last executing test programs: 1.165515271s ago: executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0xffffffffffffffc0, 0x301000) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0xc39) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x11, 0x1, &(0x7f0000000500)="10"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) syz_usb_ep_write(r1, 0x81, 0x81, &(0x7f0000000180)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78581995, 0x903d01) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) 560.395414ms ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x81, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x401c5820, &(0x7f00000001c0)) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r2, &(0x7f0000003000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c68a43c4aa95ddd5adda44c7d132c5a51435d891e0804aa2f10e6ac281ec9f9e4538066bb7b9d692f30357780059f3bb86876d2ed600588fbd47a73825e61607fc361a459ee650333870af5d4c828d7f7799f662e7f043292136de6a9c3d928d95ed36f316329fe4a37af00bc0f200045538ba0961168a72ce5a358100d07b9c92c687926dd42b4a85ba8b7b150a99a000f4b3985c277ee70ff96c12c2c5625677f29cbcbf1cf9228c35f3a1bcf71e3a69b959413ce88746fbd18ac526335460496df9afb86c9011482dd00e57cf2898ad963f993d5fd94927aab1321cedc606d52d24c97997a04b5bebcbf2b55be90e35055b4a5d1b6eb70f7a7e5544c44d8a9f0f35755da03f642d385641b7d814d6c4aff7bfa4cf9b20c67633d517cb4fc431a5fc34d758e0bbb4860a05b5044aea1bcc14ff9ecb81e98af787abddff559ad8ea005e8efc5a9588b2dee9028e633e66c6c425f72c7c655b64b1284d21892e332dc53095268ad9a74b033f1cffc462177fae09fa528769fa5c4ed497cfd3119afae90c8a5fe2114a21595275ae10bbbe2aaee8a366a185235670049c5503e570f52087c53ab0c38db6b0b028e635fcb8882d0bb1be1872bd75f937aff57c7026525bfc2414250f8978e156de8bd6f2e15f026ee7333c9cf8892f81e868f9bccf942c77259808a14127df1b7ebee12b25041ba61afb81c9c4bccaaa0b181c74f6d6bc084d665ea4a744bc2364e6ad5fa3da0230ea4d1ffa883c3fe852e7a64ae91185f64a99e56beb11321f92a6dfe668a9d41acf9921c2497c0aaeae50c441fdf34fca82cc58ff1961eb6bd2eea0bea29213fcb39c5bd5199b3f0a7bda8629c9a98b6ebad502293f9f2c835b12c69d630cbea6b0e0c97ce8110d852bbc9e0a9a1eea66c2d0e47a6d51d44e2d8a8a5a980828bf0de3eea059f2597f398cb50cf2d9704dcef49ad9f5d3b4bd8729d57a7e665708780863d1f96c204cedba74cae9ee7b433d50a2bbedad81ba2aaff9d1a8e15bbc13ae86f469bffae227592768b968f27042137ec2568304448b8209f9b1822c899fa47f189aae3aa1e0e115581dc1c1dac3141e0dfeb85e87a12952852d5018f8f0d5ad5975320ae356b847f6cc9c89bb9d7a5e6728584a97b77a8054e129aac35623e30c169d444f0c58adb4148d734eb26fe57dad156ebf0a985ff946583dade5f183687997b7302f207840ced708719df301880d6fddf6e38fb04bd8c069303d55f6c8a07275434eaad6f8435f4096fe909c7e02f317c28975a7bad6ae1d883244ba6e72f5fcb24d832562449866b7bc6878775237dc5c0d9ccb1cd3b6fe67794a5af53ea7fb01de105809a84496ed2f03e20b1dfdab3d4cb21d8b4998f77595c4b99c183c821989fec094cb91ede61bf5c0d116c3116f903715e692675196d7e499a118c788a09a8f687aefd10af1c34f670dce4b5e628715ddcde04acc7299db87db83f8ef0d7c1d9979d7894d3d0d16e536d25789e86f2cab2856cf0b71efd91757f157da3300b1374fe80ea0d05b5ec52434f5b8c20dee83d2b92f338d4a3339aa3a78bf79d8260c55d002618b1444952bad36ba1c17dc801c1ad008f2bebdee89c54d582fdd89da995c5eb7b4c923c1e1d9d29207e92e913fa2187a10302052e6fa0da1c6134db7a4ad2679a0558a43d4d05d60cfa0ee41c7f458951a54173d91139142573794c594c65f25b93d7b7499956a2a5614a5aebc1567ea47cef87fca1d2a82d7f9eabdb7a933ffba467a3e26eeec8ab0a31358589cf451fbc90a9619c470424afc464308bf02b4208a72be8f74cc840fca700ae6e147da83fa27216179ef984c1dfce0c7bb5c8e0ac23b97748905b219bd75ef425a334660ec930b4ef6cc3ab0429794649149404d856d9c6ddaf69c66b60aabe8d214973f74db7760d26f9699a32246a0947a0af6a26841386298ff61a32bac3aa6e8fa5260c19e0b5db71a11d45ed34cb9a48ca56d1d2516e110e510aa5eddbbc207220dd7ac2fd77f1e219e6097e3a5cd15662c80169d00fb69cdac5e7246fdfdead45f91d8f3bc6c878d8ff0182e0f9efdc9330d55a04a01f08825e6e7df9e552f8f630f3344150c0bad7901eb9ef11c56fee9d86a7781bd34ed0c4da0a59366c7bc31fe01e8b01ceb9ed833c9759df103ab0e644282e951a0cc50e6c76217bebe6a2e6be568fc3670ce621f2379b22b77340986dc323e5f252ce4ff3a87295fb2d124ce7cd8afb00c1e3c187d0abbd448196256ac652112073ccae7577d27cbe3df18321e0fb435629737f51e849abadc065b8fdbe846ab31d11eaf80ef27eb60eca3d12944c43152a67c7e3ca484c4f325076846f87063e79f893d7f872a1cc4167b7f8474166ebc43e5c1e1adc6c963d77d6c9dd164cd37e12e8ce4699cd500a3b060bac1d778bbe2a5d36bc816ff5e75e8a32704a0f326a3a46c703549e0a7ef88f0fbde6598591f66aec1813cfc0de35986d0151ee79e1297a8932b400996672f092b50718f5ffb0159044552bae06811bc42d5b90e7cba3fc775916af5861d0025a1d3957a93f704e5ab5c2876e477a8a9df7efe6661c7e208cddf8f1a15bf030206a64f69e2fc26cfbcf1315d5f6d189e0da3c69c3bbcc14f70d6a6b02644e36decc52992545238112b5f3c2a80036a8af0ad8381b97162a7ff0565e2945f0182b13d6235437dee1a8f48aa847a6aafdf699dcec9e46c63f26e7fffb70a54129b7494ee3d9d97e220d2e418735d129be91bf24f0d0b22f9ef6dca7fdb60a34b59e3fda4d364d18451d385fd17dff74519a1f22470781c86d07fa66ffffab1d6aa413362570d38780340bdeeee6d4c5da51512c0757d69cac48c7c44441e1abb06b6a8943c093d732e8b39f85570c3e846a62b4cda5c0c5974a001433c8e3ffae9afff41419c0caa58f6853067bfb92b55c6ecd58503b8deebc44ab258064787dbeef58b0914dbc8cea6bffbe619ff976d7987648457ee49c7744f58f919906c1987bebfb13b14ef8bc40dc7a95c34a825efd517c95fa5380073421efb95ae6e4ff3ece3f4501c918521b230dd169ee6ddb5f09c8762287c28a2b9a75d569f392bb7184edae72084e1fc295347d16caabe0196a7f679687f399dfaaffc537544b9f8cf27b2a44217187308845ce2bb3227412aa9d6a582800540fb715e0483c96f5e66247616f59bc275036b622502191ca3b29749f79675f88a6ad9b304e9cbe21a2c817db9622bac725246a71b9c8659d81b75cc1d37ca5797270ef9f82124a2077ea408bd01dfc53cb701a2b276e322ee4ff268e540781b8d4066d75747aa27342c842ea569679f6d0146bf3c5fcd57f10cdc2a1cab835cf9e6c8924d4808c3beeb16c47f58484d0dc60a38612a4caeef41cc3b6c7adb651c2e024ec75c5a4af98450aac1638ae45c9cb902723d584ecef25345bb33255f65b0cc469c19a1ec84045a7e8388f7391ad31606cb6e3e46cf7eb48996a96ff4b7a2d97a8cb5da97842b28fc48b279ab99da252fffbd0034667c51e12406ea161dd9ea19bbe33ee464a45fed53939d104deb7febc9b362320d2c3008e27ae7094274bb75b7379e8db191ef34e1d9b648dda3de37c59fd2e6d569398c9fb3529976f12ea64a67f66a577ceed99da2899edc953feef13e3ac6952bef1c2443d25e6cabb7fb538920255650a7ffa05d43b9d87c2ed323b4edbf39f5a101986f2ef41cb14565d9f86584008548e6688fda0e95f13c3856368fafee0bc673d0d9cde94e500398785c14fcad3082684817d2d1ea4c96c207f2b12036ce0954639f4e4f2e0ff5bf4af919464359fb67208401cb1e6196e64534871a74e888b16dcc4f6c8872cd2f973788c5048e30ef9d863534017f4c35ae35dbc96d9bf487a181b2edeeb8d5bade6d0df4214a70a1feb58b0bc94eb601b8a2c0f3d4012bc215d0bc3fc9f548d58a02df1a4a5b071829665be43396bc8de262f69f245888699c611354428c9f31ac0a59cbb6fd1cddcfb7cbc5a1fb4d10627d8e37940052945c1da8c9994ef34372baad992cbaa20511c0064762d70edcfd6da5c4d7ed9a9e951656ce24b22f32bdef9707ecbb725b64c31ba0466259600260513d9f7652661d32e77236a4eb35597ad9962d93138374af9e09a14ff3b60f5b7e024b9f9867a9c13260115023ed09b11ae64cbafdafbdca3fbc5075ce311e18510a5220841813a3e0fab2e6f3e42e4ef745058bad080ab61a5c3393ab2e59e3e57707d0ca9c6978eb516204cd1492097fd44dbe46b6ea2c650f8aa7bb48f836bcdbe6748f2cd52314f1bc9594531b598e44f82e80ae4a0d09d713dffc1444c948ae98ffe49ec1985b12870d104942bcfa7aca4c55d01b160cac2f67bc9eeeac3fc04708de40e4b9cee99e8c1409f3a161f3dbf4eda628f92df6b51939bcf6d5edbac55cc28480f9ca49bc1d4dc5139bfb5755c6217b784c5e337102e9f5d290d66c712548110eb65c92927409a4c8f8caa8ba8d50ef09a7d0c4077593dc7394416ec21daf38c7460e0bb5584b463f3080d453f39f39c5ed7a0bdc402447a2f77154dbeebc951fecbe5c6d95daa82a849c52909b06eca7edb175ecef1f4a1bbdfde650ccfe7ee1d79f68ad372b238a6edf93a7893912b33c4ad59ef9c7d4074329b5a35712a956397b941f7f660542127cff35e1dcb0b0d6ef3352537cda87a274022d81e0ed7b9a7a9249e00f934bcc8f4c3dc8ee8225f6cc5d91d343bf7e1d866716bfd3f651ce04fa6504229a0cfba1600ab8a9ddf670c59737558dccabb39436f507b60377e438f7ebfdefc4bed6ef3716cd75ebebdbddfddf79ab2f28093b1fb0de2fbedd8ca1a1c0103396ff2b5b8d698e0317c9da7cfe8de0856c2156305fa90d22ac0cb1706a12fbb80596202d6d286422c1f8ce8e70e2c43449b4e5f457c1ed92354f1bbb9ebd0c72e13639ff5e0f4e4a21593b8c05bec7f6dd097bc23bc8e202241f8f5fe81ad72479c5f4542b79644f722d80e140b8a0ed3a7f09702b3340f0e2d3e69c5c26c1e6d08621297670a006d07496f5cc09edb1841d941ccf1fb9f9ef5391d1a11a4638aa287fe87a8dda89eba495f6ad25f50f69773143961d076558fa10482f615fe8d5c8fdf2d3265c76bd23b7de8ea1204d1ad0c8d787d59ae47e000b61812dcba8a8253af88d6575b6001180bb4bd6e811338d07848737fa6b368447ed640af0c2edec2284056b05ae4bd5e939d0097daf22433eeca39548cee7d197c31b8aa1e9780d834a0c5396b34aa53aa725844cb7afda83dbf3caebe9a2bbc2174a8e2f8a48e4af3d4a1ee3690a81ae4f2ca0a70145720da67083576058d7b6cd1e7ac86bbed5d3247cc918d20bcbf053675dadb3970e06621748299c17b93c8b969904e72d6bffddc31ed279b5cf4df1799c4b0988c8f87505652c3626bc33f26361e496db09bae6ad6b26a6a1dd0506be9139905368256638468b596ac343fea3e5511899d757c4ea1f571a189545e6e6282833ef18f2b2962b3905ccf69f4bfd0e07268f2c4dc80c68b24b9555ef3eb3d4a9a52f4a993c260e4563319a8b13052be67c5dff1d54c250267c912d50a47f384daf400b728a9ac53ffc0019d9e39ed42c17bb1ee49ff65b3f", 0x6bc47488d130961f) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "a3635106"}, @local=@item_4={0x3, 0x2, 0x4, "b83ac76b"}]}}, 0x0}, 0x0) 289.797746ms ago: executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x5, 0xc8, {0xc8, 0x21, "d1a6a9b5d9708c8452e58c0498cab9fed7bf3cc59e09c8da8f45f10c878f67e8cef69c93b9a56d65a56faed4b48ccd2dabab37acc266bd1a97e0ff477194d0b1d7e93bfcd0ca23b162825eb0d6cc26218f68c50e41b03c8523e12e455e22075459bde5ead4ad8aac4546d941ecbafe23061189405cf37258b8b50ee319441a56ffb67f0596cc0004f238ccf9eedc35f6e7dbb2b57e1cc30b1d309a6f21631606f75803b89e05d067a0dbce8d8671d6b058d53a72506b77fbfebae45d929783a3deec2d25d809"}}, &(0x7f0000000000)={0x0, 0x3, 0x35, @string={0x35, 0x3, "f45b6df48b1545645229278d1ec86c7b3750baeaffe1274995ce55ac261d313eaf4aa303a89ebd6afd9fd2ceabcf204e53edb9"}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0xd, 0x86, "e8fc76c6966195a54d62f08b616f287982a98404f390507b0e403771a7aad92c900918bc2ceb4e6b8a2b435ffd7481c494176e172b87bcb2b405e1097e091847ff9850bc82cffd7552d6d52527cfab019810fcd2c1d6b31fa6f1a8601efdde1370c7bb74f7d578c4b1424b2d2e0e713cd80e4f4cc48bcd8e27a043d53923a4a57e02ffadd437"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x61, {0x5f, "89f311b3626e5cd82da5fd3a38249639a3f128d7477220e12920af2d84f00d4a4158b4f35882578a2424fac2a9823555d338ab360d7fcb634cfc617f7f46e79c67d42ae509874d76a37fe315dcd424c376edf87965d552d6e22facb5dac4f1"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x28}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x28}}) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 195.40006ms ago: executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "00001182062b650900eb4e00fb6a82714456862f9916ebff0005000000408000"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x5f, 0x0, 0x0, 0x6, "c0836a6e5b1c660634b1f12f2bf89d4bcd5712b3781ab55cfdf695c82af51d98"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x5f, 0x0, 0x0, 0x6, "c0836a6e5b1c660634b1f12f2bf89d4bcd5712b3781ab55cfdf695c82af51d98"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x400001) ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000002b00)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000040800c24020000000100200000006155a9770b3da509040100000940000000000725010000000009040200000102"], 0x0) 0s ago: executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/148) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000580)=""/175) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x101, 0x52001) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000200)={0x352, "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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. 2024/05/29 02:16:23 fuzzer started 2024/05/29 02:16:24 dialing manager at 10.128.0.163:30028 [ 36.373584][ T2510] cgroup: Unknown subsys name 'net' [ 36.504301][ T2510] cgroup: Unknown subsys name 'rlimit' 2024/05/29 02:16:27 starting 5 executor processes [ 39.038937][ T2514] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.481492][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.696383][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.707591][ T36] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.716744][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.777857][ T36] usb 4-1: config 0 descriptor?? [ 81.021401][ T2210] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.218502][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.229541][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.240029][ T2210] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.241485][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.253109][ T2210] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 81.269758][ T2210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.283292][ T36] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 81.297306][ T36] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 81.315256][ T2210] usb 5-1: config 0 descriptor?? [ 81.361290][ T4785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.407901][ T36] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 81.431778][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 81.444524][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 81.453151][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.463024][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.472880][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.482870][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.495940][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.505069][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.513184][ T726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.550780][ T4785] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 81.560042][ T4785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.572152][ T4785] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 81.581534][ T4785] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 81.589585][ T4785] usb 1-1: Manufacturer: syz [ 81.598727][ T4785] usb 1-1: config 0 descriptor?? [ 81.693900][ T4785] rc_core: IR keymap rc-hauppauge not found [ 81.700010][ T4785] Registered IR keymap rc-empty [ 81.708931][ T4785] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 81.723155][ T4785] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 81.725319][ T726] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 81.749142][ T4783] keytouch 0003:0926:3333.0001: pid 4783 passed too large report [ 81.761355][ T4806] usb 4-1: USB disconnect, device number 2 [ 81.769079][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 81.774684][ T9] usbtmc 3-1:16.0: can't read capabilities [ 81.782101][ T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.817983][ T726] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 81.827157][ T726] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 81.835229][ T726] usb 2-1: Manufacturer: syz [ 81.870722][ T726] usb 2-1: config 0 descriptor?? [ 81.925393][ T2210] ================================================================== [ 81.933496][ T2210] BUG: KASAN: slab-out-of-bounds in asus_report_fixup+0xdd8/0x1030 [ 81.941457][ T2210] Read of size 1 at addr ffff888103ae9805 by task kworker/1:2/2210 [ 81.949370][ T2210] [ 81.951720][ T2210] CPU: 1 PID: 2210 Comm: kworker/1:2 Not tainted 6.10.0-rc1-syzkaller #0 [ 81.960156][ T2210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 81.970234][ T2210] Workqueue: usb_hub_wq hub_event [ 81.975310][ T2210] Call Trace: [ 81.978611][ T2210] [ 81.981560][ T2210] dump_stack_lvl+0x116/0x1f0 [ 81.986289][ T2210] print_report+0xc3/0x620 [ 81.990736][ T2210] ? __virt_addr_valid+0x5e/0x580 [ 81.995806][ T2210] ? __phys_addr+0xc6/0x150 [ 82.000350][ T2210] kasan_report+0xd9/0x110 [ 82.004793][ T2210] ? asus_report_fixup+0xdd8/0x1030 [ 82.010033][ T2210] ? asus_report_fixup+0xdd8/0x1030 [ 82.015280][ T2210] asus_report_fixup+0xdd8/0x1030 [ 82.020347][ T2210] ? __asan_memcpy+0x3c/0x60 2024/05/29 02:17:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 82.024973][ T2210] ? __pfx_asus_report_fixup+0x10/0x10 [ 82.030461][ T2210] hid_open_report+0x1b3/0x7c0 [ 82.035252][ T2210] ? __pfx_hid_open_report+0x10/0x10 [ 82.040583][ T2210] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.046438][ T2210] asus_probe+0x639/0xe50 [ 82.050816][ T2210] ? __pfx_asus_probe+0x10/0x10 [ 82.055709][ T2210] ? __sanitizer_cov_trace_pc+0x33/0x60 [ 82.061301][ T2210] ? hid_match_id+0x278/0x300 [ 82.066015][ T2210] ? __pfx_asus_probe+0x10/0x10 [ 82.070909][ T2210] hid_device_probe+0x2eb/0x490 [ 82.075799][ T2210] ? __pfx_hid_device_probe+0x10/0x10 [ 82.081202][ T2210] really_probe+0x23e/0xa90 [ 82.085733][ T2210] __driver_probe_device+0x1de/0x440 [ 82.091053][ T2210] driver_probe_device+0x4c/0x1b0 [ 82.096119][ T2210] __device_attach_driver+0x1df/0x310 [ 82.101527][ T2210] ? __pfx___device_attach_driver+0x10/0x10 [ 82.107450][ T2210] bus_for_each_drv+0x157/0x1e0 [ 82.112343][ T2210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.117745][ T2210] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.122981][ T2210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.128822][ T2210] __device_attach+0x1e8/0x4b0 [ 82.133627][ T2210] ? __pfx___device_attach+0x10/0x10 [ 82.138959][ T2210] ? do_raw_spin_unlock+0x172/0x230 [ 82.144194][ T2210] bus_probe_device+0x17f/0x1c0 [ 82.149088][ T2210] device_add+0x114b/0x1a70 [ 82.153635][ T2210] ? __pfx_device_add+0x10/0x10 [ 82.158527][ T2210] ? __debugfs_create_file+0x413/0x660 [ 82.164022][ T2210] hid_add_device+0x37f/0xa70 [ 82.168744][ T2210] ? __pfx_hid_add_device+0x10/0x10 [ 82.173980][ T2210] ? __raw_spin_lock_init+0x3a/0x110 [ 82.179293][ T2210] usbhid_probe+0xd24/0x1400 [ 82.183912][ T2210] usb_probe_interface+0x309/0x9d0 [ 82.189059][ T2210] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.194720][ T2210] really_probe+0x23e/0xa90 [ 82.199258][ T2210] __driver_probe_device+0x1de/0x440 [ 82.204580][ T2210] driver_probe_device+0x4c/0x1b0 [ 82.209639][ T2210] __device_attach_driver+0x1df/0x310 [ 82.215054][ T2210] ? __pfx___device_attach_driver+0x10/0x10 [ 82.220988][ T2210] bus_for_each_drv+0x157/0x1e0 [ 82.225870][ T2210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.231265][ T2210] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.236932][ T2210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.242775][ T2210] __device_attach+0x1e8/0x4b0 [ 82.247571][ T2210] ? __pfx___device_attach+0x10/0x10 [ 82.252892][ T2210] ? do_raw_spin_unlock+0x172/0x230 [ 82.258115][ T2210] bus_probe_device+0x17f/0x1c0 [ 82.263017][ T2210] device_add+0x114b/0x1a70 [ 82.267564][ T2210] ? __pfx_device_add+0x10/0x10 [ 82.272449][ T2210] ? mark_held_locks+0x9f/0xe0 [ 82.277253][ T2210] usb_set_configuration+0x10cb/0x1c50 [ 82.282746][ T2210] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 82.288857][ T2210] usb_generic_driver_probe+0xb1/0x110 [ 82.294354][ T2210] usb_probe_device+0xec/0x3e0 [ 82.299141][ T2210] ? __pfx_usb_probe_device+0x10/0x10 [ 82.304538][ T2210] really_probe+0x23e/0xa90 [ 82.309075][ T2210] __driver_probe_device+0x1de/0x440 [ 82.314392][ T2210] ? usb_driver_applicable+0x1c7/0x220 [ 82.319881][ T2210] driver_probe_device+0x4c/0x1b0 [ 82.324937][ T2210] __device_attach_driver+0x1df/0x310 [ 82.330339][ T2210] ? __pfx___device_attach_driver+0x10/0x10 [ 82.336700][ T2210] bus_for_each_drv+0x157/0x1e0 [ 82.341576][ T2210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.346978][ T2210] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.352224][ T2210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.358085][ T2210] __device_attach+0x1e8/0x4b0 [ 82.362882][ T2210] ? __pfx___device_attach+0x10/0x10 [ 82.368198][ T2210] ? do_raw_spin_unlock+0x172/0x230 [ 82.373423][ T2210] bus_probe_device+0x17f/0x1c0 [ 82.378319][ T2210] device_add+0x114b/0x1a70 [ 82.382876][ T2210] ? __pfx_device_add+0x10/0x10 [ 82.387773][ T2210] ? usb_detect_static_quirks+0x335/0x3e0 [ 82.393548][ T2210] usb_new_device+0xd90/0x1a10 [ 82.398344][ T2210] ? __pfx_usb_new_device+0x10/0x10 [ 82.403573][ T2210] hub_event+0x2e66/0x4f50 [ 82.408023][ T2210] ? __pfx_hub_event+0x10/0x10 [ 82.412810][ T2210] ? __pfx_lock_acquire+0x10/0x10 [ 82.417874][ T2210] ? __pfx_lock_release+0x10/0x10 [ 82.422940][ T2210] process_one_work+0x9fb/0x1b60 [ 82.427908][ T2210] ? __pfx_hcd_resume_work+0x10/0x10 [ 82.431311][ T726] rc_core: IR keymap rc-hauppauge not found [ 82.433208][ T2210] ? __pfx_process_one_work+0x10/0x10 [ 82.439091][ T726] Registered IR keymap rc-empty [ 82.444432][ T2210] ? assign_work+0x1a0/0x250 [ 82.444473][ T2210] worker_thread+0x6c8/0xf70 [ 82.458529][ T2210] ? __kthread_parkme+0x148/0x220 [ 82.463592][ T2210] ? __pfx_worker_thread+0x10/0x10 [ 82.468439][ T726] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 82.468712][ T2210] kthread+0x2c1/0x3a0 [ 82.482839][ T2210] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.488085][ T2210] ? __pfx_kthread+0x10/0x10 [ 82.492708][ T2210] ret_from_fork+0x45/0x80 [ 82.497164][ T2210] ? __pfx_kthread+0x10/0x10 [ 82.501791][ T2210] ret_from_fork_asm+0x1a/0x30 [ 82.506594][ T2210] [ 82.509623][ T2210] [ 82.511950][ T2210] Allocated by task 2210: [ 82.516279][ T2210] kasan_save_stack+0x33/0x60 [ 82.520990][ T2210] kasan_save_track+0x14/0x30 [ 82.525697][ T2210] __kasan_kmalloc+0x8f/0xa0 [ 82.530319][ T2210] kmalloc_node_track_caller_noprof+0x200/0x3e0 [ 82.531912][ T726] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input7 [ 82.536573][ T2210] kmemdup_noprof+0x29/0x60 [ 82.551658][ T2210] hid_open_report+0x133/0x7c0 [ 82.556458][ T2210] asus_probe+0x639/0xe50 [ 82.560819][ T2210] hid_device_probe+0x2eb/0x490 [ 82.565699][ T2210] really_probe+0x23e/0xa90 [ 82.570237][ T2210] __driver_probe_device+0x1de/0x440 [ 82.575644][ T2210] driver_probe_device+0x4c/0x1b0 [ 82.580702][ T2210] __device_attach_driver+0x1df/0x310 [ 82.586197][ T2210] bus_for_each_drv+0x157/0x1e0 [ 82.591081][ T2210] __device_attach+0x1e8/0x4b0 [ 82.595883][ T2210] bus_probe_device+0x17f/0x1c0 [ 82.600759][ T2210] device_add+0x114b/0x1a70 [ 82.605293][ T2210] hid_add_device+0x37f/0xa70 [ 82.610011][ T2210] usbhid_probe+0xd24/0x1400 [ 82.614617][ T2210] usb_probe_interface+0x309/0x9d0 [ 82.619748][ T2210] really_probe+0x23e/0xa90 [ 82.624272][ T2210] __driver_probe_device+0x1de/0x440 [ 82.629586][ T2210] driver_probe_device+0x4c/0x1b0 [ 82.634636][ T2210] __device_attach_driver+0x1df/0x310 [ 82.640034][ T2210] bus_for_each_drv+0x157/0x1e0 [ 82.644902][ T2210] __device_attach+0x1e8/0x4b0 [ 82.649688][ T2210] bus_probe_device+0x17f/0x1c0 [ 82.654564][ T2210] device_add+0x114b/0x1a70 [ 82.659100][ T2210] usb_set_configuration+0x10cb/0x1c50 [ 82.664580][ T2210] usb_generic_driver_probe+0xb1/0x110 [ 82.670075][ T2210] usb_probe_device+0xec/0x3e0 [ 82.674860][ T2210] really_probe+0x23e/0