Extracting prog: 34m47.076065289s
Minimizing prog: 3h9m51.158733171s
Simplifying prog options: 16m56.229106655s
Extracting C: 5m13.785498839s
Simplifying C: 0s


30 programs, timeouts [6m0s]
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x0, 0x3, 0x5c, "e662077ec3ae65707bff0ed4d1e46a9c8d0f692d29655fb8d278365d47fefb0da2155040adfd84e0cd2fc36ef7cb3f36faaa505eda0743ae8e8094113e64f9727b7516485cf7807e78182da166a6c2196a391967ea14b7978a60efc2"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000001140)=ANY=[], 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb1, 0x4c, 0x39, 0x40, 0x2304, 0x23d, 0x500d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0xd5, 0x0, 0x0, 0xa2, 0xfc, 0xa8, 0x2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x19, 0x8f, {0x8f, 0x2, "938797e6dcd2737618aa4024cd44c5f7e78c0c9af800511544b1e6495d378af6b027a806f1debd05ff3e880109946ca1ff32de4cc72c104be62e76bd9c667400c1cae73cc07ea7b69c0a317dc1602d85606d12d016cee655e7a47a014ced0dd67af07c6cbfdc01314a1557c2a9ba4b43c9d7a984e6861aaad8fc2e314c3a6d0ed76d9f6e3e28d06df1ec700c51"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x0, 0x92, "f13a92075b5e5ce3f6a4c8543d5b59464797b934807a5490011a126265c849f49a91122fa9fc86a49f1494a4b925162e4bf2a3f9520a440e198049613f9ae33141941e38e03b6d209a427476b6224e8126afa65e7f007445283d74b397dd0b5f3e046448a6b9786bc9d18af72f864069215fbd6ca2e60956b5a31d287682a5656e62a721a9e093993d05b801f00ed2a236a2"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xffe1, 0x400, 0x6, 0x7ff, 0x1, 0x377, 0x4, 0x2, 0x7, 0x7, 0x45, 0x1d8f}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x9bc}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x0, 0xb, 0x11, "084677358eeb2df5877bc867a6deeb75cf"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x73, 0x98, 0x48, 0x8, 0x2040, 0x6513, 0xc27e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x0, 0x6f, 0x21, 0x10}}]}}]}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_control_io$uac1-syz_open_dev$hiddev-ioctl$HIDIOCGFIELDINFO-syz_usb_control_io-ioctl$HIDIOCSREPORT-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$hiddev-ioctl$HIDIOCGREPORTINFO-syz_usb_control_io$hid-syz_usb_connect_ath9k-ioctl$HIDIOCGCOLLECTIONINFO-ioctl$EVIOCSABS0-syz_usb_control_io$hid-ioctl$EVIOCGMTSLOTS-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_connect$cdc_ecm-ioctl$EVIOCGABS0-syz_usb_connect_ath9k-read$hidraw-syz_open_dev$char_usb-write$char_usb-ioctl$HIDIOCGREPORT-syz_usb_control_io$printer-read$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x961, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x6e, 0x56, 0xc1, 0x0, 0x3f0, 0x183, 0x136e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94f, 0x3, 0x7, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x5, 0x1, 0xb4, 0xd9, 0xdf, 0x19, [@generic={0x24, 0x31, "f7283477aa58354256b958c02a3a2b78b4be3f59e7a3e0e7bbbb2835d78ce63fa22b"}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf8, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x6b, 0x4, 0xb, 0x92, 0x68, 0x1c, 0x2, [@hid_hid={0x9, 0x21, 0x10, 0xf8, 0x1, {0x22, 0x1e2}}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x45, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2, 0x6, 0x5, [@generic={0x13, 0xd, "a363937c902b4663e5c3acfb91203b7105"}, @generic={0xf8, 0x0, "bbc1be99c3c618acd6ada5bfa080ec9731c1d4f8a62e43c63c30dbcf7093f2a77a6864a652f32ac6c433bbf28755f00b160a52515511106d6dd761696dcf99e527765a2a2668440834ec9c6e3148819930affcd45ceeb36b0ec6b7e28429dc7a59a4dbb64bff4fa9b6850432c6169160c40ce46b9562f8aec0020bbbcf5303599c8f4e6fd0b7303334e434918771c8e9dd2470c90b88db73b052708edcb301afac79c4d7705f6f5a7060f0a6dd7fa3da0dd6b24b3873725c191a901795f816cd7b1d8c177c8cc0435ac0df467bda3f27ac8f24ac8a82d46f212ed6953e51cf653b04b4588d0c509e7510a7dfdd7253166829f3f93904"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x72, 0x400}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x98, 0x9, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x40, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x6, 0x7, 0x1e, [@generic={0xbc, 0xa, "d8d7679f55d39f66b71ed60ef4c5f1745a8c810aa9ba9322bf9233137a002f8b085f793ebb2f5f646d565cb5bc083367530326b42a06a9fc139d278537605061c5e39758dbc184da52d6237089b14e3c5dca1d212faea35f856826a2fa5b664b50fc88c60ab86963b5ea98f213f2864416f00e3c88314ede18171b6227d6c58e697bac63360ee020e306ff46871a636824a308c1ca493193d50ec0cd4a6edcd544f599d6471bfd4b2f41410bb7c6337fe200d9cef715d9fcf68a"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf8, 0x0, 0x1, [@generic={0x78, 0x21, "8a807b629590729de5a864a3ad5659c12a5dc53f59120ba5ad8d8e5d6cd11bea30c77c2aba798a27e9231a8f8cc6780d967b5b2182834ab75fbf3d43adcf42a1284d4b7acd7fc7900eda0456974206baababbf17ec5da7c0bfbb354387ffb84027b560acd6bbc125c19976e5ae39c5a7b92d0186b3b9"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1cb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x6, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x400}]}}]}}, {{0x9, 0x4, 0xe8, 0x2, 0xe, 0x6b, 0xb2, 0x0, 0x8, [], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x81, 0x0, 0x9, [@generic={0x90, 0x5, "298489a8d12098770c744f8ed929400ed262cc8cf51d71ba9ba74777e18137dc5621b86ce9623453c201e4504e4a020aecc4cd6cc513c93a3fd9f9262502efad1bd2c7f45f785a1a5c184219e199f8c81e4b0296901aea7f242749549020e6a77f02ae321d82b3f1d82aecdbe607907cb105e5ebd0782a2e90e92646291bd691bb8c989723d5985b9f1ff8458b6e"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xe0, 0x7, 0xb0}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x6, 0xc6, 0x6, [@generic={0x97, 0x21, "9acb7ec3351517670c6c00a0bc9282549db9ba1028e368f6350cf01c017cc8edb5b5da30383ac4f9efb774a8e9e8661cbfeb64d1cea08af8fbfbd406fef592a92cb092ebe2a89f4a5e4fa774aeeaa7a6c125cb648cb7e6d688b9ec38fe10d603b846b759492dbff86ed7f01148ad8cdb3a24be935f5a1a00ad8b51e5f2f64f5eae6fed55de1ed71fb20b4d081be8d4794a1b5f83b3"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x101}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x7, 0xa5, 0x9, [@generic={0x2f, 0x6, "5a9adda74806766363c16ee2974b6b48c22ecab6b8bb3995384b79b496fe55e0e0cdb4722e4fa5266e55d25736"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x440, 0xf, 0x0, 0x8}}, {{0x9, 0x5, 0xf, 0x12, 0x10, 0x40, 0x1, 0x7e, [@generic={0xfc, 0x21, "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"}, @generic={0xc4, 0x22, "d223de1d00e592a3c59b600b84836c1bbb2c5852a9a46b652e08299254d8be29d2c43766c6adc95f86c189327c9186df0423f5127d96d4fc5019b1b541a6b21f886c4c1163336dd9a21faca8c3baea0d009dccb5a14ffb46812576863acc1ad10631114d8b66bfec3cf6a6736394709ab74dd18aeac389330fa2222832f0b712285e966dbed468279913adcd66f52dc8dbec3af5161684f6daf10f494a387b6789eb6c42f4f226c1d70ff26ef8e5d126f4908db09aea0d4bdeb1845b2e14638f7b81"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x8e, 0x6, 0x0, [@generic={0xd5, 0x21, "15df40ecdcc20bd0a08ef4cabb07069007e5e341a00de9ca3f6d2c4f2aa6e6cc5e58a607465335a56ad3aa5c7657944f78605bf35c8fe0853d0c48eb0095eb7264bb0f1f400783b41c7078b6c51ce72f5567403603e65dcd298941380d710099adf3a1fbe514fdf5e88b02f34ab078ff77fb8a9ee2256cdfc85daf59e546d16574faaed25abf3e1c7f35e8d36007a2156e2394c1b99807c107d39a9f1257bf74fdad8625da80f80cb1ee2c633eecc3dca2e3dfa690437cd5cb57813742e6154171f003ab3b6077d66358d6f01d899903d05819"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0x14190d794e3f902f, 0x1, 0x200, 0xd, 0x40, 0x4}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x35, 0x2, 0xb7, [@generic={0xcf, 0xd, "b650de2f6a3b070b4d4113f990a4faed1c9d12a4910e06ee68c27c8b07a6127e4708d6a36059ef576f51f23442a18dcebdb627806a5bf77b545245934c82995e4fe86816f33e47b049565e25d168b15e911ac126ffeeaaf04be418dbb137f075d0d929b7fbec1417daa807ac0ac7cd50dfcda9564aec159947e7d8be9525d45649fafe9fd790c19ebfd07798af5050f74a7b85fe53380637bfd8571e04f787643db8722822c29a43f0345e07026b1400c2bd941056781ec105ff94755a3173027b547e77550956d36cf84a1e0f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x13, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x52}, @generic={0x33, 0x24, "870d68c404c1ab4f8f912e285d87f5b3666b2990e5631cad3b483194b4a1f8c78d542537e881a16f39324ef8b6f5efae6a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x6, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc}, @generic={0xa2, 0x5, "b4d485aa2ac1c4c1482850c7f2d41a6724c018cf946e313d65d55cfb5feb8bcde761df1979d808bf0ea5818323577f4ea95d3a2595a09fa6cc19a671af017a58f74d1608c1985b890bd3a84e5fb2191297495c4c9d562e7c2bc5c676d99524a64edc09a42995d8d2b81fe68c31208309f8796c1b348127cc8ee6dd95b3f13e0ebf851e648aec73d8155a1b289e5bf666982f69efc1eeb0772890429b146e0042"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xfe, 0xc5, 0x40}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8b, 0x1, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0xb, 0x1}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x0, 0x9, 0x9, 0x8, 0x8, 0x2}, 0x3e, &(0x7f00000009c0)={0x5, 0xf, 0x3e, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf00, 0x800, [0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x6, 0xa}, @generic={0x4, 0x10, 0x1, ')'}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3168941815598a5cd40b83a4c2d6ee9a"}]}, 0x5, [{0xda, &(0x7f0000000a00)=@string={0xda, 0x3, "3ee6fc3260fc2d79d5147e5c657556f010cfa4776030d14f771559c72d3425304e40e75f2544fcdb75fe103763709749478bb2b62c0f0f07dcdbf513041caad4c96ddbd0ac7891fcc57f21f01aad9580d29c55c9ae68edac787853bbeac4ed3ebc749e28c3e9a0ea7556d2a72ec22e6c0b9034d7569db6c2ac045b606b1007ae07c3b45e64fde12445cff1d2b0f9c9b6aef782c6bb7f20ab7d0dcdf261065a2d000d214e4e057effad80557aeb71f6fe1a0b2c528fcb8a23bada609155266e6317979dfa79332a23bcc7e44cd62c636c158a5733da07d1ae"}}, {0xd1, &(0x7f0000000b00)=@string={0xd1, 0x3, "a8490299d2e146ab7fbe514201c915da37bd3bd012ba6fc29ba4739859648a5fe12f1e1b22b85e16564c1036a1b332460c4966129515795e25c3a4536a3925aa417efb19a5a776307f175d81989963bfa6a14064cf68b4ed0b21918e673d1ff6e98efcd334ff8acc872a37a538d25cac34869a96b71e53f93dba2d10348063063afe7c6f1a77a2df25d92f010359b12bc3b88f0016f2f7b0594192cd1216d9c00fdfbea39a0b9209a85ebb0b4129b54bdc4439a29eb1f8d7dc51b5ec176190fe6cc8a460271659853f9a1108859126"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xa8, &(0x7f0000000c80)=@string={0xa8, 0x3, "1f950590832897b95ac1988e6cdb49b450ab3d65a07e342474b90c0670c2fda2a5ddc620c3d43aa82f53ff83129242d3a22103c51957f4cd87751fa210ae9251992e3f483d71f03b640c94df46fab67318ce05f75353c23872203fda1b52207de48d658c080947ed114fc6d4a029808f926278d4a14282b3fd9ec1a747c873e6d6e1125b2dc6eab2eff47a7bbfd0d1380c421959a83f822e8f5e18d2c5e7954ac6a9c58092ea"}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000ec0)={0x14, &(0x7f0000000dc0)={0x40, 0x21, 0x95, {0x95, 0x4, "5acb86e650f306d0e876173bac34b791de4a79495859274a555137a119af3b9701552dd2f6b00ea77d6e5e7069d817350d087c3d94ec9b41b5f0c5c273eb138a5c417ceba34f98df4ea359ab5d8f3c89ab354f86b28ca096c55a7f346f1c6d9ce9cd465abbffb3011afee3320698ffdbf74273f76b5c8bbea38a90bac8dad00c5104f3482ecf2111e668a5fa4b8623a0f78b99"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000f00)={0x40, 0x15, 0xf3, "7ce59c954ecdf66296dd07be68284ce051a2efe33be44fbfc0d8b68fbacf29d895fb4bb5e8ee01724fe0c2705da3aaa311b125169c898657638cd4e04a30b3672a5d3c110656d97ba094b986f72ea1932dbc5a950b48a412cb0afb7bb43a28585844b4f38ac156e90ff5e9debe8b2d879158d6389c63235d3ec31ecefd4063d8542c5b49df1ebecb515473695d0261589047c6c5d1679b2b96e84bb6710fb63c105cb5b957d0ea9ba2ec17e30d6c3fa3324fafd14553b3ecf05d4f9f84f55f65712f3ba1576428932b28aec59e19229ef5a151b212d6c083bc85163d8841dfbf10bcb3d4fd10cf54dae3559e78ba0425997f9c"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001080)={0x20, 0x80, 0x1c, {0x0, 0x53fc, 0x7, 0x6, 0x8, 0x0, 0x17, 0x5, 0x3, 0x5, 0x7, 0x3}}, &(0x7f00000010c0)={0x20, 0x85, 0x4, 0x1c}, &(0x7f0000001100)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001140)={0x20, 0x87, 0x2, 0x316c}, &(0x7f0000001180)={0x20, 0x89, 0x2}})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x9b, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x0, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "abb73d"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x7f, 0x8}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x7e, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x4, 0x9}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x250, 0x80, 0x9, 0xe, 0xff, 0x80}, 0x28, &(0x7f0000001340)={0x5, 0xf, 0x28, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa0907feab157f176, 0x5, 0x4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0x5}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x26, 0x0, 0x401, 0x0, 0xc4aa}]}, 0xa, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x82c}}, {0x4f, &(0x7f00000013c0)=@string={0x4f, 0x3, "35f25563d1e99dff482db91acd8f2f66f3251c62851be3cee577af0ed56d289b55fc4773c0bf022225a8a6b6a5ab9acd1f549e77032fbfdbf0a58a4db19ea911899f3bf6c778a6e5fae9335a5c"}}, {0x85, &(0x7f0000001440)=@string={0x85, 0x3, "a2c526ff51fa09e7149254d7c6056f977a4e8b803bd4890cdf3fabc25039da7ca7a3e4e70464ab98c5ce2c432b870654c99f1a7362f027abaed682e7a8032e7002e629110bca74835a26a680484d035a078fa26d4a1394b44073374da78fdc70a732757585458b1cd4e4a099c09e1ab2823d418cd30e5bbf7f365fc6871cd21d7487e7"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xe2f}}, {0x87, &(0x7f00000015c0)=@string={0x87, 0x3, "7a0efb268bf623031dfdd537aebae35cd0775eb8d701f56470f7bd9abe8d845bee4100c6de2c4992d52aceaf5609f9133a93f9787a318b68d60b99b5bf9419b89f45c861aa50869bce35b08cdd84df54dd0cfa08da4f70e34f73f20cf7c738c9dbbf49928a18a9d1a5143a101d5e23dd24b6f92eb2f07027229a51b982d07358b5aaf2469e"}}, {0x77, &(0x7f0000001680)=@string={0x77, 0x3, "b0f424a611b5fd69affac3454e9b524d4399599cf5f7e2480eee63b240c08cb192da933295949ce4f473e6c05e2a2834edfa025e3f09f3a3a7c99db30f29862fda614ce4919b581a29f1e541e2a8e9cfd95a0cd3d183de95eb126084710693fccf8d48953e256c6388663104e64c0adc27eb14961b"}}, {0x40, &(0x7f0000001700)=@string={0x40, 0x3, "8d35ef805f36e1a472247ced7929588fb7c8aa992ed262ea2703928f4b4342f3a7141bb2a4dce4fe17063285578773e942e9343f66f7589d2eeecc978893"}}, {0x21, &(0x7f0000001740)=@string={0x21, 0x3, "2c2e3d1550b51c5eba177707027ae043dbff9f1e4d8b25b1986eab9b296ece"}}]})
syz_usb_control_io$uac1(r0, &(0x7f00000019c0)={0x14, &(0x7f0000001840)={0x20, 0x21, 0x49, {0x49, 0xa, "4306ca94c96294fcd1440e9f26c911957375fea667489c5828c96bc6276057da1e90440f5a200326d909f160784d9494638309893720d5f3d349bb0e1832ceae1d3f74d347a744"}}, &(0x7f00000018c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "0d1cf25eadf704d820e7d251a308d9c8a1a23c5273903f72da02d1f514b2e58e12e0e52581572caa8515335f63de7896366a19a0dc497f98a4b130f60d758e7e8052ac31a0b2f0660cc4b62aa7e871bea1c3b5b3cde4fb24d8f0e0ab89e51f21153b9dfc2727bf161e0cac0150545a0964e479e8ba989806b3d2668ecdaed68264e5fb78f6e20c92131f93875b58a0edd72a3bd028bbd9c9129d93f99de460d8d4d6cc086e828210cc63732b6332e584036e4d635e392c2ad9770b9e7671e91b13152a472d56415d8d42ddc5883a1b1938db88a5ae2c15436fc9f3ecdec497a076b33ddbba736e500a"}}}, &(0x7f0000001cc0)={0x44, &(0x7f0000001a00)={0x0, 0x1f, 0xeb, "502cd2fa642acd7659351de85fa01fc79fc2d206acaecb6785fb807367c07996c7e263298ea921d4c51644af0432d2ac39811a793a74b97379e5a0246b2a2811fe4c3571e6648d1797f155389dc26b7a540b70aaa6940ed5616939d16fa09802109945683c164dcad6228e32cfeefb704871cdaa065402306d317356e857d9f12d0e27e005fc8e1a046a7419b9b3a950fa9194784e37889eacc876dcb7d7ce7c9c5f4d16340322a2555ca33712323bbffdcf9bfecdc553c00a874616d7c16901865395e490b49dc2baf5d3b6d8e074b1431913c4ded54b0965766ab469582f8990a50369438d4b7143d330"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001b80)={0x20, 0x81, 0x2, "2df4"}, &(0x7f0000001bc0)={0x20, 0x82, 0x2, "b605"}, &(0x7f0000001c00)={0x20, 0x83, 0x3, "8a028d"}, &(0x7f0000001c40)={0x20, 0x84, 0x4, "5c93339c"}, &(0x7f0000001c80)={0x20, 0x85, 0x3, 'r+z'}})
r2 = syz_open_dev$hiddev(&(0x7f0000001d40), 0x80, 0xc8802)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001d80)={0x3, 0x100, 0x7, 0x4, 0xd48f, 0x9, 0x8, 0xfffffff7, 0xa, 0x3ef, 0x2, 0x2})
syz_usb_control_io(r1, &(0x7f0000002000)={0x2c, &(0x7f0000001dc0)={0x0, 0x6, 0x9d, {0x9d, 0x2, "9a4485df5afb3ec854b1e79a589b842f6a44483b0df3024dde42c358286ed8bb25f75a15ebd2ffc15adba01f3ba6e2ea41ec2eea4487035087a4a9383dc56f2a39fb1f56f2f4de90c1ce0ba241836a5ab961dd32562bde6ae0b79092980d8ccdaee40f63ad7c5f5e35fbada8069c418cbe5bc7e0de8702e46dfceca9fe6acece89ea74f91b706a27fb669546c161f2d50b3e4d141cdcea549d725c"}}, &(0x7f0000001e80)={0x0, 0x3, 0x80, @string={0x80, 0x3, "2b59e0f8434cc477935b799a6401c5c30fc963edd73a3f7c03f21e2b7cacad239215f0d513a46606e2418efc25737e20ab09ae234d2e01dca778d9d312a70bb7b8aeb82dfbecdd35049ad8a5938f0961af43026f0effe31b30f47b161530bf40c87c3d0a06c045af664a7dc504b35a61f244eb19ed305ca702252088325b"}}, &(0x7f0000001f40)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc5, "5398b64989cffdaf181c3f3135b1c4f7"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000001f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x4, 0xc, "3b0e17ca", "0b5b68ad"}}, &(0x7f0000001fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1c, 0x77, 0x2, 0x3, 0x4, 0x7}}}, &(0x7f00000024c0)={0x84, &(0x7f0000002040)={0x92c98881acde9915, 0xe, 0xb9, "31c97f91dc74cf030941562ea31e62751791800ec9136655cf90587bb6c21ab5edafa193b168f4e318f22a60e7a1f620e87c563aab5425fbd1a665d34774049d66304a8b27ff740cf0dacc72c16b16d8859ddec25029a5628c5d6468c7b294ce57621915bf31cc06af3048f9ac9878a797b3f94fd1f481332d8112842589194dad1041219ee3b9ecc0de48b89a9ad7386f9d4ec8399663380f5a464492a4521c5af558ee37de7ef5ed8a0eef0ba3d357465f7dd270f232a613"}, &(0x7f0000002100)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000002140)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000002180)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000021c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0xee950aa49c730797]}}, &(0x7f0000002200)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000002240)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002280)={0x40, 0xb, 0x2, 'A0'}, &(0x7f00000022c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002300)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000002340)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000002380)={0x40, 0x19, 0x2, "c56b"}, &(0x7f00000023c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000002400)={0x40, 0x1c, 0x1, 0xdf}, &(0x7f0000002440)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000002480)={0x40, 0x21, 0x1, 0x3}})
ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000002580)={0x1, 0x1, 0xa})
r3 = syz_open_dev$evdev(&(0x7f00000025c0), 0x6, 0x402001)
syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f0000002600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x2, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "e8d6"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf498, 0x7, 0x10}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf5, 0xe, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xcb, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000002ac0)={0xa, &(0x7f0000002680)={0xa, 0x6, 0x250, 0x9, 0xf8, 0xb2, 0x10, 0xd1}, 0x64, &(0x7f00000026c0)={0x5, 0xf, 0x64, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0xd4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x0, 0xffff}, @generic={0x2f, 0x10, 0xb, "4a280e5f77a98025cc6cb4dbb31dd6a6c9ce444b918c5bddb5f0cae7c8c5a21dc96dd234d7f9261b615431fb"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x9, 0x800}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x9, 0xdb, 0x6, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfb, 0x13, 0x6}]}, 0x7, [{0x26, &(0x7f0000002740)=@string={0x26, 0x3, "afacd6dd2cd2aba0a6d623ab6c12feb8bb1bba3b8533695316e5f6da89320a5e3ade866d"}}, {0xdd, &(0x7f0000002780)=@string={0xdd, 0x3, "dfedc10c69726862cae68e5161a4a740067a1a1eaccbe7667368b785b0548f99fc5dcc14d875ab7911ebbaf628872d5bc038a3cc273243175eb70fa26f7c807960d0c4939ebb35b7d816424eeb378c3c7ed30537dbbc237a478e51d9526a77e63a0675cc33f57ef747838143f175abd3596649b0ed072f443316f220f090d860e8ab04ac087d062035a0c4712a383bec59511e20d168cdef8743b544f2035658499a3357af9257230e8312f77ac587f82aebd05bac821c2e51385d82b2ac1d19ae9f4767a706908d942f17145a628a9245fee5bde57d6e7d8623b5"}}, {0x33, &(0x7f0000002880)=@string={0x33, 0x3, "d5140b0de3dae012b24b073aaba75a6403f19c22d74b28cb1d78498b19ae06d03855855e4dbdf34ed7dfd7e07bb0ac34eb"}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0xf2, &(0x7f0000002900)=@string={0xf2, 0x3, "59f13298f77173d95c4c1d77000d950f08fd34595531914cd7a60656c58c7a51f2f80da764d8787c834ee077c13b0f2c39c67aabf4002b21060c219af49b47e3743a746bf5406e3e906748a82f2882664536cf2615fdce7997095b70fb97d3023253346e613cbfda1cc334420bf49cf85d939c20371be37c11a535d93ddddf0117651749865550fba7791d307539d791ee3c2b64b7c143b37d7bfe0bfec2a1e89d4493cc44bb772b386272e61619fd00a07b19ef4e86986e83085bc188453ba00c2c52b847af2ba16aa582c2768240a8593b4b2aee6e4c014184b1fc111db1ec2cf9d36b4275cc466748348228798172"}}, {0x7f, &(0x7f0000002a00)=@string={0x7f, 0x3, "aa97086445755d50f805b16ca418a55c71a4ddf4c2a3267c2471675c98f05ed8771704fbd4fbca4ddd3967baa9a40a7d009ea44b8f6221100112aeba460ff29e3e61aa87e188befe2edc05f1864c5998b50d95946e6fec8183eda8871b7a7be5105f1a0978cdbc11e6ae33bad4d0cc83e111a7ef42826d5bb68efb8960"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x4c}}]})
r4 = syz_open_dev$hiddev(&(0x7f0000002b40), 0x100000001, 0xd0000)
ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000002b80)={0x1, 0x2, 0x4})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002d80)={0x24, &(0x7f0000002bc0)={0x0, 0x23, 0xe1, {0xe1, 0x11, "dc029b5332a1eb892990624cb665d84818ac0965d0fc0937950a052cc632abaf9394c421c6fc9498a7c07f23142cb1b4f2fd5712d179c9837786ba85fc331f706f6ff68e123f0ef5d20a8d680d6014f7375ea3412f895b6240294932a533d1ccc0c672e485fadfdce6ad165418e50e150da7fc192375f0735b809a5a8c2b5cc1164848239daf687b305f9ed50e58b59ebb37cc0cb37e3bf1bcd63ddb8d469abab471ed59e9bc6627efcecaa6f6b730ef2e25fd142ee84ef59948f9d60780f4960713cd1f828c34eed79ccf0946d0d2ee8900fd1c1eb68e59e052a837649f05"}}, &(0x7f0000002cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000002d00)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x0, "61cc8c38"}, @main=@item_4={0x3, 0x0, 0xb, "628137e6"}, @main=@item_4={0x3, 0x0, 0xb, "aab19a99"}, @global=@item_012={0x2, 0x1, 0x8, 'DG'}, @main=@item_4={0x3, 0x0, 0xb, "919f015a"}, @global=@item_4={0x3, 0x1, 0x7, "b56ed614"}]}}, &(0x7f0000002d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ede, 0xf, 0x1, {0x22, 0xb2f}}}}, &(0x7f0000002f40)={0x2c, &(0x7f0000002dc0)={0x0, 0x17, 0x52, "954769b75a4fc809198c66b07e0ecee3992edd25b6ab8adafe6e1cf7af34bfe6c67e91d9f7cbc84145dfe2804f1dc9608abd24f683fa1bcddf811c185df3df2b02f4ddd98058a4877bfdcd4318a871eaa741"}, &(0x7f0000002e40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002e80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002ec0)={0x20, 0x1, 0x38, "62f13cab040eb160d4faab269cb97978b017aa490b84c2c70489a6522fca096dbcadd5caab0e37561e4822b60ab1b224fd4562d596e0ebbb"}, &(0x7f0000002f00)={0x20, 0x3, 0x1, 0xc}})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002f80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000003000)={0x9, 0x3, 0x2, 0x1})
ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003040)={0x8, 0x400, 0x80000000, 0x0, 0x7, 0x2b0d})
syz_usb_control_io$hid(r0, &(0x7f0000003300)={0x24, &(0x7f0000003080)={0x40, 0xa, 0xeb, {0xeb, 0x22, "2ae372bd85ae02b1bbd1fbbb7a5e2651581bdff5f3f9d1dfd761ee42290e35abb109f74fec4ff08c0fec051e3af7c7e766e865049b72342ce75ad7fa460a8107616ba0e213b6a0518c706eff3dc176100891c4e91dc66e7cf7c54912a9edd431b105d637e084de4cd1c9efde32859d1c4babd803c4d51256152f6a89eda4e1d4833d63dc7aa670f1154e92f20dfb852f872b01f4a5d85b569724485d2f8cff4b6b9e2ded52a29fa8547d01bd0d63c09fcaae12017764008f26a72f838d606bf7d68a4b39123380065e3af6ad1a1ab68d1a6800ae6888a8ca9fb92107ff82ac59b795a6bf99fdb2025c"}}, &(0x7f0000003180)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "1d337d0199732843b19f5979e06c780982d7685bf4d3f9d2f34514154456401338ce2b08a1272c5cc34d07c3a63e330d03cbd47928916638790899a69ff81e6679c34b698f94fe25afad819ee99b66a3af21362ef17f900123b33ab63d7028242f38b3ec469f5130ad4f864b56347ece9a6edbd0d209c9ff47bd99c025d4d0cee3582bcdd2b5b8fd9c3b3fb1f5f1d30f5e1e74ef32540091192afe861a12caccbc1bcf327f4dbc04bffcda19ac77826fecc2db8c39b35479d3067c33dec2d5e0a4aa957722f0b4572b45fa83470a2bca10966a75bd4958"}}, &(0x7f0000003280)={0x0, 0x22, 0x1d, {[@local=@item_4={0x3, 0x2, 0x9, "cd6c6a37"}, @main=@item_4={0x3, 0x0, 0x9, "7bd73a97"}, @global=@item_4={0x3, 0x1, 0x5, "9bb76e02"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "ffaea60f"}, @global=@item_4={0x3, 0x1, 0x7, "1d37d5bf"}, @main=@item_012={0x2, 0x0, 0x9, "9b5e"}]}}, &(0x7f00000032c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6d, 0xd, 0x1, {0x22, 0x1ad}}}}, &(0x7f0000003540)={0x2c, &(0x7f0000003340)={0x40, 0x13, 0xe7, "6ba048e05a2610a6ab8a60aabeaaced2bad79ec8c83c5cd3e13613dd9719812a41ec0c5a1c25a9cc4e54e169218107d193a41ff38abac5c6039bdf1e1f88034fe205799561221cbe05a88aab2845d02fe99af6c507daf3cdc735be0084d680611c4cd31e87701593045c564b6d4819e939f97ff4549f75577ac2f5cacbc64587afaa1155af6cae037492a3fd0fea627990c9e65c414379811f6aecc253b0ba47868a5f280a3049e4de658372c24287edc5c9aa5f66994b82c136f0b8dd2d70ca446e4e6012ac104654f6d8d98d824b8b0558009d7112b01e74ea4693e3dfaa074762150d600b3b"}, &(0x7f0000003440)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000003480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000034c0)={0x20, 0x1, 0xa, "77e5eb8837fde7f141a7"}, &(0x7f0000003500)={0x20, 0x3, 0x1, 0x2}})
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000003580)=""/55)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000035c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xd3ebec9f13788635, 0x24b8, 0x40, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf4, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xc, 0x1, 0x1, {0x22, 0x9b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x1, 0xf}}]}}}]}}]}}, &(0x7f0000003840)={0xa, &(0x7f0000003600)={0xa, 0x6, 0x410, 0x3, 0x6, 0x10, 0x40, 0x1}, 0x2b, &(0x7f0000003640)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5e, 0x13, 0x66, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9b, 0x5, 0xd}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7f, 0x22, 0x101, 0x5}]}, 0x4, [{0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000036c0)=@lang_id={0x4, 0x3, 0x402}}, {0xe3, &(0x7f0000003700)=@string={0xe3, 0x3, "62a5435f15b618e49b0e7161856a50cc3bbae2c8801138ec889691a6a1acb3995ebba51bcd5d9f95103bd7c7f3158becacda36e0a0178e407d1acf2864603f3f27108bbcf6297f34c6d080b3ef353f415eafd1391ac1c9ceded1e7612da0701e826140e9cfa6a558f203dda6df2561f7c663f25f083331429ff0bc3ec75085381158407d4cbdbf4e1d403d7230ad8cb17b73a1e3613c7e8447ddf1163b13c3b021958f7efc60d5abf65ddcafef675c284c4301bf809bbc62e4ce91fcb1a3d3049d69ceeedcf4a2dc9f5d9859bce724a6786d37ea7cb88ca4ce707921727a4307e8"}}, {0x4, &(0x7f0000003800)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_connect(0x5, 0xc79, &(0x7f00000038c0)={{0x12, 0x1, 0x300, 0xf2, 0x1b, 0x2a, 0x8, 0x582, 0x23, 0xc015, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc67, 0x4, 0x6, 0x7, 0x60, 0x8, [{{0x9, 0x4, 0x91, 0x2, 0x7, 0xc3, 0x93, 0x9c, 0x40, [], [{{0x9, 0x5, 0x6, 0x4, 0x8, 0x8, 0xf7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}, @generic={0x2f, 0x22, "b6085f8cada7e790c3114998caf0dc0872542b576e6bfab0d7e2350e1c8194233c0fc66c386c06cfa04e87e381"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x10, 0x68, 0xc4, [@generic={0x39, 0x31, "832171c692c89abff7ed0a6a19df08a8e9629b8fb3fc25e1816eab3c8a020dcce675d3e64098a21da6a14cb1811932b54b036ceb432d5b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0xba967e884498cb03, 0x81, 0x1, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x7, 0x0, 0x9, [@generic={0x28, 0x7daf2c1305b8f8a5, "8822d64997896406dcad837a79891c83c5c560b7805d333a730a1bd0ec39d155d3ede6463084"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9129}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x3, 0x7, 0xf7, [@generic={0x43, 0x11, "99793a4b62675a565aa0889afcc5df1d4dac8660c558c017cefde6a3b696ee224ef49dddd47febb0c1e2e5152adaa8c793b0c20ce3e54fc988fc877a60174189a1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0xa, 0x200, 0x3, 0xf9, 0x8}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xdf, 0x1, 0x0, [@generic={0xaa, 0xa, "059d7fab6e647904387c1715246713c8039f0b018632c350dd8850548b1ee9f90bb7351d02807039ce64be311b7eae7e81f24654929f26dcb5ffcb765c21f1935aaeda5715a75780f015997098fb9fdb23b2c305afaedfa5f8340ee3322a312545fb82ac71faab76635de52658628ebf510567ff5ec1f7ec4f60deff5667f1082bee56ab72bac74a38f62a5bb7ecd2d34f1dbbd0589dd50243992c836f25175ce6c46bf738465874"}]}}]}}, {{0x9, 0x4, 0x24, 0x1, 0xf, 0x6b, 0x19, 0x86, 0x1, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x9, "b64d60", "b6bd"}]}], [{{0x9, 0x5, 0x81, 0x0, 0x20, 0x8, 0x5, 0x9, [@generic={0x73, 0x3, "2e573edd34effaa3044cc17446c733675e7f22c2c10206495b42d2cbc76140648bafb65a101d56358f5fb877efdc3909bb4a927743df6cf6438268ad7259d062049a65d8d5150de585f870083255d19ec3da45b57550f1f52eda4f2dcd93f1e9803579e51a5414b79d253b4b7ab99aebfb"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xf, 0x5, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xf8, 0x9, 0x8}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x10, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xd}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x1, 0x1, [@generic={0x65, 0x22, "4fda3de16d8e36c2bc1dacb28bf9cb3bc8f63c982e34ca4b2acd7d2d0e67d8afa575428179c5543674334d97c7434ec9a357c68a95efb3a0b94aa2fb575dcb9ab805bd32795a2e54c6b53a5dbdca3aa572fdb0a8dd71697d3a0a25ca766f11c883c27c"}, @generic={0x30, 0x1, "f6eac9de9828b97bca86b47c1e1c97023d643585094725c7886b25b41c62a37a108e78ab65d0efe0cd7b39e99006"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x9a, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x80}, @generic={0x91, 0x0, "36dde91780fa9f19739ce75e232234ce3b215564efb33266c9d430537536d2a5e8476fd96c0e1a12df426146494ece7298a80e4bf3d44dcfbe60c5b69d98c6aa7c17dc6c30e256b917997bb2edbe7fa54c8fa5699c60d5d3fb6c6382f6b3f9a139301c0b61b86ea28b8b74fc32496ca8a388ffdcb7e70717cac5be185fd1e3134790fd41bb6fb95165f1b8cde890da"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x7f, 0x2c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x54, 0x3}, @generic={0x78, 0x8, "bf1c6e141c19f6f2837c013cfa87283d70acff609b7c54324e5fe7e9846c954793167411c1564e03db002d9ffea0cabcaac67e09079e35e1546bff17716d7bca8837fcf1ee1a082300cce237c6d23dd4ed7dfbfea5bd2c49f64de75e2ba108f1be13d8fc1f387bfef4266d74250b8472c7206e1d0b69"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x20, 0x9, 0xe7, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6b, 0x2}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xff, 0x9, 0x9, [@generic={0x99, 0xa, "443947dc8659c3985fdbc8a6be743e7bbca87970e48d7f5b404096be314f3fbccc16f18d83742d8ea1cbb26a99f1c13228a85b633405312967ddd34e4b2d6f4c923f9775d26c1f72036a033325d304cf8e06742d535144f8e510a6e918e09a7818c96d2704982a2a158ab4002eebac45981435775862eff4d3ebb76b6d37f6f8fa0941aed3f9de4489f9ce962f5f8c17c65ee639fae47c"}, @generic={0xe, 0x21, "69a99ab9402099640a547881"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}, @generic={0xc4, 0x22, "224e175a30a4fe7fa2d7428855d3a63ff4394bee4b6b7085e515cc62962d3263c90c63123847ec0f38e366f52be7cc3823936d61da622499e1058f5852c34da6ba2c5346d0c132f964a6c22a40193536bedb26fb22e3590d6cb916b087780dffc884bc18369ed3ab932d37ac1efd7f114f7f2029ffe44b5ddeb99bd27acea5bcade6f95727d1d9064fb6d8fd088c35e3631a88142c670f11dd3d9f97aca633918aaaa7c1d7dd58574db2004e6b0abb5f8fb1affa0ce387999853d9260a21cefd1b1b"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x2, 0x7, 0x13, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xd}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0x0, 0x80, [@generic={0x61, 0x22, "f836ca51782388ba92a6479d05a391da02eec512a81f09da1c645efd2b8bc6f65dc2ac9c060d47c225132b88e7824a845d0c4d72ab3ebcb43c7946786bdabea3e0abd4b11c7d6d574941daa4d221d75296ff44477826d6ad0ab2cf36b8aa6c"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x9, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x9}]}}]}}, {{0x9, 0x4, 0x47, 0x4, 0xc, 0x45, 0xd7, 0x60, 0x3, [], [{{0x9, 0x5, 0x0, 0x3, 0x40, 0xd, 0x6, 0xfe, [@generic={0xb0, 0xd, "ebe264ded7a80555ac86a0e67e40942eb99a4232aa569c2940fe80d8790240265747865af9e191f9094b4a4daf4b5d14eaa36b1ce68fcd53b961e182c2700c55effe4453ad95a692c2def336b680386a5824157dda3a75f4a1be430c188539d07d5c0d65b2189ab9f218d484aa5454f4bff5ac1de81a980b6cc69d0270ca2d8df3394437e43300c40d7e53bf65e113672f13db62bd9068ef050a1d1bad738ef7abab49dadcc90242f4813617ca61"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0xc, 0x13, 0x3ff, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x7, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x3, 0x5}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3f7, 0x8, 0x0, 0xfb, [@generic={0x35, 0x2, "3d9e2eb91b4de30445971e18482d3724f8c0d3ccacab2f494eee1f636534b4da4795c47084e10996f7dd99e28071cb8e06ed2e"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x7, 0x2, [@generic={0x53, 0x0, "a23410bfc6bb6b41ff5c6cee5a29552707eaa413b37362166a8e58b24aabe724905347a4c0e6d42c0bc8e6de3995430a1153d17715f022d3ae42872c5de1cc30558086ff3736f921e34980296184541799"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x400}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x3, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x0, 0x7, 0x3, [@generic={0x5d, 0xb, "62801a6e81848840778bc7f076d4216ed934ac634a38daa281a5afa1f78095d6467f3fd201426099b472b76e2eefc7292fa7b94dd7a9ed0196d9bb59d75f1ddb9e2e4161f22bebdde4db8e2543796f151f9625031488804b0db58a"}, @generic={0x35, 0x21, "b7d429f8ab59a511255b1f42329cc3b44da9bec2b361fe7fb727504ce2c40d1df7e8bdbc3415d88b5332b855384f20df35d0e2"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xfa, 0x10, 0xf8, [@generic={0x62, 0x6, "846d954d20d88baa693f19764657de8df802e21aa070473673ede5e7b4d10efd4928934bdb8b69899d671273f97eb1ea72873cf6c34d36ac666f8f9c97c79813c20b567a62ba3ea0025fd0a1f9f571d6903936bb6589cdd896a30f1eaef81a2f"}, @generic={0xcc, 0x3, "a10915d5ac5adc6b0befc3b30bd857764e5437e0fa7ecd165d62ef0362326ffb81295a30fad7fa8af0ca361cdfe916c2528ff13a5c63a57d2f33c8372447470678f78915f3b2b711ad9c67a2793cab1fbcbb7cb3b4d28dde84e845a0f162829a362b8a800e2e857708182e4aba34d12538ab3a95bae4b21a1c5135b657e179f9fcc823873f7e6c8fcb24c60a35099c71c60607e229ce4906a34e07e760f0ba26e4008e5a7562733d136ed414e4aaddac028cf2e77cd4fa3679fa905ac0226f760434e1ac1e50b7fa2d63"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10}, @generic={0x33, 0x5, "b09e647ba8ec5e7563c908f5545ea5acc0fe77fd20a7eabb9e8fedbe43010b9e313eaf4dd5c0b0bb93ec631b8ae616064c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x7, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x200}, @generic={0x5d, 0x21, "5c558f03ea9de9ccb4b96a0a5a369718adb35eefb305cf04493f1f65bd37a2ee2f83b54fe8e426d7e2ef82f9f002e0624283ec6126245c6a0cbbf0f8c6a91452b9a59c28dea65827815a0a5692d018c0b63756bfab3cb5241a15ae"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x2, 0x0, 0x5, [@generic={0x3e, 0x4, "ac04fba33e27b5bda7f8d4d7698ed3124771c6511de8a980382a881464321be439507960467ff8ceeb68eb15bc645d48822b002626e06179c18a88c7"}, @generic={0xdd, 0x31, "b4da1ab14372f9f7459a62b5be75fae9dc82a2f8813a586bf6cbef9b64873405261434a8825a893f720e0be5ea49f45f9687d42121feee7a85b0bffdc29873bd7fef86ea434c5a6b3da5984c16ab4c337c07568a057ea967260dca429b9c38847e5724732dad001efdffa015f8b13beef40190e9292cae88e5301c360c2cd03099885411c7a23df86171ec798fefcf406b4a652355167b22dfdac932b424b992e9eeb212df4304c61e55c1591df83da3920aaa58b22df6e4d07ba07070b9968d20ff526fd4b86378acf608e0dda63a749ecf8175df166ed90c4b3b"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x9, 0x4, 0x5, [@generic={0x28, 0xd, "114c66d211cb50a7eea2e4a410c57ec66a4e47812f63f7f9387812e1868e2a5246780631b365"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xb}]}}]}}, {{0x9, 0x4, 0x3f, 0x1, 0x1, 0xa4, 0x9f, 0x3a, 0x9, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x4, "1b", "1e"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x7, 0x0, "18e81bba20d9e089"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9c, 0x0, "c2ae598b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7f, 0xa, "80f95a47"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x80, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000004600)={0xa, &(0x7f0000004540)={0xa, 0x6, 0x300, 0x3b, 0x2, 0x1, 0x1f6, 0x5}, 0x23, &(0x7f0000004580)={0x5, 0xf, 0x23, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x637e, 0xf00, 0x6000}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xc3, 0x4, 0x1, 0x7}]}, 0x1, [{0x40, &(0x7f00000045c0)=@string={0x40, 0x3, "27d7034b8c96ef9d3b9c96c7b517b65b0e1b6fab6c0ca2715e4b9210840039550b62f361838752957598f077f9fa2473f9801b8dcccc9d2f677399c8d47a"}}]})
syz_usb_control_io(r1, &(0x7f0000004800)={0x2c, &(0x7f0000004640)={0x20, 0xf, 0x36, {0x36, 0x22, "e5313616d4bcac814ea4f576598b2dc1dae041592b57d25081b8f955b16fb91f40abb07b4efe8212395e2c74a8334447b8fa47b7"}}, &(0x7f0000004680)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "9070d032fe8ca46ca91a56a239ccc7c3b1c65faab964725de579bb20b81c12ade98bb7842b869540bd62fbb47bd9b940356bc7f9226438a10f5d"}}, &(0x7f0000004700)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x10, 0xf000, 0x5, [0x30, 0xff4100]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x8, 0x0, 0x100, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x4, 0xe29}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x58, 0x87, 0x7f, 0x8000, 0x6}]}}, &(0x7f0000004780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x43, 0x3, 0x1, 0x0, "90497810", "128975fd"}}, &(0x7f00000047c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x80, 0x0, 0x6, 0x9, 0xff5a, 0x522e}}}, &(0x7f0000004d00)={0x84, &(0x7f0000004840)={0x20, 0x6, 0xfe, "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"}, &(0x7f0000004980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000049c0)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000004a00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000004a40)={0x20, 0x0, 0x4, {0x1c00, 0x80}}, &(0x7f0000004a80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000004ac0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000004b00)={0x40, 0xb, 0x2, 'z.'}, &(0x7f0000004b40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004b80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000004bc0)={0x40, 0x17, 0x6}, &(0x7f0000004c00)={0x40, 0x19, 0x2, "d2d1"}, &(0x7f0000004c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000004c80)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffd, &(0x7f0000004cc0)={0x40, 0x21, 0x1, 0x1}})
syz_usb_connect$cdc_ecm(0x1, 0x6e, &(0x7f0000004dc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x7, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "2914fe39ea"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xe, 0x400, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0xd, 0x0, 0x5, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xb43, 0x80, 0x19, 0x76, 0x3, 0x1}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000005200)={0xa, &(0x7f0000004e40)={0xa, 0x6, 0x0, 0x71, 0x0, 0x1a, 0x20}, 0x4e, &(0x7f0000004e80)={0x5, 0xf, 0x4e, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x4, 0xf00, 0x4, [0xff0000, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "45e85d5b6efb453f2f7389d3bd3fba0f"}, @ss_container_id={0x14, 0x10, 0x4, 0xee, "3a60aab28a4e9a43cee7a217f33aa703"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x8, 0x81}]}, 0x6, [{0x4, &(0x7f0000004f00)=@lang_id={0x4, 0x3, 0x814}}, {0xd4, &(0x7f0000004f40)=@string={0xd4, 0x3, "f03df13a7266f33393de38818b28a2e7a8e68bc9c7e8e3cd4380faf23e9cde70be03eda38deedebfbeea5b7b19b94e08b719e895bcffbd8710b680d34760ad96a709eb0e1940f11b9bef35d4bd8a4efbf5a4ad59013136f619d9518e5d85539f6380b17cf5b5d43318eee360741c3c043af402f3f058b563d3b8f590f2a95c61ea65060c1a9ef5f3a515eaf8b12721b6017741bb4872c3900883592aa4503ab9b7ff1ec44d2c3e02fea03435443e6bac511b57444f6fcd1609d45e027c3786a5e27c6d7e8f255d175908d80a83d8db10e033"}}, {0xe4, &(0x7f0000005040)=@string={0xe4, 0x3, "d15dff2ab83c560404c8633dff996f125afb74c6ebff6b4c794bb528046a9fa583e28fc9aaec5e06374dfdb908ed225a8296a2fc0895d9c90e0d94f61b4f709fdd751149f8161e7fe7d204e657ec9f335bd34ed41b2a9efd0f2dc0e81fc5dc2052c2d5e40fb0511c7fdd3a84ac725c6ae92d6187f5a807d149dcc19d342eab56c570b216d1de26caa4440b120ffb7755a720f1c0ace0c529c9aa261292492aba3d0c98e6f060c8839758b67e0b25d1bdbfc2adb958a17ffa678e9c0aaefc7083c126a866162f114418988262756c70d68bac43b688f8ec6baffeae760fc7a06a90be"}}, {0x1e, &(0x7f0000005140)=@string={0x1e, 0x3, "e5d4365ca25b12e6c99831fe370f6d3b97a6c8445a5d7cafa518dba6"}}, {0x4, &(0x7f0000005180)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000051c0)=@lang_id={0x4, 0x3, 0x439}}]})
ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000005280)=""/244)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000005380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
read$hidraw(0xffffffffffffffff, &(0x7f0000005400)=""/139, 0x8b)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xd71)
write$char_usb(r5, &(0x7f00000054c0)="5687561a1633bf83897634bfdeee4bcb702df8692bcc83722a3935db1f616e2d65992e04adc286cdfc0f9a22dfeaa3a834a2f9810e728bcfd4d9f7de4498281be4ff49be35e7cc97caa08128e97827671300a9afd03ab0404b3b0b", 0x5b)
ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000005540)={0x2, 0x200, 0x7c1})
syz_usb_control_io$printer(r0, &(0x7f0000005680)={0x14, &(0x7f0000005580)={0x40, 0x24, 0xa9, {0xa9, 0x23, "c9394f92b3c8499c51278f2ab9c99c820ccf5175fc72a34a2dc59f7b2229f8f19e33d397cff7355407fafba1d8822ca490c72307218ca95f4e44a9fbe82e4aa6adbaed6006cec6e8a8556edfbe714b4f09300804e19dcd6d3b6d1a7a0f43516c87444f8aea60c3e69142d551eca838e5e86af74628a5356f12674755f3a29462e9e788f316d943c17d15765d8bffa178c93d7a185b8f5db5036a35fb73f713bb567de94c803900"}}, &(0x7f0000005640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000005940)={0x34, &(0x7f00000056c0)={0x0, 0xe, 0x4b, "360e9e47ce62a8b4b7907ca17bab4e0b77c451c52fae7434edbe9775cc862ffd3929088b99f2640eaed9cf45b3fcd0c82c5b4a6b225144cf54d7dafc4b87e125aab2d8371437f543417495"}, &(0x7f0000005740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000005780)={0x0, 0x8, 0x1, 0x19}, &(0x7f00000057c0)={0x20, 0x0, 0xea, {0xe8, "0c4a0a8031aab3302b1e167d4de57f33c9f393dcce8c6742907400a94008a583e197be83f48d43322a5306d7eba88b1d687ef172c1a1cd0281024f16ff46d067f8e7e065dc1b55181493638d85b486b5a813046822bdff6a4384d6a1832f36e465b78eca1dc4d839e044a35e45ed895345e2c91109f44834f70bf97f89a2f5ae3a2ee09c6003f88b63023ef9bbce6fc3f2c5fba19d3bfe4b70632e42eb3e09cc18721182447fddfd95d8232bba9cedc9db733d848d29b57b8de5312beb4f5a90c677be396f2e7c91b3209f6e2299b7d73ab39597672eb54d20c0601d49fcae3056a5046a25dd59de"}}, &(0x7f00000058c0)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000005900)={0x20, 0x0, 0x1, 0x7}})
read$char_usb(r5, &(0x7f0000005980)=""/4096, 0x1000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_open_dev$char_usb-ioctl$EVIOCGMASK-ioctl$HIDIOCGRDESC-syz_open_dev$evdev-ioctl$EVIOCGLED-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_open_dev$char_usb-ioctl$EVIOCGMASK-ioctl$HIDIOCGRDESC-syz_open_dev$evdev-ioctl$EVIOCGLED-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$uac1
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc5, 0xdf, 0xac, 0x20, 0x4ad, 0x303, 0x1a34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x93, 0x10, 0x2, 0x78, 0x7a, 0xb, 0xf2, [], [{{0x9, 0x5, 0x3, 0x2, 0x79f}}, {{0x9, 0x5, 0x83, 0x2, 0x3ff}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x0, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000401e040128000000000001090224000100000000090300000103000000092100000001220700090581030000000000"], 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b01, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000015c0)={0x6bd, "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"})
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGLED(r5, 0x5421, &(0x7f0000001c80)=""/93)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0xfffffffffffffe6d, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "47f886f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x6f686bd91b4585b8, 0x22, 0x21, {0x21, 0xe, "1d608f71047b5ec94d2d88baa4ce9f24db356531442d35f90b03b4780ae6c5"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x7f, "ed3469098e569e475cc6ef5da906bd59cddc9fc8f054279f5af6a0be9bf56b9e90a4330002a06fd5071955496c8af28822b0582a9d86a3ca8637a8f3593284363d079786d1b433aa023ef5b829c158f2e5cb91326f6b480641e0b74220447f444c108ab90aeee0d9949ecec32113f30b97cba0282cd3e6f7ebe595255ef49d"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x81, 0x3, "d03cbf"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b5f9"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '%'}, &(0x7f0000000400)={0x20, 0x84, 0x2, '?E'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1f1ef9"}})
syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc5, 0xdf, 0xac, 0x20, 0x4ad, 0x303, 0x1a34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x93, 0x10, 0x2, 0x78, 0x7a, 0xb, 0xf2, [], [{{0x9, 0x5, 0x3, 0x2, 0x79f}}, {{0x9, 0x5, 0x83, 0x2, 0x3ff}}]}}]}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x0, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000401e040128000000000001090224000100000000090300000103000000092100000001220700090581030000000000"], 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) (async)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000015c0)={0x6bd, "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"}) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$EVIOCGLED(r5, 0x5421, &(0x7f0000001c80)=""/93) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000040)={0xfffffffffffffe6d, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "47f886f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x6f686bd91b4585b8, 0x22, 0x21, {0x21, 0xe, "1d608f71047b5ec94d2d88baa4ce9f24db356531442d35f90b03b4780ae6c5"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x7f, "ed3469098e569e475cc6ef5da906bd59cddc9fc8f054279f5af6a0be9bf56b9e90a4330002a06fd5071955496c8af28822b0582a9d86a3ca8637a8f3593284363d079786d1b433aa023ef5b829c158f2e5cb91326f6b480641e0b74220447f444c108ab90aeee0d9949ecec32113f30b97cba0282cd3e6f7ebe595255ef49d"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000300)={0x20, 0x81, 0x3, "d03cbf"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b5f9"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '%'}, &(0x7f0000000400)={0x20, 0x84, 0x2, '?E'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1f1ef9"}}) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_connect-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0xf8, 0xa0, 0x40, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xde, 0x9d, 0xd1, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r0)

program crashed: INFO: task hung in usb_hcd_flush_endpoint
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0xf8, 0xa0, 0x40, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xde, 0x9d, 0xd1, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program crashed: INFO: task hung in usblp_disconnect
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_usb_control_io$printer-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-ioctl$EVIOCGRAB-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program crashed: INFO: task hung in usb_deregister_dev
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
write$char_usb(0xffffffffffffffff, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680), 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=8m15.000100608s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
testing program (duration=8m15.000100608s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_disconnect-syz_open_dev$char_usb-write$char_usb-ioctl$EVIOCGRAB-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001680)="f31552", 0x3)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

program did not crash
reproducing took 4h6m48.249418474s
repro crashed as (corrupted=false):
INFO: task kworker/0:1:9 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1     state:D stack:22960 pid:9     tgid:9     ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
 usblp_disconnect+0x4a/0x330 drivers/usb/class/usblp.c:1396
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:1:37 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:24144 pid:37    tgid:37    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 usb_kill_urb.part.0+0x1ca/0x250 drivers/usb/core/urb.c:713
 usb_kill_urb+0x83/0xa0 drivers/usb/core/urb.c:702
 usb_hcd_flush_endpoint+0x1d9/0x3e0 drivers/usb/core/hcd.c:1815
 usb_disable_endpoint drivers/usb/core/message.c:1302 [inline]
 usb_disable_interface+0x1ce/0x4c0 drivers/usb/core/message.c:1348
 usb_unbind_interface+0x3c5/0x970 drivers/usb/core/driver.c:459
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:3:5497 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:3     state:D stack:24064 pid:5497  tgid:5497  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
 usblp_disconnect+0x4a/0x330 drivers/usb/class/usblp.c:1396
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:5:5518 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:5     state:D stack:24528 pid:5518  tgid:5518  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_disconnect+0x97/0x330 drivers/usb/class/usblp.c:1403
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/0:4:5556 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:4     state:D stack:24400 pid:5556  tgid:5556  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_register_dev+0x11c/0x550 drivers/usb/core/file.c:134
 usblp_probe+0xc99/0x16f0 drivers/usb/class/usblp.c:1208
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz.2.258:6224 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.258       state:D stack:28768 pid:6224  tgid:6215  ppid:3221   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 usb_kill_urb.part.0+0x1ca/0x250 drivers/usb/core/urb.c:713
 usb_kill_urb drivers/usb/core/urb.c:702 [inline]
 usb_kill_anchored_urbs+0x10d/0x370 drivers/usb/core/urb.c:822
 usblp_unlink_urbs drivers/usb/class/usblp.c:471 [inline]
 usblp_release+0x191/0x310 drivers/usb/class/usblp.c:483
 __fput+0x408/0xbb0 fs/file_table.c:422
 task_work_run+0x14e/0x250 kernel/task_work.c:228
 get_signal+0x1ca/0x2770 kernel/signal.c:2689
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb4d0d7cef9
RSP: 002b:00007fb4d07de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: fffffffffffffffc RBX: 00007fb4d0f36058 RCX: 00007fb4d0d7cef9
RDX: 0000000000000003 RSI: 0000000020001680 RDI: 0000000000000003
RBP: 00007fb4d0def01e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb4d0f36058 R15: 00007ffe7a3960b8
 </TASK>
INFO: task syz.3.261:6233 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.261       state:D stack:28896 pid:6233  tgid:6226  ppid:3218   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
 usb_open+0x213/0x2f0 drivers/usb/core/file.c:47
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa540d2b890
RSP: 002b:00007fa54078db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa540d2b890
RDX: 0000000000000002 RSI: 00007fa54078dc10 RDI: 00000000ffffff9c
RBP: 00007fa54078dc10 R08: 0000000000000000 R09: 00007fa54078d987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa540ee6058 R15: 00007ffe4e86f208
 </TASK>
INFO: task syz.3.261:6234 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.261       state:D stack:28896 pid:6234  tgid:6226  ppid:3218   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
 usb_open+0x213/0x2f0 drivers/usb/core/file.c:47
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa540d2b890
RSP: 002b:00007fa54076cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa540d2b890
RDX: 0000000000000002 RSI: 00007fa54076cc10 RDI: 00000000ffffff9c
RBP: 00007fa54076cc10 R08: 0000000000000000 R09: 00007fa54076c987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa540ee6130 R15: 00007ffe4e86f208
 </TASK>
INFO: task syz.4.262:6236 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.262       state:D stack:28832 pid:6236  tgid:6228  ppid:3227   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1528
 usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb834a7b890
RSP: 002b:00007fb8344ddb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb834a7b890
RDX: 0000000000000002 RSI: 00007fb8344ddc10 RDI: 00000000ffffff9c
RBP: 00007fb8344ddc10 R08: 0000000000000000 R09: 00007fb8344dd987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb834c36058 R15: 00007fff85454148
 </TASK>
INFO: task syz.4.262:6239 blocked for more than 146 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.262       state:D stack:28832 pid:6239  tgid:6228  ppid:3227   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1528
 usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb834a7b890
RSP: 002b:00007fb8344bcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb834a7b890
RDX: 0000000000000002 RSI: 00007fb8344bcc10 RDI: 00000000ffffff9c
RBP: 00007fb8344bcc10 R08: 0000000000000000 R09: 00007fb8344bc987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb834c36130 R15: 00007fff85454148
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
6 locks held by kworker/0:1/9:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000009fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881093ca190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881093ca190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88811e71d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88811e71d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
1 lock held by khungtaskd/30:
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6626
5 locks held by kworker/1:1/37:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90000277d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881093e2190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881093e2190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88810bead190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88810bead190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
1 lock held by klogd/2536:
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:560 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1415 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1714 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x28e/0x2f80 kernel/sched/core.c:6436
2 locks held by getty/2605:
 #0: ffff88810ef7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
4 locks held by udevd/5473:
 #0: ffff88811d26b790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
 #1: ffff88811afa2888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: ffff888101710968 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1014 [inline]
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/1:3/5497:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90001cefd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881097c1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881097c1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888104f52190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff888104f52190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
6 locks held by kworker/1:5/5518:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000146fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881097b1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881097b1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88810bea9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88810bea9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_disconnect+0x97/0x330 drivers/usb/class/usblp.c:1403
6 locks held by kworker/0:4/5556:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90001effd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff888109b49190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff888109b49190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1004
 #4: ffff88811e71e160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88811e71e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1004
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_register_dev+0x11c/0x550 drivers/usb/core/file.c:134
1 lock held by syz.2.258/6224:
 #0: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_release+0x7f/0x310 drivers/usb/class/usblp.c:480
2 locks held by syz.3.261/6233:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 #1: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
2 locks held by syz.3.261/6234:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 #1: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
1 lock held by syz.4.262/6236:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
1 lock held by syz.4.262/6239:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
1 lock held by syz.4.491/8056:
 #0: ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:296
1 lock held by syz.3.492/8057:
 #0: ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:328

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xf0c/0x1240 kernel/hung_task.c:379
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111

final repro crashed as (corrupted=false):
INFO: task kworker/0:1:9 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1     state:D stack:22960 pid:9     tgid:9     ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
 usblp_disconnect+0x4a/0x330 drivers/usb/class/usblp.c:1396
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:1:37 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:24144 pid:37    tgid:37    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 usb_kill_urb.part.0+0x1ca/0x250 drivers/usb/core/urb.c:713
 usb_kill_urb+0x83/0xa0 drivers/usb/core/urb.c:702
 usb_hcd_flush_endpoint+0x1d9/0x3e0 drivers/usb/core/hcd.c:1815
 usb_disable_endpoint drivers/usb/core/message.c:1302 [inline]
 usb_disable_interface+0x1ce/0x4c0 drivers/usb/core/message.c:1348
 usb_unbind_interface+0x3c5/0x970 drivers/usb/core/driver.c:459
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:3:5497 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:3     state:D stack:24064 pid:5497  tgid:5497  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
 usblp_disconnect+0x4a/0x330 drivers/usb/class/usblp.c:1396
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/1:5:5518 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:5     state:D stack:24528 pid:5518  tgid:5518  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_disconnect+0x97/0x330 drivers/usb/class/usblp.c:1403
 usb_unbind_interface+0x1e8/0x970 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:560
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:574
 device_del+0x396/0x9f0 drivers/base/core.c:3871
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/0:4:5556 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:4     state:D stack:24400 pid:5556  tgid:5556  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 usb_register_dev+0x11c/0x550 drivers/usb/core/file.c:134
 usblp_probe+0xc99/0x16f0 drivers/usb/class/usblp.c:1208
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz.2.258:6224 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.258       state:D stack:28768 pid:6224  tgid:6215  ppid:3221   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 usb_kill_urb.part.0+0x1ca/0x250 drivers/usb/core/urb.c:713
 usb_kill_urb drivers/usb/core/urb.c:702 [inline]
 usb_kill_anchored_urbs+0x10d/0x370 drivers/usb/core/urb.c:822
 usblp_unlink_urbs drivers/usb/class/usblp.c:471 [inline]
 usblp_release+0x191/0x310 drivers/usb/class/usblp.c:483
 __fput+0x408/0xbb0 fs/file_table.c:422
 task_work_run+0x14e/0x250 kernel/task_work.c:228
 get_signal+0x1ca/0x2770 kernel/signal.c:2689
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb4d0d7cef9
RSP: 002b:00007fb4d07de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: fffffffffffffffc RBX: 00007fb4d0f36058 RCX: 00007fb4d0d7cef9
RDX: 0000000000000003 RSI: 0000000020001680 RDI: 0000000000000003
RBP: 00007fb4d0def01e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb4d0f36058 R15: 00007ffe7a3960b8
 </TASK>
INFO: task syz.3.261:6233 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.261       state:D stack:28896 pid:6233  tgid:6226  ppid:3218   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
 usb_open+0x213/0x2f0 drivers/usb/core/file.c:47
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa540d2b890
RSP: 002b:00007fa54078db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa540d2b890
RDX: 0000000000000002 RSI: 00007fa54078dc10 RDI: 00000000ffffff9c
RBP: 00007fa54078dc10 R08: 0000000000000000 R09: 00007fa54078d987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa540ee6058 R15: 00007ffe4e86f208
 </TASK>
INFO: task syz.3.261:6234 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.261       state:D stack:28896 pid:6234  tgid:6226  ppid:3218   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
 usb_open+0x213/0x2f0 drivers/usb/core/file.c:47
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa540d2b890
RSP: 002b:00007fa54076cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa540d2b890
RDX: 0000000000000002 RSI: 00007fa54076cc10 RDI: 00000000ffffff9c
RBP: 00007fa54076cc10 R08: 0000000000000000 R09: 00007fa54076c987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa540ee6130 R15: 00007ffe4e86f208
 </TASK>
INFO: task syz.4.262:6236 blocked for more than 145 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.262       state:D stack:28832 pid:6236  tgid:6228  ppid:3227   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1528
 usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb834a7b890
RSP: 002b:00007fb8344ddb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb834a7b890
RDX: 0000000000000002 RSI: 00007fb8344ddc10 RDI: 00000000ffffff9c
RBP: 00007fb8344ddc10 R08: 0000000000000000 R09: 00007fb8344dd987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb834c36058 R15: 00007fff85454148
 </TASK>
INFO: task syz.4.262:6239 blocked for more than 146 seconds.
      Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.262       state:D stack:28832 pid:6239  tgid:6228  ppid:3227   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1528
 usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 chrdev_open+0x26d/0x6f0 fs/char_dev.c:414
 do_dentry_open+0x957/0x1490 fs/open.c:959
 vfs_open+0x82/0x3f0 fs/open.c:1089
 do_open fs/namei.c:3727 [inline]
 path_openat+0x2141/0x2d20 fs/namei.c:3886
 do_filp_open+0x1dc/0x430 fs/namei.c:3913
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb834a7b890
RSP: 002b:00007fb8344bcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb834a7b890
RDX: 0000000000000002 RSI: 00007fb8344bcc10 RDI: 00000000ffffff9c
RBP: 00007fb8344bcc10 R08: 0000000000000000 R09: 00007fb8344bc987
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb834c36130 R15: 00007fff85454148
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
6 locks held by kworker/0:1/9:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000009fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881093ca190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881093ca190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88811e71d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88811e71d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888114bf1160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
1 lock held by khungtaskd/30:
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff88ebb660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6626
5 locks held by kworker/1:1/37:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90000277d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881093e2190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881093e2190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88810bead190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88810bead190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888118884160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
1 lock held by klogd/2536:
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:560 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1415 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1714 [inline]
 #0: ffff8881f583d718 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x28e/0x2f80 kernel/sched/core.c:6436
2 locks held by getty/2605:
 #0: ffff88810ef7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
4 locks held by udevd/5473:
 #0: ffff88811d26b790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
 #1: ffff88811afa2888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: ffff888101710968 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1014 [inline]
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/1:3/5497:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90001cefd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881097c1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881097c1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888104f52190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff888104f52190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff888116186160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0x7c/0x1e0 drivers/usb/core/file.c:186
6 locks held by kworker/1:5/5518:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000146fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff8881097b1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8881097b1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88810bea9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88810bea9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff88810beae160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_disconnect+0x97/0x330 drivers/usb/class/usblp.c:1403
6 locks held by kworker/0:4/5556:
 #0: ffff8881062cb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90001effd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff888109b49190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff888109b49190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff888116181190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1004
 #4: ffff88811e71e160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88811e71e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1004
 #5: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_register_dev+0x11c/0x550 drivers/usb/core/file.c:134
1 lock held by syz.2.258/6224:
 #0: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_release+0x7f/0x310 drivers/usb/class/usblp.c:480
2 locks held by syz.3.261/6233:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 #1: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
2 locks held by syz.3.261/6234:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
 #1: ffffffff89a691a8 (usblp_mutex){+.+.}-{3:3}, at: usblp_open+0x5c/0x450 drivers/usb/class/usblp.c:417
1 lock held by syz.4.262/6236:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
1 lock held by syz.4.262/6239:
 #0: ffffffff899affb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x27/0x2f0 drivers/usb/core/file.c:38
1 lock held by syz.4.491/8056:
 #0: ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:296
1 lock held by syz.3.492/8057:
 #0: ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:328

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-g9c0c11bb87b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xf0c/0x1240 kernel/hung_task.c:379
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111