last executing test programs:
3.078971644s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b000001090224000100"], 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000bc0)={0x14, 0x0, 0x0}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0xfe, 0x2, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000040001200000000e40800"})
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x80004507, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000220821ff990428108c3401020301fb011200bb61b11c000904000000ebf59b00fd461573a752d60780463dcd13a3d8bccdf16e946fc21bc68674916dc76bc0ee66f1661b6c1df7beca3123ea0828c9999c293e111e68f528d6b6fc64c721f754c63fbb6ae1a6d5df0b802a83ae8e884aa802e93a948ab185be2b5a953a29025201ff884f7000474c875dbe897e165501c95fa6df30ea47985e41af8b33b66464addea35bfeeb908069efd36f0d"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1c})
r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x95aa43)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x5b05}, {0x7d, 0x3}, @rumble={0x4802}})
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0)
syz_open_dev$hiddev(0x0, 0x3, 0x401)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x42, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2914, 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0xa6042)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="c1a5f9c0aec6c7af1acfa52bf0326a2ddd1c6a084401f14e8434903e9e4c5f37f14199e8905581fbb16dbf78a23734a388284b39b63142bc492ec9e2bb1cae3d5cbc3d292162403cd9569b2a990096743e7d831af9f4ca90db97f496f9ac698b3745dab25912b21c79829de689cc993cda0849fc84297d131e6d4faff3ccb76506a53ef8f8f0f457b1353f376dffaa163289992744c832c6b047a803019329aa92e6116d8e3e6aaad650"], 0x0)
2.811998045s ago: executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2e, 0xab, 0x5a, 0x40, 0x1c40, 0x534, 0x6dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0xdf, 0xdb}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000003000)="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", 0xafc)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_connect(0x6, 0x1b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x20, 0x0, 0x6d, "110000009f0bed85f563d362a16fab2c3cc26ab557767272a63feab310459f24a8a78a8c63266496c4203a707b6999af03ffff4bcbfb1b98318207c55629f0e5985b4c464cb88fd7da718e18011a1f8cab44951d2734b2fe3200000000000000000000488b7d08ab4bbe6011e6"}, 0x0, 0x0, 0x0, 0x0})
2.577693572s ago: executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480d, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_open_dev$hiddev(0xfffffffffffffffe, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0x63, 0x47}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x20, 0xd, 0xfd, {0xfd, 0xa, "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"}}, &(0x7f0000000840)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "0c399420ebf94d88410b040a8efd8e2536aab922f1b355f85e32ec8c809980bce12ad0a36b62a330747d6bbd0889078420a2d0ff6c997acfc3e8f236e5206c5650c4612854ad37e7c798cb610f553d01af96e84509c4bf6ae75e5d3cc3bfff1292ef10e67dfc90a8bdc890a9ae76dc118be37c4d2bdff22dd709518b094c4bc42947b72d7ac73b9ecddeedcf63d11e251bee805b9680dad45049ce5bbb80d2c24a5bb47cebc298fba8b9d72ee3a0a3e02315de013ffb588d763a6776f765182270891b61ede7ff97daaae08dbcd8b202064d58b7ee7a"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x49}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3e}, &(0x7f00000000c0)={0x20, 0x81, 0x2, "81f3"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, '@'}, &(0x7f0000000500)={0x20, 0x83, 0x1, "f0"}, &(0x7f0000000540)={0x20, 0x84, 0x2, "6d85"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "a100"}})
r3 = syz_open_dev$evdev(&(0x7f0000000640), 0xfffffffffffffffc, 0x200400)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000680)={0x53, 0x1, 0x8, {0x1000, 0x6}, {0x3, 0x3ff}, @rumble={0x3, 0x6}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0)
syz_open_dev$hidraw(0x0, 0x3, 0x200000)
r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
ioctl$HIDIOCGRDESC(r4, 0x541b, 0x0)
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000006c0)=0x7fff)
r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
write$hidraw(r5, 0x0, 0x39)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008ef1747609b320000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x14100)
2.412515387s ago: executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xfffffdee, 0x1, [@ss_cap={0xa}]}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0)
2.364501275s ago: executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x10000000001000, 0x248200)
ioctl$EVIOCGSND(r0, 0x5451, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/142)
syz_open_dev$evdev(&(0x7f0000000000), 0x10001, 0x40a40)
2.308213144s ago: executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x78, 0x56, 0xbb, 0x40, 0xbda, 0x8153, 0xe23d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
901.175711ms ago: executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001140)=""/80)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000011c0)=""/16)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0x0, '\x00<'}, @main=@item_4={0x3, 0x0, 0x0, "225aa4c5"}, @main=@item_012={0x2, 0x0, 0x0, "a914"}]}}, 0x0}, 0x0)
542.788256ms ago: executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffff3a, 0x200200)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/126)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x80, 0x0, {0x1ff, 0x80}, {0x4b, 0x2}, @cond=[{0x0, 0x0, 0x6, 0x0, 0x0, 0x2c11}, {0xfda9}]})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778)
493.633754ms ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
475.474267ms ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCSKEYCODE_V2(r1, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "c889190700000000000000f36926832bc7464cde460ba989075e2f4d69806179"})
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "9761e407"}, @global=@item_4={0x3, 0x1, 0x0, 'q{};'}]}}, 0x0}, 0x0)
165.904615ms ago: executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="200fc8"], 0x0, 0x0})
0s ago: executing program 1:
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGRDESC(r1, 0x40086602, &(0x7f0000000040)={0x70, "667f40bd32eb094bd8c9871638606d393b1508374a664d0e50edce2b854e1aa2eaa352c2dc13503b7a33bfcf29ff7f00005bceb207052b537147d90f6b20615f67a62d63237444c3a3b4"})
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4030582a, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
write$hidraw(0xffffffffffffffff, &(0x7f0000003000), 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)=""/235)
ioctl$HIDIOCGRDESC(r0, 0x40305829, &(0x7f00000002c0)={0xd, "3a82000000130000000000009d"})
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts.
2024/06/06 13:02:24 fuzzer started
2024/06/06 13:02:24 dialing manager at 10.128.0.163:30028
[ 36.985955][ T2503] cgroup: Unknown subsys name 'net'
[ 37.182322][ T2503] cgroup: Unknown subsys name 'rlimit'
2024/06/06 13:02:27 starting 5 executor processes
[ 39.632284][ T2504] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 80.438180][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 80.606681][ T42] usb 2-1: device descriptor read/64, error -71
[ 80.627951][ T4774] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 80.834773][ T4774] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 80.844149][ T4774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 80.852209][ T4774] usb 3-1: Product: syz
[ 80.856384][ T4774] usb 3-1: Manufacturer: syz
[ 80.860982][ T4774] usb 3-1: SerialNumber: syz
[ 80.869517][ T4774] usb 3-1: config 0 descriptor??
[ 80.879944][ T4774] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002
[ 80.888145][ T42] usb 2-1: device descriptor read/64, error -71
[ 80.897549][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 81.066242][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 81.086134][ T4781] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 81.118586][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11
[ 81.129910][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[ 81.141126][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 81.154084][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 81.156116][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 81.163157][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.167067][ T9] usb 4-1: config 0 descriptor??
[ 81.185537][ T4791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 81.266302][ T48] usb 5-1: Using ep0 maxpacket: 8
[ 81.281330][ T4781] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 81.286125][ T48] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 81.295435][ T4781] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 81.297105][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 81.297136][ T48] usb 5-1: config 0 has no interface number 0
[ 81.297221][ T48] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 81.306218][ T4781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 81.316292][ T48] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 81.322375][ T4781] usb 1-1: Product: syz
[ 81.333332][ T48] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 81.341374][ T4781] usb 1-1: Manufacturer: syz
[ 81.351171][ T48] usb 5-1: config 0 interface 52 has no altsetting 0
[ 81.355328][ T4781] usb 1-1: SerialNumber: syz
[ 81.386387][ T42] usb 2-1: device descriptor read/64, error -71
[ 81.397024][ T48] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[ 81.406143][ T48] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[ 81.414489][ T48] usb 5-1: Product: syz
[ 81.418714][ T48] usb 5-1: SerialNumber: syz
[ 81.428353][ T4781] r8152-cfgselector 1-1: Unknown version 0x0000
[ 81.434703][ T4781] r8152-cfgselector 1-1: config 0 descriptor??
[ 81.439118][ T48] usb 5-1: config 0 descriptor??
[ 81.632486][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[ 81.640080][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 81.647576][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 81.654197][ T4781] r8152-cfgselector 1-1: Unknown version 0x0000
[ 81.654999][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 81.663087][ T42] usb 2-1: device descriptor read/64, error -71
[ 81.668677][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 81.668712][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 81.681490][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.685088][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[ 81.697949][ T4781] r8152-cfgselector 1-1: bad CDC descriptors
[ 81.710329][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 81.722132][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.761006][ T4781] r8152-cfgselector 1-1: USB disconnect, device number 2
[ 81.799376][ T48] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input6
[ 81.813246][ T42] usb usb2-port1: attempt power cycle
[ 81.820356][ T2383] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.839612][ T2383] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.885436][ T4809] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.905969][ T2383] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.917851][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.927200][ T2383] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.929588][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.944390][ T4774] i2c i2c-0: failure reading functionality
[ 81.949249][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.959613][ T4774] i2c i2c-0: connected i2c-tiny-usb device
[ 81.965195][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.972070][ T4799] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 81.984737][ T4774] usb 3-1: USB disconnect, device number 2
[ 81.993660][ T4806] usb 5-1: USB disconnect, device number 2
[ 82.246329][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 82.277765][ T42] usb 2-1: device descriptor read/8, error -71
[ 82.383122][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.391851][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.401581][ T4806] usb 4-1: USB disconnect, device number 2
[ 82.429495][ T42] usb 2-1: device descriptor read/8, error -71
[ 82.496200][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 82.676264][ T48] usb 1-1: Using ep0 maxpacket: 16
[ 82.683495][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 82.694443][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 82.696103][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 82.704205][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 82.724683][ T48] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 82.733946][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 82.738185][ T42] usb 2-1: device descriptor read/8, error -71
[ 82.747871][ T48] usb 1-1: config 0 descriptor??
[ 82.898312][ T42] usb 2-1: device descriptor read/8, error -71
[ 82.916114][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 82.936168][ T4801] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 83.016713][ T42] usb usb2-port1: unable to enumerate USB device
[ 83.117709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 83.128884][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00
[ 83.138473][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 83.148042][ T4801] usb 3-1: Using ep0 maxpacket: 16
[ 83.155255][ T4801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 83.166242][ T4801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 83.169061][ T4813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.176075][ T4801] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 83.176111][ T4801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 83.178494][ T9] usb 5-1: config 0 descriptor??
[ 83.187510][ T4813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.197051][ T4801] usb 3-1: config 0 descriptor??
[ 83.235089][ T48] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[ 83.236529][ T4774] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 83.242318][ T48] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[ 83.256946][ T48] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[ 83.273804][ T48] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[ 83.372563][ C0] hrtimer: interrupt took 28604 ns
[ 83.424955][ T48] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71).
[ 83.428503][ T4774] usb 4-1: Using ep0 maxpacket: 32
[ 83.445002][ T4774] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 83.454169][ T4774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 83.458054][ T48] usb 1-1: USB disconnect, device number 3
[ 83.488365][ T4774] usb 4-1: config 0 descriptor??
[ 83.502661][ T4774] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 83.661079][ T9] ==================================================================
[ 83.669172][ T9] BUG: KASAN: slab-out-of-bounds in asus_report_fixup+0xdd8/0x1030
[ 83.677123][ T9] Read of size 1 at addr ffff888104a8b9a5 by task kworker/0:1/9
[ 83.684751][ T9]
[ 83.687065][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0
[ 83.696948][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
2024/06/06 13:03:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 83.707014][ T9] Workqueue: usb_hub_wq hub_event
[ 83.712078][ T9] Call Trace:
[ 83.715369][ T9]
[ 83.718314][ T9] dump_stack_lvl+0x116/0x1f0
[ 83.723035][ T9] print_report+0xc3/0x620
[ 83.727474][ T9] ? __virt_addr_valid+0x5e/0x580
[ 83.732537][ T9] ? __phys_addr+0xc6/0x150
[ 83.737071][ T9] kasan_report+0xd9/0x110
[ 83.741514][ T9] ? asus_report_fixup+0xdd8/0x1030
[ 83.746753][ T9] ? asus_report_fixup+0xdd8/0x1030
[ 83.751987][ T9] asus_report_fixup+0xdd8/0x1030
[ 83.757045][ T9] ? __asan_memcpy+0x3c/0x60
[ 83.761671][ T9] ? __pfx_asus_report_fixup+0x10/0x10
[ 83.767160][ T9] hid_open_report+0x1b3/0x7c0
[ 83.771947][ T9] ? __pfx_hid_open_report+0x10/0x10
[ 83.777268][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 83.783112][ T9] asus_probe+0x639/0xe50
[ 83.787477][ T9] ? __pfx_asus_probe+0x10/0x10
[ 83.792372][ T9] ? hid_match_id+0x278/0x300
[ 83.797079][ T9] ? __pfx_asus_probe+0x10/0x10
[ 83.801954][ T9] hid_device_probe+0x2eb/0x490
[ 83.806837][ T9] ? __pfx_hid_device_probe+0x10/0x10
[ 83.812239][ T9] really_probe+0x23e/0xa90
[ 83.816770][ T9] __driver_probe_device+0x1de/0x440
[ 83.822090][ T9] driver_probe_device+0x4c/0x1b0
[ 83.827139][ T9] __device_attach_driver+0x1df/0x310
[ 83.832548][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 83.838473][ T9] bus_for_each_drv+0x157/0x1e0
[ 83.843345][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 83.848746][ T9] ? lockdep_hardirqs_on+0x7c/0x110
[ 83.853966][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 83.859806][ T9] __device_attach+0x1e8/0x4b0
[ 83.864603][ T9] ? __pfx___device_attach+0x10/0x10
[ 83.869918][ T9] ? do_raw_spin_unlock+0x172/0x230
[ 83.875141][ T9] bus_probe_device+0x17f/0x1c0
[ 83.880020][ T9] device_add+0x114b/0x1a70
[ 83.884563][ T9] ? __pfx_device_add+0x10/0x10
[ 83.889448][ T9] ? __debugfs_create_file+0x413/0x660
[ 83.894939][ T9] hid_add_device+0x37f/0xa70
[ 83.899648][ T9] ? __pfx_hid_add_device+0x10/0x10
[ 83.904873][ T9] ? __raw_spin_lock_init+0x3a/0x110
[ 83.910174][ T9] usbhid_probe+0xd24/0x1400
[ 83.914771][ T9] usb_probe_interface+0x309/0x9d0
[ 83.919897][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 83.925541][ T9] really_probe+0x23e/0xa90
[ 83.930054][ T9] __driver_probe_device+0x1de/0x440
[ 83.935353][ T9] driver_probe_device+0x4c/0x1b0
[ 83.940388][ T9] __device_attach_driver+0x1df/0x310
[ 83.945775][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 83.951678][ T9] bus_for_each_drv+0x157/0x1e0
[ 83.956708][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 83.962088][ T9] ? lockdep_hardirqs_on+0x7c/0x110
[ 83.967296][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 83.973120][ T9] __device_attach+0x1e8/0x4b0
[ 83.977896][ T9] ? __pfx___device_attach+0x10/0x10
[ 83.983193][ T9] ? do_raw_spin_unlock+0x172/0x230
[ 83.988397][ T9] bus_probe_device+0x17f/0x1c0
[ 83.993257][ T9] device_add+0x114b/0x1a70
[ 83.997778][ T9] ? __pfx_device_add+0x10/0x10
[ 84.002645][ T9] ? wakeup_sysfs_add+0x51/0x60
[ 84.007513][ T9] usb_set_configuration+0x10cb/0x1c50
[ 84.013068][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 84.019148][ T9] usb_generic_driver_probe+0xb1/0x110
[ 84.024620][ T9] usb_probe_device+0xec/0x3e0
[ 84.029387][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 84.034769][ T9] really_probe+0x23e/0xa90
[ 84.039283][ T9] __driver_probe_device+0x1de/0x440
[ 84.044579][ T9] ? usb_driver_applicable+0x1c7/0x220
[ 84.050047][ T9] driver_probe_device+0x4c/0x1b0
[ 84.055080][ T9] __device_attach_driver+0x1df/0x310
[ 84.060552][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 84.066461][ T9] bus_for_each_drv+0x157/0x1e0
[ 84.071316][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 84.076694][ T9] ? lockdep_hardirqs_on+0x7c/0x110
[ 84.081894][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 84.087719][ T9] __device_attach+0x1e8/0x4b0
[ 84.092493][ T9] ? __pfx___device_attach+0x10/0x10
[ 84.097796][ T9] ? do_raw_spin_unlock+0x172/0x230
[ 84.102998][ T9] bus_probe_device+0x17f/0x1c0
[ 84.107858][ T9] device_add+0x114b/0x1a70
[ 84.112375][ T9] ? __pfx_device_add+0x10/0x10
[ 84.117237][ T9] ? usb_detect_static_quirks+0x335/0x3e0
[ 84.122974][ T9] usb_new_device+0xd90/0x1a10
[ 84.127743][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 84.132947][ T9] hub_event+0x2e66/0x4f50
[ 84.137374][ T9] ? __pfx_hub_event+0x10/0x10
[ 84.142143][ T9] ? __pfx_lock_acquire+0x10/0x10
[ 84.147180][ T9] ? __pfx_lock_release+0x10/0x10
[ 84.152222][ T9] process_one_work+0x9fb/0x1b60
[ 84.157167][ T9] ? __pfx_hcd_resume_work+0x10/0x10
[ 84.162454][ T9] ? __pfx_process_one_work+0x10/0x10
[ 84.167836][ T9] ? assign_work+0x1a0/0x250
[ 84.172443][ T9] worker_thread+0x6c8/0xf70
[ 84.177040][ T9] ? __kthread_parkme+0x148/0x220
[ 84.182075][ T9] ? __pfx_worker_thread+0x10/0x10
[ 84.187188][ T9] kthread+0x2c1/0x3a0
[ 84.191271][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 84.196485][ T9] ? __pfx_kthread+0x10/0x10
[ 84.201091][ T9] ret_from_fork+0x45/0x80
[ 84.205520][ T9] ? __pfx_kthread+0x10/0x10
[ 84.210118][ T9] ret_from_fork_asm+0x1a/0x30
[ 84.214895][ T9]
[ 84.217908][ T9]
[ 84.220225][ T9] Allocated by task 9:
[ 84.224282][ T9] kasan_save_stack+0x33/0x60
[ 84.228972][ T9] kasan_save_track+0x14/0x30
[ 84.233660][ T9] __kasan_kmalloc+0x8f/0xa0
[ 84.238258][ T9] kmalloc_node_track_caller_noprof+0x200/0x3e0
[ 84.244512][ T9] kmemdup_noprof+0x29/0x60
[ 84.249028][ T9] hid_open_report+0x133/0x7c0
[ 84.253800][ T9] asus_probe+0x639/0xe50
[ 84.258142][ T9] hid_device_probe+0x2eb/0x490
[ 84.262999][ T9] really_probe+0x23e/0xa90
[ 84.267510][ T9] __driver_probe_device+0x1de/0x440
[ 84.272802][ T9] driver_probe_device+0x4c/0x1b0
[ 84.277838][ T9] __device_attach_driver+0x1df/0x310
[ 84.283217][ T9] bus_for_each_drv+0x157/0x1e0
[ 84.288066][ T9] __device_attach+0x1e8/0x4b0
[ 84.292837][ T9] bus_probe_device+0x17f/0x1c0
[ 84.297692][ T9] device_add+0x114b/0x1a70
[ 84.302210][ T9] hid_add_device+0x37f/0xa70
[ 84.306982][ T9] usbhid_probe+0xd24/0x1400
[ 84.311574][ T9] usb_probe_interface+0x309/0x9d0
[ 84.316693][ T9] really_probe+0x23e/0xa90
[ 84.321201][ T9] __driver_probe_device+0x1de/0x440
[ 84.326512][ T9] driver_probe_device+0x4c/0x1b0
[ 84.331541][ T9] __device_attach_driver+0x1df/0x310
[ 84.336923][ T9] bus_for_each_drv+0x157/0x1e0
[ 84.341772][ T9] __device_attach+0x1e8/0x4b0
[ 84.346543][ T9] bus_probe_device+0x17f/0x1c0
[ 84.351400][ T9] device_add+0x114b/0x1a70
[ 84.355914][ T9] usb_set_configuration+0x10cb/0x1c50
[ 84.361374][ T9] usb_generic_driver_probe+0xb1/0x110
[ 84.366845][ T9] usb_probe_device+0xec/0x3e0
[ 84.371608][ T9] really_probe+0x23e/0xa90
[ 84.376120][ T9] __driver_probe_device+0x1de/0x440
[ 84.381413][ T9] driver_probe_device+0x4c/0x1b0
[ 84.386445][ T9] __device_attach_driver+0x1df/0x310
[ 84.391827][ T9] bus_for_each_drv+0x157/0x1e0
[ 84.396683][ T9] __device_attach+0x1e8/0x4b0
[ 84.401452][ T9] bus_probe_device+0x17f/0x1c0
[ 84.406311][ T9] device_add+0x114b/0x1a70
[ 84.410827][ T9] usb_new_device+0xd90/0x1a10
[ 84.415588][ T9] hub_event+0x2e66/0x4f50
[ 84.420002][ T9] process_one_work+0x9fb/0x1b60
[ 84.424941][ T9] worker_thread+0x6c8/0xf70
[ 84.429539][ T9] kthread+0x2c1/0x3a0
[ 84.433610][ T9] ret_from_fork+0x45/0x80
[ 84.438038][ T9] ret_from_fork_asm+0x1a/0x30
[ 84.442810][ T9]
[ 84.445123][ T9] The buggy address belongs to the object at ffff888104a8b9a0
[ 84.445123][ T9] which belongs to the cache kmalloc-8 of size 8
[ 84.458825][ T9] The buggy address is located 0 bytes to the right of
[ 84.458825][ T9] allocated 5-byte region [ffff888104a8b9a0, ffff888104a8b9a5)
[ 84.473144][ T9]
[ 84.475467][ T9] The buggy address belongs to the physical page:
[ 84.481879][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104a8b
[ 84.490725][ T9] anon flags: 0x200000000000000(node=0|zone=2)
[ 84.496879][ T9] page_type: 0xffffefff(slab)
[ 84.501570][ T9] raw: 0200000000000000 ffff888100041500 0000000000000000 dead000000000001
[ 84.510154][ T9] raw: 0000000000000000 0000000080800080 00000001ffffefff 0000000000000000
[ 84.518729][ T9] page dumped because: kasan: bad access detected
[ 84.525140][ T9] page_owner tracks the page as allocated
[ 84.530845][ T9] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3331808217, free_ts 0
[ 84.548386][ T9] post_alloc_hook+0x2d1/0x350
[ 84.553156][ T9] get_page_from_freelist+0x132e/0x25e0
[ 84.558710][ T9] __alloc_pages_noprof+0x21e/0x2290
[ 84.564088][ T9] alloc_slab_page+0x56/0x110
[ 84.568762][ T9] new_slab+0x84/0x260
[ 84.572842][ T9] ___slab_alloc+0xdac/0x1870
[ 84.577530][ T9] __slab_alloc.constprop.0+0x56/0xb0
[ 84.582910][ T9] __kmalloc_noprof+0x32b/0x3d0
[ 84.587854][ T9] acpi_ns_internalize_name+0x145/0x220
[ 84.593419][ T9] acpi_ns_get_node_unlocked+0x164/0x310
[ 84.599055][ T9] acpi_ns_get_node+0x4c/0x70
[ 84.603732][ T9] acpi_get_handle+0x106/0x280
[ 84.608494][ T9] acpi_has_method+0x7b/0xc0
[ 84.613098][ T9] acpi_init_device_object+0xc62/0x1940
[ 84.618657][ T9] acpi_add_single_object+0xeb/0x1b50
[ 84.624041][ T9] acpi_bus_check_add+0x233/0xca0
[ 84.629077][ T9] page_owner free stack trace missing
[ 84.634432][ T9]
[ 84.636748][ T9] Memory state around the buggy address:
[ 84.642367][ T9] ffff888104a8b880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 84.650422][ T9] ffff888104a8b900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 84.658482][ T9] >ffff888104a8b980: fa fc fc fc 05 fc fc fc 00 fc fc fc 05 fc fc fc
[ 84.666532][ T9] ^
[ 84.671636][ T9] ffff888104a8ba00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 84.679696][ T9] ffff888104a8ba80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 84.687750][ T9] ==================================================================
[ 84.696016][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.703218][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0
[ 84.713123][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 84.723188][ T9] Workqueue: usb_hub_wq hub_event
[ 84.728241][ T9] Call Trace:
[ 84.731530][ T9]
[ 84.734470][ T9] dump_stack_lvl+0x3d/0x1f0
[ 84.739087][ T9] panic+0x6f5/0x7a0
[ 84.743002][ T9] ? __pfx_panic+0x10/0x10
[ 84.747445][ T9] check_panic_on_warn+0xab/0xb0
[ 84.752402][ T9] end_report+0x117/0x180
[ 84.756755][ T9] kasan_report+0xe9/0x110
[ 84.761188][ T9] ? asus_report_fixup+0xdd8/0x1030
[ 84.766416][ T9] ? asus_report_fixup+0xdd8/0x1030
[ 84.771654][ T9] asus_report_fixup+0xdd8/0x1030
[ 84.776714][ T9] ? __asan_memcpy+0x3c/0x60
[ 84.781331][ T9] ? __pfx_asus_report_fixup+0x10/0x10
[ 84.786824][ T9] hid_open_report+0x1b3/0x7c0
[ 84.791620][ T9] ? __pfx_hid_open_report+0x10/0x10
[ 84.796937][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 84.802784][ T9] asus_probe+0x639/0xe50
[ 84.807153][ T9] ? __pfx_asus_probe+0x10/0x10
[ 84.812040][ T9] ? hid_match_id+0x278/0x300
[ 84.816748][ T9] ? __pfx_asus_probe+0x10/0x10
[ 84.821631][ T9] hid_device_probe+0x2eb/0x490
[ 84.826517][ T9] ? __pfx_hid_device_probe+0x10/0x10
[ 84.831928][ T9] really_probe+0x23e/0xa90
[ 84.836468][ T9] __driver_probe_device+0x1de/0x440
[ 84.841787][ T9] driver_probe_device+0x4c/0x1b0
[ 84.846844][ T9] __device_attach_driver+0x1df/0x310
[ 84.852244][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 84.858164][ T9] bus_for_each_drv+0x157/0x1e0
[ 84.863045][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 84.868449][ T9] ? lockdep_hardirqs_on+0x7c/0x110
[ 84.873673][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 84.879516][ T9] __device_attach+0x1e8/0x4b0
[ 84.884314][ T9] ? __pfx___device_attach+0x10/0x10
[ 84.889715][ T9] ? do_raw_spin_unlock+0x172/0x230
[ 84.894933][ T9] bus_probe_device+0x17f/0x1c0
[ 84.899805][ T9] device_add+0x114b/0x1a70
[ 84.904340][ T9] ? __pfx_device_add+0x10/0x10
[ 84.909224][ T9] ? __debugfs_create_file+0x413/0x660
[ 84.914709][ T9] hid_add_device+0x37f/0xa70
[ 84.919412][ T9] ? __pfx_hid_add_device+0x10/0x10
[ 84.924639][ T9] ? __raw_spin_lock_init+0x3a/0x110
[ 84.929945][ T9] usbhid_probe+0xd24/0x1400
[ 84.934554][ T9] usb_probe_interface+0x309/0x9d0
[ 84.939689][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 84.945339][ T9] really_probe+0x23e/0xa90
[ 84.949868][ T9] __driver_probe_device+0x1de/0x440
[ 84.955178][ T9] driver_probe_device+0x4c/0x1b0
[ 84.960231][ T9] __device_attach_driver+0x1df/0x310
[ 84.96562