last executing test programs: 16.19882162s ago: executing program 4 (id=1698): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f0700000007009d62801d5e8f1cefe559abb27f787e311b1c14c994d0cef822a02e6540afe90245fdf833ae65c86a205069715f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05b3000000000000010902240001000010000904000001030001000921000000012205000905810300040c000044db700555ffaf5905168cfb61a6157eb3fc9be662405cd3500c48f77f7c73fd16de0d621524da4a5440f0a0251e65428994"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 15.678992906s ago: executing program 3 (id=1701): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="00a800000040c5"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x2, "ed39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.186084976s ago: executing program 4 (id=1705): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xa) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x0, 0xb3, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x76, 0x9c, 0x30, 0x40, 0x19d2, 0xff5f, 0xb269, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc9, 0x9, 0x1, 0xff, 0xff, 0xff, 0x0, [@generic={0x86, 0x0, "8b57e60dda499abc43950915033a36dac5f9016d96d65aba74993bbbaf35766b80fe02dd2c980fcb40cc44039b6f8e2c3c427597b55bc6c3054e9665cda5f4056f2bdc5d22ac3206d665ccabf77ced13d98f85b7c2845de48fbc5f7323006b41a627a78c21e8786a683b7e9213a519dc892e49559fe699bd7059ee7d5ceb495cc3edce27"}], [{{0x9, 0x5, 0xe, 0x6, 0x200, 0xc0, 0x5, 0x9}}]}}]}}]}}, 0x0) 12.650854013s ago: executing program 3 (id=1707): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "ea2af941"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x238, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x3, 0xff, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4c}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x1a0, &(0x7f0000000400)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18e, 0x2, 0x1, 0x2, 0xc0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "4d1b"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x9b38, 0x7, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x80, 0xd}, [@mdlm_detail={0xf3, 0x24, 0x13, 0x0, "90de379fb3c9f2c76825b3f879023d1bbbd8ad5587e39c430797636e6dcc36952a1d88281c47989f544a9545a6c7dee35d88106144085bab068cae396b3efcbf20178fbea3312f1069fcdc59fc5b0f0ee8549548821a6b04b099f9bbd67077ffa80c44bfd3b25d9b899f05e4c6fb0c420cd2d5fc5aa8e11d69beefc956fc7c5c396b4bb848239ac01d6b343ee978ebc833f3a1c269834a9a098486c39ba656cb1167fe677823e156e2eb2da864f80a6c4947826d8c4450f301045d70348069eb77664dc1216cd9c40d92ef87fc84a8e5252ac472870e056de443ddd15af5e062d98f73ecccf77015d266555c809fd6"}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xfffd}, @dmm={0x7, 0x24, 0x14, 0x401, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xe1, 0xe9, 0x2, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xc4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x5, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x4, 0x8, 0x87, 0x4}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x6, 0xc, 0x10, 0x6}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xb, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "dc9ab8396916125f70accf5686326e71"}]}, 0x5, [{0x3e, &(0x7f0000000080)=@string={0x3e, 0x3, "bdfa04fee16a420f4681daf70277922502292c1cb273c50ebc3cfbf5d97b002b4cb9109520c55c9fca7b50305f7649bfd4cc34a2b39dafdfbb0653fb"}}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x50, &(0x7f00000001c0)=@string={0x50, 0x3, "305cd308878c96ddc2a34c02d8628ed5fab89c0d7715f0e7f35bbc4ed617ff3ce8f4dc551eecfab2af714ab8ac8f358a59fa91a6b920cde3f7606710d0f89b6ef5dfbe6b4c241b8da73a24455733"}}, {0xb7, &(0x7f0000000280)=@string={0xb7, 0x3, "e7f0f182e04b546394b5b7a3107ab01bde3de56cde7396e0bbea041b773afab0331da9e9b2d4db516719bca1ed26c08849c33a19553206bdda3e0e846309f0cf4323b5a0e9355e199a0711fa3fef85e5411111ec34216f28e810d83f334cd4ae45a8fa05ed77528ffd28a49f7018efb6b80b27a9bacc972614c61566dfd2ba3328d8bce3301ff71d0d96766435e151530c2ffcfa37ec34abb5a587fc6d867e0ca43f5ec34efd45447cb15acd770f37eec174383f41"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}]}) 12.252227691s ago: executing program 0 (id=1709): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0xc, "8a51d501bad6b08681c74545"}, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)={0x0, 0xc, 0x2b, "e438bf3d024c58b3f87f98306d3843e70c9c907f632d33dd6818d70ea294f184211f60628fd1bb3b727300"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.654535962s ago: executing program 4 (id=1710): r0 = syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x11, 0xf0, {0xf0, 0xc, "3fa2cc5a653848d1e8b48dc123a20a8c89f7a0923e01c7ae8b48f72b976367951897a64bacd8c29ee17b4704b701ab0b471d1d900b7063dc3a4802ec7ebbcf8543e8d5d12e207e881f93fe9cf538d2791e0991674a1736fca7126d9ed3f27afff60ee3dbc0806ce1fac937818153056a6520df7b3d7d781d17de856572270010af0684ff5cf399d359f2a2b2bfcc54b9540c5f7c0d6902cb12450e008deb9dba8238408e9065a88ade9c662c3af29f01778372a4f1508cecf437d6541330639a5dfa8cfc8facfdcef5ba89953db9178026be2774fe7ecc539e35eacb95a8d34e4b400a012085b539df43fbae3309"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x30, 0x23, "117f1b48cd9f61cc769e1429cc682d53ee0bd23bcfaef250d4bf4140127d72e14618c4"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)=ANY=[@ANYBLOB="2000d300000000d1864307384ff393542c90595d57c2a66421dd21ecf497e185fe38a7da3851206f4f36f9c6a4803d741c3e6f74c49fb69fb6cd358b66aff53e98efb4efee548216e552044f635b91a770997e1271456282ed9160d2e0349393d022646385475f7e8b49581ddc16d5854f46876d347e518134a37133d17a3068f18a3d96d31aa991b8d2b1d8569a0378cac1ccf95423b4c0649d518c98705eb278f253c2b271b2b0953090720d03acf2fb81f9895ce9eeb1ff0b43189ef213573f0362d28e3dd2a025ca976e622e7f257ddf2035d3c3cd1fbbbd5abc33524cec6a14a98da957ac99795c1e92b892edc0d3bc51885315004dda725be5df515aff898b9b04e9bdcc487c16ff2bd6c513473dab618fc1f146bd470a8f8fc512441259c283bd45127b75e3ecfabcbbcb4e031d634e220dfaa1175b8e966a35583917905e4b6d80ec9d18d376b85a7332e13ebc16a4bab505c2b34fab83f683e454b65dc377276d7e209d86422f80a21c2473afa36841b456f1e95e6c38600b9c2be4be3d16f8361540f543dfe3d8d98827e865ae00931c6fbba611c5acb45524717ce9e9e57f6c7fba5cfd4c0cce6be97c9d9cc5c651"], &(0x7f0000000280)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xa}}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000300)={0x20, 0xa, 0x6c, {0x6c, 0x22, "e1501fd4d3740948b90e48fdfbc337005e09390df47b813131d01940094994593eff80e7c49d299dbbe9738e8a2f8d67c5f7ed143fa56c8a9fdd7f198adf4ba7e65609acfbd9c0152e50ea8e961a73a3647514b44976b88d597311351662ca95c136632e81c4fd588fee"}}, &(0x7f0000000640)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "fe99b07ed0cf367d7d72f6ad824e3da7a6df7d1fc9ad3f00d5182d7131cd7b00d853bf60a80a3b9c3b04fb5b29e3d516f3338baf2468f764e19a5e0cfa06cf3742d3f1a93a0a1737f2efe09e4d5b8ce321817de90da0728add86d9745550293b5c75b848378e3426af40de0a744bf413d4b0bbd507c5fc55f2cf00e46b818a1fec1e1f0ed0964081"}}, &(0x7f0000000700)={0x0, 0xf, 0x122, {0x5, 0xf, 0x122, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "df449d22a9f44d9d134104203821697c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2a, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0xf0, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xb, 0x0, 0x7fff, [0x3f00]}, @generic={0xc1, 0x10, 0xa, "da46de25dfa30b21415ab0bf4d1d606115e49943bcbe52a4be6c6cd059224c7dcb4d6909672e8f01a56809bbcd97fdcd1d9444715da441141f906ac237cc2ce2f94b05eab8a9e85b058d4d32e1ad09e0577e4b07b7c29a8545f054f75d1712d8094a6f34b891e51d3911db357a215f27f6594f2db0c35b1c9a32ceedf2443ae9638f8a8e6aced8688a0e7e4c2e327b758f554313ec24a64460cdc376124b977331d09b32df6df7436be11c5b9658be3543e0f224dcf9c04851e12da23f89"}, @ssp_cap={0x24, 0x10, 0xa, 0x94, 0x6, 0x6, 0xf000, 0x8, [0xc00f, 0xf, 0xc0, 0xff0000, 0xff0000, 0xff3f0f]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0xe47748730622df2a, 0x3, 0x1, "f4e8b3d5", "1504948d"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x98, 0x3, 0x4, 0x4, 0x2, 0x3, 0x3}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x40, 0x14, 0x6e, "9584cfb7cdbd725f37c49a58db88757bf67755678b1da8b09caedbfbdad9288e803ee4beb96d6381c20cf33a32e743921416d49c5049e2236679350908cd8d493d8754cf1ef7bfc28f78c055eebdce2136440fb736424e175636009a19bcd66638f46d6d46bd03d2d942a239863d"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x100, 0x2, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "6992"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x6a1}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "d9a7"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0xc7}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x97}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x10}}) 11.164479975s ago: executing program 2 (id=1712): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ac0d440c6274722f117fa120b7a7d053192c6770102030109021200234adfd0c2c6f44a58fc7c0d0100"], 0x0) 10.8029375s ago: executing program 3 (id=1713): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x28, "06672c8848eb160b25e0e7f101245a94c47c6b1f366678bd337084100aaddafdd27013a8691c421d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x28, 0x65, 0x49, 0x40, 0x403, 0xda71, 0x9bca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x6, 0x15}}]}}]}}, 0x0) 9.888422562s ago: executing program 2 (id=1714): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xcf, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x10, 0xc0, 0x15, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x22a, 0x8}, [@mixer_unit={0x7, 0x24, 0x4, 0x1, 0x1, '7e'}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x8, 0x8, "eb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1c, 0x6, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5a, 0x4, 0xd0, 0x66, "ddee"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x3, "bf8ca5"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x1, 0x8, 0x1, "bd6d061e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa4, 0x4, 0xfd, 0x5, "cdfe", "fad4"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x536b, 0x800, 0x4, "ffcae558188c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x2, 0x18, {0x7, 0x25, 0x1, 0x82, 0x3, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x1, "02", ' /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.999361][ T30] task:kworker/1:5 state:D stack:20720 pid:4929 tgid:4929 ppid:2 flags:0x00004000 [ 813.009610][ T30] Workqueue: usb_hub_wq hub_event [ 813.014746][ T30] Call Trace: [ 813.018060][ T30] [ 813.021045][ T30] __schedule+0xcda/0x2f80 [ 813.025536][ T30] ? find_held_lock+0x2d/0x110 [ 813.030359][ T30] ? __pfx___schedule+0x10/0x10 [ 813.035491][ T30] ? schedule+0x298/0x350 [ 813.036900][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.039856][ T30] ? __pfx_lock_release+0x10/0x10 [ 813.053414][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.058720][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.063977][ T30] schedule+0xe7/0x350 [ 813.068120][ T30] schedule_timeout+0x258/0x2a0 [ 813.073039][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 813.078518][ T30] ? mark_held_locks+0x9f/0xe0 [ 813.083344][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.088868][ T30] __wait_for_common+0x3de/0x5f0 [ 813.093956][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 813.099452][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 813.104991][ T30] ? mark_held_locks+0x9f/0xe0 [ 813.109855][ T30] __flush_work+0x776/0xc30 [ 813.114392][ T30] ? __pfx___flush_work+0x10/0x10 [ 813.119505][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 813.124875][ T30] ? mark_held_locks+0x9f/0xe0 [ 813.129673][ T30] ? __pfx___might_resched+0x10/0x10 [ 813.135150][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 813.141042][ T30] __cancel_work_sync+0x10c/0x130 [ 813.146166][ T30] usb_stor_disconnect+0xc5/0x270 [ 813.151259][ T30] usb_unbind_interface+0x1e8/0x970 [ 813.156558][ T30] ? kernfs_find_ns+0x2ee/0x3f0 [ 813.161469][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 813.167273][ T30] device_remove+0x122/0x170 [ 813.171922][ T30] device_release_driver_internal+0x44a/0x610 [ 813.172024][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.178081][ T30] bus_remove_device+0x22f/0x420 [ 813.178122][ T30] device_del+0x396/0x9f0 [ 813.195848][ T30] ? __pfx_device_del+0x10/0x10 [ 813.200757][ T30] ? kobject_put+0x210/0x5a0 [ 813.205451][ T30] usb_disable_device+0x36c/0x7f0 [ 813.210552][ T30] usb_disconnect+0x2e1/0x920 [ 813.215374][ T30] hub_event+0x1bed/0x4f40 [ 813.219892][ T30] ? __pfx_hub_event+0x10/0x10 [ 813.224740][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 813.229811][ T30] ? __pfx_lock_release+0x10/0x10 [ 813.235029][ T30] process_one_work+0x9c5/0x1b40 [ 813.240032][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 813.245151][ T30] ? __pfx_process_one_work+0x10/0x10 [ 813.250584][ T30] ? assign_work+0x1a0/0x250 [ 813.255243][ T30] worker_thread+0x6c8/0xed0 [ 813.259906][ T30] ? __kthread_parkme+0x148/0x220 [ 813.265022][ T30] ? __pfx_worker_thread+0x10/0x10 [ 813.270180][ T30] kthread+0x2c1/0x3a0 [ 813.274297][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.279586][ T30] ? __pfx_kthread+0x10/0x10 [ 813.284236][ T30] ret_from_fork+0x45/0x80 [ 813.288736][ T30] ? __pfx_kthread+0x10/0x10 [ 813.293386][ T30] ret_from_fork_asm+0x1a/0x30 [ 813.298316][ T30] [ 813.301510][ T30] [ 813.301510][ T30] Showing all locks held in the system: [ 813.304155][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.309317][ T30] 1 lock held by khungtaskd/30: [ 813.321912][ T30] #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 813.331947][ T30] 4 locks held by kworker/u8:2/36: [ 813.337107][ T30] #0: ffff888100abf948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 813.347705][ T30] #1: ffffc90000267d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 813.359006][ T30] #2: ffff888120c92378 (&dev->mutex){....}-{3:3}, at: __device_attach_async_helper+0x84/0x290 [ 813.369458][ T30] #3: ffff8881057f7450 (&q->limits_lock){+.+.}-{3:3}, at: sd_revalidate_disk.isra.0+0x27a/0xa420 [ 813.380174][ T30] 2 locks held by getty/2605: [ 813.384894][ T30] #0: ffff88810f7ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 813.394723][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 813.404900][ T30] 5 locks held by kworker/1:3/4911: [ 813.410119][ T30] 5 locks held by kworker/1:5/4929: [ 813.415464][ T30] #0: ffff888105efed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 813.426357][ T30] #1: ffffc9000e5cfd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 813.437671][ T30] #2: ffff88810976c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 [ 813.446634][ T30] #3: ffff8881115b3190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 [ 813.455958][ T30] #4: ffff8881066f0160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 813.466592][ T30] 3 locks held by kworker/0:5/5022: [ 813.471924][ T30] #0: ffff888100081548 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 813.483323][ T30] #1: ffffc900046efd80 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 813.495680][ T30] #2: ffff88810bf500e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_scan_host_selected+0x160/0x370 [ 813.506397][ T30] 5 locks held by kworker/0:1/8525: [ 813.511624][ T30] #0: ffff888105efed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 813.522496][ T30] #1: ffffc9000f937d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 813.533814][ T30] #2: ffff8881097aa190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 [ 813.542792][ T30] #3: ffff8881052c5190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 813.552127][ T30] #4: ffff888110378160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 813.561440][ T30] 2 locks held by kworker/u8:0/9771: [ 813.566766][ T30] #0: ffff888113d92148 ((wq_completion)scsi_tmf_1){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 813.577627][ T30] #1: ffffc90010847d80 ((work_completion)(&(&cmd->abort_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 813.590099][ T30] 1 lock held by usb-storage/9800: [ 813.595256][ T30] #0: ffff88810bf50d28 (&us_interface_key[i]){+.+.}-{3:3}, at: usb_stor_control_thread+0xd6/0xac0 [ 813.606086][ T30] 1 lock held by syz.4.1732/11009: [ 813.611204][ T30] #0: ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 813.621344][ T30] [ 813.623685][ T30] ============================================= [ 813.623685][ T30] [ 813.632168][ T30] NMI backtrace for cpu 1 [ 813.636514][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 813.647030][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 813.657094][ T30] Call Trace: [ 813.660387][ T30] [ 813.663333][ T30] dump_stack_lvl+0x116/0x1f0 [ 813.668023][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 813.673001][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 813.679017][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 813.685021][ T30] watchdog+0xf0c/0x1240 [ 813.689288][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.693977][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.699182][ T30] ? __kthread_parkme+0x148/0x220 [ 813.704223][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.708925][ T30] kthread+0x2c1/0x3a0 [ 813.713024][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.718241][ T30] ? __pfx_kthread+0x10/0x10 [ 813.722852][ T30] ret_from_fork+0x45/0x80 [ 813.726919][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.727276][ T30] ? __pfx_kthread+0x10/0x10 [ 813.727307][ T30] ret_from_fork_asm+0x1a/0x30 [ 813.745111][ T30] [ 813.748197][ T30] Sending NMI from CPU 1 to CPUs 0: [ 813.753437][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 813.754435][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 813.769430][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 813.779941][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 813.790005][ T30] Call Trace: [ 813.793316][ T30] [ 813.796265][ T30] dump_stack_lvl+0x3d/0x1f0 [ 813.800863][ T30] panic+0x6dc/0x7c0 [ 813.804771][ T30] ? __pfx_panic+0x10/0x10 [ 813.809205][ T30] ? __pfx__printk+0x10/0x10 [ 813.813817][ T30] ? irq_work_claim+0x76/0xa0 [ 813.818509][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 813.824528][ T30] ? irq_work_queue+0x2a/0x80 [ 813.829235][ T30] ? watchdog+0xd76/0x1240 [ 813.833691][ T30] ? watchdog+0xd69/0x1240 [ 813.838134][ T30] watchdog+0xd87/0x1240 [ 813.842486][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.847173][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.852414][ T30] ? __kthread_parkme+0x148/0x220 [ 813.857452][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.862165][ T30] kthread+0x2c1/0x3a0 [ 813.866273][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.871480][ T30] ? __pfx_kthread+0x10/0x10 [ 813.876081][ T30] ret_from_fork+0x45/0x80 [ 813.880520][ T30] ? __pfx_kthread+0x10/0x10 [ 813.885117][ T30] ret_from_fork_asm+0x1a/0x30 [ 813.889916][ T30] [ 813.893168][ T30] Kernel Offset: disabled [ 813.897508][ T30] Rebooting in 86400 seconds..