Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. [ 12.430064][ C1] random: crng init done [ 12.434427][ C1] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2020/08/17 09:25:03 fuzzer started 2020/08/17 09:25:04 dialing manager at 10.128.0.105:33249 2020/08/17 09:25:04 syscalls: 90 2020/08/17 09:25:04 code coverage: enabled 2020/08/17 09:25:04 comparison tracing: enabled 2020/08/17 09:25:04 extra coverage: enabled 2020/08/17 09:25:04 setuid sandbox: enabled 2020/08/17 09:25:04 namespace sandbox: enabled 2020/08/17 09:25:04 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/17 09:25:04 fault injection: enabled 2020/08/17 09:25:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/17 09:25:04 net packet injection: /dev/net/tun does not exist 2020/08/17 09:25:04 net device setup: enabled 2020/08/17 09:25:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/17 09:25:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/17 09:25:04 USB emulation: enabled 2020/08/17 09:25:04 hci packet injection: /dev/vhci does not exist 09:25:16 executing program 0: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001f80)=""/104, 0x68) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x0, 0x0, 0x2, "9192"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'Aw'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 09:25:16 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) write$hidraw(r0, &(0x7f0000000440)="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", 0xfff) syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0x200) write$hidraw(r0, &(0x7f0000000400)='Q', 0x1) 09:25:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:25:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:25:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc52b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000840)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x9, {0x9, 0x0, "1bcf91ba2b0fd1"}}, 0x0}, 0x0) 09:25:16 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040702000109021b000100000000090400000157eb4b00090586a3"], 0x0) syzkaller login: [ 35.786479][ T354] cgroup: Unknown subsys name 'perf_event' [ 35.792974][ T354] cgroup: Unknown subsys name 'net_cls' [ 35.795452][ T355] cgroup: Unknown subsys name 'perf_event' [ 35.815281][ T356] cgroup: Unknown subsys name 'perf_event' [ 35.821398][ T356] cgroup: Unknown subsys name 'net_cls' [ 35.823218][ T355] cgroup: Unknown subsys name 'net_cls' [ 35.830831][ T358] cgroup: Unknown subsys name 'perf_event' [ 35.839516][ T357] cgroup: Unknown subsys name 'perf_event' [ 35.840379][ T358] cgroup: Unknown subsys name 'net_cls' [ 35.852672][ T357] cgroup: Unknown subsys name 'net_cls' [ 35.857451][ T361] cgroup: Unknown subsys name 'perf_event' [ 35.864362][ T361] cgroup: Unknown subsys name 'net_cls' 09:25:24 executing program 5: syz_usb_connect(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1e, 0xbb, 0xa2, 0x40, 0x13d8, 0x2, 0xf950, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xf0, 0xa6}}]}}]}}, 0x0) [ 43.302763][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 43.311286][ T72] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.442078][ T3003] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 43.501173][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 43.541151][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 43.551213][ T3042] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.591293][ T3066] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 43.661271][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 43.672327][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 43.682185][ T72] usb 6-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=f9.50 [ 43.691276][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.701408][ T72] usb 6-1: config 0 descriptor?? [ 43.748838][ T72] usb 6-1: selecting invalid altsetting 3 [ 43.755221][ T72] comedi comedi0: could not set alternate setting 3 in high speed [ 43.763112][ T72] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 43.773374][ T72] usbdux: probe of 6-1:0.0 failed with error -22 [ 43.811209][ T3003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.822225][ T3003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.832184][ T3003] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 43.841300][ T3003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.849341][ T21] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01 [ 43.858420][ T21] usb 5-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0 [ 43.866474][ T21] usb 5-1: Product: syz [ 43.870619][ T21] usb 5-1: Manufacturer: syz [ 43.875366][ T3042] usb 1-1: Using ep0 maxpacket: 16 [ 43.880564][ T3066] usb 2-1: Using ep0 maxpacket: 16 [ 43.889337][ T21] usb 5-1: config 0 descriptor?? [ 43.899111][ T3003] usb 3-1: config 0 descriptor?? [ 43.911251][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.922367][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.932162][ T12] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 43.941259][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.954929][ T12] usb 4-1: config 0 descriptor?? [ 43.957889][ T72] usb 6-1: USB disconnect, device number 2 [ 43.991146][ T3042] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 44.000838][ T3042] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 44.010649][ T3042] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 44.020447][ T3042] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 44.030384][ T3066] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 44.043298][ T3066] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 44.052492][ T3066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.062591][ T3066] usb 2-1: config 0 descriptor?? [ 44.103515][ T3066] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 44.143345][ T3042] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 44.152444][ T3042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 44.160529][ T3042] usb 1-1: SerialNumber: syz [ 44.165882][ T21] usb 5-1: USB disconnect, device number 2 [ 44.211971][ T3042] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 44.241145][ T3003] usbhid 3-1:0.0: can't add hid device: -71 [ 44.247143][ T3003] usbhid: probe of 3-1:0.0 failed with error -71 [ 44.255442][ T3003] usb 3-1: USB disconnect, device number 2 [ 44.303615][ T130] usb 2-1: USB disconnect, device number 2 [ 44.311100][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 44.317123][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 44.325936][ T12] usb 4-1: USB disconnect, device number 2 [ 44.454632][ T3042] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 44.466988][ T3042] usb 1-1: USB disconnect, device number 2 [ 44.760806][ T122] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.840791][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.890865][ T12] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.901055][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.941046][ T130] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.100830][ T3108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.140698][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 45.190870][ T122] usb 6-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=f9.50 [ 45.199985][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.208856][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 45.216463][ T122] usb 6-1: config 0 descriptor?? [ 45.261242][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 45.270862][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.272140][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 45.283007][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.283053][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 45.311520][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.323310][ T122] usb 6-1: selecting invalid altsetting 3 [ 45.329059][ T122] comedi comedi0: could not set alternate setting 3 in high speed [ 45.337107][ T122] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 45.346724][ T122] usbdux: probe of 6-1:0.0 failed with error -22 [ 45.353422][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.364360][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.374168][ T12] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 45.383244][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.391367][ T3108] usb 1-1: Using ep0 maxpacket: 16 [ 45.398828][ T5] usb 3-1: config 0 descriptor?? [ 45.407161][ T12] usb 4-1: config 0 descriptor?? [ 45.410823][ T21] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01 [ 45.421227][ T21] usb 5-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0 [ 45.429198][ T21] usb 5-1: Product: syz [ 45.433409][ T21] usb 5-1: Manufacturer: syz [ 45.441112][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.446608][ T21] usb 5-1: config 0 descriptor?? [ 45.452012][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.466713][ T130] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 45.475793][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.490339][ T130] usb 2-1: config 0 descriptor?? [ 45.505576][ T122] usb 6-1: USB disconnect, device number 3 09:25:26 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x59, 0xfe, 0x54, 0x40, 0x1604, 0x8007, 0xf378, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0xe6, 0xe7}}]}}]}}, 0x0) [ 45.561389][ T130] hub 2-1:0.0: USB hub found [ 45.590751][ T3108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 45.600458][ T3108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 45.610251][ T3108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 45.620039][ T3108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 09:25:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc018480d, &(0x7f0000000000)={0x1, 0x100}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 45.710672][ T3108] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 45.712833][ T21] usb 5-1: USB disconnect, device number 3 [ 45.719763][ T3108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 45.719779][ T3108] usb 1-1: SerialNumber: syz [ 45.791665][ T3108] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 45.799047][ T130] hub 2-1:0.0: 1 port detected [ 45.922650][ T12] logitech-djreceiver 0003:046D:C52B.0001: item fetching failed at offset 2/5 [ 45.935259][ T5] logitech 0003:046D:C50C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 45.947195][ T12] logitech-djreceiver 0003:046D:C52B.0001: logi_dj_probe: parse failed [ 45.957955][ T12] logitech-djreceiver: probe of 0003:046D:C52B.0001 failed with error -22 [ 45.967041][ T122] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 46.090447][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 46.123056][ T12] usb 4-1: USB disconnect, device number 3 [ 46.123415][ T3042] usb 3-1: USB disconnect, device number 3 [ 46.330389][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 46.380488][ T122] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=f3.78 [ 46.389585][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.399573][ T122] usb 6-1: config 0 descriptor?? [ 46.450511][ T21] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 46.464338][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.475300][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.485094][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 46.498045][ T21] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 46.507154][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.516777][ T21] usb 5-1: config 0 descriptor?? [ 46.663640][ T130] usb 6-1: USB disconnect, device number 4 [ 46.672184][ T12] hub 2-1:0.0: activate --> -90 [ 46.679006][ T3108] scsi host1: usb-storage 1-1:1.0 [ 46.900326][ T3042] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.910737][ T122] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.008965][ T21] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input7 [ 47.022979][ T21] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input8 [ 47.039145][ T21] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 47.081586][ T21] usb 1-1: USB disconnect, device number 3 [ 47.260271][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.271278][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.281079][ T3042] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 47.290233][ T3042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.302386][ T3042] usb 3-1: config 0 descriptor?? [ 47.303827][ T12] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 47.307998][ T72] usb 2-1: USB disconnect, device number 3 [ 47.315012][ T12] usb 2-1-port1: attempt power cycle [ 47.326076][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.337068][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.346874][ T122] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 47.355974][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.374194][ T122] usb 4-1: config 0 descriptor?? 09:25:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc52b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000840)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x9, {0x9, 0x0, "1bcf91ba2b0fd1"}}, 0x0}, 0x0) 09:25:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 47.437160][ T122] usb 4-1: can't set config #0, error -71 [ 47.464724][ T122] usb 4-1: USB disconnect, device number 4 [ 47.470322][ T3003] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 47.540338][ T3042] usbhid 3-1:0.0: can't add hid device: -71 [ 47.546398][ T3042] usbhid: probe of 3-1:0.0 failed with error -71 [ 47.555429][ T3042] usb 3-1: USB disconnect, device number 4 [ 47.830169][ T3003] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=f3.78 [ 47.839280][ T3003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.849368][ T3003] usb 6-1: config 0 descriptor?? [ 47.854570][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.910185][ T3042] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.920148][ T122] usb 4-1: new high-speed USB device number 5 using dummy_hcd 09:25:29 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x59, 0xfe, 0x54, 0x40, 0x1604, 0x8007, 0xf378, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0xe6, 0xe7}}]}}]}}, 0x0) [ 48.099976][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 48.106037][ T12] usb 6-1: USB disconnect, device number 5 [ 48.150349][ C1] kye 0003:0458:5013.0003: usb_submit_urb(ctrl) failed: -1 [ 48.190064][ T72] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.220100][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 48.229841][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 48.239624][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 48.249464][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 09:25:29 executing program 0: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001f80)=""/104, 0x68) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x0, 0x0, 0x2, "9192"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'Aw'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 48.290077][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.301125][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.310964][ T3042] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 48.320060][ T3042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.329755][ T3042] usb 3-1: config 0 descriptor?? [ 48.340238][ T21] usb 1-1: string descriptor 0 read error: -71 [ 48.346457][ T21] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 48.350064][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.355528][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 48.366389][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 09:25:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 48.384259][ T122] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 48.393374][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.400020][ T21] usb 1-1: can't set config #1, error -71 [ 48.414799][ T21] usb 1-1: USB disconnect, device number 4 [ 48.416133][ T122] usb 4-1: config 0 descriptor?? [ 48.569902][ T12] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 48.709941][ T3042] usbhid 3-1:0.0: can't add hid device: -71 [ 48.716198][ T3042] usbhid: probe of 3-1:0.0 failed with error -71 [ 48.726038][ T3042] usb 3-1: USB disconnect, device number 5 [ 48.780010][ T122] usbhid 4-1:0.0: can't add hid device: -71 [ 48.786024][ T122] usbhid: probe of 4-1:0.0 failed with error -71 [ 48.789930][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.794799][ T122] usb 4-1: USB disconnect, device number 5 [ 48.803480][ T72] usb 2-1: Using ep0 maxpacket: 16 [ 48.930325][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 48.943153][ T72] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.952235][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.964019][ T72] usb 2-1: config 0 descriptor?? [ 49.001956][ T72] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 49.012171][ T12] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=f3.78 [ 49.021315][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.031729][ T12] usb 6-1: config 0 descriptor?? [ 49.079800][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 49.099892][ T3003] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 49.200002][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 49.209769][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 49.213914][ T12] usb 2-1: USB disconnect, device number 8 [ 49.219416][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 49.219437][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 49.298680][ T122] usb 6-1: USB disconnect, device number 6 [ 49.300918][ T21] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 49.313688][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 49.321816][ T21] usb 1-1: SerialNumber: syz [ 49.329751][ T3108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 49.349732][ T3003] usb 5-1: Using ep0 maxpacket: 16 [ 49.383019][ T21] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 49.390391][ T72] usb 4-1: new high-speed USB device number 6 using dummy_hcd 09:25:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 49.612023][ T122] usb 5-1: USB disconnect, device number 4 [ 49.627610][ T21] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 49.652192][ T21] usb 1-1: USB disconnect, device number 5 [ 49.749760][ T3108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.749771][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.749791][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.760741][ T3108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.760780][ T3108] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 09:25:31 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x59, 0xfe, 0x54, 0x40, 0x1604, 0x8007, 0xf378, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0xe6, 0xe7}}]}}]}}, 0x0) [ 49.771695][ T72] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 49.781397][ T3108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.791142][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.800706][ T12] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.838251][ T72] usb 4-1: config 0 descriptor?? [ 49.876945][ T3108] usb 3-1: config 0 descriptor?? [ 50.139625][ T122] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.159654][ T130] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 50.167268][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 50.309876][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.320879][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.330688][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 50.331124][ T72] logitech-djreceiver 0003:046D:C52B.0004: item fetching failed at offset 2/5 [ 50.339739][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.356483][ T12] usb 2-1: config 0 descriptor?? [ 50.356877][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 50.369437][ T72] logitech-djreceiver 0003:046D:C52B.0004: logi_dj_probe: parse failed [ 50.377955][ T72] logitech-djreceiver: probe of 0003:046D:C52B.0004 failed with error -22 [ 50.392027][ T3108] logitech 0003:046D:C50C.0005: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 50.420366][ T12] hub 2-1:0.0: USB hub found [ 50.537276][ T72] usb 4-1: USB disconnect, device number 6 [ 50.549734][ T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.560659][ T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.570554][ T122] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 50.579637][ T122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.588471][ T130] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=f3.78 [ 50.597651][ T130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.599474][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 50.621648][ T130] usb 6-1: config 0 descriptor?? [ 50.627154][ T3003] usb 3-1: USB disconnect, device number 6 [ 50.627721][ T122] usb 5-1: config 0 descriptor?? [ 50.639684][ T12] hub 2-1:0.0: 1 port detected [ 50.739551][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 50.749265][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 50.759010][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 50.768811][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 50.849565][ T21] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 50.858697][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 50.866893][ T21] usb 1-1: SerialNumber: syz [ 50.875778][ T3003] usb 6-1: USB disconnect, device number 7 [ 50.910664][ T21] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 50.979512][ T122] usbhid 5-1:0.0: can't add hid device: -71 [ 50.985620][ T122] usbhid: probe of 5-1:0.0 failed with error -71 [ 50.994515][ T122] usb 5-1: USB disconnect, device number 5 09:25:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc52b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000840)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x9, {0x9, 0x0, "1bcf91ba2b0fd1"}}, 0x0}, 0x0) 09:25:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:25:32 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x59, 0xfe, 0x54, 0x40, 0x1604, 0x8007, 0xf378, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0xe6, 0xe7}}]}}]}}, 0x0) [ 51.349498][ T12] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.419383][ T3003] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.529385][ T130] hub 2-1:0.0: activate --> -90 [ 51.569458][ T72] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 51.679538][ T122] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 51.779397][ T3003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.789449][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.790390][ T3003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.801184][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.810947][ T3003] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 51.820782][ T12] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 51.829806][ T3003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.833244][ T21] scsi host1: usb-storage 1-1:1.0 [ 51.838834][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.842098][ T12] usb 4-1: config 0 descriptor?? [ 51.874595][ T3003] usb 3-1: config 0 descriptor?? [ 51.979422][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.990389][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.000238][ T72] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 52.009329][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.018943][ T72] usb 5-1: config 0 descriptor?? [ 52.069412][ T122] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=f3.78 [ 52.078571][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.088804][ T122] usb 6-1: config 0 descriptor?? [ 52.170722][ T122] usb 2-1: USB disconnect, device number 9 [ 52.189375][ T130] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 52.196429][ T130] usb 2-1-port1: attempt power cycle [ 52.219404][ T3003] usbhid 3-1:0.0: can't add hid device: -71 [ 52.225794][ T3003] usbhid: probe of 3-1:0.0 failed with error -71 [ 52.235701][ T3003] usb 3-1: USB disconnect, device number 7 [ 52.242542][ T3108] usb 1-1: USB disconnect, device number 6 [ 52.249401][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 52.255882][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 52.266503][ T12] usb 4-1: USB disconnect, device number 7 [ 52.361682][ T5] usb 6-1: USB disconnect, device number 8 [ 52.501462][ T72] logitech 0003:046D:C50C.0006: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 09:25:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:25:34 executing program 0: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001f80)=""/104, 0x68) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x0, 0x0, 0x2, "9192"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'Aw'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 52.714780][ T5] usb 5-1: USB disconnect, device number 6 [ 52.809236][ T72] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.809328][ T3108] usb 3-1: new high-speed USB device number 8 using dummy_hcd 09:25:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff5, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x2, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000001340)=ANY=[@ANYRES64=r2], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000001380)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) [ 53.039273][ T130] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.079119][ T122] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.169150][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.180141][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.190007][ T72] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 53.199089][ T12] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 53.206556][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:25:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 53.217876][ T72] usb 4-1: config 0 descriptor?? [ 53.219133][ T3108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.233870][ T3108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.243674][ T3108] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 53.252951][ T3108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.263615][ T3108] usb 3-1: config 0 descriptor?? [ 53.309316][ T130] usb 1-1: Using ep0 maxpacket: 16 [ 53.349102][ T122] usb 2-1: Using ep0 maxpacket: 16 [ 53.469134][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 53.478903][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 53.488648][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 53.498452][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 53.539301][ T122] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.552158][ T122] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 53.561305][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.569676][ T5] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.580951][ T122] usb 2-1: config 0 descriptor?? [ 53.629182][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.640225][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.650030][ T12] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.659198][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.667381][ T130] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 53.676503][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 53.684623][ T130] usb 1-1: SerialNumber: syz [ 53.691546][ T122] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 53.702574][ T72] logitech-djreceiver 0003:046D:C52B.0007: item fetching failed at offset 2/5 [ 53.703088][ T12] usb 6-1: config 0 descriptor?? [ 53.730613][ T72] logitech-djreceiver 0003:046D:C52B.0007: logi_dj_probe: parse failed [ 53.739753][ T72] logitech-djreceiver: probe of 0003:046D:C52B.0007 failed with error -22 [ 53.750091][ T130] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 53.762070][ T3108] logitech 0003:046D:C50C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 53.843308][ T72] usb 2-1: USB disconnect, device number 14 [ 53.911999][ T3108] usb 4-1: USB disconnect, device number 8 [ 53.968489][ T122] usb 3-1: USB disconnect, device number 8 [ 54.002245][ T130] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 54.011888][ T130] usb 1-1: USB disconnect, device number 7 [ 54.029181][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.040192][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.050008][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 54.059101][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.068296][ T5] usb 5-1: config 0 descriptor?? [ 54.175016][ T3308] udc-core: couldn't find an available UDC or it's busy [ 54.182143][ T3308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.391404][ T3308] udc-core: couldn't find an available UDC or it's busy [ 54.398880][ T72] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 54.400951][ T3308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:25:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc52b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000840)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x9, {0x9, 0x0, "1bcf91ba2b0fd1"}}, 0x0}, 0x0) [ 54.439000][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 54.445052][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 54.452667][ T12] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 54.466480][ T12] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0009/input/input9 09:25:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 54.491803][ T5] usb 5-1: USB disconnect, device number 7 [ 54.509616][ T12] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 54.638857][ T72] usb 2-1: Using ep0 maxpacket: 32 [ 54.664166][ T21] usb 6-1: USB disconnect, device number 9 [ 54.698921][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.748816][ T3003] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 54.759398][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.770407][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.780242][ T72] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 54.789408][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.800776][ T72] usb 2-1: config 0 descriptor?? [ 54.828802][ T122] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.840291][ T72] hub 2-1:0.0: USB hub found [ 54.968839][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 55.008839][ T5] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.059459][ T72] hub 2-1:0.0: 1 port detected [ 55.108887][ T3003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.119814][ T3003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.129735][ T3003] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 55.138865][ T3003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.138993][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 55.150982][ T3003] usb 4-1: config 0 descriptor?? [ 55.156632][ T12] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 55.171256][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 55.181037][ T12] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 55.278861][ T12] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 55.287967][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 55.296209][ T12] usb 1-1: SerialNumber: syz [ 55.300908][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.311806][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.321664][ T122] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 55.330840][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.342199][ T122] usb 3-1: config 0 descriptor?? [ 55.399985][ T12] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 55.458853][ T21] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 55.500473][ T3003] usbhid 4-1:0.0: can't add hid device: -71 [ 55.506522][ T3003] usbhid: probe of 4-1:0.0 failed with error -71 [ 55.515030][ T3003] usb 4-1: USB disconnect, device number 9 [ 55.528810][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.539880][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.549674][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 55.558761][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.570582][ T5] usb 5-1: config 0 descriptor?? [ 55.718785][ T122] usbhid 3-1:0.0: can't add hid device: -71 [ 55.724888][ T122] usbhid: probe of 3-1:0.0 failed with error -71 [ 55.733076][ T122] usb 3-1: USB disconnect, device number 9 [ 55.828725][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.839801][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.849619][ T21] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 55.858719][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.870088][ T21] usb 6-1: config 0 descriptor?? [ 55.948728][ T72] hub 2-1:0.0: activate --> -90 09:25:37 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800040042ee420000000109021b00017600230009040000010209bd00070581070001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)="74f9b8b152cc7fcc0154712f67e49dc3be46d707a836b6bf4bf74bbd6aa67d75d571163ded26b5f9dcd20e", 0x2b) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 56.070889][ T5] logitech 0003:046D:C50C.000A: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 56.078634][ T3003] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 56.093107][ T21] usbhid 6-1:0.0: can't add hid device: -71 [ 56.100650][ T21] usbhid: probe of 6-1:0.0 failed with error -71 [ 56.108368][ T21] usb 6-1: USB disconnect, device number 10 [ 56.278614][ T3042] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.283309][ T5] usb 5-1: USB disconnect, device number 8 [ 56.293676][ T12] scsi host1: usb-storage 1-1:1.0 [ 56.458633][ T21] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 56.466401][ T3003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.477357][ T3003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.487192][ T3003] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.40 [ 56.496346][ T3003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.505984][ T3003] usb 4-1: config 0 descriptor?? [ 56.589488][ T5] usb 2-1: USB disconnect, device number 15 [ 56.600008][ T72] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 56.607054][ T72] usb 2-1-port1: attempt power cycle [ 56.668667][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.679768][ T3042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.689774][ T3042] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 56.698877][ T3042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.705560][ T12] usb 1-1: USB disconnect, device number 8 [ 56.708236][ T3042] usb 3-1: config 0 descriptor?? [ 56.748605][ T21] usb 6-1: Using ep0 maxpacket: 8 09:25:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc50c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x608, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "2649f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 56.868628][ T21] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 56.879322][ T21] usb 6-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.890524][ T21] usb 6-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ee [ 56.899734][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.956183][ T21] hub 6-1:118.0: bad descriptor, ignoring hub [ 56.962644][ T21] hub: probe of 6-1:118.0 failed with error -5 [ 56.975232][ T21] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 56.990236][ T3003] logitech-djreceiver 0003:046D:C52B.000B: item fetching failed at offset 2/5 [ 57.002573][ T3003] logitech-djreceiver 0003:046D:C52B.000B: logi_dj_probe: parse failed [ 57.011557][ T3003] logitech-djreceiver: probe of 0003:046D:C52B.000B failed with error -22 09:25:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 57.128501][ T122] usb 5-1: new high-speed USB device number 9 using dummy_hcd 09:25:38 executing program 0: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001f80)=""/104, 0x68) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x0, 0x0, 0x2, "9192"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'Aw'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 57.180658][ T3042] logitech 0003:046D:C50C.000C: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 57.206737][ T3042] usb 4-1: USB disconnect, device number 10 [ 57.390413][ T3003] usb 3-1: USB disconnect, device number 10 [ 57.518568][ T5] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.526233][ T12] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.578718][ T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.589653][ T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.599457][ T122] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 57.608592][ T122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.620387][ T122] usb 5-1: config 0 descriptor?? 09:25:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 57.838439][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 57.843811][ T5] usb 2-1: Using ep0 maxpacket: 16 09:25:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000083a09018000000000000109022400010000000009040080090300000009211300000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000007040eccf5a201100720001720a00bd777ed4bc3f76e2b8707ec6bef33c3"], 0x0}, 0x0) [ 57.988542][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 58.001416][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 58.010507][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.018641][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 58.028390][ T12] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 58.038024][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 58.047828][ T12] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 58.057665][ T122] usbhid 5-1:0.0: can't add hid device: -71 [ 58.063755][ T3108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 58.071443][ T122] usbhid: probe of 5-1:0.0 failed with error -71 [ 58.079265][ T122] usb 5-1: USB disconnect, device number 9 [ 58.088472][ T5] usb 2-1: config 0 descriptor?? [ 58.099285][ T3003] usb 6-1: USB disconnect, device number 11 [ 58.118766][ T3429] cdc_wdm 6-1:118.0: Tx URB error: -19 [ 58.131489][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 58.188483][ T12] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 58.197582][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 58.205753][ T12] usb 1-1: SerialNumber: syz [ 58.228594][ T130] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.259470][ T12] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 58.344011][ T122] usb 2-1: USB disconnect, device number 20 [ 58.498541][ T3108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.509471][ T3108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.519249][ T3108] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 58.528342][ T3108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.536436][ T130] usb 3-1: Using ep0 maxpacket: 8 [ 58.542912][ T12] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 58.552734][ T12] usb 1-1: USB disconnect, device number 9 [ 58.562954][ T3108] usb 4-1: config 0 descriptor?? [ 58.588346][ T3003] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 58.668739][ T130] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.679932][ T130] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.689933][ T130] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.702950][ T130] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.709628][ T130] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 58.718718][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.727992][ T130] usb 3-1: config 0 descriptor?? [ 58.928413][ T3108] usbhid 4-1:0.0: can't add hid device: -71 [ 58.934512][ T3108] usbhid: probe of 4-1:0.0 failed with error -71 [ 58.942676][ T3108] usb 4-1: USB disconnect, device number 11 [ 58.948467][ T3003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.959499][ T3003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.969320][ T3003] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 58.978424][ T3003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.987969][ T3003] usb 5-1: config 0 descriptor?? [ 58.989858][ T122] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 59.078295][ T12] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 59.138274][ T3042] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 59.268397][ T122] usb 2-1: Using ep0 maxpacket: 32 09:25:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800040042ee420000000109021b00017600230009040000010209bd00070581070001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)="74f9b8b152cc7fcc0154712f67e49dc3be46d707a836b6bf4bf74bbd6aa67d75d571163ded26b5f9dcd20e", 0x2b) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 59.358348][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 59.378312][ T3042] usb 1-1: Using ep0 maxpacket: 16 [ 59.408737][ T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.419693][ T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.421404][ T21] usb 3-1: USB disconnect, device number 11 [ 59.429509][ T122] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 59.429532][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.445529][ T21] ================================================================== [ 59.460856][ T21] BUG: KASAN: double-free or invalid-free in kfree+0xbe/0x470 [ 59.462497][ T122] usb 2-1: config 0 descriptor?? [ 59.468311][ T21] [ 59.468329][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.9.0-rc1-syzkaller #0 [ 59.468338][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.468357][ T21] Workqueue: usb_hub_wq hub_event [ 59.498878][ T21] Call Trace: [ 59.502165][ T21] dump_stack+0xf6/0x16e [ 59.506402][ T21] print_address_description.constprop.0+0x1c/0x210 [ 59.512992][ T21] ? vprintk_func+0x93/0x133 [ 59.517601][ T21] ? kfree+0xbe/0x470 [ 59.521595][ T21] kasan_report_invalid_free+0x51/0x80 [ 59.527044][ T21] ? kfree+0xbe/0x470 [ 59.531015][ T21] __kasan_slab_free+0x122/0x130 [ 59.535943][ T21] slab_free_freelist_hook+0x53/0x140 [ 59.541304][ T21] ? platform_device_release+0x64/0xf0 [ 59.546907][ T21] ? platform_device_release+0x64/0xf0 [ 59.552364][ T21] kfree+0xbe/0x470 [ 59.556271][ T21] platform_device_release+0x64/0xf0 [ 59.561542][ T21] ? platform_device_put+0x40/0x40 [ 59.566709][ T21] device_release+0x71/0x200 [ 59.571395][ T21] kobject_put+0x1c8/0x540 [ 59.575830][ T21] ? __device_link_free_srcu+0x120/0x120 [ 59.581478][ T21] klist_children_put+0x41/0x50 [ 59.586343][ T21] klist_prev+0x2a2/0x510 [ 59.590755][ T21] ? mfd_cell_disable+0xc0/0xc0 [ 59.595597][ T21] device_for_each_child_reverse+0xc0/0x180 [ 59.601567][ T21] ? device_find_child_by_name+0x1e0/0x1e0 [ 59.607363][ T21] ? mark_lock+0xbc/0x1590 [ 59.611784][ T21] mfd_remove_devices+0x75/0xa0 [ 59.616630][ T21] ? mfd_remove_devices_late+0xa0/0xa0 [ 59.622079][ T21] ? trace_hardirqs_on+0x5f/0x200 [ 59.627098][ T21] sensor_hub_remove+0x1d6/0x270 [ 59.632031][ T21] hid_device_remove+0xed/0x240 [ 59.636870][ T21] ? sensor_hub_raw_event+0xe00/0xe00 [ 59.642340][ T21] ? hid_register_report+0x3b0/0x3b0 [ 59.647614][ T21] __device_release_driver+0x3c6/0x6f0 [ 59.653061][ T21] device_release_driver+0x26/0x40 [ 59.658173][ T21] bus_remove_device+0x2eb/0x5a0 [ 59.663334][ T21] device_del+0x481/0xd90 [ 59.667653][ T21] ? device_link_add_missing_supplier_links+0x370/0x370 [ 59.674579][ T21] ? mark_held_locks+0x9f/0xe0 [ 59.679464][ T21] ? _raw_spin_unlock_irq+0x1f/0x30 [ 59.684806][ T21] hid_destroy_device+0xe1/0x150 [ 59.689866][ T21] usbhid_disconnect+0x9f/0xe0 [ 59.694733][ T21] usb_unbind_interface+0x1d8/0x8d0 [ 59.699927][ T21] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 59.705730][ T21] ? usb_unbind_device+0x1a0/0x1a0 [ 59.710927][ T21] __device_release_driver+0x3c6/0x6f0 [ 59.716509][ T21] device_release_driver+0x26/0x40 [ 59.721893][ T21] bus_remove_device+0x2eb/0x5a0 [ 59.726836][ T21] device_del+0x481/0xd90 [ 59.731279][ T21] ? device_link_add_missing_supplier_links+0x370/0x370 [ 59.738210][ T21] ? kobject_put+0x1f3/0x540 [ 59.742807][ T21] usb_disable_device+0x387/0x930 [ 59.747824][ T21] usb_disconnect.cold+0x27d/0x780 [ 59.752927][ T21] hub_event+0x1c93/0x4390 [ 59.757594][ T21] ? hub_port_debounce+0x3b0/0x3b0 [ 59.762915][ T21] ? init_pwq+0x210/0x350 [ 59.767338][ T21] ? lock_release+0x7f0/0x7f0 [ 59.772012][ T21] ? lock_downgrade+0x740/0x740 [ 59.776856][ T21] ? do_raw_spin_lock+0x120/0x260 [ 59.781885][ T21] ? _raw_spin_unlock_irq+0x1f/0x30 [ 59.787200][ T21] ? lockdep_hardirqs_on_prepare+0x322/0x4f0 [ 59.793171][ T21] process_one_work+0x94c/0x15f0 [ 59.798105][ T21] ? lock_release+0x7f0/0x7f0 [ 59.802779][ T21] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 59.808150][ T21] ? rwlock_bug.part.0+0x90/0x90 [ 59.813088][ T21] worker_thread+0x64c/0x1120 [ 59.817895][ T21] ? __kthread_parkme+0x118/0x1d0 [ 59.822910][ T21] ? process_one_work+0x15f0/0x15f0 [ 59.828104][ T21] kthread+0x392/0x470 [ 59.832183][ T21] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 59.838067][ T21] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 59.843951][ T21] ret_from_fork+0x1f/0x30 [ 59.848383][ T21] [ 59.850715][ T21] Allocated by task 130: [ 59.854952][ T21] kasan_save_stack+0x1b/0x40 [ 59.859882][ T21] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 59.865625][ T21] __kmalloc_track_caller+0xf6/0x270 [ 59.870999][ T21] kmemdup+0x23/0x50 [ 59.874884][ T21] mfd_add_device+0x112/0x1190 [ 59.879721][ T21] mfd_add_devices+0xdb/0x170 [ 59.884391][ T21] sensor_hub_probe+0xa93/0xdc0 [ 59.889237][ T21] hid_device_probe+0x2bd/0x3f0 [ 59.894079][ T21] really_probe+0x291/0xde0 [ 59.898866][ T21] driver_probe_device+0x26b/0x3d0 [ 59.904063][ T21] __device_attach_driver+0x1d1/0x290 [ 59.909513][ T21] bus_for_each_drv+0x15f/0x1e0 [ 59.914351][ T21] __device_attach+0x228/0x4a0 [ 59.919112][ T21] bus_probe_device+0x1e4/0x290 [ 59.924183][ T21] device_add+0xb51/0x1c70 [ 59.928652][ T21] hid_add_device+0x344/0x9b0 [ 59.933468][ T21] usbhid_probe+0xaae/0xfc0 [ 59.937967][ T21] usb_probe_interface+0x315/0x7f0 [ 59.943174][ T21] really_probe+0x291/0xde0 [ 59.947665][ T21] driver_probe_device+0x26b/0x3d0 [ 59.952772][ T21] __device_attach_driver+0x1d1/0x290 [ 59.958149][ T21] bus_for_each_drv+0x15f/0x1e0 [ 59.963101][ T21] __device_attach+0x228/0x4a0 [ 59.967854][ T21] bus_probe_device+0x1e4/0x290 [ 59.972809][ T21] device_add+0xb51/0x1c70 [ 59.977218][ T21] usb_set_configuration+0xf05/0x18a0 [ 59.982620][ T21] usb_generic_driver_probe+0xba/0xf2 [ 59.987981][ T21] usb_probe_device+0xd9/0x250 [ 59.992740][ T21] really_probe+0x291/0xde0 [ 59.997228][ T21] driver_probe_device+0x26b/0x3d0 [ 60.002445][ T21] __device_attach_driver+0x1d1/0x290 [ 60.007808][ T21] bus_for_each_drv+0x15f/0x1e0 [ 60.012647][ T21] __device_attach+0x228/0x4a0 [ 60.017688][ T21] bus_probe_device+0x1e4/0x290 [ 60.022619][ T21] device_add+0xb51/0x1c70 [ 60.027030][ T21] usb_new_device.cold+0x71d/0xfd4 [ 60.032130][ T21] hub_event+0x2361/0x4390 [ 60.036616][ T21] process_one_work+0x94c/0x15f0 [ 60.041680][ T21] worker_thread+0x64c/0x1120 [ 60.046353][ T21] kthread+0x392/0x470 [ 60.050429][ T21] ret_from_fork+0x1f/0x30 [ 60.054837][ T21] [ 60.057236][ T21] Freed by task 21: [ 60.061041][ T21] kasan_save_stack+0x1b/0x40 [ 60.065710][ T21] kasan_set_track+0x1c/0x30 [ 60.070288][ T21] kasan_set_free_info+0x1b/0x30 [ 60.075215][ T21] __kasan_slab_free+0xf3/0x130 [ 60.080053][ T21] slab_free_freelist_hook+0x53/0x140 [ 60.085409][ T21] kfree+0xbe/0x470 [ 60.089208][ T21] mfd_remove_devices_fn+0xf9/0x140 [ 60.094395][ T21] device_for_each_child_reverse+0x110/0x180 [ 60.100366][ T21] mfd_remove_devices+0x75/0xa0 [ 60.105229][ T21] sensor_hub_remove+0x1d6/0x270 [ 60.110262][ T21] hid_device_remove+0xed/0x240 [ 60.115103][ T21] __device_release_driver+0x3c6/0x6f0 [ 60.120557][ T21] device_release_driver+0x26/0x40 [ 60.125660][ T21] bus_remove_device+0x2eb/0x5a0 [ 60.130588][ T21] device_del+0x481/0xd90 [ 60.134911][ T21] hid_destroy_device+0xe1/0x150 [ 60.139838][ T21] usbhid_disconnect+0x9f/0xe0 [ 60.144598][ T21] usb_unbind_interface+0x1d8/0x8d0 [ 60.149890][ T21] __device_release_driver+0x3c6/0x6f0 [ 60.155341][ T21] device_release_driver+0x26/0x40 [ 60.160446][ T21] bus_remove_device+0x2eb/0x5a0 [ 60.165374][ T21] device_del+0x481/0xd90 [ 60.169696][ T21] usb_disable_device+0x387/0x930 [ 60.174716][ T21] usb_disconnect.cold+0x27d/0x780 [ 60.179819][ T21] hub_event+0x1c93/0x4390 [ 60.184255][ T21] process_one_work+0x94c/0x15f0 [ 60.189183][ T21] worker_thread+0x64c/0x1120 [ 60.193965][ T21] kthread+0x392/0x470 [ 60.198029][ T21] ret_from_fork+0x1f/0x30 [ 60.202568][ T21] [ 60.205019][ T21] The buggy address belongs to the object at ffff8881c5185e00 [ 60.205019][ T21] which belongs to the cache kmalloc-192 of size 192 [ 60.219317][ T21] The buggy address is located 0 bytes inside of [ 60.219317][ T21] 192-byte region [ffff8881c5185e00, ffff8881c5185ec0) [ 60.232408][ T21] The buggy address belongs to the page: [ 60.238189][ T21] page:000000002339280c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c5185 [ 60.248516][ T21] flags: 0x200000000000200(slab) [ 60.253477][ T21] raw: 0200000000000200 dead000000000100 dead000000000122 ffff8881da041500 [ 60.262081][ T21] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 60.270673][ T21] page dumped because: kasan: bad access detected [ 60.277077][ T21] [ 60.279399][ T21] Memory state around the buggy address: [ 60.285030][ T21] ffff8881c5185d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.293134][ T21] ffff8881c5185d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 60.301195][ T21] >ffff8881c5185e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.309335][ T21] ^ [ 60.313399][ T21] ffff8881c5185e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 60.321458][ T21] ffff8881c5185f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.329514][ T21] ================================================================== [ 60.337567][ T21] Disabling lock debugging due to kernel taint [ 60.344081][ T21] Kernel panic - not syncing: panic_on_warn set ... [ 60.348569][ T12] usb 6-1: device descriptor read/all, error -71 [ 60.350874][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Tainted: G B 5.9.0-rc1-syzkaller #0 [ 60.360414][ T3108] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 60.369990][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.370007][ T21] Workqueue: usb_hub_wq hub_event [ 60.370013][ T21] Call Trace: [ 60.370034][ T21] dump_stack+0xf6/0x16e [ 60.400621][ T21] panic+0x2aa/0x6e1 [ 60.404710][ T21] ? __warn_printk+0xf3/0xf3 09:25:41 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800040042ee420000000109021b00017600230009040000010209bd00070581070001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)="74f9b8b152cc7fcc0154712f67e49dc3be46d707a836b6bf4bf74bbd6aa67d75d571163ded26b5f9dcd20e", 0x2b) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 60.409321][ T21] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 60.415669][ T21] ? kfree+0xbe/0x470 [ 60.419666][ T21] ? trace_hardirqs_on+0x55/0x200 [ 60.424848][ T21] ? kfree+0xbe/0x470 [ 60.428840][ T21] end_report+0x4d/0x53 [ 60.433013][ T21] kasan_report_invalid_free+0x6d/0x80 [ 60.438486][ T21] ? kfree+0xbe/0x470 [ 60.442652][ T21] __kasan_slab_free+0x122/0x130 [ 60.447603][ T21] slab_free_freelist_hook+0x53/0x140 [ 60.452990][ T21] ? platform_device_release+0x64/0xf0 [ 60.458463][ T21] ? platform_device_release+0x64/0xf0 [ 60.464070][ T21] kfree+0xbe/0x470 [ 60.467905][ T21] platform_device_release+0x64/0xf0 [ 60.473206][ T21] ? platform_device_put+0x40/0x40 [ 60.478338][ T21] device_release+0x71/0x200 [ 60.483115][ T21] kobject_put+0x1c8/0x540 [ 60.487546][ T21] ? __device_link_free_srcu+0x120/0x120 [ 60.493191][ T21] klist_children_put+0x41/0x50 [ 60.498056][ T21] klist_prev+0x2a2/0x510 [ 60.502412][ T21] ? mfd_cell_disable+0xc0/0xc0 [ 60.507369][ T21] device_for_each_child_reverse+0xc0/0x180 09:25:41 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800040042ee420000000109021b00017600230009040000010209bd00070581070001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)="74f9b8b152cc7fcc0154712f67e49dc3be46d707a836b6bf4bf74bbd6aa67d75d571163ded26b5f9dcd20e", 0x2b) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 60.513278][ T21] ? device_find_child_by_name+0x1e0/0x1e0 [ 60.519097][ T21] ? mark_lock+0xbc/0x1590 [ 60.523729][ T21] mfd_remove_devices+0x75/0xa0 [ 60.528595][ T21] ? mfd_remove_devices_late+0xa0/0xa0 [ 60.534071][ T21] ? trace_hardirqs_on+0x5f/0x200 [ 60.539375][ T21] sensor_hub_remove+0x1d6/0x270 [ 60.544507][ T21] hid_device_remove+0xed/0x240 [ 60.549375][ T21] ? sensor_hub_raw_event+0xe00/0xe00 [ 60.555066][ T21] ? hid_register_report+0x3b0/0x3b0 [ 60.560542][ T21] __device_release_driver+0x3c6/0x6f0 [ 60.566169][ T21] device_release_driver+0x26/0x40 [ 60.571308][ T21] bus_remove_device+0x2eb/0x5a0 [ 60.576261][ T21] device_del+0x481/0xd90 [ 60.580608][ T21] ? device_link_add_missing_supplier_links+0x370/0x370 [ 60.587693][ T21] ? mark_held_locks+0x9f/0xe0 [ 60.592477][ T21] ? _raw_spin_unlock_irq+0x1f/0x30 [ 60.597690][ T21] hid_destroy_device+0xe1/0x150 [ 60.602649][ T21] usbhid_disconnect+0x9f/0xe0 [ 60.607429][ T21] usb_unbind_interface+0x1d8/0x8d0 09:25:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2d5a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4]}}, 0x0}, 0x0) [ 60.612656][ T21] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 60.618231][ T21] ? usb_unbind_device+0x1a0/0x1a0 [ 60.623525][ T21] __device_release_driver+0x3c6/0x6f0 [ 60.629093][ T21] device_release_driver+0x26/0x40 [ 60.634242][ T21] bus_remove_device+0x2eb/0x5a0 [ 60.639216][ T21] device_del+0x481/0xd90 [ 60.643793][ T21] ? device_link_add_missing_supplier_links+0x370/0x370 [ 60.650748][ T21] ? kobject_put+0x1f3/0x540 [ 60.655365][ T21] usb_disable_device+0x387/0x930 [ 60.660494][ T21] usb_disconnect.cold+0x27d/0x780 [ 60.665777][ T21] hub_event+0x1c93/0x4390 [ 60.670195][ T21] ? hub_port_debounce+0x3b0/0x3b0 [ 60.675319][ T21] ? init_pwq+0x210/0x350 [ 60.679642][ T21] ? lock_release+0x7f0/0x7f0 [ 60.684550][ T21] ? lock_downgrade+0x740/0x740 [ 60.689491][ T21] ? do_raw_spin_lock+0x120/0x260 [ 60.694693][ T21] ? _raw_spin_unlock_irq+0x1f/0x30 [ 60.699984][ T21] ? lockdep_hardirqs_on_prepare+0x322/0x4f0 [ 60.706093][ T21] process_one_work+0x94c/0x15f0 [ 60.711040][ T21] ? lock_release+0x7f0/0x7f0 [ 60.715720][ T21] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 60.721413][ T21] ? rwlock_bug.part.0+0x90/0x90 [ 60.726377][ T21] worker_thread+0x64c/0x1120 [ 60.731148][ T21] ? __kthread_parkme+0x118/0x1d0 [ 60.736169][ T21] ? process_one_work+0x15f0/0x15f0 [ 60.741631][ T21] kthread+0x392/0x470 [ 60.745807][ T21] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 60.751802][ T21] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 60.758486][ T21] ret_from_fork+0x1f/0x30 [ 60.763992][ T21] Kernel Offset: disabled [ 60.768327][ T21] Rebooting in 86400 seconds..