635ad90e3e43a4de188ffeb2ea3c761e731721ef0d77a3836f91fa43bc5a50139744485de3fbcacfe50d626d4bfdc96b921bd3f84425346d085a650b5e6c654b7b04a55468436ce71b9b6a212f05884acf7cdc6e6b06c43ab633d2ed6cbb355bf6b5d5902758ab82b6c293ffa1e28cc7ec9c282d36839fc6f1b133c4c86d2dc6606e6b88fc7e31cda9ad8f306038454d3c2b3fc40d1eef4ba3f76446495efb7bc9853241e43c85e060a33") write$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000140)=""/164, 0xa4) 10:25:43 executing program 5: syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000068450c202104810480280000c44709022900010000000009040000000202ff00052406000005242300000d240f26f7840b99d7682e1d933f6754f56846010000000000000000009b3aa33a37c437eb4778d8562ae66df79551d93b49bb"], 0x0) 10:25:43 executing program 4: r0 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r0, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)="75521fb4731e2974234fffb432dcdea5c36005d5e1bad8312e7976ba5ec805d964185c5a5c94432e67293c844b4eeb9c7219720a92b1bbe5326229917df91d966fd593bbd95950d81851095ef18b03ecbc18a9dfb6db86bba6397e82e5cf65fe84a512125cf6d50cc47136e0d9d2cba85f74a178843eebb306bad2738d2fe202204eb220af4b58c33f0198245a78ad1db2bbab2440fb087340011479e572546b069944d3c0dfbd9475c539c1df9a4c1bb13abb32df") syz_open_dev$hidraw(&(0x7f0000000000)='/dev//\x00\x01\x00aw#\x00', 0x0, 0x9639e335bc3a0dfc) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xe96b, 0x84000) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x0, 0x9000) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000200)="35ff849b448d54cc63deb635ad90e3e43a4de188ffeb2ea3c761e731721ef0d77a3836f91fa43bc5a50139744485de3fbcacfe50d626d4bfdc96b921bd3f84425346d085a650b5e6c654b7b04a55468436ce71b9b6a212f05884acf7cdc6e6b06c43ab633d2ed6cbb355bf6b5d5902758ab82b6c293ffa1e28cc7ec9c282d36839fc6f1b133c4c86d2dc6606e6b88fc7e31cda9ad8f306038454d3c2b3fc40d1eef4ba3f76446495efb7bc9853241e43c85e060a33") write$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000140)=""/164, 0xa4) 10:25:43 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7e, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000400)=""/163) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x3, 0x20000) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x100201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x800) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x9, 0x4000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001300)) syz_open_dev$hiddev(0x0, 0xfffffffffffffffe, 0x440) r2 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000240)) syz_open_dev$evdev(0x0, 0x0, 0x100) r3 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3", 0xa) syz_open_dev$evdev(0x0, 0x0, 0x8000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x1, 0x2246) r4 = syz_open_dev$hidraw(0x0, 0x100000000000, 0x800004080001) r5 = syz_open_dev$hidraw(0x0, 0x3, 0x34c00) write$hidraw(r5, &(0x7f0000000000)="3a0ac17e0c595345e24ea72cf22da8096bd8605cc6dd64", 0x101200) r6 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x6, 0x109a42) write$hidraw(0xffffffffffffffff, &(0x7f0000000180)="e2", 0x1) ioctl$HIDIOCAPPLICATION(r6, 0x6611, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x2df, 0x20002) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB="c709ca44c018bec900650e5ed3f51d905feddffb9c", @ANYRESDEC]) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x200000000001, 0x4080) 10:25:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x201) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x6609, 0x0) [ 37.282924][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.512827][ T83] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 37.543335][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 37.592865][ T103] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.662928][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.674056][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 37.684262][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.697092][ T12] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 37.706154][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.715791][ T12] usb 1-1: config 0 descriptor?? [ 37.733274][ T3220] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 37.782779][ T83] usb 6-1: Using ep0 maxpacket: 32 [ 37.822978][ T83] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 37.832815][ T103] usb 4-1: Using ep0 maxpacket: 8 [ 37.952879][ T103] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 37.961144][ T103] usb 4-1: config 0 has no interface number 0 [ 37.967308][ T103] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 37.976461][ T103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.985477][ T103] usb 4-1: config 0 descriptor?? [ 38.033500][ T103] hub 4-1:0.142: bad descriptor, ignoring hub [ 38.039800][ T103] hub: probe of 4-1:0.142 failed with error -5 [ 38.049980][ T103] gl620a 4-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.3-1, Genesys GeneLink, 42:8b:3e:8e:a1:50 [ 38.353007][ T103] usb 4-1: USB disconnect, device number 2 [ 38.359556][ T103] gl620a 4-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.3-1, Genesys GeneLink [ 38.502931][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 38.509103][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.517547][ T12] usb 1-1: USB disconnect, device number 2 [ 38.583199][ T83] usb 6-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=28.80 [ 38.592278][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=196 [ 38.600614][ T83] usb 6-1: SerialNumber: syz [ 38.606055][ T83] usb 6-1: config 0 descriptor?? [ 38.654693][ T83] usb 6-1: bad CDC descriptors [ 38.803183][ T83] usb 6-1: bad CDC descriptors [ 38.992936][ T83] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 39.000820][ T83] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 39.007390][ T17] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.014937][ T83] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 39.026127][ T83] usb 6-1: USB disconnect, device number 2 [ 39.262758][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 39.302825][ T3320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.382831][ T17] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 39.391106][ T17] usb 4-1: config 0 has no interface number 0 [ 39.397287][ T17] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 39.406336][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.415203][ T17] usb 4-1: config 0 descriptor?? [ 39.453391][ T17] hub 4-1:0.142: bad descriptor, ignoring hub [ 39.459563][ T17] hub: probe of 4-1:0.142 failed with error -5 [ 39.469331][ T17] gl620a 4-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.3-1, Genesys GeneLink, 42:8b:3e:8e:a1:50 [ 39.552798][ T3320] usb 1-1: Using ep0 maxpacket: 8 [ 39.622882][ T3322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.682902][ T3320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.693891][ T3320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 39.703917][ T3320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.716735][ T3320] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 39.725792][ T3320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.734585][ T3320] usb 1-1: config 0 descriptor?? [ 39.752843][ T3220] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 39.773010][ T17] usb 4-1: USB disconnect, device number 3 [ 39.779090][ T17] gl620a 4-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.3-1, Genesys GeneLink [ 39.872903][ T3322] usb 6-1: Using ep0 maxpacket: 32 [ 39.912914][ T3322] usb 6-1: too many configurations: 71, using maximum allowed: 8 10:25:46 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r1, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x81102) syz_open_dev$hidraw(0x0, 0x0, 0x40) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r2, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) write$hidraw(r2, &(0x7f0000000040)="3a0ac17e00595345e24ea72cf22da8096bd8605cc6dd647252240d57e28c8faff8e17b4739f8c301d1839500"/55, 0x37) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x6609, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x40086602, 0x20004000) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x2, 0xffffffff, 0xa7, 0xaab0, 0x5, 0x8e}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x100201) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r5, &(0x7f0000000000)='4', 0x20000001) r6 = syz_open_dev$hidraw(0x0, 0x7, 0x10d4bd) write$hidraw(r6, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000180), 0x0) 10:25:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x201) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x6609, 0x0) 10:25:46 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7e, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000400)=""/163) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x3, 0x20000) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x100201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x800) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x9, 0x4000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001300)) syz_open_dev$hiddev(0x0, 0xfffffffffffffffe, 0x440) r2 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000240)) syz_open_dev$evdev(0x0, 0x0, 0x100) r3 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3", 0xa) syz_open_dev$evdev(0x0, 0x0, 0x8000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x1, 0x2246) r4 = syz_open_dev$hidraw(0x0, 0x100000000000, 0x800004080001) r5 = syz_open_dev$hidraw(0x0, 0x3, 0x34c00) write$hidraw(r5, &(0x7f0000000000)="3a0ac17e0c595345e24ea72cf22da8096bd8605cc6dd64", 0x101200) r6 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x6, 0x109a42) write$hidraw(0xffffffffffffffff, &(0x7f0000000180)="e2", 0x1) ioctl$HIDIOCAPPLICATION(r6, 0x6611, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x2df, 0x20002) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB="c709ca44c018bec900650e5ed3f51d905feddffb9c", @ANYRESDEC]) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x200000000001, 0x4080) 10:25:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x21, {0x21, 0x0, "bedc2a5443b263640a789bdd51ea6221d59bc523b546d3b900000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)) ioctl$EVIOCREVOKE(r1, 0x40044590, 0x0) 10:25:46 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce60000000109021200010000000009048e0000090088001c92f5fbff6cf942e9999832be8a175d7f030bc99a9d0fe2439a218a423cf414b8e68b32c7c4104a1c12e8b5c2638acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1a5913f87ebc7bcab87903af7a846ed4a18efe9485d74d9f790af300bb2004fd3038f41bcdf173674e56aeb2892e5474d158ddf889059155109f7e3ce5d61ae44"], 0x0) [ 40.113008][ T3320] usbhid 1-1:0.0: can't add hid device: -71 [ 40.119576][ T3320] usbhid: probe of 1-1:0.0 failed with error -71 [ 40.132572][ T3320] usb 1-1: USB disconnect, device number 3 10:25:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x201) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x6609, 0x0) 10:25:46 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r1, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x81102) syz_open_dev$hidraw(0x0, 0x0, 0x40) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r2, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) write$hidraw(r2, &(0x7f0000000040)="3a0ac17e00595345e24ea72cf22da8096bd8605cc6dd647252240d57e28c8faff8e17b4739f8c301d1839500"/55, 0x37) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x6609, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x40086602, 0x20004000) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x2, 0xffffffff, 0xa7, 0xaab0, 0x5, 0x8e}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x100201) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r5, &(0x7f0000000000)='4', 0x20000001) r6 = syz_open_dev$hidraw(0x0, 0x7, 0x10d4bd) write$hidraw(r6, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000180), 0x0) 10:25:46 executing program 5: syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000068450c202104810480280000c44709022900010000000009040000000202ff00052406000005242300000d240f26f7840b99d7682e1d933f6754f56846010000000000000000009b3aa33a37c437eb4778d8562ae66df79551d93b49bb"], 0x0) 10:25:46 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r1, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/../raw#\x00', 0x0, 0x81102) syz_open_dev$hidraw(0x0, 0x0, 0x40) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r2, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) write$hidraw(r2, &(0x7f0000000040)="3a0ac17e00595345e24ea72cf22da8096bd8605cc6dd647252240d57e28c8faff8e17b4739f8c301d1839500"/55, 0x37) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x6609, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x40086602, 0x20004000) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x2, 0xffffffff, 0xa7, 0xaab0, 0x5, 0x8e}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x100201) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r5, &(0x7f0000000000)='4', 0x20000001) r6 = syz_open_dev$hidraw(0x0, 0x7, 0x10d4bd) write$hidraw(r6, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0xc0c0583b, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 40.412843][ T3322] usb 6-1: unable to read config index 5 descriptor/start: -71 [ 40.420533][ T3322] usb 6-1: can't read configurations, error -71 [ 40.462825][ T17] usb 4-1: new high-speed USB device number 4 using dummy_hcd 10:25:47 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 10:25:47 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7e, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000400)=""/163) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x3, 0x20000) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x100201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x800) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x9, 0x4000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001300)) syz_open_dev$hiddev(0x0, 0xfffffffffffffffe, 0x440) r2 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000240)) syz_open_dev$evdev(0x0, 0x0, 0x100) r3 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3", 0xa) syz_open_dev$evdev(0x0, 0x0, 0x8000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x1, 0x2246) r4 = syz_open_dev$hidraw(0x0, 0x100000000000, 0x800004080001) r5 = syz_open_dev$hidraw(0x0, 0x3, 0x34c00) write$hidraw(r5, &(0x7f0000000000)="3a0ac17e0c595345e24ea72cf22da8096bd8605cc6dd64", 0x101200) r6 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x6, 0x109a42) write$hidraw(0xffffffffffffffff, &(0x7f0000000180)="e2", 0x1) ioctl$HIDIOCAPPLICATION(r6, 0x6611, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x2df, 0x20002) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB="c709ca44c018bec900650e5ed3f51d905feddffb9c", @ANYRESDEC]) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x200000000001, 0x4080) [ 40.562973][ T3320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.722918][ T17] usb 4-1: Using ep0 maxpacket: 8 10:25:47 executing program 1: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) [ 40.802780][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.802893][ T3322] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.818041][ T3320] usb 1-1: Using ep0 maxpacket: 8 [ 40.862940][ T17] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 40.871196][ T17] usb 4-1: config 0 has no interface number 0 [ 40.877780][ T17] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 40.886856][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.896160][ T17] usb 4-1: config 0 descriptor?? [ 40.933545][ T17] hub 4-1:0.142: bad descriptor, ignoring hub [ 40.939820][ T17] hub: probe of 4-1:0.142 failed with error -5 [ 40.949943][ T17] gl620a 4-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.3-1, Genesys GeneLink, 42:8b:3e:8e:a1:50 [ 40.961193][ T3320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.972139][ T3320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 40.982094][ T3320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.995002][ T3320] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 41.004094][ T3320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.022087][ T3320] usb 1-1: config 0 descriptor?? 10:25:47 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7e, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000400)=""/163) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x3, 0x20000) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x100201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x800) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x9, 0x4000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001300)) syz_open_dev$hiddev(0x0, 0xfffffffffffffffe, 0x440) r2 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000240)) syz_open_dev$evdev(0x0, 0x0, 0x100) r3 = syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x100000000, 0x2000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000640)) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3", 0xa) syz_open_dev$evdev(0x0, 0x0, 0x8000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x1, 0x2246) r4 = syz_open_dev$hidraw(0x0, 0x100000000000, 0x800004080001) r5 = syz_open_dev$hidraw(0x0, 0x3, 0x34c00) write$hidraw(r5, &(0x7f0000000000)="3a0ac17e0c595345e24ea72cf22da8096bd8605cc6dd64", 0x101200) r6 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x6, 0x109a42) write$hidraw(0xffffffffffffffff, &(0x7f0000000180)="e2", 0x1) ioctl$HIDIOCAPPLICATION(r6, 0x6611, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x2df, 0x20002) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB="c709ca44c018bec900650e5ed3f51d905feddffb9c", @ANYRESDEC]) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x200000000001, 0x4080) [ 41.043222][ T3349] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 41.062867][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 41.068059][ T103] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 41.122836][ T3322] usb 6-1: Using ep0 maxpacket: 32 [ 41.162905][ T3322] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 41.203057][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 41.212990][ T12] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 41.222002][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.231122][ T12] usb 3-1: config 0 descriptor?? [ 41.252850][ T3367] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 41.263457][ T5] usb 4-1: USB disconnect, device number 4 [ 41.271142][ T5] gl620a 4-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.3-1, Genesys GeneLink [ 41.283449][ T12] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 41.464190][ T12] lan78xx: probe of 3-1:0.0 failed with error -22 [ 41.473271][ T103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.484391][ T103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 41.495217][ T103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 41.505062][ T103] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 41.514105][ T103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.522241][ T12] usb 3-1: USB disconnect, device number 2 [ 41.530894][ T103] usb 2-1: config 0 descriptor?? [ 41.552874][ T3373] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 41.575628][ T103] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 41.583612][ T103] ati_remote: probe of 2-1:0.0 failed with error -5 10:25:48 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) 10:25:48 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce60000000109021200010000000009048e0000090088001c92f5fbff6cf942e9999832be8a175d7f030bc99a9d0fe2439a218a423cf414b8e68b32c7c4104a1c12e8b5c2638acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1a5913f87ebc7bcab87903af7a846ed4a18efe9485d74d9f790af300bb2004fd3038f41bcdf173674e56aeb2892e5474d158ddf889059155109f7e3ce5d61ae44"], 0x0) [ 41.776177][ T83] usb 2-1: USB disconnect, device number 2 [ 41.842884][ T3320] usbhid 1-1:0.0: can't add hid device: -71 [ 41.849048][ T3320] usbhid: probe of 1-1:0.0 failed with error -71 [ 41.857473][ T3320] usb 1-1: USB disconnect, device number 4 [ 41.882855][ T3322] usb 6-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=28.80 [ 41.891957][ T3322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=196 [ 41.900225][ T3322] usb 6-1: SerialNumber: syz [ 41.905736][ T3322] usb 6-1: config 0 descriptor?? [ 41.932785][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.944349][ T3322] usb 6-1: bad CDC descriptors [ 41.972782][ T103] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.133015][ T3322] usb 6-1: bad CDC descriptors [ 42.172797][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 42.222773][ T103] usb 4-1: Using ep0 maxpacket: 8 [ 42.272848][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.292913][ T17] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 42.303555][ T3322] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 42.311349][ T3322] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 42.317881][ T17] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.329002][ T17] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 42.338278][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.346352][ T3322] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 42.355112][ T3322] usb 6-1: USB disconnect, device number 4 [ 42.363031][ T103] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 10:25:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x21, {0x21, 0x0, "bedc2a5443b263640a789bdd51ea6221d59bc523b546d3b900000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)) ioctl$EVIOCREVOKE(r1, 0x40044590, 0x0) [ 42.371298][ T103] usb 4-1: config 0 has no interface number 0 [ 42.377584][ T103] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 42.386683][ T103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.405449][ T103] usb 4-1: config 0 descriptor?? [ 42.423966][ T17] hub 5-1:118.0: bad descriptor, ignoring hub [ 42.430149][ T17] hub: probe of 5-1:118.0 failed with error -5 [ 42.443771][ T103] hub 4-1:0.142: bad descriptor, ignoring hub [ 42.449934][ T103] hub: probe of 4-1:0.142 failed with error -5 [ 42.452796][ T17] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 42.469486][ T103] gl620a 4-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.3-1, Genesys GeneLink, 42:8b:3e:8e:a1:50 [ 42.512846][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 42.542777][ T3320] usb 2-1: new full-speed USB device number 3 using dummy_hcd 10:25:49 executing program 5: syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000068450c202104810480280000c44709022900010000000009040000000202ff00052406000005242300000d240f26f7840b99d7682e1d933f6754f56846010000000000000000009b3aa33a37c437eb4778d8562ae66df79551d93b49bb"], 0x0) [ 42.642896][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 42.652891][ T12] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 42.661926][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.692835][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.701781][ T12] usb 3-1: config 0 descriptor?? [ 42.722897][ T3367] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 42.743863][ T12] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 42.814047][ T103] usb 4-1: USB disconnect, device number 5 [ 42.820133][ T103] gl620a 4-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.3-1, Genesys GeneLink [ 42.883193][ T12] lan78xx: probe of 3-1:0.0 failed with error -22 [ 42.902900][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.914013][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 42.924864][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 42.934742][ T3320] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 42.942784][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 42.943944][ T3320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.950204][ T12] usb 3-1: USB disconnect, device number 3 [ 42.957173][ T17] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 42.965049][ T3320] usb 2-1: config 0 descriptor?? [ 42.992838][ T3373] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 43.015321][ T3320] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 43.023282][ T3320] ati_remote: probe of 2-1:0.0 failed with error -5 [ 43.032997][ T3396] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 43.073459][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.084404][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 43.094415][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.107227][ T5] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 43.116306][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.125592][ T5] usb 1-1: config 0 descriptor?? [ 43.142879][ T3406] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 10:25:49 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce60000000109021200010000000009048e0000090088001c92f5fbff6cf942e9999832be8a175d7f030bc99a9d0fe2439a218a423cf414b8e68b32c7c4104a1c12e8b5c2638acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1a5913f87ebc7bcab87903af7a846ed4a18efe9485d74d9f790af300bb2004fd3038f41bcdf173674e56aeb2892e5474d158ddf889059155109f7e3ce5d61ae44"], 0x0) [ 43.192819][ T17] usb 6-1: Using ep0 maxpacket: 32 [ 43.218268][ T3320] usb 2-1: USB disconnect, device number 3 [ 43.242975][ T17] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 43.302767][ T3396] usb 5-1: Using ep0 maxpacket: 8 10:25:49 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) [ 43.502843][ T12] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.624570][ T103] usb 5-1: USB disconnect, device number 2 10:25:50 executing program 1: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) [ 43.733070][ T3322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.742912][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 43.862885][ T12] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 43.871191][ T12] usb 4-1: config 0 has no interface number 0 [ 43.877709][ T12] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 43.886812][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.895978][ T12] usb 4-1: config 0 descriptor?? [ 43.932912][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 43.939458][ T12] hub 4-1:0.142: bad descriptor, ignoring hub [ 43.945939][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 43.952796][ T12] hub: probe of 4-1:0.142 failed with error -5 [ 43.961929][ T12] gl620a 4-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.3-1, Genesys GeneLink, 42:8b:3e:8e:a1:50 [ 43.972819][ T3322] usb 3-1: Using ep0 maxpacket: 8 [ 43.979343][ T5] usb 1-1: USB disconnect, device number 5 [ 43.984904][ T17] usb 6-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=28.80 [ 43.994462][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=196 [ 44.002803][ T17] usb 6-1: SerialNumber: syz [ 44.007577][ T3320] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 44.033720][ T17] usb 6-1: config 0 descriptor?? [ 44.075441][ T17] usb 6-1: bad CDC descriptors [ 44.093408][ T3322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 44.103319][ T3322] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 44.112324][ T3322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.121650][ T3322] usb 3-1: config 0 descriptor?? [ 44.142833][ T3433] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 44.163704][ T3322] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 44.253178][ T17] usb 6-1: bad CDC descriptors [ 44.275117][ T3400] usb 4-1: USB disconnect, device number 6 [ 44.281269][ T3400] gl620a 4-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.3-1, Genesys GeneLink [ 44.353061][ T3322] lan78xx: probe of 3-1:0.0 failed with error -22 [ 44.366853][ T3322] usb 3-1: USB disconnect, device number 4 [ 44.372965][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.383946][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 44.394737][ T3320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 44.404657][ T3320] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 44.413695][ T3320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.425617][ T3320] usb 2-1: config 0 descriptor?? [ 44.432836][ T83] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.443041][ T3435] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 44.464636][ T3320] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 44.483129][ T17] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 44.491188][ T17] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 44.499317][ T3320] ati_remote: probe of 2-1:0.0 failed with error -5 [ 44.508525][ T17] cdc_acm: probe of 6-1:0.0 failed with error -22 10:25:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x21, {0x21, 0x0, "bedc2a5443b263640a789bdd51ea6221d59bc523b546d3b900000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)) ioctl$EVIOCREVOKE(r1, 0x40044590, 0x0) [ 44.517681][ T17] usb 6-1: USB disconnect, device number 5 10:25:51 executing program 3: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) [ 44.688133][ T5] usb 2-1: USB disconnect, device number 4 [ 44.692798][ T83] usb 5-1: Using ep0 maxpacket: 8 10:25:51 executing program 5: syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000068450c202104810480280000c44709022900010000000009040000000202ff00052406000005242300000d240f26f7840b99d7682e1d933f6754f56846010000000000000000009b3aa33a37c437eb4778d8562ae66df79551d93b49bb"], 0x0) [ 44.802794][ T3400] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.832834][ T83] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config 10:25:51 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) [ 44.843485][ T83] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.854687][ T83] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 44.863788][ T83] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.913526][ T83] hub 5-1:118.0: bad descriptor, ignoring hub [ 44.919718][ T83] hub: probe of 5-1:118.0 failed with error -5 [ 44.928169][ T83] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 44.982866][ T12] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 45.042807][ T3400] usb 1-1: Using ep0 maxpacket: 8 [ 45.092785][ T103] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 45.162850][ T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.170604][ T3400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.182486][ T3400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 45.192465][ T3400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 10:25:51 executing program 1: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) [ 45.205285][ T3400] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 45.214341][ T3400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.225273][ T3400] usb 1-1: config 0 descriptor?? [ 45.252883][ T3456] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 45.362860][ T103] usb 6-1: Using ep0 maxpacket: 32 [ 45.368559][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.379645][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 45.393281][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 45.403221][ T12] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 45.412309][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.420456][ T103] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 45.429766][ T12] usb 4-1: config 0 descriptor?? [ 45.452946][ T3459] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 45.474776][ T12] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 45.482649][ T12] ati_remote: probe of 4-1:0.0 failed with error -5 [ 45.482795][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 45.492773][ T5] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 45.612893][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 45.622824][ T17] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 45.631842][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.640878][ T17] usb 3-1: config 0 descriptor?? [ 45.662856][ T3464] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 45.684443][ T17] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 45.692028][ T12] usb 4-1: USB disconnect, device number 7 [ 45.852924][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.864369][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 45.875209][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 45.882850][ T17] lan78xx: probe of 3-1:0.0 failed with error -22 [ 45.885081][ T5] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 45.900563][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.903539][ T17] usb 3-1: USB disconnect, device number 5 [ 45.910102][ T5] usb 2-1: config 0 descriptor?? [ 45.932881][ T3468] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 45.956468][ T5] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 45.964759][ T5] ati_remote: probe of 2-1:0.0 failed with error -5 [ 46.062855][ T3400] usbhid 1-1:0.0: can't add hid device: -71 [ 46.069004][ T3400] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.079580][ T3400] usb 1-1: USB disconnect, device number 6 [ 46.173898][ T17] usb 2-1: USB disconnect, device number 5 [ 46.182859][ T103] usb 6-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=28.80 [ 46.193304][ T103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=196 [ 46.201439][ T103] usb 6-1: SerialNumber: syz [ 46.214027][ T103] usb 6-1: config 0 descriptor?? [ 46.254035][ T103] usb 6-1: bad CDC descriptors [ 46.433093][ T103] usb 6-1: bad CDC descriptors [ 46.633040][ T103] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 46.641062][ T103] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 46.647683][ T103] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 46.656662][ T103] usb 6-1: USB disconnect, device number 6 10:25:55 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 10:25:55 executing program 3: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 10:25:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 10:25:55 executing program 1: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 10:25:55 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0x80, 0x69, 0x20, 0xcde, 0x27, 0x2a37, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x36, 0x51, 0x73}}]}}]}}, 0x0) 10:25:55 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 49.324686][ T3396] cdc_wdm 5-1:118.0: Error autopm - -16 [ 49.324842][ T3387] usb 5-1: USB disconnect, device number 3 [ 49.632790][ T3387] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.632799][ T17] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 49.632909][ T3400] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.640469][ T103] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 49.663100][ T12] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 49.670622][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 49.882768][ T3400] usb 5-1: Using ep0 maxpacket: 8 [ 49.882930][ T3387] usb 1-1: Using ep0 maxpacket: 8 [ 49.922862][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 49.928119][ T103] usb 6-1: Using ep0 maxpacket: 32 [ 49.992864][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.003980][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 50.014838][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 50.024696][ T17] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 50.033160][ T3387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 50.033736][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.033784][ T3400] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 50.043701][ T3387] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 50.051730][ T3400] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.061803][ T3387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.070839][ T3400] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 50.070854][ T3400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.082001][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.118026][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 50.128841][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 50.129767][ T17] usb 4-1: config 0 descriptor?? [ 50.138717][ T12] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 50.152837][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.161623][ T3387] usb 1-1: config 0 descriptor?? [ 50.166782][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 50.172944][ T3487] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 50.176665][ T5] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 50.193020][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.201036][ T103] usb 6-1: config 0 has an invalid interface number: 193 but max is 0 [ 50.209255][ T103] usb 6-1: config 0 has no interface number 0 [ 50.213498][ T3400] hub 5-1:118.0: bad descriptor, ignoring hub [ 50.215941][ T103] usb 6-1: New USB device found, idVendor=0cde, idProduct=0027, bcdDevice=2a.37 [ 50.226941][ T17] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 50.230510][ T103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.241241][ T3400] hub: probe of 5-1:118.0 failed with error -5 [ 50.246396][ T12] usb 2-1: config 0 descriptor?? [ 50.254702][ T3400] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 50.260012][ T3491] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 50.263745][ T17] ati_remote: probe of 4-1:0.0 failed with error -5 [ 50.293695][ T3387] lan78xx 1-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 50.304935][ T5] usb 3-1: config 0 descriptor?? [ 50.307175][ T3493] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 50.322846][ T3492] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 50.324548][ T103] usb 6-1: config 0 descriptor?? [ 50.344633][ T12] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 50.352436][ T12] ati_remote: probe of 2-1:0.0 failed with error -5 [ 50.360422][ T5] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 50.465253][ T12] usb 4-1: USB disconnect, device number 8 [ 50.482847][ T3387] lan78xx: probe of 1-1:0.0 failed with error -22 [ 50.502055][ T3387] usb 1-1: USB disconnect, device number 7 [ 50.532787][ T103] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 50.542931][ T5] lan78xx: probe of 3-1:0.0 failed with error -22 [ 50.555320][ T5] usb 3-1: USB disconnect, device number 6 [ 50.570003][ T3400] usb 2-1: USB disconnect, device number 6 [ 50.853356][ T3494] usb 5-1: reset high-speed USB device number 4 using dummy_hcd 10:25:57 executing program 3: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 10:25:57 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 10:25:57 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) 10:25:57 executing program 1: syz_usb_connect(0x1, 0x2a6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x33, 0xcb}}]}}]}}, 0x0) [ 51.093832][ T3494] usb 5-1: Using ep0 maxpacket: 8 [ 51.272799][ T3400] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 51.292837][ T83] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.383191][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.402884][ T3387] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 51.416533][ T17] usb 5-1: USB disconnect, device number 4 [ 51.532754][ T103] usb 6-1: device descriptor read/64, error -71 [ 51.542852][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 51.632785][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 51.643003][ T3400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.654031][ T3400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 51.664884][ T3400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has wMaxPacketSize 0, skipping [ 51.674737][ T3400] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 51.683935][ T3400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.692043][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 51.701899][ T83] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 51.710962][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.719870][ T83] usb 1-1: config 0 descriptor?? [ 51.725635][ T3400] usb 4-1: config 0 descriptor?? [ 51.752901][ T3507] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 51.752936][ T3504] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 51.768049][ T5] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 51.778748][ T5] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.783765][ T83] lan78xx 1-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 51.791071][ T5] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 51.809884][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.818088][ T3387] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 51.824596][ T3400] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 51.827179][ T3387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.843607][ T3400] ati_remote: probe of 4-1:0.0 failed with error -5 [ 51.845029][ T3387] usb 2-1: config 0 descriptor?? 10:25:58 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 51.897148][ T103] usb 6-1: Using ep0 maxpacket: 32 [ 51.906725][ T5] hub 3-1:118.0: bad descriptor, ignoring hub [ 51.916210][ T5] hub: probe of 3-1:118.0 failed with error -5 [ 51.932166][ T5] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 51.973384][ T83] lan78xx: probe of 1-1:0.0 failed with error -22 [ 52.011437][ T5] usb 1-1: USB disconnect, device number 8 [ 52.034450][ T103] usb 6-1: Direct firmware load for carl9170-1.fw failed with error -2 [ 52.042972][ T103] usb 6-1: firmware not found. [ 52.056355][ T83] usb 4-1: USB disconnect, device number 9 [ 52.096794][ T103] usb 2-1: USB disconnect, device number 7 [ 52.218179][ T12] usb 6-1: USB disconnect, device number 7 [ 52.242913][ T3387] usb 5-1: new high-speed USB device number 5 using dummy_hcd 10:25:58 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0x80, 0x69, 0x20, 0xcde, 0x27, 0x2a37, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x36, 0x51, 0x73}}]}}]}}, 0x0) [ 52.482812][ T3387] usb 5-1: Using ep0 maxpacket: 8 10:25:59 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1a, 0x11, 0x51, 0x8, 0x424, 0x7850, 0xdd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf3, 0xf1, 0x24, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) [ 52.522786][ T3510] usb 3-1: reset high-speed USB device number 7 using dummy_hcd 10:25:59 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x4e, 0x96, 0x90, 0x20, 0x403, 0xfa78, 0x7ba2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0xa2, 0x24}}]}}]}}, 0x0) [ 52.612829][ T3387] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 52.623298][ T3387] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.634496][ T3387] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 52.643551][ T3387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.703642][ T3387] hub 5-1:118.0: bad descriptor, ignoring hub [ 52.709915][ T3387] hub: probe of 5-1:118.0 failed with error -5 [ 52.722774][ T12] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 52.772810][ T3510] usb 3-1: Using ep0 maxpacket: 8 [ 52.812864][ T103] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 52.852824][ T5] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.882924][ T83] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 52.924173][ T3387] cdc_wdm 5-1:118.0: cdc-wdm1: USB WDM device [ 52.962855][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 52.968896][ T3387] usb 5-1: USB disconnect, device number 5 [ 53.062824][ T103] usb 1-1: Using ep0 maxpacket: 8 [ 53.092826][ T12] usb 6-1: config 0 has an invalid interface number: 193 but max is 0 [ 53.101073][ T12] usb 6-1: config 0 has no interface number 0 [ 53.107283][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 53.112790][ T12] usb 6-1: New USB device found, idVendor=0cde, idProduct=0027, bcdDevice=2a.37 [ 53.117356][ T3400] usb 3-1: USB disconnect, device number 7 [ 53.121870][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.138824][ T12] usb 6-1: config 0 descriptor?? [ 53.183105][ T103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has wMaxPacketSize 0, skipping [ 53.193058][ T103] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=dd.6a [ 53.202087][ T103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.212676][ T103] usb 1-1: config 0 descriptor?? [ 53.222908][ T5] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=7b.a2 [ 53.232103][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.240300][ T3528] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 53.243430][ T5] usb 4-1: config 0 descriptor?? [ 53.253834][ T103] lan78xx 1-1:0.0 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 53.272939][ T83] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 53.281998][ T83] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.294862][ T83] usb 2-1: config 0 descriptor?? [ 53.304298][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 53.313847][ T5] usb 4-1: Detected FT-X [ 53.352789][ T12] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 53.452897][ T103] lan78xx: probe of 1-1:0.0 failed with error -22 [ 53.466858][ T103] usb 1-1: USB disconnect, device number 9 [ 53.512983][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 53.532921][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 53.533805][ T3400] usb 2-1: USB disconnect, device number 8 [ 53.553002][ T5] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 53.561902][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 53.570095][ T3387] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.586790][ T5] usb 4-1: USB disconnect, device number 10 [ 53.595619][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 10:26:00 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 53.610492][ T5] ftdi_sio 4-1:0.0: device disconnected [ 53.832768][ T3387] usb 5-1: Using ep0 maxpacket: 8 10:26:00 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0x80, 0x69, 0x20, 0xcde, 0x27, 0x2a37, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x36, 0x51, 0x73}}]}}]}}, 0x0) [ 53.922840][ T83] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.952869][ T3387] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config 10:26:00 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b199110501dc660d71a0004000109021b0001000000000904000001c9b3ea0009058f024900000000"], 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x1400000000000000, 0x0) syz_usb_disconnect(0xffffffffffffffff) 10:26:00 executing program 1: syz_usb_connect(0x1, 0x2a6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x33, 0xcb}}]}}]}}, 0x0) [ 53.972884][ T3387] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.984022][ T3387] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 53.993211][ T3387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.053481][ T3387] hub 5-1:118.0: bad descriptor, ignoring hub [ 54.059698][ T3387] hub: probe of 5-1:118.0 failed with error -5 [ 54.081189][ T3387] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 54.172780][ T83] usb 3-1: Using ep0 maxpacket: 8 [ 54.282853][ T3400] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 54.302968][ T17] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 54.310784][ T83] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 54.321140][ T83] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.322770][ T12] usb 6-1: device descriptor read/64, error -71 [ 54.332333][ T83] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 54.342767][ T5] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 54.347625][ T83] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.382952][ T3387] usb 5-1: USB disconnect, device number 6 [ 54.403257][ T83] hub 3-1:118.0: bad descriptor, ignoring hub [ 54.409617][ T83] hub: probe of 3-1:118.0 failed with error -5 [ 54.417250][ T83] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 54.562806][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 54.568156][ T3400] usb 4-1: Using ep0 maxpacket: 32 [ 54.692995][ T17] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 73 [ 54.703072][ T3400] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=7b.a2 [ 54.712095][ T3400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.712765][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 54.724824][ T3400] usb 4-1: config 0 descriptor?? [ 54.725632][ T5] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 54.739323][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.748340][ T5] usb 2-1: config 0 descriptor?? [ 54.764253][ T3400] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected 10:26:01 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 54.792928][ T17] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=1a.d7 [ 54.802010][ T17] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 54.810082][ T17] usb 1-1: Product: syz [ 54.818515][ T3400] usb 4-1: Detected FT-X [ 54.838556][ T17] usb 1-1: config 0 descriptor?? [ 54.862857][ T3547] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 54.885132][ T103] usb 6-1: Direct firmware load for carl9170-1.fw failed with error -2 [ 54.893505][ T103] usb 6-1: firmware not found. [ 54.972872][ T3400] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 54.992815][ T3400] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 55.004096][ T103] usb 2-1: USB disconnect, device number 9 [ 55.014171][ T3400] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 55.021766][ T3400] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 55.031946][ T3400] usb 4-1: USB disconnect, device number 11 [ 55.039275][ T3400] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 55.049433][ T3400] ftdi_sio 4-1:0.0: device disconnected [ 55.052787][ T3541] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 55.094182][ T12] usb 6-1: USB disconnect, device number 8 [ 55.102905][ T5] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.302776][ T3541] usb 3-1: Using ep0 maxpacket: 8 [ 55.352758][ T5] usb 5-1: Using ep0 maxpacket: 8 10:26:01 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x4e, 0x96, 0x90, 0x20, 0x403, 0xfa78, 0x7ba2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0xa2, 0x24}}]}}]}}, 0x0) [ 55.475519][ T17] usb 1-1: USB disconnect, device number 10 [ 55.480798][ T5] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 55.507307][ T5] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:26:02 executing program 1: syz_usb_connect(0x1, 0x2a6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x33, 0xcb}}]}}]}}, 0x0) [ 55.518617][ T5] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 55.527844][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:26:02 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0x80, 0x69, 0x20, 0xcde, 0x27, 0x2a37, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x36, 0x51, 0x73}}]}}]}}, 0x0) [ 55.583497][ T5] hub 5-1:118.0: bad descriptor, ignoring hub [ 55.589710][ T5] hub: probe of 5-1:118.0 failed with error -5 [ 55.597197][ T5] cdc_wdm 5-1:118.0: cdc-wdm1: USB WDM device [ 55.628675][ T12] usb 3-1: USB disconnect, device number 8 [ 55.772754][ T3400] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 55.812791][ T3387] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 55.902986][ T83] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 55.922986][ T3322] usb 5-1: USB disconnect, device number 7 [ 56.012773][ T3400] usb 4-1: Using ep0 maxpacket: 32 [ 56.052840][ T17] usb 1-1: new high-speed USB device number 11 using dummy_hcd 10:26:02 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x6, 0x0) syz_usb_connect$printer(0x582695558ea2f32e, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x118, 0x2, 0x8, 0xed}}, [{{0x9, 0x5, 0x82, 0x2, 0x329, 0x0, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x0, 0x20, 0x4}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61af8d50d41289cae7b485f6f315a592"}]}, 0x6, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4649}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 56.132831][ T3400] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=7b.a2 [ 56.141934][ T3400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.151162][ T3400] usb 4-1: config 0 descriptor?? [ 56.156309][ T83] usb 6-1: Using ep0 maxpacket: 32 [ 56.193019][ T3387] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 56.194176][ T3400] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 56.202123][ T3387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.214841][ T3400] usb 4-1: Detected FT-X [ 56.226254][ T3387] usb 2-1: config 0 descriptor?? [ 56.272980][ T83] usb 6-1: config 0 has an invalid interface number: 193 but max is 0 [ 56.281360][ T83] usb 6-1: config 0 has no interface number 0 [ 56.287768][ T3322] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 56.295766][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 56.301740][ T83] usb 6-1: New USB device found, idVendor=0cde, idProduct=0027, bcdDevice=2a.37 [ 56.310919][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.321639][ T83] usb 6-1: config 0 descriptor?? [ 56.413177][ T17] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 73 [ 56.432877][ T3400] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 56.452838][ T3400] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 56.463019][ T3320] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 56.480251][ T3400] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 56.487666][ T3402] usb 2-1: USB disconnect, device number 10 [ 56.493963][ T3400] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 56.502987][ T17] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=1a.d7 [ 56.512032][ T17] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 56.520419][ T17] usb 1-1: Product: syz [ 56.524852][ T83] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 56.536637][ T3400] usb 4-1: USB disconnect, device number 12 [ 56.544192][ T17] usb 1-1: config 0 descriptor?? [ 56.549700][ T3400] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 56.559098][ T3322] usb 5-1: Using ep0 maxpacket: 8 [ 56.564825][ T3400] ftdi_sio 4-1:0.0: device disconnected [ 56.565263][ T3547] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 56.682969][ T3322] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 56.693566][ T3322] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.705200][ T3322] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 56.714441][ T3322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.742840][ T3320] usb 3-1: Using ep0 maxpacket: 8 [ 56.763497][ T3322] hub 5-1:118.0: bad descriptor, ignoring hub [ 56.769800][ T3322] hub: probe of 5-1:118.0 failed with error -5 [ 56.777695][ T3322] cdc_wdm 5-1:118.0: cdc-wdm1: USB WDM device [ 56.786444][ T3387] usb 1-1: USB disconnect, device number 11 [ 56.795542][ T3387] ================================================================== [ 56.803873][ T3387] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.812456][ T3387] Read of size 4 at addr ffff8881c20c4820 by task kworker/0:4/3387 [ 56.820333][ T3387] [ 56.822655][ T3387] CPU: 0 PID: 3387 Comm: kworker/0:4 Not tainted 5.4.0-rc6-syzkaller #0 [ 56.830959][ T3387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.841008][ T3387] Workqueue: usb_hub_wq hub_event [ 56.846020][ T3387] Call Trace: [ 56.849322][ T3387] dump_stack+0xca/0x13e [ 56.853573][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.859771][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.862893][ T3320] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 56.865850][ T3387] print_address_description.constprop.0+0x36/0x50 [ 56.865879][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.865894][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.865910][ T3387] __kasan_report.cold+0x1a/0x33 [ 56.876487][ T3320] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.882650][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.882663][ T3387] kasan_report+0xe/0x20 [ 56.882675][ T3387] check_memory_region+0x128/0x190 [ 56.882688][ T3387] refcount_inc_not_zero_checked+0x72/0x1e0 [ 56.882706][ T3387] ? refcount_dec_and_mutex_lock+0x80/0x80 [ 56.882718][ T3387] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.882727][ T3387] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 56.882737][ T3387] refcount_inc_checked+0x12/0x60 [ 56.882749][ T3387] kthread_stop+0x6c/0x610 [ 56.882763][ T3387] hwrng_unregister+0x190/0x210 [ 56.882781][ T3387] chaoskey_disconnect+0x1b2/0x200 [ 56.888857][ T3320] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 56.894887][ T3387] usb_unbind_interface+0x1bd/0x8a0 [ 56.894900][ T3387] ? usb_autoresume_device+0x60/0x60 [ 56.894914][ T3387] device_release_driver_internal+0x42f/0x500 [ 56.894930][ T3387] bus_remove_device+0x2dc/0x4a0 [ 56.899844][ T3320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.910842][ T3387] device_del+0x420/0xb20 [ 56.910852][ T3387] ? __device_link_del+0x2f0/0x2f0 [ 56.910864][ T3387] ? usb_remove_ep_devs+0x3e/0x80 [ 56.910880][ T3387] ? remove_intf_ep_devs+0x13f/0x1d0 [ 56.953403][ T3320] hub 3-1:118.0: bad descriptor, ignoring hub [ 56.953729][ T3387] usb_disable_device+0x211/0x690 [ 56.958159][ T3320] hub: probe of 3-1:118.0 failed with error -5 [ 56.962951][ T3387] usb_disconnect+0x284/0x8d0 [ 56.962961][ T3387] hub_event+0x16f2/0x3800 [ 56.962974][ T3387] ? hub_port_debounce+0x260/0x260 [ 56.962987][ T3387] ? find_held_lock+0x2d/0x110 [ 56.962998][ T3387] ? mark_held_locks+0xe0/0xe0 [ 56.963010][ T3387] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.963019][ T3387] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 56.963036][ T3387] process_one_work+0x92b/0x1530 [ 57.082575][ T3387] ? pwq_dec_nr_in_flight+0x310/0x310 [ 57.087927][ T3387] ? do_raw_spin_lock+0x11a/0x280 [ 57.092930][ T3387] worker_thread+0x96/0xe20 [ 57.097415][ T3387] ? process_one_work+0x1530/0x1530 [ 57.102591][ T3387] kthread+0x318/0x420 [ 57.106657][ T3387] ? kthread_create_on_node+0xf0/0xf0 [ 57.112020][ T3387] ret_from_fork+0x24/0x30 [ 57.116412][ T3387] [ 57.118720][ T3387] Allocated by task 2: [ 57.122788][ T3387] save_stack+0x1b/0x80 [ 57.126924][ T3387] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 57.132539][ T3387] kmem_cache_alloc_node+0xdc/0x310 [ 57.137713][ T3387] copy_process+0x4201/0x6470 [ 57.142370][ T3387] _do_fork+0x129/0xec0 [ 57.146506][ T3387] kernel_thread+0xaa/0xe0 [ 57.150899][ T3387] kthreadd+0x4a2/0x680 [ 57.155032][ T3387] ret_from_fork+0x24/0x30 [ 57.159420][ T3387] [ 57.161725][ T3387] Freed by task 3566: [ 57.165685][ T3387] save_stack+0x1b/0x80 [ 57.169831][ T3387] __kasan_slab_free+0x130/0x180 [ 57.177957][ T3387] kmem_cache_free+0xb9/0x380 [ 57.182615][ T3387] __put_task_struct+0x1e2/0x4c0 [ 57.187538][ T3387] delayed_put_task_struct+0x1b4/0x2c0 [ 57.192979][ T3387] rcu_core+0x630/0x1ca0 [ 57.197199][ T3387] __do_softirq+0x221/0x912 [ 57.201673][ T3387] [ 57.203996][ T3387] The buggy address belongs to the object at ffff8881c20c4800 [ 57.203996][ T3387] which belongs to the cache task_struct of size 5888 [ 57.218114][ T3387] The buggy address is located 32 bytes inside of [ 57.218114][ T3387] 5888-byte region [ffff8881c20c4800, ffff8881c20c5f00) [ 57.231368][ T3387] The buggy address belongs to the page: [ 57.236989][ T3387] page:ffffea0007083000 refcount:1 mapcount:0 mapping:ffff8881da116000 index:0x0 compound_mapcount: 0 [ 57.247900][ T3387] flags: 0x200000000010200(slab|head) [ 57.253978][ T3387] raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881da116000 [ 57.262557][ T3387] raw: 0000000000000000 0000000000050005 00000001ffffffff 0000000000000000 [ 57.271116][ T3387] page dumped because: kasan: bad access detected [ 57.277516][ T3387] [ 57.279831][ T3387] Memory state around the buggy address: [ 57.285531][ T3387] ffff8881c20c4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.293596][ T3387] ffff8881c20c4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.301757][ T3387] >ffff8881c20c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.309801][ T3387] ^ [ 57.314892][ T3387] ffff8881c20c4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.322948][ T3387] ffff8881c20c4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.330983][ T3387] ================================================================== [ 57.339019][ T3387] Disabling lock debugging due to kernel taint [ 57.345404][ T3387] Kernel panic - not syncing: panic_on_warn set ... [ 57.352003][ T3387] CPU: 0 PID: 3387 Comm: kworker/0:4 Tainted: G B 5.4.0-rc6-syzkaller #0 10:26:03 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x4e, 0x96, 0x90, 0x20, 0x403, 0xfa78, 0x7ba2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0xa2, 0x24}}]}}]}}, 0x0) 10:26:03 executing program 1: syz_usb_connect(0x1, 0x2a6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x33, 0xcb}}]}}]}}, 0x0) [ 57.361716][ T3387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.363373][ T3320] cdc_wdm 3-1:118.0: cdc-wdm2: USB WDM device [ 57.371778][ T3387] Workqueue: usb_hub_wq hub_event [ 57.371790][ T3387] Call Trace: [ 57.386139][ T3387] dump_stack+0xca/0x13e [ 57.390388][ T3387] panic+0x2aa/0x6e1 [ 57.394283][ T3387] ? add_taint.cold+0x16/0x16 [ 57.398971][ T3387] ? retint_kernel+0x10/0x10 [ 57.403564][ T3387] ? trace_hardirqs_on+0x55/0x1e0 [ 57.408689][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 10:26:03 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b199110501dc660d71a0004000109021b0001000000000904000001c9b3ea0009058f024900000000"], 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x1400000000000000, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 57.414752][ T3387] end_report+0x43/0x49 [ 57.416361][ T3320] usb 3-1: USB disconnect, device number 9 [ 57.418903][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 57.418914][ T3387] __kasan_report.cold+0xd/0x33 [ 57.418932][ T3387] ? refcount_inc_not_zero_checked+0x72/0x1e0 [ 57.441654][ T3387] kasan_report+0xe/0x20 [ 57.445895][ T3387] check_memory_region+0x128/0x190 [ 57.451010][ T3387] refcount_inc_not_zero_checked+0x72/0x1e0 [ 57.456906][ T3387] ? refcount_dec_and_mutex_lock+0x80/0x80 [ 57.462709][ T3387] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.468249][ T3387] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 57.473532][ T3387] refcount_inc_checked+0x12/0x60 [ 57.478550][ T3387] kthread_stop+0x6c/0x610 [ 57.482965][ T3387] hwrng_unregister+0x190/0x210 [ 57.487817][ T3387] chaoskey_disconnect+0x1b2/0x200 [ 57.492929][ T3387] usb_unbind_interface+0x1bd/0x8a0 [ 57.498129][ T3387] ? usb_autoresume_device+0x60/0x60 [ 57.503416][ T3387] device_release_driver_internal+0x42f/0x500 [ 57.509494][ T3387] bus_remove_device+0x2dc/0x4a0 [ 57.514423][ T3387] device_del+0x420/0xb20 [ 57.518737][ T3387] ? __device_link_del+0x2f0/0x2f0 [ 57.523901][ T3387] ? usb_remove_ep_devs+0x3e/0x80 [ 57.528983][ T3387] ? remove_intf_ep_devs+0x13f/0x1d0 [ 57.534243][ T3387] usb_disable_device+0x211/0x690 [ 57.539253][ T3387] usb_disconnect+0x284/0x8d0 [ 57.543956][ T3387] hub_event+0x16f2/0x3800 [ 57.548351][ T3387] ? hub_port_debounce+0x260/0x260 [ 57.553445][ T3387] ? find_held_lock+0x2d/0x110 [ 57.558201][ T3387] ? mark_held_locks+0xe0/0xe0 [ 57.562949][ T3387] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.568483][ T3387] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 57.573743][ T3387] process_one_work+0x92b/0x1530 [ 57.578664][ T3387] ? pwq_dec_nr_in_flight+0x310/0x310 [ 57.584041][ T3387] ? do_raw_spin_lock+0x11a/0x280 [ 57.589041][ T3387] worker_thread+0x96/0xe20 [ 57.593520][ T3387] ? process_one_work+0x1530/0x1530 [ 57.598879][ T3387] kthread+0x318/0x420 [ 57.602948][ T3387] ? kthread_create_on_node+0xf0/0xf0 [ 57.608313][ T3387] ret_from_fork+0x24/0x30 [ 57.613482][ T3387] Kernel Offset: disabled [ 57.617790][ T3387] Rebooting in 86400 seconds..