last executing test programs:
1.005071303s ago: executing program 4:
syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0xe8, 0x1e, 0x10, 0x1199, 0x25, 0x1e64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
write$char_usb(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000e80)={0x14, &(0x7f0000000dc0)={0x0, 0xe, 0x44, {0x44, 0x1, "2b48e5070a205b45cb9c48dc565a06d458c7508213fb6445fee272cdfd77aafae5dab80ca31bf1a44529cdcbdda0adc6aff2ff6b0b4d926056b9af2f5476e19e84e2"}}, &(0x7f0000000e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x1c, &(0x7f0000000ec0)={0x0, 0x16, 0xe6, "c89a1f3036fa45f2cd75f7fa72bd53325a7aaa498c76efbb20f2d2626d527456003854c8eb23eb1a3639beb690a7165bba72da30f9f9f8a149e564839f4aa274185101bedcf4bd6ca5b42ab39ca21d215dc69c1f0067d48e1c3c0ee4f1a6e8c2f3a048a5a05ec1ed700583127b61798cc6a6cc46fda2efed1fc8ca54c85952fc3892c14400c579663e714424f089e1fcd406abdb59a12c770c35a41cca8362a9177eb26c6bc8e7bcf89d90b2324efb5f75214eabb89ea388b7fdd854e0d985caf93a0c4600ad678c9745579dc0341fd9f051f4f1c393ba238cbd09b7390e4e54fbc290e4fb1c"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x3}})
syz_usb_connect(0x0, 0x7e4, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xc6, 0x4f, 0x9f, 0x5e57e71ed348899a, 0xbb4, 0xa87, 0xfbb7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d2, 0x4, 0x3f, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x78, 0x9, 0x8, 0x23, 0x1d, 0xd4, 0xc, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xe4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7ff, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x17}, [@country_functional={0xe, 0x24, 0x7, 0x9, 0x400, [0x1, 0x8b9, 0x1, 0x7]}, @network_terminal={0x7, 0x24, 0xa, 0xbc, 0x5, 0x40, 0x6}]}], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0x1, 0x1, 0x81}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x9, 0x5, 0xfa, [@generic={0x35, 0x2c, "ca7f2d0499a4f43355539b7922eb3a3f7c1fedd0440b2e93169f74544a947d0beb3768a8ff0a04548b95072e1f8361cd32cc3c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x4, 0x2d, 0xff, [@generic={0x76, 0x11, "6107f51c5d192014f9335732e201383e9c57de47b4bf2601d91eebbcb79796e975d7ea111b4109a71c0922c975576953afd131655c8a2d95329c02bffc6583e3baf1d48b7054e012eef7a9f72f717f811fb7cb98d112a93bc0584493062edabed29231971ec5505d20603c46d7bcff28c454ce20"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x8, 0x96, 0xfc}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x6, 0x9, 0x0, [@generic={0x6a, 0x23, "9edebe3d86743933bd01b3bcdd336b7efc979a983d61349180fa69ce95124a36f3ada5530ad7e0220a4eb57716f1c0fc92cc565bbb4a3084c9948271f855d9f4c9a874970212052191663eab86f36043c8cb87a2daa32fbbfbc6c6d10f5fa726427f3f62c4b73838"}, @generic={0x4, 0xa, "49a7"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0x4, 0xc5}}]}}, {{0x9, 0x4, 0xdc, 0x40, 0x3, 0xeb, 0xb2, 0xf5, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "6f78181d2794"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5c55, 0x6, 0x7, 0xff}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@mdlm_detail={0x10, 0x24, 0x13, 0x0, "0989ada6a7309b667bc64835"}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x90, 0x24, 0x13, 0x6, "31a5ba62fc9389bdecf247ca3e163966a11683b4557696c5c36d581666fab64172ff58ba4086cf3270cd3fcca5c01aa175feeaab00303f8c70b6882df91d5408d48e6923c4f1b0819ded80975e984af421dcf8653acc615f10d6c68cf7b306d2c588a53029061917f919f148c3e5883223ed717abba3205ed77db2a54f3fa4d60db83498d6641f601f4c9a3f"}, @mdlm={0x15, 0x24, 0x12, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x40, 0x2}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x0, 0xd6, 0x8d, [@generic={0xd7, 0x9, "7bf0dc23ede3d484225fa942b6e0c1af6cca4198469da3c17f3313c7c16d4b9fe4fbe2c11e735421eff7f859c209b172fb76502e43cbddce0def626ac34d46a58849dc907948001539cff87ff2cce5ab343a61fd5798f0c580e6ca830b5ca2d606deb4312dbcd285f644fbe3490ea20e4bb3560adaddb194ce7bb86331fe0deefb2f77e19cdb7eaa9bb86bce222859231f2d6ac9e3229a739a3fe65596dea6606e92cf585395af2684ef678c8e512dd7f2fc80c3bc9da1e9081553e1819269fdad0e1dd4b72143ace13d296ef6414257e8f5bc697b"}, @generic={0xa8, 0x23, "ebd100aa973e458c8856dccefa3a079ccff9d1cadba32f2872f4cb574d6b26abbeac620afa16aec0dee823e1855ff32cb6d95b86a807b14a451d1e2cd418bd3a309db0b4efb97daa92055b0a5265561db0325836fdcc891c8c2ffba4812f7e6d566bc5abff22e4797375d73e85077f9258d762f63be2e0520e73b6c64c1459be8281e454fb6f556559bfde4640795d10d8ad6c21a937d7272e4b8d37784a056cf6b54a3fe619"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x3f, 0x4, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x1245f80427f51c66, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6a, 0x1}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x1, 0xfe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x2d, 0xf8, 0x3, 0x9, 0x7c, 0x44, 0x0, [@generic={0xda, 0x4, "19a0d93236a785978abf0667d30a7246b27d012568dfbdb88afe0fdd2e2e5d14ce4fdf32de3b1f18f5c4f089bf6fd4999f0a4a6059a55ad6bcd36efb86209da75253d25fd0c3279396166f8ecb3a7f31eeaf9593b5f3091a3f115a073aca5b789268036a554a7c503a842fd10d0e1e68b0c08f145d9daef11f097e68e4e5df84b28c1f3704011357cfb09fad34f5a1c0a55dc333bf695abf25359395e108bbda3d9c7b9a77cd9dd8e4ad63ee08a89f6adbaed3bdf0ffe94f56c9a19c86de5e2716c66eac000227f0261fdca110d46508e107204a23d325cb"}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x1, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb7, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x3, 0x40, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x40, 0x59, [@generic={0xef, 0x21, "61273dfaf82dfa5a84a915e145c06a2e2cc9fbd730e5dd68123e48f865259176b025ebfcb4af90348d87e27a77f5bcb3ae3e637ae313afe2738ed1128630a511fdfa3dbd417aee6fff8a1375c91d1bc5f86cb7778514a0cc19981828390565aff0a5bab527fbe7d353c2a5182a0f5cf8685bfe5de9a9c2c8a48e1312046b54ea3a356507a16abe5127bf429808975561045d2545896a176ef1b51d787593946d9a58c07109dd8839d881449422a3bd37075efd33290b665537addcfb41e926d9ba2d2877fe1deac4f6c69b9a6597c6accfc080c33085ba4f0ece060ff15ba1741840fc6f396b4fe6cc50c71ebe"}, @generic={0xec, 0x23, "c3900ec86071369f726ab0f9165fef6de8ec380eb39b4a0e77fde6f275a08e1399072d902b2fac6b04c6d202373b4289ade603d0f2fb018363346fa5df8200cb048ec213c9a6fa703be546721d12fc19ee5e103c19e9a7ce5a9ea0971e97e410944d4d3fc3b1a60bdf8da99032ece86535aa34820ca133684a5f6deaba01324890ff52299e3ef653af3f2e057779660da938d726423d05320de9bdcf2015e9ba2e89f65529d29a67b9360296fafee5eae62d4a2d5a10dc9dab26294fa2139aafa65922b0a51f1c79d006ac3fb0fd670fd7de234537962b510b8bc25f988c4f8ec48c96c4f8ee8bc08573"}]}}]}}, {{0x9, 0x4, 0xbf, 0x78, 0x6, 0xd6, 0xb9, 0xa4, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xfc00, 0x80}, [@mixer_unit={0xa, 0x24, 0x4, 0x2, 0x6, 'p##MF'}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x6, 0x8, "cb71c722f7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x82, 0x7, 0x1, 0x3f}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x0, "0aee"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x3, 0xf7, "0506"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x0, 0x3, 0x6, 0x400, 0x0, 0x56}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x1c, 0x0, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x61, 0x5, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x3f, 0x7, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x8, 0xf1, 0x4}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x5, 0x8, 0x1, 0x20, 0x3f}, 0xfa, &(0x7f00000000c0)={0x5, 0xf, 0xfa, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x7, 0xf00, 0x5, [0xff003f, 0x30]}, @generic={0x8b, 0x10, 0x1, "7149a8fb4548483888a2e50c5ca000185c412f8f56a5beb5789ecc6c350d998a5b339c86e4e70db25a4128e55e2c3027c0764d8a90a98780b01d439eda55aed7d51d4d75b4fb5200bebc511a03bb9260ee73e895793bbd8ffd82780f797341da2b4e21631337c3a964cabc8f60d2035d016734e2fb30d802549007d9520bf7c6b5f9b10eb93d4f12"}, @generic={0x53, 0x10, 0x3, "05be5a2e003d6db6ff34aad4408c1edf02f8da84ed31f129771f8afea09b6c77041957623201588bd1e55551041a89861e799023c2af63d838225b587137d9dd1ed81df710bd1ab19453c8681bd1c364"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xb8, &(0x7f0000000b40)=@string={0xb8, 0x3, "cbe348c05e4a66ea1a74144efc6fa21f4fe089210bb8f51f6b70f16458c51c41ead300b044e82bad9e91e4cf2f98ab0420402fd1a957e3e45e36b6d88e85443217f5497d18d934407442761781370d1f4ef1c716d8da5812acb2b4263f8a59b912b720a1ad1c5e27c132e95b08b9588ecc890e04e7059665a3f2d5e802fce2827b2a3dd1acbf277cf4ff7b8768f896327603507785206a607910c03736302f3f6b6e6b3b257d710c49d8e81644a0c1e2ada6e9f990a9"}}, {0x17, &(0x7f0000000a80)=@string={0x17, 0x3, "945c2b294aa9f04a091b305a8113330125a4679bef"}}, {0x9b, &(0x7f0000000c00)=@string={0x9b, 0x3, "5fc612a0cee1f65e4ebc411aef0c408f14687a43b6ecc90a783163f09de528f7a6e6bd605c3ecf69cc806f6ac2b050c4f8d519f6e425409ea840eae302ba01651d80ba6f935fa8906db374f08b8155b7f55c4042b882ead05c9404c28eee91fbeeaef09bfd0d8d50935d9012ce9b8b15edc3c00d002e6731a703b6f6dec8df9d1fad250be13a8ba2d27d956dd966055e13ef0ab9e433b1d37a"}}, {0x71, &(0x7f0000000cc0)=@string={0x71, 0x3, "6949a961a770f9bb8b401515f88fe4e65033765b3c24586b74b46f31ef1b0686706d33a40f8aa75abdb04d57c2629dc4c7c40fb114e7f9c1dd7ad50a84ee434389899b326d5e4a97a4685ea37c740e945ce22623b3f65efaa60c6ba49d8c831b992b7f449245bd97cce234c86ef3ac"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x100c}}]})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "6652f890"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0490c0000000000001090200008d"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x6, 0xf6, 0x1})
632.136791ms ago: executing program 2:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x208}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x1e, 0xc6, 0x8, 0x2040, 0xd300, 0x32a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0xab, 0x39}}]}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x81, 0x80000)
ioctl$EVIOCGMASK(r0, 0x4020940d, &(0x7f0000000000)={0x2, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0xc0189436, 0xfffffffffffffffc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x6b, 0x53, 0xd3, 0x20, 0xf98, 0x201, 0x7b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0xea, 0x1c}}]}}]}}, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9cfe820490b4f06a23100f3ff010902020001000000000904020020006900a5d26600"], 0x0)
201.376879ms ago: executing program 1:
syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e49a, [{{0x9, 0x2, 0x3619b4e54b0a6746, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x7fe782539b0b)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058203"], 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x57, 0x0, 0x7fff, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x5}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/118)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000200)="e1cf3dcb4290b233d6aca1a9f8cdff6ec32d42d9d2277bcea61d078a8d57bf115c3f2866aff0ae95c18eb530a90f02c0b99245c635fa329353d14d796d2c17b8ef0075e9dded7882c9714f61fadfe0c6c7ea360858c8d2caa08a21a77937a182a18e6336f33e1215773d4598721df7ab559fce2d805b388fc66c7abe47ceb9197babd392441d4104e2c6173bc9c7c88519652ce780575072c9837963139f24cb99", 0xa1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
131.652309ms ago: executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x6, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e8781b"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x3f8, 0x7}, {0x6, 0x24, 0x1a, 0x40}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1f, 0x8, 0xc0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x3f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xff, 0x6, 0x8, 0x10, 0x6}, 0x42, &(0x7f0000000200)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "588f2b6c66cdae6ac120a2ebd8cf91aa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xdc, 0x7f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8a9d3e83a1ff1396, 0x6, 0x2, 0x9f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x5, 0xff, 0xc1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x8, 0x1}]}, 0x5, [{0x30, &(0x7f0000000100)=@string={0x30, 0x3, "b57bd54660753df389b51633745ad98eeba52df7b54e37c1bdcb17ece4f64793d09c12ec843891035dcff19fd387"}}, {0xdc, &(0x7f00000002c0)=@string={0xdc, 0x3, "e1a8c7995b0d137449b57682f39ebd694495857d742fe98067323d4f5fca797c1879f6dcac3fdc8ce8e97a51176dadb8b7a70269a2f63665b860bce97dbec76da1ff456604690a64f5a401eb28ddc8d9026421fdede7e1c7e2e257b6aef845087230cf37d81ecb29f51300e90b58155d06e966d222bdbe5bd41f0137b41443e9b7f5f4d4aaea7d7ea32af8e6ea4d96dde7cc94042e907b09266d047cf530454d44b16753e06441e69747e2950277c15abda0c12ab8432fb30ea10b287ab4f17d0e11aa7908e028fce5e6649d736e8ca48dc66a910fa0508eae98"}}, {0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "b4e8efc42f3530243ce92b3be91f4257e9fcf5676df011d2765b17055830f6bbb14be88a653864158c66e830ce15c5b0256262cf8b7943862e748bef46b0c7ba942de25981f30083b7f0d9604803566ad397ce551b9f92f185cce563d164f2fd917aee97cb2d8aaed9f0069254e5ac71ddc8e8a94410eb139a2231c4bf1b0a44531c79a20e3b9ee91de7a92b720b3201d5381e19de9acd505d9858be14a8566ed256e9f75beca1757466e7cd9133a9212e6a74d5045226f9798a33d18f87825fd218cd1d65b79793248b958e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x402}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x40084504, &(0x7f0000000140)=""/135)
0s ago: executing program 3:
r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
read$hidraw(r0, &(0x7f0000001340)=""/223, 0xdf)
r1 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xf, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1, [{0x0, 0x0}]})
r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x400100)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x14, 0x60, &(0x7f0000000140)="38aa491fc5e27851ae42adc7f38adb34f7f6f9af5fe2f5dea3fb7ac89f984bb142ae79d0dc0b04f9203e2146dacb3bed088115364c8a1206d2f7369157152d106f9f37bad7e19984aeb23f8394ab9d08a261941165f2d3bd1da961608e8309e0"})
syz_usb_ep_write(r1, 0x0, 0x1c, &(0x7f0000000000)="0ca9c0f9da730ab0e42fd9f13bdeddae0bc11aaafbdfdc99cfb92520")
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts.
2024/06/05 12:14:05 fuzzer started
2024/06/05 12:14:05 dialing manager at 10.128.0.163:30028
[ 35.889505][ T2509] cgroup: Unknown subsys name 'net'
[ 36.054891][ T2509] cgroup: Unknown subsys name 'rlimit'
2024/06/05 12:14:08 starting 5 executor processes
[ 38.612055][ T2512] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 80.524080][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 80.755401][ T36] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 80.764301][ T36] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[ 80.775019][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 80.802848][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[ 80.814679][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[ 80.846600][ T36] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 80.857069][ T36] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 80.865499][ T36] usb 5-1: Product: syz
[ 80.866771][ T654] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 80.869677][ T36] usb 5-1: Manufacturer: syz
[ 80.908171][ T4762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 80.936066][ T36] cdc_wdm 5-1:1.0: skipping garbage
[ 80.941440][ T36] cdc_wdm 5-1:1.0: skipping garbage
[ 80.997132][ T36] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 81.085344][ T654] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 81.104415][ T654] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 81.114153][ T654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 81.122193][ T654] usb 3-1: SerialNumber: syz
[ 81.136622][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.143429][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.149950][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.156843][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.163372][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.170008][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.176363][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.183171][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.189673][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.196288][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.196863][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.204821][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.219060][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.225781][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.228144][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.232129][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.244116][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.247010][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.261057][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.265284][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.268019][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.268256][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.289730][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.295086][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.296030][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.308527][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.310183][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.310430][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.325679][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.331405][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.339537][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 81.345485][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 81.359715][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 81.365467][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.366367][ C0] ------------[ cut here ]------------
[ 81.377700][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.381106][ C0] WARNING: CPU: 0 PID: 8 at kernel/kcov.c:870 kcov_remote_start+0x274/0x6e0
[ 81.397577][ C0] Modules linked in:
[ 81.401726][ C0] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0
[ 81.411634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 81.421783][ C0] Workqueue: usb_hub_wq hub_event
[ 81.426834][ C0] RIP: 0010:kcov_remote_start+0x274/0x6e0
[ 81.432589][ C0] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 54 15 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 72 b0 7e 49 c7 c0 2e e4 04 88
[ 81.433511][ T48] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[ 81.452228][ C0] RSP: 0018:ffffc90000007550 EFLAGS: 00010002
[ 81.452262][ C0] RAX: 0000000000010101 RBX: 000000000002d428 RCX: ffffffff813080be
[ 81.452281][ C0] RDX: 0000000000000002 RSI: ffffffff86c7d9a0 RDI: ffffffff86e78600
[ 81.452302][ C0] RBP: ffff888101695700 R08: 0000000000000000 R09: fffffbfff19989a6
[ 81.452321][ C0] R10: 0000000000000001 R11: 0000000000000009 R12: ffff8881f642d428
[ 81.452338][ C0] R13: 0000000000000000 R14: 0100000000000005 R15: ffff888101695700
[ 81.452357][ C0] FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000
[ 81.452385][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 81.522311][ C0] CR2: 0000001b31429000 CR3: 000000011533e000 CR4: 00000000003506f0
[ 81.530665][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 81.536490][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 81.538893][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.538928][ C0] Call Trace:
[ 81.538942][ C0]
[ 81.550194][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 81.558522][ C0] ? show_regs+0x8c/0xa0
[ 81.558579][ C0] ? __warn+0xe5/0x3c0
[ 81.558605][ C0] ? kcov_remote_start+0x274/0x6e0
[ 81.561939][ T36] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 81.564839][ C0] ? report_bug+0x3c0/0x580
[ 81.564876][ C0] ? handle_bug+0x3d/0x70
[ 81.574837][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.578997][ C0] ? exc_invalid_op+0x17/0x50
[ 81.595452][ T36] usb 1-1: config 0 descriptor??
[ 81.597584][ C0] ? asm_exc_invalid_op+0x1a/0x20
[ 81.597634][ C0] ? hlock_class+0x4e/0x130
[ 81.597670][ C0] ? kcov_remote_start+0x274/0x6e0
[ 81.636787][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 81.639315][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0
[ 81.639359][ C0] ? dummy_timer+0x17e7/0x3900
[ 81.639396][ C0] __usb_hcd_giveback_urb+0x331/0x5c0
[ 81.649589][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 81.652873][ C0] usb_hcd_giveback_urb+0x396/0x450
[ 81.652919][ C0] dummy_timer+0x17f6/0x3900
[ 81.652963][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 81.665251][ T48] usb 4-1: string descriptor 0 read error: -22
[ 81.676190][ C0] ? timerqueue_del+0x83/0x150
[ 81.676242][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 81.676276][ C0] __hrtimer_run_queues+0x20c/0xcc0
[ 81.676327][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 81.682142][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 81.686089][ C0] ? ktime_get_update_offsets_now+0x201/0x310
[ 81.686138][ C0] hrtimer_interrupt+0x31b/0x800
[ 81.686173][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450
[ 81.686209][ C0] sysvec_apic_timer_interrupt+0x3e/0xb0
[ 81.686260][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 81.691402][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 81.697780][ C0] RIP: 0010:queue_work_on+0x98/0x140
[ 81.697821][ C0] Code: e8 3d a7 31 00 48 85 ed 75 44 e8 03 ac 31 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 21 a7 31 00 48 85 db 0f 85 8d 00 00 00 e3 ab 31 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8
[ 81.697850][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00000283
[ 81.725353][ T48] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 81.727866][ C0] RAX: 0000000000000b02 RBX: 0000000000000000 RCX: ffffc90001002000
[ 81.727893][ C0] RDX: 0000000000040000 RSI: ffffffff812197b2 RDI: 0000000000000007
[ 81.727915][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 81.727936][ C0] R10: 0000000000000000 R11: 000000000000000c R12: 0000000000000001
[ 81.727956][ C0] R13: 0000000000000008 R14: ffff8881052bfc00 R15: 0000000000000002
[ 81.845548][ C0] ? queue_work_on+0xe2/0x140
[ 81.850315][ C0] ? queue_work_on+0xe2/0x140
[ 81.855224][ C0] kick_hub_wq+0x145/0x2a0
[ 81.859776][ C0] hub_irq+0x322/0x440
[ 81.864181][ C0] __usb_hcd_giveback_urb+0x364/0x5c0
[ 81.869710][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 81.875056][ C0] usb_giveback_urb_bh+0x28f/0x570
[ 81.880320][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10
[ 81.886121][ C0] process_one_work+0x9fb/0x1b60
[ 81.891196][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 81.896280][ C0] ? __pfx_process_one_work+0x10/0x10
[ 81.901676][ C0] ? assign_work+0x1a0/0x250
[ 81.906333][ C0] bh_worker+0x5a4/0x8a0
[ 81.910612][ C0] ? __pfx_bh_worker+0x10/0x10
[ 81.915412][ C0] workqueue_softirq_action+0x12c/0x190
[ 81.921126][ C0] tasklet_hi_action+0x17/0x70
[ 81.923347][ T48] usb 4-1: USB disconnect, device number 2
[ 81.926012][ C0] handle_softirqs+0x209/0x8e0
[ 81.936650][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 81.942008][ C0] irq_exit_rcu+0xac/0x110
[ 81.946497][ C0] sysvec_apic_timer_interrupt+0x90/0xb0
[ 81.952282][ C0]
[ 81.955299][ C0]
[ 81.958383][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 81.964438][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x48/0x60
[ 81.970929][ C0] Code: f6 c4 01 74 35 8b 82 54 15 00 00 85 c0 74 2b 8b 82 30 15 00 00 83 f8 02 75 20 48 8b 8a 38 15 00 00 8b 92 34 15 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f
[ 81.990855][ C0] RSP: 0018:ffffc9000008ef30 EFLAGS: 00000246
[ 81.997159][ C0] RAX: 0000000000007d58 RBX: ffffc9000008f000 RCX: ffffc9000a7d2000
[ 82.005144][ C0] RDX: 0000000000040000 RSI: ffffffff811534b9 RDI: 0000000000000005
[ 82.013230][ C0] RBP: ffffc9000008ff00 R08: 0000000000000005 R09: 0000000000000000
[ 82.021514][ C0] R10: 0000000000000001 R11: 0000000000000007 R12: ffffc9000008f008
[ 82.029539][ C0] R13: ffffc9000008f010 R14: 0000000000000001 R15: ffffc90000090000
[ 82.030835][ T36] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[ 82.037795][ C0] ? stack_access_ok+0xf9/0x270
[ 82.037851][ C0] stack_access_ok+0xf9/0x270
[ 82.037890][ C0] unwind_next_frame+0x1b94/0x23a0
[ 82.037935][ C0] ? kthread+0x2c1/0x3a0
[ 82.064545][ T36] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[ 82.065557][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 82.065630][ C0] arch_stack_walk+0x100/0x170
[ 82.088016][ C0] ? ret_from_fork+0x45/0x80
[ 82.092675][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 82.098103][ C0] stack_trace_save+0x95/0xd0
[ 82.102842][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 82.108315][ C0] ? __pfx_mark_lock+0x10/0x10
[ 82.113151][ C0] kasan_save_stack+0x33/0x60
[ 82.117964][ C0] ? kasan_save_stack+0x33/0x60
[ 82.122906][ C0] ? kasan_save_track+0x14/0x30
[ 82.128350][ C0] ? kasan_save_free_info+0x3b/0x60
[ 82.134082][ C0] ? poison_slab_object+0xf7/0x160
[ 82.139468][ C0] ? __kasan_slab_free+0x14/0x30
[ 82.144506][ C0] ? kfree+0x10b/0x380
[ 82.148674][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 82.154081][ C0] ? usb_submit_urb+0x87c/0x1730
[ 82.159087][ C0] ? usb_start_wait_urb+0x103/0x4c0
[ 82.164622][ C0] ? usb_control_msg+0x327/0x4b0
[ 82.169722][ C0] ? hub_ext_port_status+0x14e/0x670
[ 82.175274][ C0] ? hub_port_reset+0xa62/0x1e60
[ 82.180372][ C0] ? hub_port_init+0x1f9/0x3ac0
[ 82.185299][ C0] ? hub_event+0x2c24/0x4f50
[ 82.190118][ C0] ? process_one_work+0x9fb/0x1b60
[ 82.195465][ C0] ? worker_thread+0x6c8/0xf70
[ 82.200370][ C0] ? kthread+0x2c1/0x3a0
[ 82.204689][ C0] kasan_save_track+0x14/0x30
[ 82.209536][ C0] kasan_save_free_info+0x3b/0x60
[ 82.214628][ C0] poison_slab_object+0xf7/0x160
[ 82.215019][ T36] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 82.219605][ C0] __kasan_slab_free+0x14/0x30
[ 82.219653][ C0] kfree+0x10b/0x380
[ 82.219685][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 82.245773][ C0] usb_hcd_submit_urb+0xbf0/0x2090
[ 82.251130][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10
[ 82.256828][ C0] ? hub_port_init+0x1f9/0x3ac0
[ 82.261759][ C0] ? hub_event+0x2c24/0x4f50
[ 82.266404][ C0] ? process_one_work+0x9fb/0x1b60
[ 82.271604][ C0] ? worker_thread+0x6c8/0xf70
[ 82.276531][ C0] ? kthread+0x2c1/0x3a0
[ 82.280849][ C0] ? ret_from_fork+0x45/0x80
[ 82.285852][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 82.291039][ C0] usb_submit_urb+0x87c/0x1730
[ 82.295937][ C0] ? __init_swait_queue_head+0xca/0x150
[ 82.301811][ C0] usb_start_wait_urb+0x103/0x4c0
[ 82.304748][ T36] usb 1-1: USB disconnect, device number 2
[ 82.306972][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 82.307029][ C0] ? __asan_memset+0x23/0x50
[ 82.323139][ C0] usb_control_msg+0x327/0x4b0
[ 82.328057][ C0] ? __pfx_usb_control_msg+0x10/0x10
[ 82.333631][ C0] ? __pfx_schedule_timeout+0x10/0x10
[ 82.339139][ C0] ? __pfx_process_timeout+0x10/0x10
[ 82.344535][ C0] hub_ext_port_status+0x14e/0x670
[ 82.349870][ C0] hub_port_reset+0xa62/0x1e60
[ 82.354875][ C0] ? __pfx_hub_port_reset+0x10/0x10
[ 82.360310][ C0] hub_port_init+0x1f9/0x3ac0
[ 82.365308][ C0] hub_event+0x2c24/0x4f50
[ 82.370086][ C0] ? __pfx_hub_event+0x10/0x10
[ 82.374951][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 82.380277][ C0] ? __pfx_lock_release+0x10/0x10
[ 82.385529][ C0] process_one_work+0x9fb/0x1b60
[ 82.390509][ C0] ? __pfx_hcd_resume_work+0x10/0x10
[ 82.396010][ C0] ? __pfx_process_one_work+0x10/0x10
[ 82.402465][ C0] ? assign_work+0x1a0/0x250
[ 82.407164][ C0] worker_thread+0x6c8/0xf70
[ 82.411786][ C0] ? __pfx_worker_thread+0x10/0x10
[ 82.416955][ C0] kthread+0x2c1/0x3a0
[ 82.421072][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 82.426394][ C0] ? __pfx_kthread+0x10/0x10
[ 82.430999][ C0] ret_from_fork+0x45/0x80
[ 82.435528][ C0] ? __pfx_kthread+0x10/0x10
[ 82.440178][ C0] ret_from_fork_asm+0x1a/0x30
[ 82.444998][ C0]
[ 82.448024][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 82.455359][ C0] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0
[ 82.465306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 82.475758][ C0] Workqueue: usb_hub_wq hub_event
[ 82.480851][ C0] Call Trace:
[ 82.484171][ C0]
[ 82.487060][ C0] dump_stack_lvl+0x3d/0x1f0
[ 82.491719][ C0] panic+0x6f5/0x7a0
[ 82.495671][ C0] ? __pfx_panic+0x10/0x10
[ 82.500142][ C0] ? show_trace_log_lvl+0x363/0x500
[ 82.505423][ C0] ? kcov_remote_start+0x274/0x6e0
[ 82.510638][ C0] check_panic_on_warn+0xab/0xb0
[ 82.516256][ C0] __warn+0xf1/0x3c0
[ 82.520208][ C0] ? kcov_remote_start+0x274/0x6e0
[ 82.525394][ C0] report_bug+0x3c0/0x580
[ 82.529869][ C0] handle_bug+0x3d/0x70
[ 82.534086][ C0] exc_invalid_op+0x17/0x50
[ 82.538660][ C0] asm_exc_invalid_op+0x1a/0x20
[ 82.543840][ C0] RIP: 0010:kcov_remote_start+0x274/0x6e0
[ 82.549725][ C0] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 54 15 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 72 b0 7e 49 c7 c0 2e e4 04 88
[ 82.569727][ C0] RSP: 0018:ffffc90000007550 EFLAGS: 00010002
[ 82.575809][ C0] RAX: 0000000000010101 RBX: 000000000002d428 RCX: ffffffff813080be
[ 82.583941][ C0] RDX: 0000000000000002 RSI: ffffffff86c7d9a0 RDI: ffffffff86e78600
[ 82.592035][ C0] RBP: ffff888101695700 R08: 0000000000000000 R09: fffffbfff19989a6
[ 82.600107][ C0] R10: 0000000000000001 R11: 0000000000000009 R12: ffff8881f642d428
[ 82.608086][ C0] R13: 0000000000000000 R14: 0100000000000005 R15: ffff888101695700
[ 82.616073][ C0] ? hlock_class+0x4e/0x130
[ 82.620595][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0
[ 82.626689][ C0] ? dummy_timer+0x17e7/0x3900
[ 82.631689][ C0] __usb_hcd_giveback_urb+0x331/0x5c0
[ 82.637190][ C0] usb_hcd_giveback_urb+0x396/0x450
[ 82.642412][ C0] dummy_timer+0x17f6/0x3900
[ 82.647030][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 82.651977][ C0] ? timerqueue_del+0x83/0x150
[ 82.656757][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 82.661710][ C0] __hrtimer_run_queues+0x20c/0xcc0
[ 82.667040][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 82.672781][ C0] ? ktime_get_update_offsets_now+0x201/0x310
[ 82.678868][ C0] hrtimer_interrupt+0x31b/0x800
[ 82.683819][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450
[ 82.689916][ C0] sysvec_apic_timer_interrupt+0x3e/0xb0
[ 82.695876][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 82.701873][ C0] RIP: 0010:queue_work_on+0x98/0x140
[ 82.707237][ C0] Code: e8 3d a7 31 00 48 85 ed 75 44 e8 03 ac 31 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 21 a7 31 00 48 85 db 0f 85 8d 00 00 00 e3 ab 31 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8
[ 82.727309][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00000283
[ 82.733385][ C0] RAX: 0000000000000b02 RBX: 0000000000000000 RCX: ffffc90001002000
[ 82.741534][ C0] RDX: 0000000000040000 RSI: ffffffff812197b2 RDI: 0000000000000007
[ 82.749522][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 82.757606][ C0] R10: 0000000000000000 R11: 000000000000000c R12: 0000000000000001
[ 82.765620][ C0] R13: 0000000000000008 R14: ffff8881052bfc00 R15: 0000000000000002
[ 82.773862][ C0] ? queue_work_on+0xe2/0x140
[ 82.778551][ C0] ? queue_work_on+0xe2/0x140
[ 82.783703][ C0] kick_hub_wq+0x145/0x2a0
[ 82.788141][ C0] hub_irq+0x322/0x440
[ 82.792310][ C0] __usb_hcd_giveback_urb+0x364/0x5c0
[ 82.797705][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 82.803195][ C0] usb_giveback_urb_bh+0x28f/0x570
[ 82.808698][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10
[ 82.814449][ C0] process_one_work+0x9fb/0x1b60
[ 82.819609][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 82.824670][ C0] ? __pfx_process_one_work+0x10/0x10
[ 82.830083][ C0] ? assign_work+0x1a0/0x250
[ 82.834698][ C0] bh_worker+0x5a4/0x8a0
[ 82.838989][ C0] ? __pfx_bh_worker+0x10/0x10
[ 82.843797][ C0] workqueue_softirq_action+0x12c/0x190
[ 82.849399][ C0] tasklet_hi_action+0x17/0x70
[ 82.854247][ C0] handle_softirqs+0x209/0x8e0
[ 82.859105][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 82.864397][ C0] irq_exit_rcu+0xac/0x110
[ 82.868840][ C0] sysvec_apic_timer_interrupt+0x90/0xb0
[ 82.874488][ C0]
[ 82.877507][ C0]
[ 82.880476][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 82.886470][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x48/0x60
[ 82.892640][ C0] Code: f6 c4 01 74 35 8b 82 54 15 00 00 85 c0 74 2b 8b 82 30 15 00 00 83 f8 02 75 20 48 8b 8a 38 15 00 00 8b 92 34 15 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f
[ 82.912451][ C0] RSP: 0018:ffffc9000008ef30 EFLAGS: 00000246
[ 82.918545][ C0] RAX: 0000000000007d58 RBX: ffffc9000008f000 RCX: ffffc9000a7d2000
[ 82.926614][ C0] RDX: 0000000000040000 RSI: ffffffff811534b9 RDI: 0000000000000005
[ 82.934682][ C0] RBP: ffffc9000008ff00 R08: 0000000000000005 R09: 0000000000000000
[ 82.942661][ C0] R10: 0000000000000001 R11: 0000000000000007 R12: ffffc9000008f008
[ 82.950738][ C0] R13: ffffc9000008f010 R14: 0000000000000001 R15: ffffc90000090000
[ 82.958833][ C0] ? stack_access_ok+0xf9/0x270
[ 82.963724][ C0] stack_access_ok+0xf9/0x270
[ 82.968655][ C0] unwind_next_frame+0x1b94/0x23a0
[ 82.973886][ C0] ? kthread+0x2c1/0x3a0
[ 82.978337][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 82.984603][ C0] arch_stack_walk+0x100/0x170
[ 82.989406][ C0] ? ret_from_fork+0x45/0x80
[ 82.994022][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 82.999409][ C0] stack_trace_save+0x95/0xd0
[ 83.004145][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 83.009666][ C0] ? __pfx_mark_lock+0x10/0x10
[ 83.014673][ C0] kasan_save_stack+0x33/0x60
[ 83.019588][ C0] ? kasan_save_stack+0x33/0x60
[ 83.024517][ C0] ? kasan_save_track+0x14/0x30
[ 83.029540][ C0] ? kasan_save_free_info+0x3b/0x60
[ 83.034817][ C0] ? poison_slab_object+0xf7/0x160
[ 83.040078][ C0] ? __kasan_slab_free+0x14/0x30
[ 83.045088][ C0] ? kfree+0x10b/0x380
[ 83.049207][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 83.054502][ C0] ? usb_submit_urb+0x87c/0x1730
[ 83.059458][ C0] ? usb_start_wait_urb+0x103/0x4c0
[ 83.064687][ C0] ? usb_control_msg+0x327/0x4b0
[ 83.069643][ C0] ? hub_ext_port_status+0x14e/0x670
[ 83.075141][ C0] ? hub_port_reset+0xa62/0x1e60
[ 83.080926][ C0] ? hub_port_init+0x1f9/0x3ac0
[ 83.085878][ C0] ? hub_event+0x2c24/0x4f50
[ 83.090560][ C0] ? process_one_work+0x9fb/0x1b60
[ 83.096204][ C0] ? worker_thread+0x6c8/0xf70
[ 83.101002][ C0] ? kthread+0x2c1/0x3a0
[ 83.105261][ C0] kasan_save_track+0x14/0x30
[ 83.110580][ C0] kasan_save_free_info+0x3b/0x60
[ 83.116226][ C0] poison_slab_object+0xf7/0x160
[ 83.121284][ C0] __kasan_slab_free+0x14/0x30
[ 83.126240][ C0] kfree+0x10b/0x380
[ 83.130217][ C0] ? usb_hcd_submit_urb+0xbf0/0x2090
[ 83.135600][ C0] usb_hcd_submit_urb+0xbf0/0x2090
[ 83.140749][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10
[ 83.146432][ C0] ? hub_port_init+0x1f9/0x3ac0
[ 83.151366][ C0] ? hub_event+0x2c24/0x4f50
[ 83.155987][ C0] ? process_one_work+0x9fb/0x1b60
[ 83.161104][ C0] ? worker_thread+0x6c8/0xf70
[ 83.165893][ C0] ? kthread+0x2c1/0x3a0
[ 83.170171][ C0] ? ret_from_fork+0x45/0x80
[ 83.174793][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 83.179749][ C0] usb_submit_urb+0x87c/0x1730
[ 83.184545][ C0] ? __init_swait_queue_head+0xca/0x150
[ 83.190121][ C0] usb_start_wait_urb+0x103/0x4c0
[ 83.195158][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 83.200716][ C0] ? __asan_memset+0x23/0x50
[ 83.205431][ C0] usb_control_msg+0x327/0x4b0
[ 83.210300][ C0] ? __pfx_usb_control_msg+0x10/0x10
[ 83.215651][ C0] ? __pfx_schedule_timeout+0x10/0x10
[ 83.221172][ C0] ? __pfx_process_timeout+0x10/0x10
[ 83.226529][ C0] hub_ext_port_status+0x14e/0x670
[ 83.231715][ C0] hub_port_reset+0xa62/0x1e60
[ 83.236564][ C0] ? __pfx_hub_port_reset+0x10/0x10
[ 83.241823][ C0] hub_port_init+0x1f9/0x3ac0
[ 83.246541][ C0] hub_event+0x2c24/0x4f50
[ 83.251103][ C0] ? __pfx_hub_event+0x10/0x10
[ 83.255969][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 83.261041][ C0] ? __pfx_lock_release+0x10/0x10
[ 83.266170][ C0] process_one_work+0x9fb/0x1b60
[ 83.271144][ C0] ? __pfx_hcd_resume_work+0x10/0x10
[ 83.276542][ C0] ? __pfx_process_one_work+0x10/0x10
[ 83.282244][ C0] ? assign_work+0x1a0/0x250
[ 83.287064][ C0] worker_thread+0x6c8/0xf70
[ 83.291838][ C0] ? __pfx_worker_thread+0x10/0x10
[ 83.297278][ C0] kthread+0x2c1/0x3a0
[ 83.301459][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 83.306769][ C0] ? __pfx_kthread+0x10/0x10
[ 83.311403][ C0] ret_from_fork+0x45/0x80
[ 83.315858][ C0] ? __pfx_kthread+0x10/0x10
[ 83.320461][ C0] ret_from_fork_asm+0x1a/0x30
[ 83.325342][ C0]
[ 83.328581][ C0] Kernel Offset: disabled
[ 83.332956][ C0] Rebooting in 86400 seconds..