Extracting prog: 5m12.630718233s
Minimizing prog: 1h6m3.412550727s
Simplifying prog options: 0s
Extracting C: 1m57.629703226s
Simplifying C: 16m21.486201515s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6-recvmmsg
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6-recvmmsg
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in enable_work
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program crashed: WARNING in enable_work
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in enable_work
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
program crashed: WARNING in enable_work
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in enable_work
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in enable_work
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-openat$snapshot-connect$inet6
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0022050000001b3d772d72f9284f9fbfe44ac912988392a53a7c2184afc98e122e3decb15afcf37ddcc5676876c2bc6417d0ba1561098e0907bb3412ee355ab0fc1b"], 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in enable_work
validation run: crashed=true
reproducing took 1h35m59.77849327s
repro crashed as (corrupted=false):
------------[ cut here ]------------
workqueue: work disable count underflowed
WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4326 work_offqd_enable kernel/workqueue.c:-1 [inline]
WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4326 enable_work+0x1f8/0x200 kernel/workqueue.c:4497
Modules linked in:
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: usb_hub_wq hub_event
pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : work_offqd_enable kernel/workqueue.c:-1 [inline]
pc : enable_work+0x1f8/0x200 kernel/workqueue.c:4497
lr : work_offqd_enable kernel/workqueue.c:4326 [inline]
lr : enable_work+0x1f4/0x200 kernel/workqueue.c:4497
sp : ffff800097d07020
x29: ffff800097d07030 x28: 1fffe0001995d330 x27: ffff800092001ce0
x26: 1fffe0001aead4e7 x25: ffff800092001ce0 x24: dfff800000000000
x23: 001fffffffc00001 x22: 1fffe0001aead4e9 x21: dfff800000000000
x20: 0000000000000000 x19: ffff0000d756a748 x18: 1fffe0003379be88
x17: ffff80008f7de000 x16: ffff80008b0156e8 x15: 0000000000000001
x14: 1ffff00012fa0d38 x13: 0000000000000000 x12: 0000000000000000
x11: 000000006be4d423 x10: 0000000000ff0100 x9 : 3bc8a26ec50ba900
x8 : 3bc8a26ec50ba900 x7 : ffff800080563530 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 work_offqd_enable kernel/workqueue.c:-1 [inline] (P)
 enable_work+0x1f8/0x200 kernel/workqueue.c:4497 (P)
 __cancel_work_sync kernel/workqueue.c:4367 [inline]
 cancel_delayed_work_sync+0xd4/0x120 kernel/workqueue.c:4438
 thermal_zone_device_unregister+0x204/0x374 drivers/thermal/thermal_core.c:1719
 psy_unregister_thermal drivers/power/supply/power_supply_core.c:1551 [inline]
 power_supply_unregister+0xd8/0x15c drivers/power/supply/power_supply_core.c:1767
 thunderstrike_destroy drivers/hid/hid-nvidia-shield.c:927 [inline]
 shield_remove+0x6c/0x104 drivers/hid/hid-nvidia-shield.c:1104
 hid_device_remove+0x1c4/0x2e8 drivers/hid/hid-core.c:-1
 device_remove drivers/base/dd.c:569 [inline]
 __device_release_driver drivers/base/dd.c:1274 [inline]
 device_release_driver_internal+0x3a8/0x68c drivers/base/dd.c:1297
 device_release_driver+0x28/0x38 drivers/base/dd.c:1320
 bus_remove_device+0x310/0x3b0 drivers/base/bus.c:579
 device_del+0x47c/0x808 drivers/base/core.c:3878
 hid_remove_device drivers/hid/hid-core.c:2980 [inline]
 hid_destroy_device+0x70/0x1a8 drivers/hid/hid-core.c:3002
 usbhid_disconnect+0xa4/0xec drivers/hid/usbhid/hid-core.c:1462
 usb_unbind_interface+0x244/0x7e4 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:571 [inline]
 __device_release_driver drivers/base/dd.c:1274 [inline]
 device_release_driver_internal+0x3f8/0x68c drivers/base/dd.c:1297
 device_release_driver+0x28/0x38 drivers/base/dd.c:1320
 bus_remove_device+0x310/0x3b0 drivers/base/bus.c:579
 device_del+0x47c/0x808 drivers/base/core.c:3878
 usb_disable_device+0x33c/0x780 drivers/usb/core/message.c:1418
 usb_disconnect+0x284/0x82c drivers/usb/core/hub.c:2344
 hub_port_connect drivers/usb/core/hub.c:5406 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
 port_event drivers/usb/core/hub.c:5870 [inline]
 hub_event+0x1688/0x3c78 drivers/usb/core/hub.c:5952
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 239542
hardirqs last  enabled at (239541): [<ffff80008312c5d8>] class_irqsave_destructor include/linux/irqflags.h:266 [inline]
hardirqs last  enabled at (239541): [<ffff80008312c5d8>] __free_object+0x508/0x720 lib/debugobjects.c:524
hardirqs last disabled at (239542): [<ffff8000804229b4>] try_to_grab_pending kernel/workqueue.c:2054 [inline]
hardirqs last disabled at (239542): [<ffff8000804229b4>] work_grab_pending+0xa4/0x830 kernel/workqueue.c:2158
softirqs last  enabled at (238686): [<ffff80008546cc2c>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (238686): [<ffff80008546cc2c>] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
softirqs last  enabled at (238686): [<ffff80008546cc2c>] wg_packet_decrypt_worker+0x90c/0x994 drivers/net/wireguard/receive.c:499
softirqs last disabled at (238684): [<ffff80008546c908>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (238684): [<ffff80008546c908>] ptr_ring_consume_bh include/linux/ptr_ring.h:365 [inline]
softirqs last disabled at (238684): [<ffff80008546c908>] wg_packet_decrypt_worker+0x5e8/0x994 drivers/net/wireguard/receive.c:499
---[ end trace 0000000000000000 ]---
usb 1-1: new high-speed USB device number 65 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input65
shield 0003:0955:7214.0040: Registered Thunderstrike controller
shield 0003:0955:7214.0040: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
usb 1-1: USB disconnect, device number 65
usb 1-1: USB disconnect, device number 67
usb 1-1: new high-speed USB device number 68 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input68
shield 0003:0955:7214.0043: Registered Thunderstrike controller
shield 0003:0955:7214.0043: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
usb 1-1: USB disconnect, device number 69
usb 1-1: new high-speed USB device number 70 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input70
shield 0003:0955:7214.0045: Registered Thunderstrike controller
shield 0003:0955:7214.0045: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV

final repro crashed as (corrupted=false):
------------[ cut here ]------------
workqueue: work disable count underflowed
WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4326 work_offqd_enable kernel/workqueue.c:-1 [inline]
WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4326 enable_work+0x1f8/0x200 kernel/workqueue.c:4497
Modules linked in:
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: usb_hub_wq hub_event
pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : work_offqd_enable kernel/workqueue.c:-1 [inline]
pc : enable_work+0x1f8/0x200 kernel/workqueue.c:4497
lr : work_offqd_enable kernel/workqueue.c:4326 [inline]
lr : enable_work+0x1f4/0x200 kernel/workqueue.c:4497
sp : ffff800097d07020
x29: ffff800097d07030 x28: 1fffe0001995d330 x27: ffff800092001ce0
x26: 1fffe0001aead4e7 x25: ffff800092001ce0 x24: dfff800000000000
x23: 001fffffffc00001 x22: 1fffe0001aead4e9 x21: dfff800000000000
x20: 0000000000000000 x19: ffff0000d756a748 x18: 1fffe0003379be88
x17: ffff80008f7de000 x16: ffff80008b0156e8 x15: 0000000000000001
x14: 1ffff00012fa0d38 x13: 0000000000000000 x12: 0000000000000000
x11: 000000006be4d423 x10: 0000000000ff0100 x9 : 3bc8a26ec50ba900
x8 : 3bc8a26ec50ba900 x7 : ffff800080563530 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 work_offqd_enable kernel/workqueue.c:-1 [inline] (P)
 enable_work+0x1f8/0x200 kernel/workqueue.c:4497 (P)
 __cancel_work_sync kernel/workqueue.c:4367 [inline]
 cancel_delayed_work_sync+0xd4/0x120 kernel/workqueue.c:4438
 thermal_zone_device_unregister+0x204/0x374 drivers/thermal/thermal_core.c:1719
 psy_unregister_thermal drivers/power/supply/power_supply_core.c:1551 [inline]
 power_supply_unregister+0xd8/0x15c drivers/power/supply/power_supply_core.c:1767
 thunderstrike_destroy drivers/hid/hid-nvidia-shield.c:927 [inline]
 shield_remove+0x6c/0x104 drivers/hid/hid-nvidia-shield.c:1104
 hid_device_remove+0x1c4/0x2e8 drivers/hid/hid-core.c:-1
 device_remove drivers/base/dd.c:569 [inline]
 __device_release_driver drivers/base/dd.c:1274 [inline]
 device_release_driver_internal+0x3a8/0x68c drivers/base/dd.c:1297
 device_release_driver+0x28/0x38 drivers/base/dd.c:1320
 bus_remove_device+0x310/0x3b0 drivers/base/bus.c:579
 device_del+0x47c/0x808 drivers/base/core.c:3878
 hid_remove_device drivers/hid/hid-core.c:2980 [inline]
 hid_destroy_device+0x70/0x1a8 drivers/hid/hid-core.c:3002
 usbhid_disconnect+0xa4/0xec drivers/hid/usbhid/hid-core.c:1462
 usb_unbind_interface+0x244/0x7e4 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:571 [inline]
 __device_release_driver drivers/base/dd.c:1274 [inline]
 device_release_driver_internal+0x3f8/0x68c drivers/base/dd.c:1297
 device_release_driver+0x28/0x38 drivers/base/dd.c:1320
 bus_remove_device+0x310/0x3b0 drivers/base/bus.c:579
 device_del+0x47c/0x808 drivers/base/core.c:3878
 usb_disable_device+0x33c/0x780 drivers/usb/core/message.c:1418
 usb_disconnect+0x284/0x82c drivers/usb/core/hub.c:2344
 hub_port_connect drivers/usb/core/hub.c:5406 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
 port_event drivers/usb/core/hub.c:5870 [inline]
 hub_event+0x1688/0x3c78 drivers/usb/core/hub.c:5952
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 239542
hardirqs last  enabled at (239541): [<ffff80008312c5d8>] class_irqsave_destructor include/linux/irqflags.h:266 [inline]
hardirqs last  enabled at (239541): [<ffff80008312c5d8>] __free_object+0x508/0x720 lib/debugobjects.c:524
hardirqs last disabled at (239542): [<ffff8000804229b4>] try_to_grab_pending kernel/workqueue.c:2054 [inline]
hardirqs last disabled at (239542): [<ffff8000804229b4>] work_grab_pending+0xa4/0x830 kernel/workqueue.c:2158
softirqs last  enabled at (238686): [<ffff80008546cc2c>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (238686): [<ffff80008546cc2c>] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
softirqs last  enabled at (238686): [<ffff80008546cc2c>] wg_packet_decrypt_worker+0x90c/0x994 drivers/net/wireguard/receive.c:499
softirqs last disabled at (238684): [<ffff80008546c908>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (238684): [<ffff80008546c908>] ptr_ring_consume_bh include/linux/ptr_ring.h:365 [inline]
softirqs last disabled at (238684): [<ffff80008546c908>] wg_packet_decrypt_worker+0x5e8/0x994 drivers/net/wireguard/receive.c:499
---[ end trace 0000000000000000 ]---
usb 1-1: new high-speed USB device number 65 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input65
shield 0003:0955:7214.0040: Registered Thunderstrike controller
shield 0003:0955:7214.0040: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
usb 1-1: USB disconnect, device number 65
usb 1-1: USB disconnect, device number 67
usb 1-1: new high-speed USB device number 68 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input68
shield 0003:0955:7214.0043: Registered Thunderstrike controller
shield 0003:0955:7214.0043: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
usb 1-1: USB disconnect, device number 69
usb 1-1: new high-speed USB device number 70 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
input: HID 0955:7214 Haptics as /devices/virtual/input/input70
shield 0003:0955:7214.0045: Registered Thunderstrike controller
shield 0003:0955:7214.0045: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV