last executing test programs: 2.193254218s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000800), 0x10001, 0x20840) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000840)=0xfffffffb) ioctl$HIDIOCGUSAGE(r2, 0x4004480f, &(0x7f0000000100)={0x1}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652f890"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x21, 0x86, {0x86, 0x8, "6b20d77a5d2729d8f2426142488620dc5747d35a50fd235d2f92feee269ef020d94fee43149521901512e808aad3400f11317c3abdf7485fc40207c27029ce004b7ad61f18ee84bfbd0b00fdd4155309ba74b7bad11b278d397c3e43a2b263e333adb3204f0570aa712c747000fe36fcda4fb3781245967be84c3795828c6d2006ebe3c8"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3, @string={0x3, 0x3, 'Z'}}, &(0x7f0000000400)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x5, "d6"}, @main=@item_4={0x3, 0x0, 0xb, "ac0b81b5"}, @local=@item_4={0x3, 0x2, 0x3, "d72ff90e"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x4f, 0x1, {0x22, 0xc9d}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00d8c2000000b9587045755201901313726dc87ef3ed5cbbb4dafeac692ed21f733d44e347edd625e757a1eebdb3a2b6eceed034da43608ae373a4ec86f2388b3b4129ffe36278f26dc0f99a57dd37567695b3177563bb7c96db7d2c3e24cb7d54480b439d35028e2dc1ed26f403960ded29ab24aa8911ec8ff2cb6b8ddfa7e363c38474d72a557793713a430652f608cd7ee04385d43e6e79512635cab20ad67e27dd301f09f9df94d794522ea2e3d5007721250e637fbfae75376db9606c4f41df7b66000c628c"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xa4}, &(0x7f0000000640)={0x20, 0x1, 0xc0, "c620f9b87d95ccf8e56a75d56f5e8d4bff85fbd06e4a237a3b1ff1ec2119463e4e7670e74fe7d1e9aff5623eeaf89fd5f15fe0436d1c031034737bdc937236df93206d3b3e8b61e5ee45ad6ee708d63ac6f7966fc3dd7e086b9eed118bc3985c67791bb7be232ce5175e62e581721e0c35a2e51765c415f24fca113c25e789c6b4c856865fa4afafd951eeccc4adb9a40ae5253f14e792c14b3918ae4fb5f364893159d9e07d9c2f223138c8f8e258b0c946c8b50880d6a524c6bc5d4b31cfda"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x61}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d0f7b08cd0c390087b0000000010902120001000000000904"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @main=@item_012={0x2, 0x0, 0x0, "f792"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x4004480f, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0x83, 0x3f, 0x8, 0xf11, 0x1001, 0xa6a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6a, 0x19, 0x12}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x814}}, {0xf5, &(0x7f00000002c0)=@string={0xf5, 0x3, "290b98b2ecfd93ee3af0796f61a3343385678b6238c602be6f74bd023bf8865eb6e048936ce0063166fdf7c855b01e5bf2ce728f6cc87c6ff2a720395925a551bc5888ab4b19a865abc6ff41976a2e3587463686a4cf912a6ba2e3b22c4890b192449cac21d7491e98873bb289963e0970c1ed66b736d0f7dbf3e89fc6c50ab83b37f9a9e4d40b2c95618cc6dc46f12d334615abf0cb880ffe75506c351335f7efb1d2058312dec177cc222cec1f6882810ee8cbab25b53204374acace313f120c2a9486deec5ea76c9a75039c11a3e8234c3b2b7fc527b420c42de2fab025a4a46856d6a23e2b0c0f2e69aaff86ffe50c1a52"}}, {0x36, &(0x7f0000000240)=@string={0x36, 0x3, "82d28cba46686613e91dae2f5ad3e199fe82cb0534d3480fd1fe6a14157119b0ce1c8e3fe921a41f32b800"/52}}]}) 1.893852894s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905836d"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0490c0000000000001090200008d"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0xd, "3a82000000010000000000009d"}) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) syz_usb_connect(0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d1d7a444041601801f44010203010902070001000000000904926e98651acd9e0e515d333d4031285aba2f71e56b503365d2fb5ad96b0b66b0aee8ae6874d55fc9ab38a8514d8f14f89021c7d86e6c342c18d9379107e6af12cc72f7bc7d777429e5aa5c1377a491d81c7b802ae1ec6f831e4e82c88273cdfaf18146dd8c0a35864d45fab9c49a51d1e1fb7cae116fc5b513e6539cb5a376968c6ec26942e8f923b4132d64cf0b51d32f6d684f50a615686f52366ade33d7f9a5ae1f8492021b583362876dc168202bc24d1895672baceb7a58af2ca433899cf7b45673"], 0x0) ioctl$HIDIOCGRDESC(r1, 0x4030582b, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000019c0)=ANY=[@ANYBLOB="000004000000b7e24f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 1.617575728s ago: executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2000}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0xfffffffffffffe12) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) syz_usb_connect(0x6, 0x664, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0) 1.456719413s ago: executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x83, 0x3f, 0x8, 0xf11, 0x1001, 0xa6a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x6a, 0x19, 0x12, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 1.388482003s ago: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000002440)={{0x12, 0x1, 0x0, 0xd0, 0x80, 0x2, 0x8, 0x5d1, 0x2003, 0xe11b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0xa8, 0x8a, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x9d, 0x80, 0x18, 0x8, 0x10c4, 0xf003, 0x8d63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x53, 0xac, 0x95, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) 110.079893ms ago: executing program 2: syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x385200) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb1, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x19, 0x9, 0xff, 0x7}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xd, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x7, 0x3}]}, 0x1, [{0x102, &(0x7f0000000280)=@string={0x102, 0x3, "06264797a71e7f5f0d0dda753319ceab161b1bb16cc7b212392c226501f4db5db79ab8fd75d6007c436d3c42244fec90a139c75e70247a1bb1223d1993cf54656c9ffca72b029319155233c5359e8163fa65f9c947d2ea255d39d015fcc0939fe1af61efa348bc2a9fa4da8c166fe835e047d91db50787eccf3b1a129bb912d377681757fcd0f03dcf4809016cd3fb8908e363ee9c1100ac012b63823b81b5ab930e7e5ee9821579cf7b68284638182ff906f238bde7014b46340280dd8df875219b80821cb72de087cca142278bafa44953cd63f460d4ce5be6e7f633018ec0dd944f6c49cb7d599291ea185ebc5d99dbe9d0182d777d1e0eb6cdfc478b8ba4"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa4, 0x28, 0x87, 0x40, 0x46d, 0xa0e, 0x9475, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) 0s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "370393e0"}]}}, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2000) r1 = syz_usb_connect$cdc_ncm(0x4, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x1, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b6ae7926"}, {0x5, 0x24, 0x0, 0xc513}, {0xd, 0x24, 0xf, 0x1, 0xc1, 0x5, 0x5, 0x80}, {0x6, 0x24, 0x1a, 0x0, 0xe08648dcf327c42d}, [@network_terminal={0x7, 0x24, 0xa, 0x80, 0x5, 0x3, 0xe3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1f, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x40, 0x40}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x81, 0x7, 0x5, 0x10, 0x80}, 0x122, &(0x7f0000000140)={0x5, 0xf, 0x122, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x40, 0x3f, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xed, "db39b6c561026028c7134662c1acc7b9"}, @generic={0xfe, 0x10, 0xa, "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"}]}, 0x5, [{0x75, &(0x7f0000000280)=@string={0x75, 0x3, "40ed009989f943fffcc927af3a28ce0af12f7ae55292851dac0fe3661ab91033767c16979f84b0dfa85c2751da3436b03ee22326ac8d6caf40130862f4303a9e11898e922899195921c0d92f878722befc3414ccc383eb86c62fdc8929d3c98146f4b0c9f71c97babdddf5281be517b0356123"}}, {0x92, &(0x7f0000000300)=@string={0x92, 0x3, "9e8797a0149eece037d3df735cbd741241a2c2e05e6b5597147abd5ad9f6457333d2d4bfffe0bcecabe1e2d7a301863899212a23aa30dc20275343af237c2884371b35a04ca12c7cbdaf5725cac8e7fb91b6087e5bf7b366544db92138d216b2ebe460936c7c8665fbaebe9a806cf746a26b603b402586c72af8acdbcfa7468b251850d1a2afeaa27ac072999cd80b11"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}, {0x91, &(0x7f0000000440)=@string={0x91, 0x3, "f97346ad01b9fa0c49acff496b96004f3cab633016839b6b539350031394acd14bb076e898fb66c1e287a9601e044839f81247e8f6d96a65555802b157ec503ef052d2e679b6eef5ccaec02f39745488b8af65b5aebeab0f21f74b89bbab966a659536cca25736af62aeb823895ca86c9e63442e11453166be96272d637231d0f3f2324d79fbee215e9ee7bcd0805a"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x7addf2f30b3438ad, 0x5b, {0x5b, 0xb, "62ffbada4e09521368ebaa9c5caeb43035ae96b9882b352efca10b6e9f0e80abf9023de6c549b2eeb4865e9b4999c2baa97600ee0498882100f285a583a173112d38012bdef9c88f8799649dc67428b148c7951c6ba1b50233"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x20, 0x0, 0xe9, "248273d42cd8a5e67bc7df5996e21354b4a95c0c9519ed361b3c259995497cf145528ad72693337999b1a8a9867dc653743ece2cb888090160db6365f34d2fa04c55bdbb6799efb2f1754982f04e9c0e28f016c4d69fefa91ec6e60dd65c759814d8651f546dc89f534a1a1b443d93f3f4316be512ec9a47b00935d84da35836733a61a05ca7b0bcf59acae94d13f226a88375441d9a1bd19d43dddde0cbf99e70ea74bc26586c4eb174b6181cbc97d07624372a19200cbf1922edafd3362d599dc9220f3374ebe1fccbf5be3aa5ffc723b40885c9011bf52290072edc49d5ad0378450dacd3677d27"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0xffff, 0x8e2, 0x8, 0x0, 0x8b2, 0x280, 0xa, 0x9bf2, 0x2, 0x6, 0x7fff, 0x6}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2024/06/05 12:48:28 fuzzer started 2024/06/05 12:48:28 dialing manager at 10.128.0.163:30028 [ 38.184493][ T2507] cgroup: Unknown subsys name 'net' [ 38.393221][ T2507] cgroup: Unknown subsys name 'rlimit' 2024/06/05 12:48:31 starting 5 executor processes [ 40.866615][ T2513] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.879561][ T2513] syz-executor (2513) used greatest stack depth: 21632 bytes left [ 82.408591][ T646] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.613091][ T646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.624766][ T646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.634918][ T646] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 82.644033][ T646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.677869][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.702104][ T646] usb 4-1: config 0 descriptor?? [ 82.877829][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 82.885418][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.896712][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.906801][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.916154][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.930497][ T42] usb 2-1: config 0 descriptor?? [ 82.942892][ T42] hub 2-1:0.0: USB hub found [ 82.998130][ T698] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.077880][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.117903][ T4802] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.140010][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.147532][ T42] hub 2-1:0.0: 1 port detected [ 83.149438][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.183823][ T646] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 83.210963][ T698] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.225707][ T698] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.234894][ T698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.243033][ T698] usb 5-1: SerialNumber: syz [ 83.258007][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 83.265486][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.275759][ T8] usb 3-1: config 0 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 83.286637][ T8] usb 3-1: config 0 interface 0 has no altsetting 1 [ 83.293335][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1001, bcdDevice=a6.a3 [ 83.302448][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.310532][ T4802] usb 1-1: Using ep0 maxpacket: 8 [ 83.319600][ T4802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 83.329374][ T4802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 83.340472][ T8] usb 3-1: config 0 descriptor?? [ 83.350126][ T8] ldusb 3-1:0.0: Interrupt in endpoint not found [ 83.360600][ T4802] usb 1-1: New USB device found, idVendor=05d1, idProduct=2003, bcdDevice=e1.1b [ 83.362160][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.369807][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.369858][ T4802] usb 1-1: Product: syz [ 83.390508][ T4802] usb 1-1: Manufacturer: syz [ 83.395160][ T4802] usb 1-1: SerialNumber: syz [ 83.403383][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.420272][ T4802] usb 1-1: config 0 descriptor?? [ 83.426985][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.429304][ T4802] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 83.440951][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.446837][ T4802] ftdi_sio ttyUSB0: unknown device type: 0xe11b [ 83.557576][ T4802] usb 3-1: USB disconnect, device number 2 [ 83.575947][ C1] hrtimer: interrupt took 168977 ns [ 83.635370][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.645193][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.655537][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.664365][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.676865][ T8] usb 1-1: USB disconnect, device number 2 [ 83.687634][ T8] ftdi_sio 1-1:0.0: device disconnected [ 83.761713][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.770552][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.782477][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.791493][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.885478][ T698] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 84.006758][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.020827][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.248765][ T698] hub 2-1:0.0: activate --> -90 [ 84.420732][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.497864][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.532261][ C1] ------------[ cut here ]------------ [ 84.538129][ C1] WARNING: CPU: 1 PID: 23 at kernel/kcov.c:870 kcov_remote_start+0x274/0x6e0 [ 84.547024][ C1] Modules linked in: [ 84.550988][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0 [ 84.561024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 84.571126][ C1] RIP: 0010:kcov_remote_start+0x274/0x6e0 [ 84.576940][ C1] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 54 15 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 72 b0 7e 49 c7 c0 2e e4 04 88 2024/06/05 12:49:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 84.596688][ C1] RSP: 0018:ffffc900001b8b48 EFLAGS: 00010002 [ 84.602811][ C1] RAX: 0000000080010100 RBX: 000000000002d428 RCX: ffffffff813080be [ 84.610827][ C1] RDX: 0000000000000002 RSI: ffffffff86c7d9a0 RDI: ffffffff86e78600 [ 84.618844][ C1] RBP: ffff888101e8d700 R08: 0000000000000000 R09: fffffbfff19989a6 [ 84.626950][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff8881f652d428 [ 84.634972][ C1] R13: 0000000000000000 R14: 0100000000000002 R15: ffff888101e8d700 [ 84.643009][ C1] FS: 0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 [ 84.651991][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.658656][ C1] CR2: 00007fc52ad87ff8 CR3: 00000001183e8000 CR4: 00000000003506f0 [ 84.666674][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.674691][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.682711][ C1] Call Trace: [ 84.686026][ C1] [ 84.688909][ C1] ? show_regs+0x8c/0xa0 [ 84.693220][ C1] ? __warn+0xe5/0x3c0 [ 84.697330][ C1] ? kcov_remote_start+0x274/0x6e0 [ 84.702503][ C1] ? report_bug+0x3c0/0x580 [ 84.707050][ C1] ? handle_bug+0x3d/0x70 [ 84.711426][ C1] ? exc_invalid_op+0x17/0x50 [ 84.716157][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 84.721223][ C1] ? hlock_class+0x4e/0x130 [ 84.725755][ C1] ? kcov_remote_start+0x274/0x6e0 [ 84.730914][ C1] ? kcov_remote_start+0xa4/0x6e0 [ 84.735975][ C1] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0 [ 84.741824][ C1] ? dummy_timer+0x17e7/0x3900 [ 84.746615][ C1] __usb_hcd_giveback_urb+0x331/0x5c0 [ 84.752020][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 84.757264][ C1] dummy_timer+0x17f6/0x3900 [ 84.761885][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 84.767143][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 84.772653][ C1] ? __pfx_lock_release+0x10/0x10 [ 84.777746][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 84.782717][ C1] ? timerqueue_del+0x83/0x150 [ 84.787528][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 84.792497][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 84.797732][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 84.803473][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 84.809579][ C1] hrtimer_interrupt+0x31b/0x800 [ 84.814550][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 84.820565][ C1] sysvec_apic_timer_interrupt+0x8b/0xb0 [ 84.826239][ C1] [ 84.829184][ C1] [ 84.832128][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.838148][ C1] RIP: 0010:queue_work_on+0x98/0x140 [ 84.843461][ C1] Code: e8 3d a7 31 00 48 85 ed 75 44 e8 03 ac 31 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 21 a7 31 00 48 85 db 0f 85 8d 00 00 00 e3 ab 31 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 84.863198][ C1] RSP: 0018:ffffc9000018f970 EFLAGS: 00000287 [ 84.869373][ C1] RAX: 00000000000005bd RBX: 0000000000000000 RCX: ffffc90001203000 [ 84.877360][ C1] RDX: 0000000000040000 RSI: ffffffff812197b2 RDI: 0000000000000007 [ 84.885349][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 84.893338][ C1] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000001 [ 84.901333][ C1] R13: 0000000000000008 R14: ffff888104afcc00 R15: 0000000000000002 [ 84.909408][ C1] ? queue_work_on+0xe2/0x140 [ 84.914204][ C1] kick_hub_wq+0x145/0x2a0 [ 84.918651][ C1] hub_irq+0x322/0x440 [ 84.922768][ C1] __usb_hcd_giveback_urb+0x364/0x5c0 [ 84.928170][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.933485][ C1] usb_giveback_urb_bh+0x28f/0x570 [ 84.938622][ C1] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 84.944283][ C1] process_one_work+0x9fb/0x1b60 [ 84.949354][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 84.954408][ C1] ? __pfx_process_one_work+0x10/0x10 [ 84.959901][ C1] ? assign_work+0x1a0/0x250 [ 84.964525][ C1] bh_worker+0x5a4/0x8a0 [ 84.968796][ C1] ? __pfx_bh_worker+0x10/0x10 [ 84.973583][ C1] workqueue_softirq_action+0x12c/0x190 [ 84.979164][ C1] tasklet_hi_action+0x17/0x70 [ 84.983959][ C1] handle_softirqs+0x209/0x8e0 [ 84.988754][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 84.994246][ C1] ? rcu_is_watching+0x12/0xc0 [ 84.999045][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.004188][ C1] ? smpboot_thread_fn+0x59d/0xa10 [ 85.009337][ C1] run_ksoftirqd+0x3a/0x60 [ 85.013777][ C1] smpboot_thread_fn+0x661/0xa10 [ 85.018746][ C1] ? __kthread_parkme+0x148/0x220 [ 85.023888][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.029390][ C1] kthread+0x2c1/0x3a0 [ 85.033485][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.038726][ C1] ? __pfx_kthread+0x10/0x10 [ 85.043351][ C1] ret_from_fork+0x45/0x80 [ 85.047801][ C1] ? __pfx_kthread+0x10/0x10 [ 85.052414][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.057215][ C1] [ 85.060251][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.067537][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0 [ 85.077537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 85.087605][ C1] Call Trace: [ 85.090897][ C1] [ 85.093754][ C1] dump_stack_lvl+0x3d/0x1f0 [ 85.098376][ C1] panic+0x6f5/0x7a0 [ 85.102292][ C1] ? __pfx_panic+0x10/0x10 [ 85.106724][ C1] ? show_trace_log_lvl+0x363/0x500 [ 85.111959][ C1] ? kcov_remote_start+0x274/0x6e0 [ 85.117104][ C1] check_panic_on_warn+0xab/0xb0 [ 85.122155][ C1] __warn+0xf1/0x3c0 [ 85.126076][ C1] ? kcov_remote_start+0x274/0x6e0 [ 85.131222][ C1] report_bug+0x3c0/0x580 [ 85.135576][ C1] handle_bug+0x3d/0x70 [ 85.139765][ C1] exc_invalid_op+0x17/0x50 [ 85.144289][ C1] asm_exc_invalid_op+0x1a/0x20 [ 85.149179][ C1] RIP: 0010:kcov_remote_start+0x274/0x6e0 [ 85.154929][ C1] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 54 15 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 72 b0 7e 49 c7 c0 2e e4 04 88 [ 85.174583][ C1] RSP: 0018:ffffc900001b8b48 EFLAGS: 00010002 [ 85.180764][ C1] RAX: 0000000080010100 RBX: 000000000002d428 RCX: ffffffff813080be [ 85.188750][ C1] RDX: 0000000000000002 RSI: ffffffff86c7d9a0 RDI: ffffffff86e78600 [ 85.196737][ C1] RBP: ffff888101e8d700 R08: 0000000000000000 R09: fffffbfff19989a6 [ 85.204817][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff8881f652d428 [ 85.212821][ C1] R13: 0000000000000000 R14: 0100000000000002 R15: ffff888101e8d700 [ 85.220825][ C1] ? hlock_class+0x4e/0x130 [ 85.225367][ C1] ? kcov_remote_start+0xa4/0x6e0 [ 85.230431][ C1] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0 [ 85.236264][ C1] ? dummy_timer+0x17e7/0x3900 [ 85.241071][ C1] __usb_hcd_giveback_urb+0x331/0x5c0 [ 85.246560][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 85.251784][ C1] dummy_timer+0x17f6/0x3900 [ 85.256402][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 85.261638][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 85.267036][ C1] ? __pfx_lock_release+0x10/0x10 [ 85.272103][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.277065][ C1] ? timerqueue_del+0x83/0x150 [ 85.281863][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.286823][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 85.292047][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 85.297787][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 85.303889][ C1] hrtimer_interrupt+0x31b/0x800 [ 85.308857][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 85.314866][ C1] sysvec_apic_timer_interrupt+0x8b/0xb0 [ 85.320535][ C1] [ 85.323479][ C1] [ 85.326456][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.332474][ C1] RIP: 0010:queue_work_on+0x98/0x140 [ 85.337781][ C1] Code: e8 3d a7 31 00 48 85 ed 75 44 e8 03 ac 31 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 21 a7 31 00 48 85 db 0f 85 8d 00 00 00 e3 ab 31 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 85.357419][ C1] RSP: 0018:ffffc9000018f970 EFLAGS: 00000287 [ 85.363601][ C1] RAX: 00000000000005bd RBX: 0000000000000000 RCX: ffffc90001203000 [ 85.371676][ C1] RDX: 0000000000040000 RSI: ffffffff812197b2 RDI: 0000000000000007 [ 85.379673][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 85.387661][ C1] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000001 [ 85.395672][ C1] R13: 0000000000000008 R14: ffff888104afcc00 R15: 0000000000000002 [ 85.403754][ C1] ? queue_work_on+0xe2/0x140 [ 85.408461][ C1] kick_hub_wq+0x145/0x2a0 [ 85.412957][ C1] hub_irq+0x322/0x440 [ 85.417058][ C1] __usb_hcd_giveback_urb+0x364/0x5c0 [ 85.422456][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.427686][ C1] usb_giveback_urb_bh+0x28f/0x570 [ 85.432819][ C1] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 85.438648][ C1] process_one_work+0x9fb/0x1b60 [ 85.443610][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 85.448679][ C1] ? __pfx_process_one_work+0x10/0x10 [ 85.454082][ C1] ? assign_work+0x1a0/0x250 [ 85.458704][ C1] bh_worker+0x5a4/0x8a0 [ 85.462964][ C1] ? __pfx_bh_worker+0x10/0x10 [ 85.467746][ C1] workqueue_softirq_action+0x12c/0x190 [ 85.473333][ C1] tasklet_hi_action+0x17/0x70 [ 85.478121][ C1] handle_softirqs+0x209/0x8e0 [ 85.483010][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.488315][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.493119][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.498252][ C1] ? smpboot_thread_fn+0x59d/0xa10 [ 85.503391][ C1] run_ksoftirqd+0x3a/0x60 [ 85.507829][ C1] smpboot_thread_fn+0x661/0xa10 [ 85.512790][ C1] ? __kthread_parkme+0x148/0x220 [ 85.517841][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.523327][ C1] kthread+0x2c1/0x3a0 [ 85.527425][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.532658][ C1] ? __pfx_kthread+0x10/0x10 [ 85.537298][ C1] ret_from_fork+0x45/0x80 [ 85.541767][ C1] ? __pfx_kthread+0x10/0x10 [ 85.546528][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.551340][ C1] [ 85.554598][ C1] Kernel Offset: disabled [ 85.558964][ C1] Rebooting in 86400 seconds..