[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.982442][ T1698] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 15.086752][ C1] random: crng init done Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. 2019/07/23 06:55:14 fuzzer started 2019/07/23 06:55:17 dialing manager at 10.128.0.105:38837 2019/07/23 06:55:17 syscalls: 75 2019/07/23 06:55:17 code coverage: enabled 2019/07/23 06:55:17 comparison tracing: enabled 2019/07/23 06:55:17 extra coverage: enabled 2019/07/23 06:55:17 setuid sandbox: enabled 2019/07/23 06:55:17 namespace sandbox: enabled 2019/07/23 06:55:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/23 06:55:17 fault injection: enabled 2019/07/23 06:55:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/23 06:55:17 net packet injection: /dev/net/tun can't be opened (open /dev/net/tun: no such device) 2019/07/23 06:55:17 net device setup: enabled 06:55:20 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) 06:55:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 06:55:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0xf1, 0xff, 0x200008, 0xc502, 0xc152, 0xcc43, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 06:55:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/../raw#\x00', 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(r1, &(0x7f0000001140), 0x0) syz_usb_disconnect(r0) 06:55:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) syzkaller login: [ 45.281865][ T1775] cgroup1: Unknown subsys name 'perf_event' [ 45.309164][ T1775] cgroup1: Unknown subsys name 'net_cls' [ 45.360408][ T1777] cgroup1: Unknown subsys name 'perf_event' [ 45.366441][ T1778] cgroup1: Unknown subsys name 'perf_event' [ 45.366735][ T1777] cgroup1: Unknown subsys name 'net_cls' [ 45.389169][ T1778] cgroup1: Unknown subsys name 'net_cls' [ 45.416638][ T1783] cgroup1: Unknown subsys name 'perf_event' [ 45.420311][ T1782] cgroup1: Unknown subsys name 'perf_event' [ 45.423283][ T1783] cgroup1: Unknown subsys name 'net_cls' [ 45.448751][ T1788] cgroup1: Unknown subsys name 'perf_event' [ 45.454719][ T1782] cgroup1: Unknown subsys name 'net_cls' [ 45.455782][ T1788] cgroup1: Unknown subsys name 'net_cls' [ 48.818328][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd 06:55:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) 06:55:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) [ 48.968473][ T2727] usb 3-1: new high-speed USB device number 2 using dummy_hcd 06:55:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) [ 49.008744][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd 06:55:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 06:55:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) 06:55:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) [ 49.208411][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.219933][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.229184][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.237345][ T2727] usb 3-1: Using ep0 maxpacket: 8 [ 49.244048][ T21] usb 4-1: config 0 descriptor?? [ 49.288402][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 49.378459][ T2727] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 49.386607][ T2727] usb 3-1: config 0 has no interface number 0 [ 49.392847][ T2727] usb 3-1: New USB device found, idVendor=c502, idProduct=c152, bcdDevice=cc.43 [ 49.401981][ T2727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.411141][ T2727] usb 3-1: config 0 descriptor?? [ 49.418563][ T17] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 49.426824][ T17] usb 1-1: config 0 has no interface number 0 [ 49.433049][ T17] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 49.442118][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.455767][ T17] usb 1-1: config 0 descriptor?? [ 49.502650][ T17] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 49.654425][ T2727] usb 3-1: USB disconnect, device number 2 [ 49.696785][ T12] usb 4-1: USB disconnect, device number 2 [ 49.708436][ T17] gspca_vc032x: reg_r err -71 [ 49.713332][ T17] vc032x: probe of 1-1:0.179 failed with error -71 [ 49.721783][ T17] usb 1-1: USB disconnect, device number 2 [ 50.428247][ T17] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.458392][ T2727] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.468508][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.668306][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 50.708832][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 50.788363][ T17] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 50.796727][ T17] usb 3-1: config 0 has no interface number 0 [ 50.803180][ T17] usb 3-1: New USB device found, idVendor=c502, idProduct=c152, bcdDevice=cc.43 [ 50.812377][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.821087][ T2727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.832053][ T2727] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.841235][ T2727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.849345][ T21] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 50.857521][ T21] usb 1-1: config 0 has no interface number 0 [ 50.864218][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 50.885629][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.894331][ T17] usb 3-1: config 0 descriptor?? [ 50.900316][ T2727] usb 4-1: config 0 descriptor?? [ 50.906438][ T21] usb 1-1: config 0 descriptor?? [ 50.951094][ T21] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 51.139672][ T2727] usb 4-1: USB disconnect, device number 3 [ 51.147748][ T12] usb 3-1: USB disconnect, device number 3 [ 51.158313][ T21] gspca_vc032x: reg_r err -71 [ 51.163585][ T21] vc032x: probe of 1-1:0.179 failed with error -71 [ 51.172471][ T21] usb 1-1: USB disconnect, device number 3 06:55:26 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) 06:55:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) 06:55:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x7276, 0x41) write$hidraw(r0, &(0x7f0000000100)='m', 0x1) 06:55:26 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0xf1, 0xff, 0x200008, 0xc502, 0xc152, 0xcc43, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 06:55:26 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) 06:55:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x7276, 0x41) write$hidraw(r0, &(0x7f0000000100)='m', 0x1) 06:55:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x7276, 0x41) write$hidraw(r0, &(0x7f0000000100)='m', 0x1) 06:55:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x7276, 0x41) write$hidraw(r0, &(0x7f0000000100)='m', 0x1) 06:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) 06:55:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000003480)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0xfffffffffffffffe) [ 51.968303][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.988260][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.995960][ T2727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.003963][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 52.068225][ T107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.248233][ T2727] usb 3-1: Using ep0 maxpacket: 8 [ 52.253494][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 52.338410][ T12] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 52.347584][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.356892][ T12] usb 5-1: config 0 descriptor?? [ 52.368533][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.379713][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.388870][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.396893][ T2727] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 52.405072][ T2727] usb 3-1: config 0 has no interface number 0 [ 52.411311][ T17] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 52.417538][ T12] usb 5-1: bad CDC descriptors [ 52.419529][ T17] usb 1-1: config 0 has no interface number 0 [ 52.427295][ T17] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 52.433805][ T12] usb 5-1: bad CDC descriptors [ 52.439600][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.440709][ T21] usb 4-1: config 0 descriptor?? [ 52.449977][ T12] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 52.453863][ T17] usb 1-1: config 0 descriptor?? [ 52.457558][ T12] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 52.465476][ T2727] usb 3-1: New USB device found, idVendor=c502, idProduct=c152, bcdDevice=cc.43 [ 52.465501][ T2727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.475436][ T12] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 52.478551][ T2727] usb 3-1: config 0 descriptor?? [ 52.487122][ T107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.514358][ T17] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 52.516296][ T107] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.531594][ T107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.562932][ T107] usb 6-1: config 0 descriptor?? [ 52.611549][ T107] usb 5-1: USB disconnect, device number 2 [ 52.718274][ T17] gspca_vc032x: reg_r err -71 [ 52.723060][ T17] vc032x: probe of 1-1:0.179 failed with error -71 [ 52.738412][ T17] usb 1-1: USB disconnect, device number 4 [ 52.746357][ T2727] usb 3-1: USB disconnect, device number 4 [ 52.918824][ T21] usb 4-1: USB disconnect, device number 4 [ 53.006252][ T17] usb 6-1: USB disconnect, device number 2 06:55:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:28 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) 06:55:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0xf1, 0xff, 0x200008, 0xc502, 0xc152, 0xcc43, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) [ 53.378237][ T107] usb 5-1: new high-speed USB device number 3 using dummy_hcd 06:55:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) [ 53.498401][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 53.708323][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.715972][ T2837] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.728257][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.758384][ T107] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 53.767499][ T107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.776844][ T107] usb 5-1: config 0 descriptor?? [ 53.798335][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.822603][ T107] usb 5-1: bad CDC descriptors [ 53.829269][ T107] usb 5-1: bad CDC descriptors [ 53.834687][ T107] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 53.842803][ T107] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 53.851881][ T107] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 53.858397][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.869508][ T17] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.878680][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.888014][ T17] usb 2-1: config 0 descriptor?? [ 53.968370][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 53.973668][ T2837] usb 1-1: Using ep0 maxpacket: 8 [ 54.020091][ T107] usb 5-1: USB disconnect, device number 3 [ 54.088588][ T12] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 54.096783][ T12] usb 3-1: config 0 has no interface number 0 [ 54.103086][ T2837] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 54.111438][ T2837] usb 1-1: config 0 has no interface number 0 [ 54.117600][ T12] usb 3-1: New USB device found, idVendor=c502, idProduct=c152, bcdDevice=cc.43 [ 54.126718][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.138399][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.146776][ T2837] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 54.149484][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.158636][ T2837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.167603][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.178379][ T12] usb 3-1: config 0 descriptor?? [ 54.194629][ T21] usb 4-1: config 0 descriptor?? [ 54.198385][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.210569][ T5] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.219892][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.231986][ T5] usb 6-1: config 0 descriptor?? [ 54.238288][ T2837] usb 1-1: config 0 descriptor?? [ 54.280207][ T2837] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 54.385080][ T5] usb 2-1: USB disconnect, device number 2 06:55:29 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) [ 54.476985][ T21] usb 3-1: USB disconnect, device number 5 [ 54.488419][ T2837] gspca_vc032x: reg_r err -71 [ 54.493260][ T2837] vc032x: probe of 1-1:0.179 failed with error -71 [ 54.501683][ T2837] usb 1-1: USB disconnect, device number 5 [ 54.666158][ T2727] usb 4-1: USB disconnect, device number 5 [ 54.692953][ T5] usb 6-1: USB disconnect, device number 3 [ 54.808242][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd 06:55:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:29 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0xf1, 0xff, 0x200008, 0xc502, 0xc152, 0xcc43, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 06:55:29 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) 06:55:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) [ 55.168326][ T17] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 55.177523][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.185675][ T2727] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.203544][ T17] usb 5-1: config 0 descriptor?? [ 55.252287][ T17] usb 5-1: bad CDC descriptors [ 55.258921][ T17] usb 5-1: bad CDC descriptors [ 55.264355][ T17] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 55.272419][ T17] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 55.279098][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.286694][ T17] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 55.298330][ T2766] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 55.459785][ T5] usb 5-1: USB disconnect, device number 4 [ 55.488422][ T2887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.496223][ T2883] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 55.528407][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 55.548396][ T2727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.559500][ T2727] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.568751][ T2727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.576791][ T2766] usb 1-1: Using ep0 maxpacket: 8 [ 55.583638][ T2727] usb 2-1: config 0 descriptor?? [ 55.658360][ T21] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 55.666544][ T21] usb 3-1: config 0 has no interface number 0 [ 55.672909][ T21] usb 3-1: New USB device found, idVendor=c502, idProduct=c152, bcdDevice=cc.43 [ 55.682045][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.691330][ T21] usb 3-1: config 0 descriptor?? [ 55.708587][ T2766] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 55.716842][ T2766] usb 1-1: config 0 has no interface number 0 [ 55.723104][ T2766] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 55.732444][ T2766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.745468][ T2766] usb 1-1: config 0 descriptor?? [ 55.790594][ T2766] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 55.858373][ T2883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.869408][ T2883] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.878513][ T2883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.886618][ T2887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.898361][ T2887] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.907884][ T2887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.917916][ T2883] usb 4-1: config 0 descriptor?? [ 55.924303][ T2887] usb 6-1: config 0 descriptor?? [ 55.942444][ T21] usb 3-1: USB disconnect, device number 6 06:55:30 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) [ 56.000397][ T2766] gspca_vc032x: reg_r err -71 [ 56.005205][ T2766] vc032x: probe of 1-1:0.179 failed with error -71 [ 56.017154][ T2766] usb 1-1: USB disconnect, device number 6 [ 56.039393][ T2887] usb 2-1: USB disconnect, device number 3 [ 56.298227][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.369172][ T2887] usb 4-1: USB disconnect, device number 6 [ 56.379962][ T2837] usb 6-1: USB disconnect, device number 4 06:55:31 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a0000904000001030101000621000000000905810300000000009b31da2227118ff6ec8a86"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, 0x0) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) 06:55:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x7d) write$hidraw(r0, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa2082bf9dfcfcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x57) [ 56.658415][ T5] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 56.667627][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.678405][ T5] usb 5-1: config 0 descriptor?? [ 56.726534][ T5] usb 5-1: bad CDC descriptors [ 56.732906][ T5] usb 5-1: bad CDC descriptors [ 56.738309][ T5] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 56.746222][ T5] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 56.753181][ T5] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 56.768248][ T12] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 56.838361][ T2766] usb 2-1: new high-speed USB device number 4 using dummy_hcd 06:55:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000002980)=ANY=[@ANYBLOB="12010000bbfe9508a2a728ffe7640000000109021b00010000000009044c000001031a0009210000000100000084f6339bb74db1d4cb49ac25dac5d19caf2f1716f1b4c4c54c0e863533f04e2c6d6420e30e55e89a2e6f5dfbd0e80a4199bd2cd863ce14c653d30798bb29eca7800a7bce88e0ac7d2e4178403d1bfed1c6323c441a3a7772b7bb8ccef07711f31ef0bc37c67e54dfb4786c589aac83df79d9d313f8"], 0x0) 06:55:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc340000000000109022400010000a000090400000103010100092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x34, &(0x7f0000000100)={0x0, 0x0, 0x9, {0x9, 0x0, "74019c07e28016"}}, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 56.953845][ T2887] usb 5-1: USB disconnect, device number 5 [ 57.138745][ T12] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 57.147920][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.158100][ T12] usb 3-1: config 0 descriptor?? [ 57.208376][ T5] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 57.208406][ T2766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.220125][ T2837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 57.227052][ T2766] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.243544][ T2766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.247869][ T12] usb 3-1: bad CDC descriptors [ 57.253253][ T2766] usb 2-1: config 0 descriptor?? [ 57.262965][ T12] usb 3-1: bad CDC descriptors [ 57.267992][ T12] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 57.276068][ T12] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 57.282906][ T12] cdc_acm: probe of 3-1:0.0 failed with error -22 06:55:32 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) [ 57.417063][ T12] usb 3-1: USB disconnect, device number 7 [ 57.488384][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 57.493534][ T2837] usb 4-1: Using ep0 maxpacket: 32 [ 57.608383][ T5] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 57.616562][ T5] usb 1-1: config 0 has no interface number 0 [ 57.622774][ T5] usb 1-1: New USB device found, idVendor=a7a2, idProduct=ff28, bcdDevice=64.e7 [ 57.631964][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.640106][ T2837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.651055][ T2837] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.660166][ T2837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.669564][ T5] usb 1-1: config 0 descriptor?? [ 57.675467][ T2837] usb 4-1: config 0 descriptor?? [ 57.706049][ T2766] usb 2-1: USB disconnect, device number 4 [ 57.711598][ T5] usb 1-1: MIDIStreaming interface descriptor not found [ 57.720151][ T2837] hub 4-1:0.0: USB hub found [ 57.748258][ T107] usb 5-1: new high-speed USB device number 6 using dummy_hcd 06:55:32 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) 06:55:32 executing program 5: syz_usb_connect$hid(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d041cc340000000000109022100010000a00009040001030101000621000000000905810300000000009b31da2227118f16ed8a86"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, 0x0) [ 57.920176][ T12] usb 1-1: USB disconnect, device number 7 [ 57.938402][ T2837] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 58.118398][ T107] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 58.127510][ T107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.136780][ T107] usb 5-1: config 0 descriptor?? [ 58.183162][ T107] usb 5-1: bad CDC descriptors [ 58.189575][ T107] usb 5-1: bad CDC descriptors [ 58.195077][ T107] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 58.203062][ T107] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 58.209688][ T107] cdc_acm: probe of 5-1:0.0 failed with error -22 06:55:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x30, 0x2b, 0x0, 0x8, 0x10c4, 0x818a, 0xe17f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001600)={0x54, &(0x7f0000001300)={0x0, 0x0, 0x3, "9d3e63"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) [ 58.238399][ T2863] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.246128][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.259137][ T2837] usbhid 4-1:0.0: can't add hid device: -71 [ 58.265161][ T2837] usbhid: probe of 4-1:0.0 failed with error -71 [ 58.298918][ T2837] usb 4-1: USB disconnect, device number 7 [ 58.389421][ T12] usb 5-1: USB disconnect, device number 6 [ 58.548251][ T2766] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 58.598279][ T2863] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 58.608756][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=d9.c4 [ 58.617984][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.626117][ T2863] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.639069][ T2863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.645740][ T2863] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.654836][ T2863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.668954][ T5] usb 3-1: config 0 descriptor?? [ 58.674817][ T2863] usb 6-1: config 0 descriptor?? [ 58.709989][ T5] usb 3-1: bad CDC descriptors [ 58.715870][ T5] usb 3-1: bad CDC descriptors [ 58.722634][ T5] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 58.730532][ T5] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 58.737013][ T107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.744699][ T5] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 58.798224][ T2766] usb 2-1: Using ep0 maxpacket: 8 06:55:33 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x10, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x63}}, {{0x9, 0x5, 0x3, 0x3, 0x4}}]}}]}}]}}, 0x0) [ 58.921166][ T2766] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 58.929452][ T2766] usb 2-1: config 0 has no interface number 0 [ 58.935562][ T2887] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.938805][ T5] usb 3-1: USB disconnect, device number 8 [ 58.952478][ T2766] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 58.958693][ T2863] usb 6-1: string descriptor 0 read error: -71 [ 58.961756][ T2766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.974082][ T2863] usb 6-1: cannot find UAC_HEADER [ 58.981187][ T107] usb 1-1: Using ep0 maxpacket: 8 [ 58.990476][ T2766] usb 2-1: config 0 descriptor?? [ 58.999788][ T2863] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 59.008370][ T2863] usb 6-1: USB disconnect, device number 5 [ 59.041524][ T2766] radio-si470x 2-1:0.109: could not find interrupt in endpoint [ 59.050240][ T2766] radio-si470x: probe of 2-1:0.109 failed with error -5 [ 59.098368][ T107] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 59.106518][ T107] usb 1-1: config 0 has no interface number 0 [ 59.113091][ T107] usb 1-1: New USB device found, idVendor=a7a2, idProduct=ff28, bcdDevice=64.e7 [ 59.122269][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.131294][ T107] usb 1-1: config 0 descriptor?? [ 59.171336][ T107] usb 1-1: MIDIStreaming interface descriptor not found [ 59.228270][ T2887] usb 4-1: Using ep0 maxpacket: 32 [ 59.248653][ T2766] radio-raremono 2-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 59.268335][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.358348][ T2887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.369329][ T2887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.369471][ T2863] usb 1-1: USB disconnect, device number 8 [ 59.378450][ T2887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.386065][ T2887] usb 4-1: config 0 descriptor?? [ 59.429035][ T2887] hub 4-1:0.0: USB hub found 06:55:34 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000adc6594021046c02c4d90000000109022400010000000009040000000202ff0005240600000d240f000000000001fc000000"], 0x0) [ 59.518243][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 59.638446][ T21] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 59.646809][ T21] usb 5-1: config 0 has no interface number 0 [ 59.653161][ T21] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 59.665313][ T21] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 59.676471][ T21] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 59.685585][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.693837][ T2766] radio-raremono 2-1:0.109: raremono_cmd_main failed (-71) [ 59.701244][ T2883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.709160][ T2887] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 59.719666][ T2766] radio-raremono 2-1:0.109: V4L2 device registered as radio0 [ 59.728710][ T2766] usb 2-1: USB disconnect, device number 5 [ 59.734737][ T2766] radio-raremono 2-1:0.109: Thanko's Raremono disconnected [ 59.743845][ T21] usb 5-1: config 0 descriptor?? [ 59.753511][ T2973] ================================================================== [ 59.761839][ T2973] BUG: KASAN: use-after-free in __mutex_lock+0x11a8/0x12b0 [ 59.769188][ T2973] Read of size 8 at addr ffff8881aecabaf0 by task v4l_id/2973 [ 59.776635][ T2973] [ 59.778959][ T2973] CPU: 0 PID: 2973 Comm: v4l_id Not tainted 5.2.0-rc6+ #15 [ 59.786142][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.796977][ T2973] Call Trace: [ 59.800290][ T2973] dump_stack+0xca/0x13e [ 59.804579][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 59.809463][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 59.814362][ T2973] print_address_description+0x67/0x231 [ 59.820023][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 59.824855][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 59.828389][ T2887] usbhid 4-1:0.0: can't add hid device: -71 [ 59.829702][ T2973] __kasan_report.cold+0x1a/0x32 [ 59.835707][ T2887] usbhid: probe of 4-1:0.0 failed with error -71 [ 59.840533][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 59.840549][ T2973] kasan_report+0xe/0x20 [ 59.840558][ T2973] __mutex_lock+0x11a8/0x12b0 [ 59.840569][ T2973] ? __video_do_ioctl+0x5c7/0xb30 [ 59.840578][ T2973] ? mutex_trylock+0x1a0/0x1a0 [ 59.840591][ T2973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.840603][ T2973] ? __module_text_address+0xe/0x140 [ 59.840614][ T2973] ? is_module_text_address+0xc/0x1a [ 59.840626][ T2973] ? kernel_text_address+0x5e/0xc0 [ 59.840636][ T2973] ? __video_do_ioctl+0x5c7/0xb30 [ 59.840646][ T2973] __video_do_ioctl+0x5c7/0xb30 [ 59.840656][ T2973] ? copy_overflow+0x30/0x30 [ 59.840668][ T2973] ? stack_trace_save+0x9f/0xe0 [ 59.840688][ T2973] ? stack_trace_consume_entry+0x180/0x180 [ 59.879913][ T2887] usb 4-1: USB disconnect, device number 8 [ 59.882021][ T2973] video_usercopy+0x446/0xee0 [ 59.928069][ T2973] ? copy_overflow+0x30/0x30 [ 59.932690][ T2973] ? __kprobes_text_end+0x87e98/0x87e98 [ 59.938272][ T2973] ? v4l_enumstd+0x60/0x60 [ 59.942734][ T2973] ? debug_check_no_obj_freed+0x20a/0x42e [ 59.948476][ T2973] ? do_raw_spin_lock+0x11a/0x280 [ 59.953523][ T2973] ? video_usercopy+0xee0/0xee0 [ 59.958392][ T2973] v4l2_ioctl+0x147/0x1a0 [ 59.962748][ T2973] ? video_devdata+0xa0/0xa0 [ 59.967346][ T2973] do_vfs_ioctl+0xcda/0x12e0 [ 59.971966][ T2973] ? quarantine_put+0xb2/0x150 [ 59.976839][ T2973] ? ioctl_preallocate+0x200/0x200 [ 59.982241][ T2973] ? putname+0xe1/0x120 [ 59.986423][ T2973] ? putname+0xe1/0x120 [ 59.990611][ T2973] ? rcu_read_lock_sched_held+0x113/0x130 [ 59.992626][ T2766] usb 5-1: USB disconnect, device number 7 [ 59.996371][ T2973] ? kmem_cache_free+0x258/0x2a0 [ 60.007171][ T2973] ? rcu_read_lock_sched_held+0x113/0x130 [ 60.008605][ C1] xpad 5-1:0.169: xpad_irq_out - usb_submit_urb failed with result -19 [ 60.012909][ T2973] ksys_ioctl+0x9b/0xc0 [ 60.012930][ T2973] __x64_sys_ioctl+0x6f/0xb0 [ 60.030078][ T2973] ? lockdep_hardirqs_on+0x379/0x580 [ 60.035379][ T2973] do_syscall_64+0xb7/0x560 [ 60.039927][ T2973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.045823][ T2973] RIP: 0033:0x7f84d16e0347 [ 60.050267][ T2973] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 60.069876][ T2973] RSP: 002b:00007ffd882faec8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 60.078395][ T2973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f84d16e0347 [ 60.078456][ T2883] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 60.086396][ T2973] RDX: 00007ffd882faed0 RSI: 0000000080685600 RDI: 0000000000000003 [ 60.086413][ T2973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.097268][ T2883] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.115505][ T2973] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000400884 [ 60.115514][ T2973] R13: 00007ffd882fb020 R14: 0000000000000000 R15: 0000000000000000 [ 60.115522][ T2973] [ 60.115532][ T2973] Allocated by task 2766: [ 60.115554][ T2973] save_stack+0x1b/0x80 [ 60.115566][ T2973] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 60.115575][ T2973] __kmalloc_node_track_caller+0xee/0x370 [ 60.115585][ T2973] devm_kmalloc+0x87/0x190 [ 60.115595][ T2973] usb_raremono_probe+0x2f/0x231 [ 60.115607][ T2973] usb_probe_interface+0x305/0x7a0 [ 60.115617][ T2973] really_probe+0x281/0x660 [ 60.115637][ T2973] driver_probe_device+0x104/0x210 [ 60.123888][ T2883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.136763][ T2973] __device_attach_driver+0x1c2/0x220 [ 60.136774][ T2973] bus_for_each_drv+0x15c/0x1e0 [ 60.136782][ T2973] __device_attach+0x217/0x360 [ 60.136790][ T2973] bus_probe_device+0x1e4/0x290 [ 60.136802][ T2973] device_add+0xae6/0x16f0 [ 60.136813][ T2973] usb_set_configuration+0xdf6/0x1670 [ 60.136823][ T2973] generic_probe+0x9d/0xd5 [ 60.136832][ T2973] usb_probe_device+0x99/0x100 [ 60.136841][ T2973] really_probe+0x281/0x660 [ 60.136861][ T2973] driver_probe_device+0x104/0x210 [ 60.144980][ T2883] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 60.152849][ T2973] __device_attach_driver+0x1c2/0x220 [ 60.152860][ T2973] bus_for_each_drv+0x15c/0x1e0 [ 60.152868][ T2973] __device_attach+0x217/0x360 [ 60.152877][ T2973] bus_probe_device+0x1e4/0x290 [ 60.152888][ T2973] device_add+0xae6/0x16f0 [ 60.152900][ T2973] usb_new_device.cold+0x6a4/0xe61 [ 60.152909][ T2973] hub_event+0x1abd/0x3550 [ 60.152922][ T2973] process_one_work+0x905/0x1570 [ 60.152932][ T2973] worker_thread+0x96/0xe20 [ 60.152942][ T2973] kthread+0x30b/0x410 [ 60.152954][ T2973] ret_from_fork+0x24/0x30 [ 60.152968][ T2973] [ 60.155318][ T2883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.159646][ T2973] Freed by task 2766: [ 60.159671][ T2973] save_stack+0x1b/0x80 [ 60.159680][ T2973] __kasan_slab_free+0x130/0x180 [ 60.159689][ T2973] kfree+0xd7/0x280 [ 60.159699][ T2973] release_nodes+0x4a1/0x910 [ 60.159708][ T2973] devres_release_all+0x74/0xc3 [ 60.159737][ T2973] device_release_driver_internal+0x21b/0x4c0 [ 60.187424][ T2883] usb 6-1: config 0 descriptor?? [ 60.189938][ T2973] bus_remove_device+0x2dc/0x4a0 [ 60.189948][ T2973] device_del+0x460/0xb80 [ 60.189960][ T2973] usb_disable_device+0x211/0x690 [ 60.189970][ T2973] usb_disconnect+0x284/0x830 [ 60.189980][ T2973] hub_event+0x13bd/0x3550 [ 60.189994][ T2973] process_one_work+0x905/0x1570 [ 60.190005][ T2973] worker_thread+0x7ab/0xe20 [ 60.190014][ T2973] kthread+0x30b/0x410 [ 60.190039][ T2973] ret_from_fork+0x24/0x30 [ 60.405780][ T2973] [ 60.408108][ T2973] The buggy address belongs to the object at ffff8881aecab300 [ 60.408108][ T2973] which belongs to the cache kmalloc-4k of size 4096 [ 60.422605][ T2973] The buggy address is located 2032 bytes inside of [ 60.422605][ T2973] 4096-byte region [ffff8881aecab300, ffff8881aecac300) [ 60.436068][ T2973] The buggy address belongs to the page: [ 60.441712][ T2973] page:ffffea0006bb2a00 refcount:1 mapcount:0 mapping:ffff8881dac02600 index:0x0 compound_mapcount: 0 [ 60.452674][ T2973] flags: 0x200000000010200(slab|head) [ 60.458048][ T2973] raw: 0200000000010200 dead000000000100 dead000000000200 ffff8881dac02600 [ 60.466719][ T2973] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 60.468378][ T2883] usb 6-1: string descriptor 0 read error: -71 [ 60.475339][ T2973] page dumped because: kasan: bad access detected [ 60.487201][ T2883] usb 6-1: cannot find UAC_HEADER [ 60.487923][ T2973] [ 60.495286][ T2973] Memory state around the buggy address: [ 60.498546][ T2883] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 60.500925][ T2973] ffff8881aecab980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.516116][ T2973] ffff8881aecaba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.521296][ T2883] usb 6-1: USB disconnect, device number 6 [ 60.524231][ T2973] >ffff8881aecaba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 06:55:35 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x36, 0xbd, 0x5f, 0x400040, 0x421, 0xe, 0x67e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 60.538116][ T2973] ^ [ 60.545846][ T2973] ffff8881aecabb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.553910][ T2973] ffff8881aecabb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.561965][ T2973] ================================================================== [ 60.570049][ T2973] Disabling lock debugging due to kernel taint [ 60.576457][ T2973] Kernel panic - not syncing: panic_on_warn set ... [ 60.583097][ T2973] CPU: 0 PID: 2973 Comm: v4l_id Tainted: G B 5.2.0-rc6+ #15 06:55:35 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000002980)=ANY=[@ANYBLOB="12010000bbfe9508a2a728ffe7640000000109021b00010000000009044c000001031a0009210000000100000084f6339bb74db1d4cb49ac25dac5d19caf2f1716f1b4c4c54c0e863533f04e2c6d6420e30e55e89a2e6f5dfbd0e80a4199bd2cd863ce14c653d30798bb29eca7800a7bce88e0ac7d2e4178403d1bfed1c6323c441a3a7772b7bb8ccef07711f31ef0bc37c67e54dfb4786c589aac83df79d9d313f8"], 0x0) [ 60.591691][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.602036][ T2973] Call Trace: [ 60.605357][ T2973] dump_stack+0xca/0x13e [ 60.609610][ T2973] panic+0x292/0x6c9 [ 60.613596][ T2973] ? __warn_printk+0xf3/0xf3 [ 60.618194][ T2973] ? retint_kernel+0x10/0x10 [ 60.622822][ T2973] ? trace_hardirqs_on+0x55/0x1c0 [ 60.627860][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 60.632729][ T2973] end_report+0x43/0x49 [ 60.636897][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 60.641757][ T2973] __kasan_report.cold+0xd/0x32 [ 60.646613][ T2973] ? __mutex_lock+0x11a8/0x12b0 [ 60.651463][ T2973] kasan_report+0xe/0x20 [ 60.655700][ T2973] __mutex_lock+0x11a8/0x12b0 [ 60.660458][ T2973] ? __video_do_ioctl+0x5c7/0xb30 [ 60.665502][ T2973] ? mutex_trylock+0x1a0/0x1a0 [ 60.670367][ T2973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.676436][ T2973] ? __module_text_address+0xe/0x140 [ 60.681814][ T2973] ? is_module_text_address+0xc/0x1a [ 60.687089][ T2973] ? kernel_text_address+0x5e/0xc0 [ 60.692210][ T2973] ? __video_do_ioctl+0x5c7/0xb30 [ 60.697248][ T2973] __video_do_ioctl+0x5c7/0xb30 [ 60.702092][ T2973] ? copy_overflow+0x30/0x30 [ 60.706694][ T2973] ? stack_trace_save+0x9f/0xe0 [ 60.711542][ T2973] ? stack_trace_consume_entry+0x180/0x180 [ 60.717355][ T2973] video_usercopy+0x446/0xee0 [ 60.722064][ T2973] ? copy_overflow+0x30/0x30 [ 60.726906][ T2973] ? __kprobes_text_end+0x87e98/0x87e98 [ 60.732438][ T2973] ? v4l_enumstd+0x60/0x60 [ 60.736861][ T2973] ? debug_check_no_obj_freed+0x20a/0x42e [ 60.742584][ T2973] ? do_raw_spin_lock+0x11a/0x280 [ 60.747607][ T2973] ? video_usercopy+0xee0/0xee0 [ 60.752449][ T2973] v4l2_ioctl+0x147/0x1a0 [ 60.756787][ T2973] ? video_devdata+0xa0/0xa0 [ 60.761369][ T2973] do_vfs_ioctl+0xcda/0x12e0 [ 60.767471][ T2973] ? quarantine_put+0xb2/0x150 [ 60.772235][ T2973] ? ioctl_preallocate+0x200/0x200 [ 60.777367][ T2973] ? putname+0xe1/0x120 [ 60.781516][ T2973] ? putname+0xe1/0x120 [ 60.785845][ T2973] ? rcu_read_lock_sched_held+0x113/0x130 [ 60.791609][ T2973] ? kmem_cache_free+0x258/0x2a0 [ 60.796559][ T2973] ? rcu_read_lock_sched_held+0x113/0x130 [ 60.798237][ T2766] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 60.802292][ T2973] ksys_ioctl+0x9b/0xc0 [ 60.802307][ T2973] __x64_sys_ioctl+0x6f/0xb0 [ 60.802319][ T2973] ? lockdep_hardirqs_on+0x379/0x580 [ 60.802341][ T2973] do_syscall_64+0xb7/0x560 [ 60.828310][ T2973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.834304][ T2973] RIP: 0033:0x7f84d16e0347 [ 60.838798][ T2973] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 60.858411][ T2973] RSP: 002b:00007ffd882faec8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 60.866815][ T2973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f84d16e0347 [ 60.874898][ T2973] RDX: 00007ffd882faed0 RSI: 0000000080685600 RDI: 0000000000000003 [ 60.883066][ T2973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.888227][ T2887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 60.891048][ T2973] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000400884 [ 60.891055][ T2973] R13: 00007ffd882fb020 R14: 0000000000000000 R15: 0000000000000000 [ 60.891566][ T2973] Kernel Offset: disabled [ 60.919319][ T2973] Rebooting in 86400 seconds..