last executing test programs: 4.238568954s ago: executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x4, 0x4}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x14, 0x0, 0xffffffc1, "25ae97df0000800021c599885b000000000001000012f6ff5cdd8bc400"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/183) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 4.229485485s ago: executing program 0: syz_usb_connect(0x3, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000bccc9940851402fe26690102030109021e0001000000000904000001204d2e0009050000000000000003099b"], 0x0) 4.026141357s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0x0, "47f886f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="b1fe5d9efe90c9aeb7204069c22b2700"/30], 0x0) 3.885131039s ago: executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x14a842) write$hidraw(r0, &(0x7f0000003000)=')', 0x1) read$hidraw(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xff, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0xdd, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xff, 0x0, 0x38, 0x40, 0xc7}, 0x41, &(0x7f0000000280)={0x5, 0xf, 0x41, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x8, 0xf00f, 0xff, [0x60]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x6, 0x2, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0xf8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0x81, 0x3ff}]}, 0x4, [{0x7, &(0x7f0000000300)=@string={0x7, 0x3, "fe8e59ef60"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}, {0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "0e93204c788aad087c52223b44f700f61e7a75e88773588545d2f62cd48933487c2084e0b1e663577a0832eb3bd50659c95979832eb66dd51e1663f5eabc540e15c7ae37c615331e308b2dcace2a47c1677015b97354de1492c06c5daba64e54e7b24162d34f94cd57219c9c4b72a2cf09a0f71716ffc03a41ef1deaf90c62c0337156f1d62b17398e495e0f9a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000680)={0x14, &(0x7f0000000500)={0x40, 0x22, 0xde, {0xde, 0x9, "0003ad94117eb75553e03acf6ce0b9ae15ee088b787071f535d8e6d7f406a6e4ffba20ff92f2c02587942bbc35e30362aad28359b11147dbfbed90764096e46afd5e30f967d2f18a51c0551d2e1c93ff8da1dbf835b76cc40e2a2c76ba8d1c179cd8e4d2e558a2921717cebeb4f910c4e43d918358521ac9ab7cd00e7dab09f1cb1cb876d1955b61e5e813a52bda8ccc1b6e4a1e7f6abd49e335c6793ede06e7db769e4e6dff50d86363a614414ef3863be1e07cf8c843ee817e4603be5d2e3afc2da5265189f7ba7103b86795afdcaf130b89d48c1bfb3b33c9bbd3"}}, &(0x7f0000000600)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "265e084ce48acd6f1e77ae5f77651fa422f4058bb1eeae8c5bb21a0e799c2562808903f460acc1c771daeabc5cde1adc8643c003e5d7b40f8fc5384175"}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x0, 0x15, 0x92, "92b9b4ed5532db0f6c745650cd7e7d8f29dd858c84561c0f67749897bccb54e0e9ef395ede2afb4c9ac64033bd3149e97101090ac2b79afaa1526837ec7fd71bb0a69d2394260d953cd46584e6124cfa8d53ca1f9ec0374bd357a8a3822f0cc2a6b72dd271b863b603eefa1f810082b2bbdf8ce77a7d4b7f41378b6d286cbb3355d22d3ea741b0a97ee26ffdd9e6f783f38d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0xaa, {0xa8, "31b6b480cf23d1fadabd3f37928799197b12332a1b3d7410612255048d433f0229c2c539088953f3093898e237cdaf7475ab8450304fbfd3b5f9af15fc706b8e6357b1b822ece6ae9aae01a97ab23dbe0bf0ab71fd22e00b7587a7bdb086dd4f4136ba721fc36e4f31a3705d959d7068e4cb27e37b391f06ff39106b5c372c514440288d39e29cd18acb46d4aa4c36d971b65ee1d78f5d187e95869e6b195551bbb820b0bf257211"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x40}}) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x5, 0x0) ioctl$HIDIOCGRDESC(r2, 0x80086601, &(0x7f0000000080)={0xbe, "8ed59ad7d54e229ec7e92911b5b91212cb77f82602bf843a2b06c82968915f5bf6f422f283cbbb2bf796da0a4b568b532c02805a40b808f4cab4ca60b5dd1a6ea406fc67fed61ffc92164d1a88f4b987e588a900c880d1fb3a30fb02e577d8d18c597d54b950f3890bac8f3cff446411fda66d43c77aa536ff029fd31989dd8b787b123c1d7f9fc78b8edebfc1165c3902b2760ce6ba33178db79ac86e8d54ab739a807b43444b2a485753dffb82ba4f151f639285c3a228466bf3870054"}) read$hidraw(r2, &(0x7f0000000180)=""/192, 0xc0) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000000)) 3.712542025s ago: executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "0d69e73627848b6df85ca9295474259012147e1bf544270ed84f34cfc66288f7"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x3f, 0x0, 0x4, 0x0, "1302cdb4334eb94880732ec5229702b0ebbde5c4bd8063bb7ce221224a5d1cc0"}) syz_usb_connect(0x0, 0xa7f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x76, 0xbf, 0x20, 0x40, 0x174f, 0x5212, 0x8009, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0e, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x1, 0xe, 0x1, 0x0, 0x62, [@hid_hid={0x9, 0x21, 0xdc87, 0x5, 0x1, {0x22, 0x129}}], [{{0x9, 0x5, 0xa, 0x17, 0x10, 0x4, 0x76, 0x1f}}]}}, {{0x9, 0x4, 0xb4, 0x4, 0x3, 0x4b, 0xb7, 0xa8, 0x87, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x80}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x5}]}, @uac_as], [{{0x9, 0x5, 0x1, 0x10, 0x400, 0x56, 0x0, 0xce, [@generic={0x44, 0x8, "e416d53ee2551f7e0cca69eb3304b43798345be9660d5c214d59a7a24ca137def5c228ae93def857f590a226c0f1032952ab6990dcc831f4ff5894b99491b748272e"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x197, 0xfe, 0x7f, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xe4, 0xe, 0x4, [@generic={0x44, 0xc, "8e170dad88831c166f83e0650ccf31f3aada746fe2d2a326d557e87cfe356be8e76803741c27dffd3bb88bb0d559d47b2d5e645c14b9394ff17e2aa230e6e8d6bede"}]}}]}}, {{0x9, 0x4, 0xab, 0x16, 0x7, 0xff, 0xff, 0xff, 0x2f, [], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x3, 0x80, [@generic={0xe7, 0xb, "24bca5207140c1ea53575cd2a918dbf05c8c86b8047861ecc2c3aa9a8c1d957d9450180fb0075fb5126a836e42f84d6e54f0986cf68a6e938dd65ea24c78f4fc49a3a6714c87803dc757f6c46bd5a40d3fcb312912be25c0f463ad51e3e9d4a11eea75a9d4d503b2af1fc500667304541a74eea818e3ea2cfe8909f3afae3649767c1c25961091b1110e933522c3548b4da4a621b7aa8e592906db9f56013db5933d7389726683d20a6de916608b7893ffcc98ca463bce0a524a722ca3e25c4bca4b6e91bd75b0dc5f671f5273d4d86b4583c4e65dd2ba2d77243312a1e32ff4b1da0ea51a"}, @generic={0x7c, 0x1, "c4e03498de00f2f35712289fdeb76906eca958b4c13d7f91b5110e30858df79221e5ab1c72407f752dbec821ea362a56e0e59f52c4c82e22bf6a65e751f4d36d017f22561de3e543a58edb39227bef94e48c0ef9dc6b9df9456e8569ccb8b3c2ca84be6534d7aa258320b499b1be03218c22fdb4e118d360f0b3"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x4, 0x0, 0xf9}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x6, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x68, 0x200}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7f, 0x4, 0xfb, [@generic={0xb2, 0x2b, "0e96bf49f876185f11dbf40a5a3d498e93b6f206f0ff26a584e81a8aacee8142b79990a3c2169f81c669f5687339089d1a70f4b6c1032c2fee9be4edc9ca487f760b213452cb93f2301eda2389a664976d96e6449760023e039120aa344ac01959460c242e50cf44150d42c76099fc8d4491850e7ebbbfe703e1d1c4eaffb8e8205ff58d9ca87b0b5448eae76e730bf684671bfd7d7f893b991c4bc1dd76aa933d83a8dfb772b55b545b6e0cb33a1a9e"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x7f, 0x85, [@generic={0x83, 0x1, "2cbb2ad42e28ccad05d38febf4acc2cbbcdb4c23377af9a8f9359ec0ea86a264fb742d71ac9c2435f229bb3a5171958ca68e452e9e7a6c0e20804cd4305914d5451bbf81c88582638344252de9b72fbb833c992ef64e9d5cb75c6a5917250936c2e2374b0ca4c472c6847bc9be5250018c4f9bc1ac1095c9293267d2e9e0f9a098"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x12, 0x3, [@uac_iso={0x0, 0x25, 0x1, 0x83, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x2, 0x20}}]}}, {{0x9, 0x4, 0xca, 0x3f, 0x10, 0x45, 0x21, 0x40, 0x10, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "32d970"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x3, 0x9211, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x3ff}]}, @generic={0x98, 0xe, "6b974c8160ad1c9bfb5101e8d4a6cdab4bd964eeff4f1427ccd8061fdf619e0e46e38a671000e7de21e573ceb278d252a5a5835e6295e37aa1271351a2cd4daca799f0ff2f790c468507d91f643821723e19816fedd9421b48938ccacbb6d7caa7f14af6fd525e2ae54dc315e6fddd6a55e221dce8dcc263e771b17110c04bcd0f7bb9a1023f2b36f0d95b145693e5bffa3749b479d8"}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0xfb, 0x8a, 0x8, [@generic={0x9b, 0x23, "fb238daa4b8c8ce04777b0bd8d29f26fc3f58108173f87ce9d7157a6081e8b787829b950fcce17c0bc4806ccd2ed52f91bb5479c03bf8673edfbc2595a8fe52e9402def0e29e13746750763c02cb822f2417a8e14b89df836ee532fb896cf52584dacaf93eff1aacd1db521c59289baff2643ec7ef612deb9ea1f05f267aa8a289ae0ad84f620d9770eba442b8d64949133b30d2d24bfe5326"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x100}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xff, 0x2, 0x20, [@generic={0xce, 0x22, "0c5ac459ca1afe2a10fe98d7d0fa50cd3034e752ac673075cd8ea85fc12e73f4e2478a9d475d591e6e9daad60fc3a2a1df504243ed6ca8d85c5cec65ebf1383fa1df4f383666f1e422c863d01a5c1f1a18775407ac39b28f51f99f2d60d835c020c8e9cd52208100180b6c42635659527315cbd98e79fb6ef2bc31b9165aa8f00b46f1f8f51188efc5be621ec29edcb61ee2664800a0bb5bece4754c39b4e060bd917fefe6faa428215c5a26c89fb761f68f7a33a4045d4243bbef06a9400cbfcade0104a13ce3045e8464ea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3ff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0xfd, 0x8, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x0, 0x6d, 0x6, [@generic={0x7a, 0xc, "380c6f30f67eaecae073167facc46303e1e7f4b1634cde22919c24cdb7c93807709cf092d8a7202af7bbdc8012a370e4e2994ac1023ac4aa83b3320ff08d0f05786be20c4a49204e484d57a0baa701817abc67f03298efb0f77c5dcc8941081a5f7255dfd724aac94f4b4d79815b358f94e076dfaf5e9ce3"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xbc, 0xe1, 0xe0}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0xf2, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x81, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x6f, 0x1, 0x4, [@generic={0x91, 0xd, "0e007651f639bb5d7d5f63e6b3d24f42231e5e27299575ec71b1d0dc483cdf5dc72f13acf068a46c71b832fc092db46ff6422b371c11d0b21eed512ad66d7ff455f7e390ed2ca6a4a0ed96270f1e0ddbe5d16c9056fae55f8cb09278b2353f782fa492c7a3c1aa698801076de3a962fb1bb208bd81478e76f5045f2f0b23a6faf685c10121ec18708ebbf07c44c4c5"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x1f7, 0x1, 0x8, 0x9, [@generic={0x45, 0x6, "174c30bef4c4b7a342e7cc875801d7ba8409bc34a6495e5c72bb8e8e7ca384ecd08bccc982a84eeddeba3562b3fb2c7b51cd52e254bf3e4c8aa3f3a414835c9f26ccc1"}, @generic={0x43, 0x21, "4587bcc50ee65214a151edcbca0681db5bcd106da13eddcde8411454ab105346dedd8d637e2319351c36ddf02265d243214ec9b9359e69e726599b735d12cdfc17"}]}}, {{0x9, 0x5, 0x3, 0x0, 0xd694a4cf4b57dc81, 0x4, 0x0, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0xfc, 0x5, [@uac_iso={0x0, 0x25, 0x1, 0x3, 0x40, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x2, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xffff}, @generic={0x31, 0x9, "f5c5a2a822e3ac75f2c28cb70ead6bf3027cb34f9d873cb6ff2be740dff72c4bcddd69ca86a27b88e8f912d33cc6a4"}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x5, &(0x7f00000007c0)={0x5, 0xf, 0xfffffffffffffe4f}}) 3.42239553s ago: executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f00000000c0)=""/222, 0xde) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0xffff}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x5460, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x41015500, 0x0) 3.278496222s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x12, 0x83, 0x8, 0x20b7, 0x1540, 0x2a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r1, &(0x7f00000001c0)=""/232, 0xe8) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) ioctl$EVIOCRMFF(r2, 0x541b, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) syz_usb_connect(0x0, 0x84b, &(0x7f0000001240)=ANY=[@ANYBLOB="120100004d69c608c016df05acec0000000109023908030000000009041c000203"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "370393e0"}]}}, 0x0}, 0x0) 3.257966656s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x40084504, &(0x7f0000000200)=""/151) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0) 2.728557128s ago: executing program 0: ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000000)={0x0, 0x0, 0xb6d4}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12011c00090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201400905815f"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102020000ff2505a1a4400001020301090280000201ff40000904000001020d00000824060001de7a81000000d34aff070306241a01040008241c07000101000524"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.105657284s ago: executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80111500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "25ae97df0000800021c599885b000000000001000012f6ff5cdd8bc400"}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010068020000102505a1a4400000000100090400005ed0060000000000000005240000010d240f010000000000000000000905810340000000000905820208000000090905030200"/86], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {}, @const={0x3, {0x3f, 0x0, 0xffc0, 0x6}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x3, 0x12e, &(0x7f0000000980)=ANY=[@ANYRES32=r0], &(0x7f0000000800)={0x0, 0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1]}) syz_open_dev$hidraw(0x0, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 1.797112072s ago: executing program 4: ioctl$EVIOCSREP(0xffffffffffffffff, 0x80086601, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xf8, 0xed, 0x45, 0x40, 0x2040, 0x2900, 0xd452, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0xe4, 0x5d}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x100000000, 0x80800) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x18000000) 1.359673149s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x81, &(0x7f00000006c0)=@string={0x81, 0x3, "fa1234ea827d7bd0379a5462f32fb56ea1fe8e716eec8351ba6312cb7c48f7bd34956ead55b511ff8f88dfda8e32b267286acd4560642bf7263b6dd77d1cab4105fcf5dc3080bd5b1b57accf91c3a1cbd9912fa86af84209e545ba2e0492e23e67728f56a5836007a575b30166f25e23c29e5b81e8a45bdadfde3bad935c36"}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0x22, 0x33, {0x33, 0xf, "64263260e9bc1a5615febfb8dd60a97d19f015d177709082efa2ec35b4c2080f41d58bc165e8bcaf05ad0fb35b292caa65"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000500)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x7f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x2, 0x6}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x3, 0x20, "6d6eeba8", "0eb90226"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x0, 0x6, 0x40, 0x85, 0x6, 0x45}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x40, 0x3, 0x7d, "1eef1d43cdc3db838fa09cfac2ef617797038fd779649cdb98b04c13ce7548db88e860b9ebc123b34f201790fabf00eb4fd1161fd3851ae900aeed5c014b85456363bef057bfde5819fe6bd17e99885ee5351fd80db0a926a6091ab718c5f119a85a860f4da7eb10a475c27176147981499902cd2b18002eacfde483f0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x120, 0x2, [0x0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000940)={0x40, 0xb, 0x2, "c331"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @random="423d5dee265a"}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "ef2a"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x48}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x58}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xc5, 0x2d, 0x22, 0x40, 0x4cb, 0x10b, 0x3de0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x3d, 0x4d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, &(0x7f0000000400)) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1e8, &(0x7f0000000c40)={[{0xaa, 0x4e00, "052198bd215804147485c2173243a7026f851f351ff080fd3ab6c8966c4365f6e3be966af5df928716c3beb927efddb5021631f67af9029f7435139405a5d55464fa5e3b003c90c7522742bb111e50158d7e2236806a77757fdb25538b6218f52e9a7b4fe51a91a7517a63cfae915367e2bc0025d56ba6f56c35451e22c2d83121bcb337718f875dbe8f6753b580b87e30f7323e77200fc3c3cb7213d6407c9a5ade35749095962ad27c"}, {0xb, 0x4e00, "566e4b810f18d3ad2d6861"}, {0x39, 0x4e00, "f034546ecc366eeda7c1f07bc992f4d18f5bdfa7a5a478287a66bda8036118d96e575b02d830a786d5907b14e11e7cd0144cae6cf9005427b5"}, {0xe1, 0x4e00, "e920622311d00f3e7d365b26c1283d0da00a6eea09566e5ed31e908b928f161fe4234e5f95ecf33003daf06b627e3e215c2a23b319fafce764b846cdc4569bd0144c5c90a16740f059eae2d560574d03c1f270e703ef7f0e6c0f6b8feff8cc3171a25a80e595f5069794aef0b288411297f7017b05565489f067fac9424269f198c0a37a070a6524f262e1737e72b7bf26c1bb770c8c09ca390cc3871f7ebdffbdb7f2ea1baee626310e9ab7ea0175ccc6d60545e39cd923bdfce685b511f7fb65aa3df0b0e2ca44f66712c044808ee727afb2fb36061b4d559c793452719814e7"}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa9, 0x10, 0xb4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x99, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x41b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1f, 0x4}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x5, 0x4, 0xff, 0x8}, 0x0, 0xfffffffffffffffd, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40c}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "86c43ea9a23fb763f63ce3b056e6fe63d8a5ff302f856256a32de59b54093e10c8302ee0864339fc75c714783dd35e215de6417d8b3d14b00f3348d210cae3635366b8bf53b3814c8bf8a4a2fc3742c9f257d6eae7437cd2c326d3acb1da7f4c166f5f0ce6866fecfabe02bfef50965310a84a62d9b71c7400b844b497dc17692101888dbdb30b6a3f740e4068425c5128ff"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x9b, &(0x7f0000000300)=@string={0x9b, 0x3, "40a796d01dfd98589a33a3f4746e383dab66fb0162713e019cbc01b6f5c5bbcaf3c2c1e480ab2666784b51795c8c7a48bee1e7b4795cb848d5c624644c5d4f84154ce4497f35e07105bdaab28bdfc5548d1eae05cddbc070d6f6daa5bcf234e88f716346fc1dba61e3dc9cca799e8385b11ca03f67fd2a4f85ce725695a4d46480cb7fdfe4823b5d001f86a2b339bff3dfc81a4b0d49562669"}}, {0x18, &(0x7f00000003c0)=@string={0x18, 0x3, "ff3c2eb901b2f61a66803a01b32464fc743120ba6a63"}}]}) syz_usb_control_io(r2, &(0x7f00000010c0)={0x2c, &(0x7f0000000e40)={0x40, 0x30, 0xcd, {0xcd, 0x24, "4c36fc6d3c2988597c170db854561fc5a05bb75bf4699cb6392f6538c8d9bb073eedcb7cce9f8b8ae6c6788856299bd6d2537cd24aa80873b4e6b33b67e6b0f86d682941df08711580979250b34e046c89e9e2b47e7f4aaceda5b26a111bca2867e4b96706b24507ee4fbb61ba71b087b5ee8a75b7ce06a7ad27493e971e76d1bd610217f43b32cdedc1cc555ede87d8ac5ed02a48b93dc5c38d14cf17e38ab06932b928602fac1f210e6f0e6028817db9be3b4d7e44125e69f745812427350d38f5363e4b842008ef6485"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000f80)={0x0, 0xf, 0xae, {0x5, 0xf, 0xae, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x0, 0x8}, @generic={0x9f, 0x10, 0x3, "a36f23063482e6b8b3b0461a9ab409057faad0a13ce3a904d99680af8d69f2ddcb92980fa52564d286583a646ef373cec4188f2d59d10ba8fb9ba6b6817cf8b9b65e719f2fe76a8d6b1c017ea301937b57deeb23165fcfb6bee4e2eebb4174824a47bdb01dbdc4ec9192a5da03cc4e720944d8905059eb6adc0d90d244083608ee27520f08b365c16e4cec4c01c6a79a11d8d54dbbf9d7b00239aafa"}]}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x7, 0x0, "ab2cbbe9", "1c78f6a5"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6b, 0x1, 0x81, 0x5, 0x3}}}, &(0x7f00000015c0)={0x84, &(0x7f0000001100)={0x0, 0xe, 0xd2, "9dba715999d039a3dab6bd4e673404cd250e45b1ab3a455e4bd2b5ed19ae0565c196593fb51aa917c74d67301c1080cfdb84efb33d15066600c01c35c184655887088349f16f695a3a99197fe5fdda9a7d7613c634751e604475cff9271990e07fff038d323219625556c0834931602e87354e5cb945f9e99c1393166d077771ef8670460999d5d1a5e6e9c49fa42805cefeae75478a8950a3a4e74cd982f50184bcc7dd9aef7ade4ac4758822d41a236d5b81ddc16fe08beb6a205bf30a1d1d5b6b2e3c24b7c647a12d60278ebe0c8c762a"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x29}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf0f0]}}, &(0x7f0000001300)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001340)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001380)={0x40, 0xb, 0x2, "48ff"}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001400)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x17, 0x6}, &(0x7f0000001480)={0x40, 0x19, 0x2, "6bd3"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0x7}}) syz_open_dev$evdev(0x0, 0x0, 0x58bc40) 980.100968ms ago: executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x20800) syz_usb_connect$uac1(0x5, 0xd8, 0x0, &(0x7f0000000940)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x80, 0x4, 0x20, 0x20, 0x7}, 0x5e, &(0x7f0000000640)={0x5, 0xf, 0x5e, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf00, 0x100, [0x6000, 0xff000f, 0x0, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x5, 0xf, 0xfff, [0x0, 0xff08]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2662cf94070ee8989bd86cc44b8f0f70"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x3, 0x8000}]}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x444}}, {0x8b, &(0x7f0000000700)=@string={0x8b, 0x3, "3f22eafd5545058a2be0a0a724480050b0fabceade48c0ecf0045c8e3e47e78f50fab97429179d5f63fbd3b00a8b27ff4f38355db4d2ea6127be28441310723ab6bda3eb6adbbbd8ca19f359c3a21cc25ad28a0297ff8cf703d34fa0af5d65ddadda7f44f8e23b4876ea9f4d3552ac9e5b1925eda2f72b0de4309e026a9318200c2094c49b9c775d92"}}, {0xc1, &(0x7f00000007c0)=@string={0xc1, 0x3, "b0c9e189cc46bdddd9cb5fd2b24db6130bb01cf5ebdd56fac5212ff34529202bce5ee345e1da90e37cf84ada3cf315c92129c867c39c0045ed94423902dfc2d005e762921ae954b247a37df8a916a2a01180708537bfa1cfb2bc6e8c9581584602f951bf348459734022e6a06f48f1c9282dc0e0b26cf2de6685fa177413e2316e69e8a7fe021ff38015cf01c4d4c3906aeb08b96657bcdd85b5c31c9367da73a7265024d3bbe155510b8ec27f90eb29879a7d6af887bc81889b8650329826"}}]}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xfb, 0xf8, 0xe, 0x10, 0x2304, 0x21f, 0x5faf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0x13, 0x85}}]}}]}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4f, 0x2}, @cond}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000440)={0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000480)=@ready={0x0, 0x0, 0x8, "aa7ad882", {0x1, 0x0, 0x0, 0x3f, 0x80}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x21, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x1, 0x3}}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xec0, &(0x7f0000003640)={[{0xdfc, 0x4e00, "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"}, {}, {0xa6, 0x4e00, "9c16a9b4d267727a1b7b52597b9b665097610b9f99d8da8b6d38e063289c217bf416c3697a909eb10d412a7c17845346bd2338419ccddefcca776b4e5d9914da1cddbf86206a0a17d98362317396fa9dd7a0bc4551c9583c5ce5f5994c50635d664354edea4f72cceba04ec232b0b68ead989e9548ebbd7dc49f550d2b6ee0118193170d8bc24100ddd09bf3003fe3ed08013118a6db3478213201d371e4416f0f71010dff24"}, {0x7, 0x4e00, "c7819fac9e1bfb"}, {}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001640)={0x2c, &(0x7f00000014c0)={0x0, 0x0, 0x2, {0x2, 0x11}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001580)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x61, 0x0, 0x0, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x8}]}}, 0x0, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1, 0x6e, 0xd1, 0x1f, 0x8000}}}, &(0x7f0000001ac0)={0x84, &(0x7f0000001680)={0x0, 0xc, 0x40, "4e55cf056b9334fd208a30aa330482ed104de62e90cc4a2f765582d844146352b6bdfa3a9e185263e8be1b0798e476238426f2bfb034ca27b1e3209c9a0c092a"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x1}}, 0x0, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x4255}, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000001880)={0x40, 0xb, 0x2, "9499"}, 0x0, &(0x7f0000001900)={0x40, 0x13, 0x6, @random="2f261936003c"}, &(0x7f0000001940)={0x40, 0x17, 0x6}, &(0x7f0000001980)={0x40, 0x19, 0x2, "6f83"}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x5e}, 0x0, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x5}}) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000046c0)=""/4096) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x40084503, &(0x7f0000ffcffc)) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000001c0)) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x1b18) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3}}]}}]}}, 0x0) 859.730467ms ago: executing program 3: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) 302.385713ms ago: executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001180), 0x75c, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0xfffffffffffffd81, &(0x7f0000000700)={0x0, 0x0, 0x4, "56800000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x90000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201cecc75a357179aaadda965bc12d3e30000ce430f9687f0bc6e44b114dd1b0200000000010000000000000914000000328a"], 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/84) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 0s ago: executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084504, &(0x7f0000000140)=""/135) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x5f, 0x0, 0x0, 0x6, "c0836a6e5b1c660634b1f12f2bf89d4bcd5712b3781ab55cfdf695c82af51d98"}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8=0xffffffffffffffff], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x0, "1302cdb4334eb94880732ec5229702b0ebbde5c4bd8063bb7ce221224a5d1cc0"}) syz_usb_connect$cdc_ecm(0x4, 0xc1, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x3, 0x160, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "e02abfd4"}, {0x5, 0x24, 0x0, 0x202}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x1, 0x5, 0xff}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x5}, @mdlm_detail={0x20, 0x24, 0x13, 0xef, "ab009553b601717f67efe88524d2d5d7fccda9780dd281c1ac0cbb1b"}, @mdlm_detail={0x3e, 0x24, 0x13, 0x9, "242eff768496fdeb909f3669d50f2ff3f29a911c38d077044e4acfd8e6139ebf4fabb320c86f3a1da2ff7f05b06bbc12c7d53015803c1ed1ed01"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x5, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x0, 0x66}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x6, 0x40, 0x40, 0x6}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x9, 0x401}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf501}}, {0xfb, &(0x7f0000000680)=@string={0xfb, 0x3, "4b0f98e3a7e6ab27deef8355e955eb716f24cd1f2391805699a7309b6d6ccb3c2f6469ce0085268343717847cebd3296b0dda9af8eba51f33d85ba2b7d6215072a5ff7908b77571c8c9af7384c7a71ff53ee78b09a73d8b88931a722ec8ca88e7708b9d1717dd249d4382054ed252fd0ad26b83e81762e69ee0f10aaf452c265af15228d536bd2f9f1da85ac397cab5199849838be9b109c3ba07db921efb2f951d7845d34cb7f3cb40300031938d0146bc819f4016bcd897589f31d7a18dfe0c575802475984d8bccf6ce606e5d3144ad9877a5c0e0e710bbe447684c78de2f16ec351df6ec87de083e9d6e7aff9603a449ff6c85ed61ebc2"}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "50a96193157eea0b1e63e0987cdcdf834883e39b265ad46e4d6ab3cac9c3b1a70d1229a745253991f962602b41529e5fcb7dda84f6023dd0b504e56a0a40a51fb4265df367cb828c70035335387b57b614f00a4aaaed66d3798a4ec9fe1e77124dd70ee42535166f2be8eec814607ff9ad3e109bf7ebfce9c3cc1c1bf96ad6824f4baa6cb7d95885e74da35b0112c1694ffbd4bbc631aaa217b93cf577def0a7d63cee73c2ad6274fad68fa76ea7a6110df37eb52b32d2a0ebf6534081a481f62c7767842ac48fbc8caaed5ca5f7062d447061c49ae93b45502946885662d3"}}, {0x85, &(0x7f0000000540)=@string={0x85, 0x3, "6d845380f9004dee64e96e8a3ad4bb0ee6778dd50bd33db55b7d298db199113e5db3f5704bd4be2f4d0fb805e53403d98ce03d69d2d8d191977e8009c0d589af24706145e2d75067ed95002e41dbc79d09ddec4d98206816814fa1c643e4fa7e7e55f0b3f8d2063c41cc9b8cbb62d609f4fd1f398de182ba2421017b89e9c707175465"}}]}) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0xc0145b0d, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x801c4803, &(0x7f00000000c0)={0x2}) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. 2024/05/28 18:03:05 fuzzer started 2024/05/28 18:03:05 dialing manager at 10.128.0.163:30028 syzkaller login: [ 47.977461][ T2505] cgroup: Unknown subsys name 'net' [ 48.137787][ T2505] cgroup: Unknown subsys name 'rlimit' 2024/05/28 18:03:09 starting 5 executor processes [ 51.458539][ T2513] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.875321][ T1895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.055249][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.079538][ T1895] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.115908][ T1895] usb 1-1: Dual-Role OTG device on HNP port [ 106.122340][ T1895] usb 1-1: New USB device found, idVendor=1485, idProduct=fe02, bcdDevice=69.26 [ 106.131962][ T1895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.140217][ T1895] usb 1-1: Product: syz [ 106.144486][ T1895] usb 1-1: Manufacturer: syz [ 106.149152][ T1895] usb 1-1: SerialNumber: syz [ 106.168323][ T1895] usb 1-1: config 0 descriptor?? [ 106.245194][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 106.256876][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.268352][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.278729][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 106.288298][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.312072][ T9] usb 3-1: config 0 descriptor?? [ 106.364399][ T721] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.412879][ T1895] usb 1-1: USB disconnect, device number 2 [ 106.567186][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.578894][ T721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.588863][ T721] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.598011][ T721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.628981][ T721] usb 5-1: config 0 descriptor?? [ 106.738909][ T9] logitech 0003:046D:C101.0001: unknown main item tag 0x0 [ 106.755097][ T9] logitech 0003:046D:C101.0001: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.2-1/input0 [ 106.768081][ T4796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.794394][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.936443][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.947629][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.956795][ T4796] usb 2-1: Using ep0 maxpacket: 8 [ 106.960413][ T1895] usb 3-1: USB disconnect, device number 2 [ 106.979027][ T4796] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 106.987845][ T4796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.998522][ T4796] usb 2-1: config 0 has no interface number 0 [ 107.005070][ T4796] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.009345][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.016930][ T4796] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 107.027878][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.027963][ T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 107.037779][ T4796] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.047501][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.056675][ T4796] usb 2-1: config 0 interface 52 has no altsetting 0 [ 107.092434][ T721] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 107.093691][ T37] usb 4-1: config 0 descriptor?? [ 107.113557][ T721] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 107.129235][ T4796] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 107.138502][ T4796] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 107.147129][ T4796] usb 2-1: Product: syz [ 107.151355][ T4796] usb 2-1: SerialNumber: syz [ 107.175901][ T4796] usb 2-1: config 0 descriptor?? [ 107.297008][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.308102][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.318482][ T721] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 107.344477][ T4810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.359760][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.384924][ T721] usb 5-1: USB disconnect, device number 2 [ 107.385225][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.425908][ T4796] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input7 [ 107.467942][ T2384] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 107.489562][ T2384] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 107.574495][ T4810] usb 1-1: Using ep0 maxpacket: 32 [ 107.590192][ T4810] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.601971][ T4810] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.621489][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.643404][ T4810] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 107.651969][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.652657][ T4810] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 107.669092][ T4810] usb 1-1: Product: syz [ 107.673520][ T4810] usb 1-1: Manufacturer: syz [ 107.688666][ T4804] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 107.703013][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.721635][ T4810] hub 1-1:4.0: USB hub found [ 107.731645][ T4804] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 107.735638][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.755328][ T721] usb 2-1: USB disconnect, device number 2 [ 107.941790][ T4810] hub 1-1:4.0: 2 ports detected [ 107.974378][ T1895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.986019][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.995644][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.018334][ T37] konepure 0003:1E7D:2DB4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 108.141587][ T4810] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 108.148482][ T4810] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 108.184308][ T1895] usb 3-1: Using ep0 maxpacket: 8 [ 108.193392][ T1895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 108.194836][ T4796] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.205185][ T4810] usb 1-1: USB disconnect, device number 3 [ 108.215759][ T1895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.216559][ T721] usb 4-1: USB disconnect, device number 2 [ 108.225683][ T1895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.241341][ T1895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.251434][ T1895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.264590][ T1895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.273689][ T1895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.437434][ T4796] usb 5-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice=d4.52 [ 108.446998][ T4796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.459339][ T4796] usb 5-1: config 0 descriptor?? [ 108.470157][ T4796] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 108.559855][ T1895] usb 3-1: GET_CAPABILITIES returned 0 [ 108.565549][ T1895] usbtmc 3-1:16.0: can't read capabilities [ 108.664331][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.765511][ T4818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.774577][ T4818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.788993][ T4818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.803719][ T4818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.818679][ T1895] usb 3-1: USB disconnect, device number 3 [ 108.854567][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 108.874565][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 108.895725][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.910596][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.929652][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.40 [ 108.939056][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.947539][ T9] usb 2-1: Manufacturer: ዺ綂큻騷扔⿳溵ﺡ熎冃掺쬒䡼뷷锴굮땕１袏㊎枲樨䗍摠㬦흭ᱽ䆫ﰅ耰宽圛쾬쎑쮡釙꠯ू䗥⺺鈄㻢牧嚏莥ݠ疥Ƴ⍞黂腛ꓨ򦻟괻岓 [ 108.967600][ T9] usb 2-1: SerialNumber: syz [ 108.984041][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 109.157731][ T906] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 109.157901][ T4796] usb 5-1: USB disconnect, device number 3 [ 109.168443][ T906] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 109.182197][ T906] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 109.191322][ T906] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 109.201271][ T906] pvrusb2: Failure uploading firmware1 [ 109.206870][ T906] pvrusb2: Device initialization was not successful. [ 109.213589][ T906] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 109.223350][ T4810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.223964][ T4796] pvrusb2: Device being rendered inoperable [ 109.417093][ T4810] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.428616][ T4810] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.438693][ T4810] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.451688][ T4810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.458510][ T4810] usb 4-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 109.467719][ T4810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.475883][ T1895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.488268][ T4810] usb 4-1: config 0 descriptor?? [ 109.674392][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.694290][ T1895] usb 1-1: Using ep0 maxpacket: 16 [ 109.722483][ T1895] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 109.731732][ T1895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.739983][ T1895] usb 1-1: Product: syz [ 109.744356][ T1895] usb 1-1: Manufacturer: syz [ 109.749189][ T1895] usb 1-1: SerialNumber: syz [ 109.770969][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.773284][ T1895] usb 1-1: config 0 descriptor?? [ 109.786513][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.797450][ T1895] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 109.799527][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.804577][ T1895] pctv452e: pctv452e_power_ctrl: 1 [ 109.804577][ T1895] [ 109.820353][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.826658][ T1895] usb 1-1: selecting invalid altsetting 3 [ 109.834001][ T1895] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 109.834001][ T1895] [ 109.844784][ T1895] dvb-usb: bulk message failed: -22 (5/0) [ 109.856143][ T1895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.864356][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 109.866973][ T1895] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 109.874031][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.878086][ T1895] usb 1-1: media controller created [ 109.888879][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.888922][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.897566][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 109.927084][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 109.935564][ T9] usb 3-1: Product: syz [ 109.936090][ T4810] ================================================================== [ 109.939748][ T9] usb 3-1: Manufacturer: syz [ 109.947844][ T4810] BUG: KASAN: slab-out-of-bounds in asus_report_fixup+0xdd8/0x1030 [ 109.952536][ T9] usb 3-1: SerialNumber: syz [ 109.960406][ T4810] Read of size 1 at addr ffff888104ad5185 by task kworker/1:3/4810 [ 109.960437][ T4810] [ 109.960453][ T4810] CPU: 1 PID: 4810 Comm: kworker/1:3 Not tainted 6.10.0-rc1-syzkaller #0 [ 109.960486][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 109.993924][ T4810] Workqueue: usb_hub_wq hub_event [ 109.999033][ T4810] Call Trace: [ 109.999706][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 110.002352][ T4810] [ 110.002367][ T4810] dump_stack_lvl+0x116/0x1f0 [ 110.002427][ T4810] print_report+0xc3/0x620 [ 110.023901][ T4810] ? __virt_addr_valid+0x5e/0x580 [ 110.029010][ T4810] ? __phys_addr+0xc6/0x150 [ 110.033596][ T4810] kasan_report+0xd9/0x110 [ 110.034389][ T4796] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.038045][ T4810] ? asus_report_fixup+0xdd8/0x1030 [ 110.050846][ T4810] ? asus_report_fixup+0xdd8/0x1030 [ 110.056123][ T4810] asus_report_fixup+0xdd8/0x1030 [ 110.061228][ T4810] ? __asan_memcpy+0x3c/0x60 [ 110.065899][ T4810] ? __pfx_asus_report_fixup+0x10/0x10 [ 110.071440][ T4810] hid_open_report+0x1b3/0x7c0 [ 110.076281][ T4810] ? __pfx_hid_open_report+0x10/0x10 [ 110.081643][ T4810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.087527][ T4810] asus_probe+0x639/0xe50 [ 110.091932][ T4810] ? __pfx_asus_probe+0x10/0x10 [ 110.096951][ T4810] ? hid_match_id+0x278/0x300 [ 110.101715][ T4810] ? __pfx_asus_probe+0x10/0x10 [ 110.106728][ T4810] hid_device_probe+0x2eb/0x490 [ 110.111659][ T4810] ? __pfx_hid_device_probe+0x10/0x10 [ 110.117114][ T4810] really_probe+0x23e/0xa90 [ 110.121697][ T4810] __driver_probe_device+0x1de/0x440 [ 110.127048][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.132131][ T4810] __device_attach_driver+0x1df/0x310 [ 110.137561][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 110.143487][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.148364][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 110.153767][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.159011][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.164877][ T4810] __device_attach+0x1e8/0x4b0 [ 110.169683][ T4810] ? __pfx___device_attach+0x10/0x10 [ 110.175084][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 110.180327][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.185231][ T4810] device_add+0x114b/0x1a70 [ 110.189856][ T4810] ? __pfx_device_add+0x10/0x10 [ 110.194753][ T4810] ? __debugfs_create_file+0x413/0x660 [ 110.200267][ T4810] hid_add_device+0x37f/0xa70 [ 110.204983][ T4810] ? __pfx_hid_add_device+0x10/0x10 [ 110.210305][ T4810] ? __raw_spin_lock_init+0x3a/0x110 [ 110.215720][ T4810] usbhid_probe+0xd24/0x1400 [ 110.220370][ T4810] usb_probe_interface+0x309/0x9d0 [ 110.225543][ T4810] ? __pfx_usb_probe_interface+0x10/0x10 [ 110.227916][ T4796] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.231256][ T4810] really_probe+0x23e/0xa90 [ 110.231310][ T4810] __driver_probe_device+0x1de/0x440 [ 110.240152][ T4796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.244193][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.244247][ T4810] __device_attach_driver+0x1df/0x310 [ 110.244295][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 110.261382][ T4796] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.264421][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.264469][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 110.264506][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.269907][ T4796] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.275779][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.275834][ T4810] __device_attach+0x1e8/0x4b0 [ 110.284896][ T4796] usb 5-1: Manufacturer: syz [ 110.289698][ T4810] ? __pfx___device_attach+0x10/0x10 [ 110.315378][ T4796] usb 5-1: config 0 descriptor?? [ 110.318853][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 110.318899][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.344100][ T4810] device_add+0x114b/0x1a70 [ 110.348693][ T4810] ? __pfx_device_add+0x10/0x10 [ 110.353623][ T4810] ? mark_held_locks+0x9f/0xe0 [ 110.358474][ T4810] usb_set_configuration+0x10cb/0x1c50 [ 110.364016][ T4810] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 110.370165][ T4810] usb_generic_driver_probe+0xb1/0x110 [ 110.375703][ T4810] usb_probe_device+0xec/0x3e0 [ 110.380531][ T4810] ? __pfx_usb_probe_device+0x10/0x10 [ 110.385973][ T4810] really_probe+0x23e/0xa90 [ 110.390550][ T4810] __driver_probe_device+0x1de/0x440 [ 110.395919][ T4810] ? usb_driver_applicable+0x1c7/0x220 [ 110.401450][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.406633][ T4810] __device_attach_driver+0x1df/0x310 [ 110.412080][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 110.418056][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.422095][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.422951][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 110.422997][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.438843][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.442010][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.451250][ T4796] rc_core: IR keymap rc-hauppauge not found [ 110.455531][ T4810] __device_attach+0x1e8/0x4b0 [ 110.455588][ T4810] ? __pfx___device_attach+0x10/0x10 [ 110.455635][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 110.455672][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.461566][ T4796] Registered IR keymap rc-empty [ 110.466318][ T4810] device_add+0x114b/0x1a70 [ 110.466375][ T4810] ? __pfx_device_add+0x10/0x10 [ 110.476730][ T4796] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 110.476835][ T4810] ? usb_detect_static_quirks+0x335/0x3e0 [ 110.494040][ T4796] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 110.495919][ T4810] usb_new_device+0xd90/0x1a10 [ 110.495963][ T4810] ? __pfx_usb_new_device+0x10/0x10 [ 110.496001][ T4810] hub_event+0x2e66/0x4f50 [ 110.496045][ T4810] ? __pfx_hub_event+0x10/0x10 [ 110.496080][ T4810] ? __pfx_lock_acquire+0x10/0x10 [ 110.547074][ T4810] ? __pfx_lock_release+0x10/0x10 [ 110.552189][ T4810] process_one_work+0x9fb/0x1b60 [ 110.557206][ T4810] ? __pfx_hcd_resume_work+0x10/0x10 [ 110.562566][ T4810] ? __pfx_process_one_work+0x10/0x10 [ 110.568006][ T4810] ? assign_work+0x1a0/0x250 [ 110.572685][ T4810] worker_thread+0x6c8/0xf70 [ 110.577351][ T4810] ? __kthread_parkme+0x148/0x220 [ 110.582446][ T4810] ? __pfx_worker_thread+0x10/0x10 [ 110.587698][ T4810] kthread+0x2c1/0x3a0 [ 110.591838][ T4810] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.597115][ T4810] ? __pfx_kthread+0x10/0x10 [ 110.601896][ T4810] ret_from_fork+0x45/0x80 [ 110.606394][ T4810] ? __pfx_kthread+0x10/0x10 [ 110.611053][ T4810] ret_from_fork_asm+0x1a/0x30 [ 110.615896][ T4810] [ 110.618958][ T4810] [ 110.621318][ T4810] Allocated by task 4810: [ 110.625672][ T4810] kasan_save_stack+0x33/0x60 [ 110.630450][ T4810] kasan_save_track+0x14/0x30 [ 110.635220][ T4810] __kasan_kmalloc+0x8f/0xa0 [ 110.639873][ T4810] kmalloc_node_track_caller_noprof+0x200/0x3e0 [ 110.646188][ T4810] kmemdup_noprof+0x29/0x60 [ 110.650737][ T4810] hid_open_report+0x133/0x7c0 [ 110.655560][ T4810] asus_probe+0x639/0xe50 [ 110.660042][ T4810] hid_device_probe+0x2eb/0x490 [ 110.664950][ T4810] really_probe+0x23e/0xa90 [ 110.669513][ T4810] __driver_probe_device+0x1de/0x440 [ 110.674851][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.677555][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.679956][ T4810] __device_attach_driver+0x1df/0x310 [ 110.680009][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.680042][ T4810] __device_attach+0x1e8/0x4b0 [ 110.689514][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.693739][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.716025][ T4810] device_add+0x114b/0x1a70 [ 110.716653][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.720576][ T4810] hid_add_device+0x37f/0xa70 [ 110.720624][ T4810] usbhid_probe+0xd24/0x1400 [ 110.720657][ T4810] usb_probe_interface+0x309/0x9d0 [ 110.732928][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.733645][ T4810] really_probe+0x23e/0xa90 [ 110.746686][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.751067][ T4810] __driver_probe_device+0x1de/0x440 [ 110.751120][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.762042][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.764079][ T4810] __device_attach_driver+0x1df/0x310 [ 110.787433][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.787545][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.800863][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.808725][ T4810] __device_attach+0x1e8/0x4b0 [ 110.813564][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.814309][ C0] hrtimer: interrupt took 143136 ns [ 110.818970][ T4810] device_add+0x114b/0x1a70 [ 110.828778][ T4810] usb_set_configuration+0x10cb/0x1c50 [ 110.834300][ T4810] usb_generic_driver_probe+0xb1/0x110 [ 110.839817][ T4810] usb_probe_device+0xec/0x3e0 [ 110.844634][ T4810] really_probe+0x23e/0xa90 [ 110.849193][ T4810] __driver_probe_device+0x1de/0x440 [ 110.854544][ T4810] driver_probe_device+0x4c/0x1b0 [ 110.859668][ T4810] __device_attach_driver+0x1df/0x310 [ 110.865151][ T4810] bus_for_each_drv+0x157/0x1e0 [ 110.870143][ T4810] __device_attach+0x1e8/0x4b0 [ 110.871362][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.874950][ T4810] bus_probe_device+0x17f/0x1c0 [ 110.875001][ T4810] device_add+0x114b/0x1a70 [ 110.875048][ T4810] usb_new_device+0xd90/0x1a10 [ 110.875077][ T4810] hub_event+0x2e66/0x4f50 [ 110.875106][ T4810] process_one_work+0x9fb/0x1b60 [ 110.875138][ T4810] worker_thread+0x6c8/0xf70 [ 110.875168][ T4810] kthread+0x2c1/0x3a0 [ 110.889756][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.892855][ T4810] ret_from_fork+0x45/0x80 [ 110.928026][ T4810] ret_from_fork_asm+0x1a/0x30 [ 110.932829][ T4810] [ 110.935180][ T4810] The buggy address belongs to the object at ffff888104ad5180 [ 110.935180][ T4810] which belongs to the cache kmalloc-8 of size 8 [ 110.948933][ T4810] The buggy address is located 0 bytes to the right of [ 110.948933][ T4810] allocated 5-byte region [ffff888104ad5180, ffff888104ad5185) [ 110.963306][ T4810] [ 110.965667][ T4810] The buggy address belongs to the physical page: [ 110.972120][ T4810] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104ad5 [ 110.981024][ T4810] anon flags: 0x200000000000000(node=0|zone=2) [ 110.987222][ T4810] page_type: 0xffffefff(slab) [ 110.991975][ T4810] raw: 0200000000000000 ffff888100041500 0000000000000000 dead000000000001 [ 111.000602][ T4810] raw: 0000000000000000 0000000080800080 00000001ffffefff 0000000000000000 [ 111.009331][ T4810] page dumped because: kasan: bad access detected [ 111.015879][ T4810] page_owner tracks the page as allocated [ 111.021734][ T4810] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 4086548772, free_ts 0 [ 111.039342][ T4810] post_alloc_hook+0x2d1/0x350 [ 111.044186][ T4810] get_page_from_freelist+0x132e/0x25e0 [ 111.049792][ T4810] __alloc_pages_noprof+0x21e/0x2290 [ 111.055229][ T4810] alloc_slab_page+0x56/0x110 [ 111.059964][ T4810] new_slab+0x84/0x260 [ 111.064092][ T4810] ___slab_alloc+0xdac/0x1870 [ 111.068836][ T4810] __slab_alloc.constprop.0+0x56/0xb0 [ 111.074285][ T4810] __kmalloc_noprof+0x32b/0x3d0 [ 111.079211][ T4810] acpi_ns_internalize_name+0x145/0x220 [ 111.084931][ T4810] acpi_ns_get_node_unlocked+0x164/0x310 [ 111.090637][ T4810] acpi_ns_get_node+0x4c/0x70 [ 111.095372][ T4810] acpi_ns_evaluate+0x6ef/0xca0 [ 111.100383][ T4810] acpi_ut_evaluate_object+0xda/0x4a0 [ 111.105842][ T4810] acpi_ut_execute_power_methods+0x125/0x240 [ 111.111899][ T4810] acpi_get_object_info+0x9f4/0xba0 [ 111.117157][ T4810] acpi_init_device_object+0xdec/0x1940 [ 111.122800][ T4810] page_owner free stack trace missing [ 111.128209][ T4810] [ 111.130568][ T4810] Memory state around the buggy address: [ 111.136241][ T4810] ffff888104ad5080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 111.144357][ T4810] ffff888104ad5100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 111.152496][ T4810] >ffff888104ad5180: 05 fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 111.160600][ T4810] ^ [ 111.164705][ T4810] ffff888104ad5200: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 111.172839][ T4810] ffff888104ad5280: 00 fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc [ 111.180987][ T4810] ================================================================== [ 111.189585][ T4810] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.196823][ T4810] CPU: 1 PID: 4810 Comm: kworker/1:3 Not tainted 6.10.0-rc1-syzkaller #0 [ 111.205294][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 111.215396][ T4810] Workqueue: usb_hub_wq hub_event [ 111.220489][ T4810] Call Trace: [ 111.223810][ T4810] [ 111.226793][ T4810] dump_stack_lvl+0x3d/0x1f0 [ 111.231452][ T4810] panic+0x6f5/0x7a0 [ 111.235396][ T4810] ? __pfx_panic+0x10/0x10 [ 111.239895][ T4810] check_panic_on_warn+0xab/0xb0 [ 111.244919][ T4810] end_report+0x117/0x180 [ 111.249310][ T4810] kasan_report+0xe9/0x110 [ 111.253779][ T4810] ? asus_report_fixup+0xdd8/0x1030 [ 111.259052][ T4810] ? asus_report_fixup+0xdd8/0x1030 [ 111.264324][ T4810] asus_report_fixup+0xdd8/0x1030 [ 111.269422][ T4810] ? __asan_memcpy+0x3c/0x60 [ 111.274081][ T4810] ? __pfx_asus_report_fixup+0x10/0x10 [ 111.279631][ T4810] hid_open_report+0x1b3/0x7c0 [ 111.284650][ T4810] ? __pfx_hid_open_report+0x10/0x10 [ 111.290002][ T4810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 111.295989][ T4810] asus_probe+0x639/0xe50 [ 111.300396][ T4810] ? __pfx_asus_probe+0x10/0x10 [ 111.305319][ T4810] ? hid_match_id+0x278/0x300 [ 111.310236][ T4810] ? __pfx_asus_probe+0x10/0x10 [ 111.315162][ T4810] hid_device_probe+0x2eb/0x490 [ 111.320163][ T4810] ? __pfx_hid_device_probe+0x10/0x10 [ 111.325787][ T4810] really_probe+0x23e/0xa90 [ 111.330349][ T4810] __driver_probe_device+0x1de/0x440 [ 111.336045][ T4810] driver_probe_device+0x4c/0x1b0 [ 111.341226][ T4810] __device_attach_driver+0x1df/0x310 [ 111.346668][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 111.352618][ T4810] bus_for_each_drv+0x157/0x1e0 [ 111.357535][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 111.362985][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.368269][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.374167][ T4810] __device_attach+0x1e8/0x4b0 [ 111.379000][ T4810] ? __pfx___device_attach+0x10/0x10 [ 111.384352][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 111.389657][ T4810] bus_probe_device+0x17f/0x1c0 [ 111.394579][ T4810] device_add+0x114b/0x1a70 [ 111.399178][ T4810] ? __pfx_device_add+0x10/0x10 [ 111.404105][ T4810] ? __debugfs_create_file+0x413/0x660 [ 111.409633][ T4810] hid_add_device+0x37f/0xa70 [ 111.414386][ T4810] ? __pfx_hid_add_device+0x10/0x10 [ 111.419654][ T4810] ? __raw_spin_lock_init+0x3a/0x110 [ 111.425003][ T4810] usbhid_probe+0xd24/0x1400 [ 111.429649][ T4810] usb_probe_interface+0x309/0x9d0 [ 111.434824][ T4810] ? __pfx_usb_probe_interface+0x10/0x10 [ 111.440526][ T4810] really_probe+0x23e/0xa90 [ 111.445096][ T4810] __driver_probe_device+0x1de/0x440 [ 111.450460][ T4810] driver_probe_device+0x4c/0x1b0 [ 111.455562][ T4810] __device_attach_driver+0x1df/0x310 [ 111.461011][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 111.467067][ T4810] bus_for_each_drv+0x157/0x1e0 [ 111.471998][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 111.477426][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.482702][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.488596][ T4810] __device_attach+0x1e8/0x4b0 [ 111.493524][ T4810] ? __pfx___device_attach+0x10/0x10 [ 111.498882][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 111.504149][ T4810] bus_probe_device+0x17f/0x1c0 [ 111.509065][ T4810] device_add+0x114b/0x1a70 [ 111.513831][ T4810] ? __pfx_device_add+0x10/0x10 [ 111.518788][ T4810] ? mark_held_locks+0x9f/0xe0 [ 111.523633][ T4810] usb_set_configuration+0x10cb/0x1c50 [ 111.529179][ T4810] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 111.535329][ T4810] usb_generic_driver_probe+0xb1/0x110 [ 111.540868][ T4810] usb_probe_device+0xec/0x3e0 [ 111.545694][ T4810] ? __pfx_usb_probe_device+0x10/0x10 [ 111.551137][ T4810] really_probe+0x23e/0xa90 [ 111.555709][ T4810] __driver_probe_device+0x1de/0x440 [ 111.561059][ T4810] ? usb_driver_applicable+0x1c7/0x220 [ 111.566582][ T4810] driver_probe_device+0x4c/0x1b0 [ 111.571766][ T4810] __device_attach_driver+0x1df/0x310 [ 111.577387][ T4810] ? __pfx___device_attach_driver+0x10/0x10 [ 111.583359][ T4810] bus_for_each_drv+0x157/0x1e0 [ 111.588281][ T4810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 111.593716][ T4810] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.599005][ T4810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.604903][ T4810] __device_attach+0x1e8/0x4b0 [ 111.609753][ T4810] ? __pfx___device_attach+0x10/0x10 [ 111.615117][ T4810] ? do_raw_spin_unlock+0x172/0x230 [ 111.620469][ T4810] bus_probe_device+0x17f/0x1c0 [ 111.625404][ T4810] device_add+0x114b/0x1a70 [ 111.629989][ T4810] ? __pfx_device_add+0x10/0x10 [ 111.634931][ T4810] ? usb_detect_static_quirks+0x335/0x3e0 [ 111.640823][ T4810] usb_new_device+0xd90/0x1a10 [ 111.645660][ T4810] ? __pfx_usb_new_device+0x10/0x10 [ 111.651127][ T4810] hub_event+0x2e66/0x4f50 [ 111.655715][ T4810] ? __pfx_hub_event+0x10/0x10 [ 111.660582][ T4810] ? __pfx_lock_acquire+0x10/0x10 [ 111.665683][ T4810] ? __pfx_lock_release+0x10/0x10 [ 111.670799][ T4810] process_one_work+0x9fb/0x1b60 [ 111.675856][ T4810] ? __pfx_hcd_resume_work+0x10/0x10 [ 111.681303][ T4810] ? __pfx_process_one_work+0x10/0x10 [ 111.686743][ T4810] ? assign_work+0x1a0/0x250 [ 111.691415][ T4810] worker_thread+0x6c8/0xf70 [ 111.696067][ T4810] ? __kthread_parkme+0x148/0x220 [ 111.701156][ T4810] ? __pfx_worker_thread+0x10/0x10 [ 111.706582][ T4810] kthread+0x2c1/0x3a0 [ 111.710734][ T4810] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.716046][ T4810] ? __pfx_kthread+0x10/0x10 [ 111.720705][ T4810] ret_from_fork+0x45/0x80 [ 111.725251][ T4810] ? __pfx_kthread+0x10/0x10 [ 111.729924][ T4810] ret_from_fork_asm+0x1a/0x30 [ 111.734778][ T4810] [ 111.737986][ T4810] Kernel Offset: disabled [ 111.742377][ T4810] Rebooting in 86400 seconds..