last executing test programs:
3.375010326s ago: executing program 1 (id=2):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "a96dae"}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000008adc3335a5df7a94252fd672a3ec0b2ed2ca1f1cefb5942bbc5ce4c51acf04b9e86196fa8209087eb4cc2e625afa256a811fdb66d685b91d19c22101c60e5921b7a2180b42f5083bbb1a4d7bfde6e5dd9164a8c091303d3cc28c96eecd9ec179756b2189460e1e9e1a"], &(0x7f0000000280)={0x20, 0x83, 0x1, "da"}, &(0x7f00000002c0)={0x20, 0x84, 0x3, "edbfdd"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "319a7d"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0})
3.369935667s ago: executing program 0 (id=1):
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x8f, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cd"}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000080)="0041c3")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xa9, 0x66, 0x9, 0x20, 0x1286, 0x2043, 0xb892, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0x10, 0x3, "", [{{0x9, 0x4, 0x8b, 0x90, 0x1, 0xef, 0x1d, 0xa3, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0})
3.076534824s ago: executing program 3 (id=4):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x81, 0x3, "a96dae"}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000008adc3335a5df7a94252fd672a3ec0b2ed2ca1f1cefb5942bbc5ce4c51acf04b9e86196fa8209087eb4cc2e625afa256a811fdb66d685b91d19c22101c60e5921b7a2180b42f5083bbb1a4d7bfde6e5dd9164a8c091303d3cc28c96eecd9ec179756b2189460e1e9e1a"], &(0x7f0000000280)={0x20, 0x83, 0x1, "da"}, &(0x7f00000002c0)={0x20, 0x84, 0x3, "edbfdd"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "319a7d"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0})
2.938777847s ago: executing program 4 (id=5):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001080)={0x14, &(0x7f0000001000)={0x20, 0x22, 0x10, {0x10, 0x2, "58fab5cdb08bbec0b7ff64fdd4f9"}}, &(0x7f0000001040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001340)={0x44, &(0x7f00000010c0)={0x40, 0x0, 0x17, "40bab795abea2204781a74044ae5d0fdc1a8190833919f"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000001180)={0x20, 0x80, 0x1c, {0x7, 0x7, 0x8000, 0x800, 0xe7c3, 0xc97b, 0x9, 0x4, 0x3, 0x644, 0x9, 0xfffa}}, &(0x7f0000001240)={0x20, 0x85, 0x4, 0x2821}, &(0x7f0000001280)={0x20, 0x83, 0x2}, &(0x7f00000012c0)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000001300)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000f80)={0x0, 0xc, 0x22, "3eb91e22173d72048e5d70ef67ae47392a9803b8f244f41224caf125027daf7b0a1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) (async)
r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x70, 0x5, "", [{{0x9, 0x4, 0x0, 0xbc, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8a, 0x2, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xd, 0xf}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x6, 0x6, 0x2, 0x40, 0xf}, 0x6e, &(0x7f0000000940)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "46153ea520f53ec2c564e02e4464bbff"}, @ssp_cap={0x24, 0x10, 0xa, 0xd1, 0x6, 0x10, 0xf0f, 0xa29b, [0x0, 0x38, 0xff0000, 0xff0030, 0x0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xe, 0x3ff}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xfdfd, 0xf00, 0x8000, [0xff0030, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x86, 0x9, 0x62, 0xd3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x8, 0x3, 0x8, 0xbe5, 0x5}]}, 0x7, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x6f, &(0x7f0000000a00)=@string={0x6f, 0x3, "2141b73c541c1d3f6aa14fcc6749ade6f7ebfb8ccff6391afed360c51d2de7a432d0c3eba923e719d4cf2843846310dd3b0419c14826f352c4fbefa4711c94ca5828bab812f3b4830adb7263c6c461006e8328fb9e71694c805a18db1b2225ee6a83c9acd4c05cbb976dbd6924"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2c09}}, {0xeb, &(0x7f0000000ac0)=@string={0xeb, 0x3, "5667a222b985d97c6c3a3fb4890104b13aca51990bbd9cca6cde8a684dfb89ea8ae75f7d46f372f915ed7635c705b60df35e0b9f30a7911cfa4ad0a0268fd69ee72abd8bcc25071fa6aee383f3d269cf0e609d0187a3c2677062ca6c9a94d0c6e77d59bb37f57b95907cd2e3942cbaf9192f6cfed34e6acbadd75cd4ec4356ecdd5eca3fe36a554f540b067b871838ffcae6e18e9a6395c64f20fc9fc7540fc89edd67cbae2d95fce7ced687e83a3c901d5da213b301bae002540b9bd93378750c723e4f3f95414ecc63d7c9bf3612db799d98c586f107e9efde267e33da87384ccd8e50f1b008e6b9"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x101c}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42c}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000d00)={0x20, 0x30, 0x1b, {0x1b, 0xf, "550c43ed2e8475bd3fc986e3bfc1a2be62c0834fc3dcd9eb91"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000fc0)={0x34, &(0x7f0000000dc0)={0x20, 0x7, 0x3, "619671"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000e80)={0x20, 0x0, 0x6a, {0x68, "c7e32dce047e448b790e807654b95f96b211469ddcdf90de48fb1ee00a07ca04c0b9609176d77463ddd653dd0763a486fba51cd1e807ce5f31dcfb8ce6ce0fc834d489daa79aa764f9d6ccfec45f7e86697d5cbf5aa0df37576730c4105d2df1e21b175405147469"}}, &(0x7f0000000f00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x1, 0x4}}) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) (async, rerun: 32)
syz_usb_connect$cdc_ncm(0x6, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x0, 0x30, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x9, 0x84}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x200, 0x3, 0x9a, 0xff, 0x9, 0x4}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xfc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x0, 0x20, 0x40, 0xb6}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x1, 0xf0f, 0x0, [0x1013f0f, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "62ca9af7d601ef004fc1336333210a84"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x5, 0x2}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xcb, &(0x7f0000000200)=@string={0xcb, 0x3, "676d229475fa52c95b11aacee4caae7a2332c2bdf5597fb29f4839c428c32f53a32bb66498a91626175680fc81cd3c593b0ed167f5edee996191da7e8e94f642d13b9c010d5e78c8aa25cc2fde723d86e8c535c12378f619eea82ee4306d89e9de11761319f7a3fb7edc5addb506a82612d8ab96efe49cf87100f70e1e53ad6f77b64d6aa324d2e621a1ce287769fc81094222cc92746a50ee2d02b72d6cc68683ce8c95e4f79fd36723d0653c59331f3cdd13d8ff96aab20d50e88d9ddd42bc83fd704406fb86e7b4"}}]}) (async, rerun: 32)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x732, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x40, "", [{{0x9, 0x4, 0x0, 0x16, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x8c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x3, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x1, 0x43}}]}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x201, 0x38, 0x1, 0x4, 0x8, 0x80}, 0x69, &(0x7f0000001900)={0x5, 0xf, 0x69, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "b4cfb73e03699fcd9529a590b09dcca5"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "fb263a5d5f0821add4c9be001b20aea6"}, @generic={0x23, 0x10, 0x1, "c874d9db081a0914b636a42ebb97ef96f653489d0c593ac0765281f8aea7d93d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x7, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x7, 0xb}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x81, 0x2, 0xf}]}, 0x2, [{0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x180a}}, {0x9d, &(0x7f00000019c0)=@string={0x9d, 0x3, "da4e22bc6532d4cca004b955fccb6cb3fd6d255d0f599239a74bf417633cf9a81381a64db9598a315f02c638af753ab6882cf9acf3e06a6d7c0f2294e99c155c0e30941e7b4d8c7d6d9f1972e3264d245c5a7ddfeaf0605c33bfe351267a5fc955876d50afc5937140112fcdb31e9abbd3311f387c28e2acb02bef25c0132b84e1de84f7b6c14b2dc385aab9087451566b8d5d29272d8f21d97d27"}}]}) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x7b0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x7, 0xe0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x2c}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x5}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x1, 0x80, "bf"}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x6, "5c45cb"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xff, 0x8, "55ff1e10"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x8, 0x3, "bffe"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xc7, 0x7, "520435"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x4, 0x1, {0x7, 0x25, 0x1, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfd, 0x6, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5, 0xdb, 0xfe}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3d, 0x2, 0x6, 0x6, "b228a79a8e1b"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xff, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc, 0x0, 0x1, 0xfc, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x0, 0xb2, {0x7, 0x25, 0x1, 0x8, 0x1}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x9, 0x5, 0xf, 0xff, 0xf2}, 0x5d, &(0x7f0000000480)={0x5, 0xf, 0x5d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ef47652c7e3a2eb4eba2cc59231fd705"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0xbe6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9804ad0fc96a1e15c96e6ca8f400"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x4, 0x7, 0x3, 0x7e}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "2a85710e4e8399434393192a8e5005ea"}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x801}}, {0x64, &(0x7f0000000540)=@string={0x64, 0x3, "ac897b19f5b650d9c8080bc876e941325ca17973bc5e2a020146ef091382a5748f3fb2ba1e9c0441edc0853f8401f9101ed087f09561561efa1effd78793ac86f69c3b564bade8b5ff41b3c9b141ea35fe69a9adc4062487b4e16c7461a69a0ec3f5"}}, {0xc7, &(0x7f00000005c0)=@string={0xc7, 0x3, "da95e0fb72c3bb7c0aaba59d87710519cc967380f42f18d32122016ae2e63a3b7c92aa8cf98f88974efd7d3309447c58c02efdfded8ae56780fc5bf3c5dc5f2762d6c2d7de46d30adf8eb2001230e36b0ba1d20420ce1579db4f9bc525d1b7d3bfcbfafb82d395217b16686a5b81a163d0055454b8df47c283460a7dbd4b903d1eb9b48f4c2d83348f1948e2d22f210d5352ee5c48a783ee79b0ae4a22e6e62a61c6aa440ed5da5ed9eedfa39f389b15078e68dd573890c16df66a7536137f01bd0dfce4f1"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x843}}, {0x9a, &(0x7f0000000700)=@string={0x9a, 0x3, "884485510b08c602ac39c66a150bd6991861b5fd90e90fbc7ff373d6323a4bb2676135538011c63118a3ded6f37e43ff4512596551a4e796cb6e1307bc14c95955b8659cf345b1a694593daf0265e015019d260de2a34a8136b55581757f110fef2f3566c80140e40889c74abe9155962a5f7b821bc33de015ac6b782395df6749d5a98c0b72c41249d17dfa653eae1e9abf8d74d07af234"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf8ff}}]})
syz_usb_connect$uac3(0x5, 0x142, &(0x7f00000013c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x3, 0x1, 0x9, 0x90, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0x24, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x68, 0x2}, [@power_domain={0xd, 0x24, 0x10, 0xfb, 0x0, 0xfff6, 0xf, "33ca5096"}, @power_domain={0x11, 0x24, 0x10, 0xe, 0x4, 0x81, 0x2, "651fb54674e9b2f9"}, @source_unit={0xc, 0x24, 0xb, 0x81, 0x0, 0x2, 0x5, 0x7f}, @extension_unit={0x19, 0x24, 0xa, 0x3, 0x3, [0x0, 0x1, 0x0, 0x1, 0x0]}, @cluster_info_segment={0x6, 0x20, 0x1, 0x22, 0x6}, @processing_unit={0x15, 0x24, 0x9, 0x4, 0x4, [0x1, 0x3, 0x2, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x884, 0x4, 0xdf, "f7"}, @as_header={0x17, 0x24, 0x1, 0x2, 0x0, 0xfffb, 0x5, 0x8, 0x5b, 0x5, 0x3}, @as_header={0x17, 0x24, 0x1, 0x9, 0x5, 0x8, 0x1001, 0x6, 0x1, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x60, 0xda, {0xa, 0x25, 0x25, 0x6, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6039, 0xfffb, 0x0, 0xa3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xa7, 0x92, 0x5, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0xe4, 0x6, "3d8a", "000d99"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xe, 0x2a, {0xa, 0x25, 0x25, 0x4, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x110, 0x6, 0x1, 0x6}, 0x4d, &(0x7f0000001580)={0x5, 0xf, 0x4d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1c, 0x5, 0x38, 0x8, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x71, 0x50, 0x7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0xab, 0x725}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x1, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ec102065cab095c2bb2452aa25d74fea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x48, 0x6, 0x7}]}, 0x6, [{0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x402}}, {0x8c, &(0x7f0000001680)=@string={0x8c, 0x3, "4969e60ff8fe489b807e2fe7787bc9849760b55568e68575cd8f1d9e6557bb22de69d6071b40be0ab13a46568889e191b1540f1e19d8eb354f6ca9aa9641ab438da18cbdb2f0bba9c3e43461f9c51f48bb5ddb427c66ecbb17b9206858a1fbe249f13462fe0b79a7b9b2930e1afddd4d26044364a01e14dc3d420757a85dc70e2ee31dd0e6b3df0cbc97"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x403}}]})
write$char_usb(r1, 0x0, 0x2)
2.754196771s ago: executing program 4 (id=6):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000080))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) (async)
ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, 0x0) (async)
r3 = syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0)
r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x40, 0x2a, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x3, 0xc9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0xb}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x101, 0xe3, 0x0, 0xec, 0x20, 0x4}, 0x33, &(0x7f0000000240)={0x5, 0xf, 0x33, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x48, 0xdd, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0xae0d, 0xff1e, 0x7, [0x0, 0xff3f00, 0x0, 0xffff00, 0xff00c0, 0x30]}]}, 0x1, [{0x65, &(0x7f0000000280)=@string={0x65, 0x3, "d8e0249561a0a064f10d729df4f41c4af6ac80778dbecb7b55ddc0bee26d3f6d9587d07b7bb34b8659ad8a8ac4311cdc2750e5dd81f953e6ff7680b215414aa787854b0c5577a8d57978d6c5b2bdad7a95de10ee867ed3ba35e567d19d7a36f13bd2df"}}]})
syz_usb_control_io$uac3(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_connect$uac1(0x4, 0xffffffffffffff10, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1})
r5 = syz_open_dev$hiddev(&(0x7f0000000380), 0x3, 0x4100)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000440)={0x2, 0x100, 0x7})
syz_usb_control_io$uac3(r4, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) (rerun: 32)
2.731126062s ago: executing program 2 (id=3):
syz_usb_connect(0x0, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x36, 0x8e, 0x48, 0x20, 0xb48, 0x1005, 0xd527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x6cf134ef8374fbfe, 0xd, "", [{{0x9, 0x4, 0x1, 0x40, 0x0, 0x76, 0x41, 0xb3, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b0080c"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
r5 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000209904091540000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f00a00904f2000001022000090401"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x31, 0x2, "9e07"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000880)={0x20, 0x18}, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "7cf1ab2f379b22cdf040809fa3ccfaba85ad3042884b7c57688e5f08d226f8dbb09c4233bd8cf1d797cd1eee8fab0e"}})
1.631228139s ago: executing program 4 (id=7):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a2702834492796d83000000000b09007a150b00000000378841f944ea7e104bc7148499397363c60d39720d5c3fc21dfc3fa94d3aa16ef6eb531e52"], 0x0}, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
r5 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x31, 0x2, "9e07"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000880)={0x20, 0x18}, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "7cf1ab2f379b22cdf040809fa3ccfaba85ad3042884b7c57688e5f08d226f8dbb09c4233bd8cf1d797cd1eee8fab0e"}})
811.447509ms ago: executing program 3 (id=8):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x3)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x5509, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x15, 0xaf, &(0x7f0000000000)="d396b7ae568a3936e8c0cf7292cca6b13e24262283c24c05c3d44e30ce201aced3c6a5400a1591a4471f8135a151160ff53ef0771104d74aa5fc9bdc7f128a6c386b1d6f33ae7b40d681ec0ec0d729c387fa037610bf751addf7f0bb592faba24bb8ed5aaa45d97e2a54eb27c2f0d0262a611ed2c01ef192156480f23f1f2fe604fd9c07afe4721e2141ac6bc3ccf426879be0a291974e4d3c1bb6be491ad6899153872206cb07ecfa8cf281c7ea4b"})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xd0, &(0x7f0000000180)=ANY=[@ANYRES16=r0])
767.850151ms ago: executing program 1 (id=9):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000080))
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406000000aa8671eaa682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r1) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x1, 0x6b6, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0xca, 0x94, 0x44, 0x20, 0x1b3d, 0x12c, 0xc752, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a4, 0x3, 0x9, 0xf7, 0x0, 0x3, "", [{{0x9, 0x4, 0xd5, 0xcc, 0x2, 0x39, 0x3f, 0x73, 0x4, [@generic={0x50, 0xb, "4f1748635aa90c25a5bc733eaa2f3e51e17dfddbc420db9efd3e4b67751bea69a79b2c00291549f179222b60ddeaa6b867c4400a6fd9c0c7ca9c6635687d4849ad8d1c1f6bada85922b922ff11c0"}], [{{0x9, 0x5, 0xc, 0x1, 0x3ff, 0xe8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xc2, 0xc2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xfffe}]}}]}}, {{0x9, 0x4, 0x9b, 0x5, 0xa, 0x2, 0xa, 0x0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "7c1e7c59"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xd50, 0x6c1, 0x9, 0x48}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x28}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x3d}, @mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0xa, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xd}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x10, 0x1, 0x2, [@generic={0xa0, 0x8, "3de011ec043a4c65108b554cf8c369992cd88b2200e4230731c0c568c8be558e6423dd1b56732f781f88dcf2953d3c83bd748bd0d37a89e5308d50a445f927958a0f5fb1f3b414d60ecd481fc2bd89423a5a92091a4a143bbb685f338f5f33514519e40d578faf4e1d93806413ddacb23bdcb2ee3498fba5c21998451abe57bbc80081ae854efe0f7a46c8810f32c592694b433514264d4798c1fad44e66"}, @generic={0x55, 0x6, "a542728a48ed125f4478c6c60c7e9956d72b831dcf1de112ab9882b67fa7ab35400478916996acf1a7db8f0de5f838e5da6f8dba73672d328d48625b7cf8656d4e8954f03301f1aa2446fad0a286e513ac3490"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xf4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x9, 0x9, [@generic={0x21, 0x8, "2ef4aa9b1bf77d1566725e83e9d6df7929619c502b57feffb9d5f744f0acca"}, @generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4f, 0x40, 0x4, [@generic={0x11, 0x2, "4f7da8e45ea2a4f57a96c1657af545"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x2, 0x8, 0x1, [@generic={0xab, 0x9, "ecaeb4fa2d7951686f2f3907922f975a1d6ba240d26d3474366d9d37abf40f8fa2a4c41024b3a36c0a88ca08b0e63a5c3567c00690349529d363f2f930d63f9a3b1ab7d66ce7643c7a3e214dd312e35b9de9f806185e20ac289f7299308db7dc7baf4af1e0139311402b60075c44167148a4f1628669d7fe043c9017b26f6e418c40d0cf04f21ed1be74f14cc516a6ec48fb8692098f09242532a172898eacc249dc8e74c063e09e45"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x101}]}}, {{0x9, 0x5, 0xf, 0x14, 0x400, 0xa4, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x1ff, 0x9, 0xc0, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2d, 0xfff9}]}}]}}, {{0x9, 0x4, 0x36, 0xb7, 0x8, 0x84, 0x96, 0x93, 0x8, [@generic={0x3d, 0x21, "b7fae96191caa3a511b060f713ff1a54b474cd591017c93a4e004d9e12e1769fddb6818ba2f438bade79580e7945dc94641e30ddebe254b520df57"}, @hid_hid={0x9, 0x21, 0x7ff, 0x1, 0x1, {0x22, 0x802}}], [{{0x9, 0x5, 0x88, 0x0, 0x10, 0x80, 0xd5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}, @generic={0x10, 0xe, "9ea2abccec1e3bed4add30712d1f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0xe3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @generic={0x8d, 0x31, "22d407da82bf3b51ce5b0d384a3127ca5e918ab2e888a03e0c79ed96f1c4f309542b7a5c11b9e3cb58bcba9dd46a259d171d06b68f25efcd2f340889e36b77df38bacee12a34d6c934deda472a6e61923d575a2cffa822e9b8a5554043d114de238b87eb1e5cc62b008e84125a6837f1762c6edc7d6dbc2e5bb2ee1a91ec0ad6e6087d7bb3145a834bb149"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xf, 0xa7, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x3}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x3, 0x5, 0x9, [@generic={0x38, 0x2, "ed82af47221849ad56c359a848178349d4cfaa4fd504b7116da19ff3a7ab2d6ee4bccbd162b2b16b164b73464cbbc5285a0bc8b671bf"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x9, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x800}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x81, 0x7, 0x20, [@generic={0xdb, 0x8, "40fbb9786ddef43add855ff97b18671509255d0910b167159068729f6550b27a6c9bab91003cd701d2287a5b321732118a925842d860c1c25e0fbb43bf65d26dfc5b338f1ac01042e32646a736fce6908b813331b796d203a04dcc62e443f1843a0c6ce83e460ab4beb2ccab602f650bb8177245a5cc80daecb09d3c5dbb32704df795e750029045c78405cd270441d76f62c6facc10b043a7d9b3b31ed758fb0447e4e118a855f613ad8892b3e4f3c551a0a644eeb813be3f70ca356001aef8f8c8b019d8966fb3312738d8d2391b05846ca28252b3c3fa55"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x40, 0x2, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x400}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x310, 0x7, 0x3, 0x81, 0x10}, 0x1a7, &(0x7f00000013c0)={0x5, 0xf, 0x1a7, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xbe, "d021e2f159591bb7faba1b4f95543e8f"}, @generic={0x4f, 0x10, 0x3, "ef601348c11d3139d738cb4b6effee21c66b8af754d7accdbf25b845deeed4800a409ca82262f090089d71f1860bfc52bc3c8372bf55dfc464f93ce6bff30eab750f14a3c5a5c2a673445e84"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0xb, 0xf, 0x1, [0xff3f3f, 0x30, 0x30, 0x60, 0xcf]}, @generic={0xfb, 0x10, 0x2, "a3b5fbf9d979eb538b64f867e62799a0a2bc76de29a6123dd765901b6cb65da4335a534457e7a1320e27d6503c46993e2890eddbb0a9a5c60e3333a93b56e5b4d01920e6f7446374fb95b634ca399a2b6097453c2f97c57de153eb7567b9eebb1da5ddc6e41a5b3254129325d9af552c1ab4370b9500c2327aca13ffa0c728d92990d19e27eb46b809ab7f2203438bca7d520800d657c9d0704617586b025f06311e344f6e6fdeeee13f8b6d7c4dc556e69b86fb60dfcd72402640630be218431372258ab635e3bf90d83304505c2a5b518615fb3a956a17ca9b9582fbf3ad2220ced5f872ea7f96c8a528c60a6c77063bd0829910ea54f8"}, @generic={0x19, 0x10, 0x3, "445936a6287d9416401198b8d0f8a92cff2b48afdecd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xb0, 0x5, 0x6, 0x7, 0x9}]}, 0x8, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xc1a}}, {0x57, &(0x7f00000015c0)=@string={0x57, 0x3, "bb1c4624acfb208b727c413dd5876fe6d21cd9110361360b27676e2639873f0d583f15cccd75be0a8abcce34e263e83922ff238d30840aafd7eb745e2ddd0a38ce9fcc6d8dccc618eb408637c74dfd7a503c326ca2"}}, {0x39, &(0x7f0000001640)=@string={0x39, 0x3, "561ef6d4c7152ef67044e4085aacc143e9701963a912ee553260c83809993a4688cce21a9476181fa789343b7c2f16a07653a336754c49"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x2c09}}, {0x7e, &(0x7f00000016c0)=@string={0x7e, 0x3, "8e48b001071e453ab47f7358eb4ba6d51fa3150f13b1d7726963718b931a61654a7c2bcce500347bd6f7a94806fe45465ec39adb10eacc7a05ad01ff62061ceb2e6d9863969b36780e3d80678dd0601cb9556a1671ab23a9e628a8ae4c7c8f5a9bf09234433d78dba30663f5611cc1ce1baa6ae772e0e61e532e3f52"}}, {0xec, &(0x7f0000001740)=@string={0xec, 0x3, "259593e08b8369c04c072d9d68599df24e000ec9f5fe1d37fe5252a33206d976401a72683db72c9109a1569c585a5aec1e85b386bdcbe5e97744937cc1ff705341253b07e16ee472949fa76838060ef714f14a566c0c515d8d35c2c55c452229fcd82c370887d9d26f8e921d4a9dbe13f5ddf8fdcecc81ae1f69bcaf06902fb7689e2dcdc646ea70499cbbae8d2dd3a2e319122d54101e1c917e4fe49e03a311d77eaa472d470145e1485253cb1e87deb210d311686cfb955ba469ea6f466150287706ad4d367583b0e86c91d7950a6d4759c8eaeaac97700d78544b0322535c1067788be546a3959466"}}, {0x48, &(0x7f0000001840)=@string={0x48, 0x3, "4299c613f6ce04c6d789c6f8feb5c59866e1a351f9ae40a8870f9ce8457f64fc531927cec2930cd333488d8b4521cf1140bceb34da1f35e7d5fd0f9c5d582bb0708b51aaa93e"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_disconnect(r3) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f0000000580)=ANY=[]) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x9, 0xffffffffffffff76, 0x0) (async)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "4dce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
357.587641ms ago: executing program 0 (id=10):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ff0329278740f4204d62def7010203010902120001090410c709"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000800), 0xfffffffffffffffd, 0x80000)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000940)={0x1f, 0xed, &(0x7f0000000840)="16dbe1be9570c1fab06fdc8701bf60b3a412da2ce0b2a70ffa26fbffe1877207053629f34bac82ec5589b72a92ebebeb48e7e838fad6da8ee5f78a4695356a67b0d7dbac8ce6d13faf279387c7490a61f38e98d87208c3676ad69b641bba1de1744c7b58571a98a6d4a91508b20000d987b1ac899fb631990442f6722bcf86121fd2687922ded21589fabde7489807f1990701590e34bfcb94ff9f7895e2fd019383b041c68f271c704dd4e2bcad988a8870a86d9f490fa7c41d2db0992fff5a2d12f4f4ef55ff8ff2c22e8ae81fa54f4beb490aa7892d7237f8f8b50b0e0573457362357415044499820051f4"})
syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x20, 0xd, 0x20, {0x20, 0x30, "39e2a018d9197d156e38e10e59145d5f3c01958000afb0a11b7072a6eccb"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x98ea17788b2ad572, "bc973898"}, @global=@item_4={0x3, 0x1, 0x6, "f92b94f1"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "6ca86402"}, @local=@item_012={0x1, 0x2, 0x5, '['}, @local]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x9ad}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x3, 0x33, "28d7812cb7ec57b847dbf4359572d74004ecdd35415967f5911e57ec6b9fe28f84385619069f67ae88e7478f3a1bddbeab4171"}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0xffff, 0x2])
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
syz_usb_disconnect(r5)
r6 = syz_usb_connect$printer(0x9ec5c31c0e9bc85e, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0x89, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x5b7, 0x6, 0x8, 0x9}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x1, 0x1, 0xb7, 0x20, 0x8}, 0x156, &(0x7f0000000380)={0x5, 0xf, 0x156, 0x2, [@generic={0xb9, 0x10, 0x3, "505eb7a3bee5ec4ba7dd7240a7a0dca3ca43cf6ba3093f3030678a4243cc86204a1533cf4544e37e17c897e188b150a5cb7156fc4665f82ba6199ce9f897103b51c2255ff7f96cc60de6e82ce3afad7db16d915a491c252e383d8f7d176d6d021b3337c2f3454bec87d95889af88e7822b3714b1b15b10985162a191486b1b72b59bbbabb3ba18ab2fbdfe2a460db4ccfc9b82f7be4e7e7d46759ee9f18271c259e791e986dde191abaa1bab16ff04edd0fedcde7f37"}, @generic={0x98, 0x10, 0xe, "7aedc6beec69a937603536d7d02536019a973fa2c98c3f7803e267f1f507af8f217029af963b6ccdd9827762fe8dbf788839290a0cb336020a29448ef1493dcff690383a8295b37e7ad1f5f67fc49852d9bbe34192b360f31816a20c8b0f43cf6e39f9192cb117060428ea1b627288126ee0e8bb7c54d017e386e83b41c33ee43e72feb29c3edb29786837ddd84032cf5daa156b08"}]}, 0x5, [{0x8e, &(0x7f0000000540)=@string={0x8e, 0x3, "42a611be52fb00d0307464a9ea48ee6f069144aaf979b0507fb05ce27993e65168477acf55a0c87d8f6d6f12b4345684f00a5c37092ff7b5ee14abfce78e9d58df2c19eb6680d94c98fde0a967e606895288e28203624d008e028834e6e8da778538c8d64f64501b52b0389b98468c9d448a3f542dcd5a5bd5782ac9049fce1f58ed3433d49d6c6d02714a4f"}}, {0xa8, &(0x7f0000000600)=@string={0xa8, 0x3, "8c0ff85d0f5888d6042cc00176e6cd51de29b6a848125c443ed51c3388b706b2900d5d7ea1cd562387e2d121f6e562ce0483df071769c137be256d109bd3c9a80f3b47e20a5e5c628997fbac495c5bb28a6cfd6fc05fdde68c54ca57040a7a3ca3b662a89f52c5c610eefcc24bbd3226f0883b90e3f1b449f5bc487a87326d9a390deae02af505400061dceeeb2d15749050a6777a3fbd93ce9779f3c3024536f634b9d0cc9c"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2c0a}}]})
syz_usb_disconnect(r6)
ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0xe63, 0x10])
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
0s ago: executing program 2 (id=11):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001ec0)={0x0, 0x0, 0x0})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001800)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0x40, 0x5, 0x2, "62ab"}})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001dc0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)={0x40, 0x5, 0x6, "b6633c749ef0"}})
kernel console output (not intermixed with test programs):
[ 37.643254][ T29] audit: type=1400 audit(1786686106.229:66): avc: denied { write } for pid=2923 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 37.673604][ T29] audit: type=1400 audit(1786686106.239:67): avc: denied { read } for pid=2926 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 37.697555][ T29] audit: type=1400 audit(1786686106.239:68): avc: denied { read open } for pid=2926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 37.914320][ T29] audit: type=1400 audit(1786686106.499:69): avc: denied { write } for pid=2923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 38.072405][ T29] audit: type=1400 audit(1786686106.659:70): avc: denied { write } for pid=2937 comm="rm" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 38.198476][ T29] audit: type=1400 audit(1786686106.789:71): avc: denied { search } for pid=2923 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 41.855149][ T29] audit: type=1400 audit(1786686110.439:72): avc: denied { transition } for pid=2945 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 41.879665][ T29] audit: type=1400 audit(1786686110.439:73): avc: denied { noatsecure } for pid=2945 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 41.900368][ T29] audit: type=1400 audit(1786686110.449:74): avc: denied { write } for pid=2945 comm="sh" path="pipe:[2270]" dev="pipefs" ino=2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 41.925399][ T29] audit: type=1400 audit(1786686110.449:75): avc: denied { rlimitinh } for pid=2945 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts.
[ 54.738623][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 54.738650][ T29] audit: type=1400 audit(1786686123.329:77): avc: denied { mounton } for pid=2960 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 54.770075][ T29] audit: type=1400 audit(1786686123.359:78): avc: denied { mount } for pid=2960 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 54.783028][ T2960] cgroup: Unknown subsys name 'net'
[ 54.800463][ T29] audit: type=1400 audit(1786686123.389:79): avc: denied { unmount } for pid=2960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 54.931000][ T2960] cgroup: Unknown subsys name 'cpuset'
[ 54.940171][ T2960] cgroup: Unknown subsys name 'rlimit'
[ 55.071274][ T29] audit: type=1400 audit(1786686123.659:80): avc: denied { setattr } for pid=2960 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 55.095513][ T29] audit: type=1400 audit(1786686123.659:81): avc: denied { mounton } for pid=2960 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 55.121857][ T29] audit: type=1400 audit(1786686123.659:82): avc: denied { mount } for pid=2960 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 55.185260][ T2963] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 55.196972][ T29] audit: type=1400 audit(1786686123.779:83): avc: denied { relabelto } for pid=2963 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 55.223524][ T29] audit: type=1400 audit(1786686123.779:84): avc: denied { write } for pid=2963 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 55.261635][ T29] audit: type=1400 audit(1786686123.849:85): avc: denied { read } for pid=2960 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 55.287646][ T29] audit: type=1400 audit(1786686123.849:86): avc: denied { open } for pid=2960 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 55.290323][ T2960] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 70.140097][ T29] kauditd_printk_skb: 6 callbacks suppressed
[ 70.140124][ T29] audit: type=1400 audit(1786686138.729:93): avc: denied { create } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 70.230476][ T29] audit: type=1400 audit(1786686138.729:94): avc: denied { write } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 70.306530][ T29] audit: type=1400 audit(1786686138.889:95): avc: denied { read } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 100.631486][ T4739] modprobe (4739) used greatest stack depth: 23784 bytes left
[ 111.603500][ T29] audit: type=1400 audit(1786686180.189:96): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/root/syzkaller.ilMz8b/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 111.679840][ T29] audit: type=1400 audit(1786686180.189:97): avc: denied { mount } for pid=2975 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 111.753373][ T29] audit: type=1400 audit(1786686180.189:98): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/root/syzkaller.ilMz8b/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 111.812775][ T29] audit: type=1400 audit(1786686180.219:99): avc: denied { mount } for pid=2975 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 111.864931][ T29] audit: type=1400 audit(1786686180.219:100): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/root/syzkaller.ilMz8b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 111.948240][ T29] audit: type=1400 audit(1786686180.219:101): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/root/syzkaller.ilMz8b/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 112.036056][ T29] audit: type=1400 audit(1786686180.249:102): avc: denied { unmount } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 112.102817][ T29] audit: type=1400 audit(1786686180.259:103): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 112.185166][ T2975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 112.262295][ T29] audit: type=1400 audit(1786686180.829:104): avc: denied { read write } for pid=2969 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 112.327902][ T29] audit: type=1400 audit(1786686180.829:105): avc: denied { open } for pid=2969 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 112.743475][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 112.755538][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 112.764095][ T120] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 112.765293][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 112.938098][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 112.948364][ T120] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 112.956851][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 112.963969][ T120] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 112.968865][ T23] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[ 112.988018][ T120] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 112.998997][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 112.999045][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.017302][ T23] usb 1-1: Product: syz
[ 113.021582][ T23] usb 1-1: Manufacturer: syz
[ 113.026632][ T23] usb 1-1: SerialNumber: syz
[ 113.053111][ T120] usb 2-1: probing VID:PID(0424:012C)
[ 113.070179][ T120] usb 2-1: vub300 testing BULK IN EndPoint(0) 81
[ 113.080103][ T120] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02
[ 113.086724][ T120] usb 2-1: vub300 testing BULK IN EndPoint(2) 83
[ 113.099015][ T120] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04
[ 113.106219][ T120] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 113.116164][ T11] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 113.138895][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 113.149199][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 113.159838][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 113.187869][ T11] usb 4-1: probing VID:PID(0424:012C)
[ 113.200972][ T11] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[ 113.208867][ T11] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[ 113.215798][ T11] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[ 113.225687][ T11] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[ 113.233446][ T11] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 113.239751][ T5228] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 113.249221][ T775] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[ 113.278223][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 113.289941][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 113.427234][ T5228] usb 3-1: Using ep0 maxpacket: 32
[ 113.433682][ T775] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 113.444142][ T5228] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 113.456026][ T5228] usb 3-1: config 0 has an invalid interface number: 146 but max is 0
[ 113.465842][ T5228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 113.476624][ T5228] usb 3-1: config 0 has no interface number 0
[ 113.479955][ T120] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 113.483882][ T5228] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 113.504590][ T5228] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 113.512408][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 113.516162][ T5228] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[ 113.534627][ T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.543513][ T775] usb 5-1: Product: syz
[ 113.548245][ T775] usb 5-1: Manufacturer: syz
[ 113.549673][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 113.557641][ T775] usb 5-1: SerialNumber: syz
[ 113.569572][ T5228] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 113.587270][ T5228] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 113.603547][ T775] usb 5-1: config 0 descriptor??
[ 113.604257][ T11] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 113.609379][ T5228] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 113.641333][ T5228] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 113.655231][ T5228] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 113.667540][ T5228] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 113.681203][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.690806][ T5228] usb 3-1: Product: syz
[ 113.695155][ T5228] usb 3-1: Manufacturer: syz
[ 113.702705][ T5228] usb 3-1: SerialNumber: syz
[ 113.712389][ T120] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[ 113.736005][ T5228] usb 3-1: config 0 descriptor??
[ 113.751477][ T5235] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[ 113.767665][ T5228] usb 3-1: will this work? Command EP is not usually 12
[ 113.781004][ T5228] usb 3-1: will this work? Response EP is not usually 3
[ 113.795731][ T5228] usb 3-1: will this work? Image data EP is not usually 2
[ 113.804614][ T11] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[ 113.834506][ T5228] scsi host1: microtekX6
[ 113.841415][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 113.859252][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 113.891444][ T775] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 113.938665][ T5228] usb 3-1: error -90 submitting URB
[ 113.961809][ T775] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 113.973787][ T294] usb 3-1: error -90 submitting URB
[ 114.005385][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.018191][ T294] usb 3-1: error -90 submitting URB
[ 114.039234][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.057221][ T294] usb 3-1: error -90 submitting URB
[ 114.076327][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.085089][ T775] usb 5-1: USB disconnect, device number 2
[ 114.089342][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.139335][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.176786][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.437425][ T775] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 114.452425][ T23] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 114.460645][ T23] usb 1-1: MIDIStreaming interface descriptor not found
[ 114.480573][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.500860][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.512063][ T23] usb 1-1: USB disconnect, device number 2
[ 114.541268][ T120] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 114.580771][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.601882][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.617943][ T775] usb 5-1: Using ep0 maxpacket: 16
[ 114.625392][ T5224] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 114.636941][ T775] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 114.653136][ T11] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 114.661679][ T775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 114.661738][ T775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 114.661776][ T775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 114.661836][ T775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 114.713230][ T5224] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 114.731906][ T11] usb 4-1: USB disconnect, device number 2
[ 114.740105][ T5224] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 114.749028][ T5253] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 114.761755][ T5253] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 114.788674][ T5253] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 114.792892][ T775] usb 5-1: config 0 descriptor??
[ 114.811318][ T5218] udevd[5218]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 114.820374][ T120] usb 2-1: USB disconnect, device number 2
[ 114.879670][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 114.914092][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 114.982800][ T5228] usb 3-1: USB disconnect, device number 2
[ 115.322887][ T775] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5
[ 115.404534][ T775] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[ 115.452594][ T120] USB vub300 remote SDIO host controller[0] now disconnected
[ 115.490509][ T11] USB vub300 remote SDIO host controller[0] now disconnected
[ 115.545536][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 115.566084][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 115.571254][ T5254] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 115.589368][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 115.602074][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 115.647597][ C0]
[ 115.650996][ C0] =============================
[ 115.655904][ C0] WARNING: suspicious RCU usage
[ 115.660934][ C0] syzkaller #0 Not tainted
[ 115.665430][ C0] -----------------------------
[ 115.670886][ C0] kernel/sched/core.c:9159 Illegal context switch in RCU-sched read-side critical section!
[ 115.681073][ C0]
[ 115.681073][ C0] other info that might help us debug this:
[ 115.681073][ C0]
[ 115.691452][ C0]
[ 115.691452][ C0] rcu_scheduler_active = 2, debug_locks = 1
[ 115.699842][ C0] 9 locks held by syz-executor/2973:
[ 115.705542][ C0] #0: ffffffff89823d10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x498b/0x7dd0
[ 115.715791][ C0] #1: ffff888123fdceb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x11f/0x1f60
[ 115.727344][ C0] #2: ffff888118e9e7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1ba/0x1f60
[ 115.738468][ C0] #3: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 115.749657][ C0] #4: ffff88810cf5e8b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[ 115.761146][ C0] #5: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 115.771204][ C0] #6: ffff888123d09f18 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xcc2/0x56a0
[ 115.782008][ C0] #7: ffffffff896e2b00 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4a0
[ 115.791743][ C0] #8: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610
[ 115.802885][ C0]
[ 115.802885][ C0] stack backtrace:
[ 115.808884][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy)
[ 115.808916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 115.808938][ C0] Call Trace:
[ 115.808952][ C0]
[ 115.808962][ C0] dump_stack_lvl+0x100/0x190
[ 115.809007][ C0] lockdep_rcu_suspicious.cold+0x4f/0xb1
[ 115.809037][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 115.809072][ C0] __might_resched+0x2e0/0x330
[ 115.809104][ C0] ? __pfx___might_resched+0x10/0x10
[ 115.809135][ C0] ? kfree_const+0x5f/0x70
[ 115.809161][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 115.809192][ C0] cancel_delayed_work_sync+0xb8/0xf0
[ 115.809234][ C0] mmc_free_host+0x19/0x30
[ 115.809265][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 115.809301][ C0] call_timer_fn+0x19a/0x610
[ 115.809331][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 115.809366][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 115.809398][ C0] ? mark_held_locks+0x40/0x70
[ 115.809434][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 115.809465][ C0] __run_timers+0x757/0xb00
[ 115.809502][ C0] ? __pfx___run_timers+0x10/0x10
[ 115.809542][ C0] ? ktime_get+0x9f/0x320
[ 115.809571][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 115.809616][ C0] run_timer_base+0x114/0x190
[ 115.809645][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 115.809679][ C0] run_timer_softirq+0x1a/0x50
[ 115.809709][ C0] handle_softirqs+0x1dd/0x990
[ 115.809754][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 115.809799][ C0] ? _raw_spin_unlock+0x28/0x50
[ 115.809834][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 115.809863][ C0] __irq_exit_rcu+0x160/0x210
[ 115.809903][ C0] irq_exit_rcu+0x9/0x30
[ 115.809924][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 115.809950][ C0]
[ 115.809957][ C0]
[ 115.809965][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 115.809994][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 115.810026][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 115.810054][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 115.810074][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 115.810089][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 115.810105][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 115.810120][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 115.810134][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 115.810157][ C0] ? pfn_valid+0xe9/0x4a0
[ 115.810190][ C0] rcu_is_watching+0x12/0xc0
[ 115.810214][ C0] pfn_valid+0x2d0/0x4a0
[ 115.810244][ C0] page_table_check_set+0x25/0x580
[ 115.810280][ C0] __page_table_check_ptes_set+0x217/0x270
[ 115.810314][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 115.810345][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 115.810392][ C0] copy_page_range+0x1c87/0x56a0
[ 115.810453][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 115.810497][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 115.810539][ C0] ? __pfx___might_resched+0x10/0x10
[ 115.810573][ C0] ? dup_mmap+0xc92/0x1f60
[ 115.810602][ C0] ? down_write+0x146/0x1f0
[ 115.810632][ C0] ? up_write+0x2e5/0x5c0
[ 115.810671][ C0] dup_mmap+0xcd8/0x1f60
[ 115.810711][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 115.810739][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 115.810790][ C0] ? __lock_acquire+0x49f/0x1a40
[ 115.810823][ C0] ? find_held_lock+0x2b/0x80
[ 115.810847][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 115.810895][ C0] copy_process+0x4996/0x7dd0
[ 115.810935][ C0] ? __pfx_copy_process+0x10/0x10
[ 115.810964][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 115.810994][ C0] ? do_raw_spin_lock+0x128/0x260
[ 115.811036][ C0] kernel_clone+0x176/0x9d0
[ 115.811062][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 115.811095][ C0] ? find_held_lock+0x2b/0x80
[ 115.811119][ C0] ? __might_fault+0xc5/0x140
[ 115.811160][ C0] __do_sys_clone+0xd9/0x120
[ 115.811185][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 115.811232][ C0] do_syscall_64+0x10b/0x7f0
[ 115.811266][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.811294][ C0] RIP: 0033:0x7f2fd1056b52
[ 115.811314][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 115.811337][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 115.811358][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 115.811373][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 115.811387][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 115.811401][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 115.811416][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 115.811444][ C0]
[ 115.811465][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487
[ 115.843403][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 115.851031][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2973, name: syz-executor
[ 115.889000][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 115.893216][ C0] preempt_count: 104, expected: 0
[ 115.930336][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 115.931562][ C0] RCU nest depth: 2, expected: 0
[ 115.952543][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 115.956005][ C0] 9 locks held by syz-executor/2973:
[ 115.999977][ T775] usb 5-1: USB disconnect, device number 3
[ 116.005978][ C0] #0: ffffffff89823d10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x498b/0x7dd0
[ 116.409671][ C0] #1: ffff888123fdceb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x11f/0x1f60
[ 116.419056][ C0] #2: ffff888118e9e7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1ba/0x1f60
[ 116.428446][ C0] #3: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 116.438303][ C0] #4: ffff88810cf5e8b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[ 116.449612][ C0] #5: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 116.459927][ C0] #6: ffff888123d09f18 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xcc2/0x56a0
[ 116.470637][ C0] #7: ffffffff896e2b00 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4a0
[ 116.480472][ C0] #8: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610
[ 116.491921][ C0] Preemption disabled at:
[ 116.491936][ C0] [<0000000000000000>] 0x0
[ 116.500862][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy)
[ 116.500901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.500919][ C0] Call Trace:
[ 116.500929][ C0]
[ 116.500939][ C0] dump_stack_lvl+0x100/0x190
[ 116.500992][ C0] __might_resched.cold+0x1ec/0x232
[ 116.501045][ C0] ? __pfx___might_resched+0x10/0x10
[ 116.501092][ C0] ? kfree_const+0x5f/0x70
[ 116.501126][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 116.501208][ C0] cancel_delayed_work_sync+0xb8/0xf0
[ 116.501267][ C0] mmc_free_host+0x19/0x30
[ 116.501314][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 116.501364][ C0] call_timer_fn+0x19a/0x610
[ 116.501408][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 116.501458][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 116.501504][ C0] ? mark_held_locks+0x40/0x70
[ 116.501557][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 116.501600][ C0] __run_timers+0x757/0xb00
[ 116.501653][ C0] ? __pfx___run_timers+0x10/0x10
[ 116.501709][ C0] ? ktime_get+0x9f/0x320
[ 116.501752][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 116.501815][ C0] run_timer_base+0x114/0x190
[ 116.501859][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 116.501908][ C0] run_timer_softirq+0x1a/0x50
[ 116.501950][ C0] handle_softirqs+0x1dd/0x990
[ 116.502016][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 116.502072][ C0] ? _raw_spin_unlock+0x28/0x50
[ 116.502123][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 116.502174][ C0] __irq_exit_rcu+0x160/0x210
[ 116.502228][ C0] irq_exit_rcu+0x9/0x30
[ 116.502259][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 116.502297][ C0]
[ 116.502306][ C0]
[ 116.502317][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 116.502356][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 116.502403][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 116.502436][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 116.502465][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 116.502487][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 116.502510][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 116.502531][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 116.502551][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 116.502584][ C0] ? pfn_valid+0xe9/0x4a0
[ 116.502633][ C0] rcu_is_watching+0x12/0xc0
[ 116.502670][ C0] pfn_valid+0x2d0/0x4a0
[ 116.502711][ C0] page_table_check_set+0x25/0x580
[ 116.502761][ C0] __page_table_check_ptes_set+0x217/0x270
[ 116.502811][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 116.502856][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 116.502923][ C0] copy_page_range+0x1c87/0x56a0
[ 116.503010][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 116.503066][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 116.503126][ C0] ? __pfx___might_resched+0x10/0x10
[ 116.503185][ C0] ? dup_mmap+0xc92/0x1f60
[ 116.503228][ C0] ? down_write+0x146/0x1f0
[ 116.503274][ C0] ? up_write+0x2e5/0x5c0
[ 116.503331][ C0] dup_mmap+0xcd8/0x1f60
[ 116.503390][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 116.503432][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 116.503495][ C0] ? __lock_acquire+0x49f/0x1a40
[ 116.503566][ C0] ? find_held_lock+0x2b/0x80
[ 116.503600][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 116.503671][ C0] copy_process+0x4996/0x7dd0
[ 116.503730][ C0] ? __pfx_copy_process+0x10/0x10
[ 116.503773][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 116.503815][ C0] ? do_raw_spin_lock+0x128/0x260
[ 116.503874][ C0] kernel_clone+0x176/0x9d0
[ 116.503913][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 116.503961][ C0] ? find_held_lock+0x2b/0x80
[ 116.503995][ C0] ? __might_fault+0xc5/0x140
[ 116.504053][ C0] __do_sys_clone+0xd9/0x120
[ 116.504088][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 116.504164][ C0] do_syscall_64+0x10b/0x7f0
[ 116.504214][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.504250][ C0] RIP: 0033:0x7f2fd1056b52
[ 116.504280][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 116.504312][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 116.504344][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 116.504372][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 116.504393][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 116.504413][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 116.504435][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 116.504476][ C0]
[ 116.505076][ C0]
[ 117.041916][ C0] =============================
[ 117.046886][ C0] WARNING: suspicious RCU usage
[ 117.052397][ C0] syzkaller #0 Tainted: G W
[ 117.058810][ C0] -----------------------------
[ 117.063800][ C0] kernel/rcu/srcutree.c:1483 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[ 117.075992][ C0]
[ 117.075992][ C0] other info that might help us debug this:
[ 117.075992][ C0]
[ 117.086315][ C0]
[ 117.086315][ C0] rcu_scheduler_active = 2, debug_locks = 1
[ 117.094682][ C0] 9 locks held by syz-executor/2973:
[ 117.100151][ C0] #0: ffffffff89823d10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x498b/0x7dd0
[ 117.109711][ C0] #1: ffff888123fdceb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x11f/0x1f60
[ 117.118942][ C0] #2: ffff888118e9e7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1ba/0x1f60
[ 117.128855][ C0] #3: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.138581][ C0] #4: ffff88810cf5e8b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[ 117.149176][ C0] #5: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.158914][ C0] #6: ffff888123d09f18 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xcc2/0x56a0
[ 117.169685][ C0] #7: ffffffff896e2b00 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4a0
[ 117.179264][ C0] #8: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610
[ 117.189994][ C0]
[ 117.189994][ C0] stack backtrace:
[ 117.196056][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy)
[ 117.196095][ C0] Tainted: [W]=WARN
[ 117.196103][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 117.196118][ C0] Call Trace:
[ 117.196128][ C0]
[ 117.196137][ C0] dump_stack_lvl+0x100/0x190
[ 117.196179][ C0] lockdep_rcu_suspicious.cold+0x4f/0xb1
[ 117.196211][ C0] __synchronize_srcu+0x29d/0x300
[ 117.196249][ C0] ? __pfx___synchronize_srcu+0x10/0x10
[ 117.196294][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0
[ 117.196329][ C0] ? synchronize_srcu+0xa8/0x380
[ 117.196367][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 117.196402][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.196456][ C0] wakeup_source_unregister+0x1f/0x30
[ 117.196487][ C0] mmc_host_classdev_release+0x42/0x120
[ 117.196519][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.196552][ C0] device_release+0xd2/0x270
[ 117.196594][ C0] kobject_put+0x1f7/0x640
[ 117.196634][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.196668][ C0] put_device+0x1f/0x30
[ 117.196689][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 117.196722][ C0] call_timer_fn+0x19a/0x610
[ 117.196752][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 117.196785][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.196817][ C0] ? mark_held_locks+0x40/0x70
[ 117.196854][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.196885][ C0] __run_timers+0x757/0xb00
[ 117.196923][ C0] ? __pfx___run_timers+0x10/0x10
[ 117.196963][ C0] ? ktime_get+0x9f/0x320
[ 117.196992][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 117.197034][ C0] run_timer_base+0x114/0x190
[ 117.197093][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 117.197137][ C0] run_timer_softirq+0x1a/0x50
[ 117.197175][ C0] handle_softirqs+0x1dd/0x990
[ 117.197241][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 117.197287][ C0] ? _raw_spin_unlock+0x28/0x50
[ 117.197324][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 117.197351][ C0] __irq_exit_rcu+0x160/0x210
[ 117.197390][ C0] irq_exit_rcu+0x9/0x30
[ 117.197411][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 117.197444][ C0]
[ 117.197451][ C0]
[ 117.197460][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 117.197488][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 117.197520][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 117.197543][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 117.197563][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 117.197578][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 117.197594][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 117.197609][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 117.197622][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 117.197644][ C0] ? pfn_valid+0xe9/0x4a0
[ 117.197677][ C0] rcu_is_watching+0x12/0xc0
[ 117.197702][ C0] pfn_valid+0x2d0/0x4a0
[ 117.197731][ C0] page_table_check_set+0x25/0x580
[ 117.197766][ C0] __page_table_check_ptes_set+0x217/0x270
[ 117.197800][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 117.197831][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 117.197879][ C0] copy_page_range+0x1c87/0x56a0
[ 117.197941][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 117.197980][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 117.198022][ C0] ? __pfx___might_resched+0x10/0x10
[ 117.198058][ C0] ? dup_mmap+0xc92/0x1f60
[ 117.198087][ C0] ? down_write+0x146/0x1f0
[ 117.198118][ C0] ? up_write+0x2e5/0x5c0
[ 117.198157][ C0] dup_mmap+0xcd8/0x1f60
[ 117.198197][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 117.198226][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 117.198271][ C0] ? __lock_acquire+0x49f/0x1a40
[ 117.198304][ C0] ? find_held_lock+0x2b/0x80
[ 117.198328][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 117.198376][ C0] copy_process+0x4996/0x7dd0
[ 117.198416][ C0] ? __pfx_copy_process+0x10/0x10
[ 117.198451][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 117.198480][ C0] ? do_raw_spin_lock+0x128/0x260
[ 117.198521][ C0] kernel_clone+0x176/0x9d0
[ 117.198548][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 117.198581][ C0] ? find_held_lock+0x2b/0x80
[ 117.198604][ C0] ? __might_fault+0xc5/0x140
[ 117.198651][ C0] __do_sys_clone+0xd9/0x120
[ 117.198675][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 117.198722][ C0] do_syscall_64+0x10b/0x7f0
[ 117.198756][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.198781][ C0] RIP: 0033:0x7f2fd1056b52
[ 117.198801][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 117.198824][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 117.198845][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 117.198861][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 117.198875][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 117.198890][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 117.198904][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 117.198932][ C0]
[ 117.741162][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1491
[ 117.750557][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2973, name: syz-executor
[ 117.759860][ C0] preempt_count: 104, expected: 0
[ 117.764934][ C0] RCU nest depth: 2, expected: 0
[ 117.769977][ C0] 9 locks held by syz-executor/2973:
[ 117.775577][ C0] #0: ffffffff89823d10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x498b/0x7dd0
[ 117.785152][ C0] #1: ffff888123fdceb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x11f/0x1f60
[ 117.794400][ C0] #2: ffff888118e9e7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1ba/0x1f60
[ 117.803792][ C0] #3: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.813451][ C0] #4: ffff88810cf5e8b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[ 117.824075][ C0] #5: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.833730][ C0] #6: ffff888123d09f18 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xcc2/0x56a0
[ 117.844257][ C0] #7: ffffffff896e2b00 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4a0
[ 117.853913][ C0] #8: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610
[ 117.864617][ C0] Preemption disabled at:
[ 117.864634][ C0] [<0000000000000000>] 0x0
[ 117.873510][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy)
[ 117.873551][ C0] Tainted: [W]=WARN
[ 117.873559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 117.873573][ C0] Call Trace:
[ 117.873584][ C0]
[ 117.873595][ C0] dump_stack_lvl+0x100/0x190
[ 117.873636][ C0] __might_resched.cold+0x1ec/0x232
[ 117.873675][ C0] ? __pfx___might_resched+0x10/0x10
[ 117.873709][ C0] ? lockdep_rcu_suspicious.cold+0x54/0xb1
[ 117.873738][ C0] __synchronize_srcu+0x13c/0x300
[ 117.873781][ C0] ? __pfx___synchronize_srcu+0x10/0x10
[ 117.873826][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0
[ 117.873862][ C0] ? synchronize_srcu+0xa8/0x380
[ 117.873899][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 117.873934][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.873969][ C0] wakeup_source_unregister+0x1f/0x30
[ 117.874000][ C0] mmc_host_classdev_release+0x42/0x120
[ 117.874033][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.874066][ C0] device_release+0xd2/0x270
[ 117.874107][ C0] kobject_put+0x1f7/0x640
[ 117.874148][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.874216][ C0] put_device+0x1f/0x30
[ 117.874243][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 117.874285][ C0] call_timer_fn+0x19a/0x610
[ 117.874322][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 117.874377][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.874419][ C0] ? mark_held_locks+0x40/0x70
[ 117.874469][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.874511][ C0] __run_timers+0x757/0xb00
[ 117.874572][ C0] ? __pfx___run_timers+0x10/0x10
[ 117.874633][ C0] ? ktime_get+0x9f/0x320
[ 117.874665][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 117.874713][ C0] run_timer_base+0x114/0x190
[ 117.874743][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 117.874777][ C0] run_timer_softirq+0x1a/0x50
[ 117.874807][ C0] handle_softirqs+0x1dd/0x990
[ 117.874856][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 117.874902][ C0] ? _raw_spin_unlock+0x28/0x50
[ 117.874939][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 117.874968][ C0] __irq_exit_rcu+0x160/0x210
[ 117.875008][ C0] irq_exit_rcu+0x9/0x30
[ 117.875029][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 117.875056][ C0]
[ 117.875064][ C0]
[ 117.875072][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 117.875102][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 117.875134][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 117.875158][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 117.875178][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 117.875194][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 117.875210][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 117.875225][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 117.875239][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 117.875262][ C0] ? pfn_valid+0xe9/0x4a0
[ 117.875296][ C0] rcu_is_watching+0x12/0xc0
[ 117.875321][ C0] pfn_valid+0x2d0/0x4a0
[ 117.875356][ C0] page_table_check_set+0x25/0x580
[ 117.875393][ C0] __page_table_check_ptes_set+0x217/0x270
[ 117.875427][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 117.875457][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 117.875505][ C0] copy_page_range+0x1c87/0x56a0
[ 117.875571][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 117.875610][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 117.875652][ C0] ? __pfx___might_resched+0x10/0x10
[ 117.875687][ C0] ? dup_mmap+0xc92/0x1f60
[ 117.875716][ C0] ? down_write+0x146/0x1f0
[ 117.875747][ C0] ? up_write+0x2e5/0x5c0
[ 117.875787][ C0] dup_mmap+0xcd8/0x1f60
[ 117.875828][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 117.875859][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 117.875903][ C0] ? __lock_acquire+0x49f/0x1a40
[ 117.875937][ C0] ? find_held_lock+0x2b/0x80
[ 117.875961][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 117.876010][ C0] copy_process+0x4996/0x7dd0
[ 117.876051][ C0] ? __pfx_copy_process+0x10/0x10
[ 117.876080][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 117.876110][ C0] ? do_raw_spin_lock+0x128/0x260
[ 117.876152][ C0] kernel_clone+0x176/0x9d0
[ 117.876180][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 117.876213][ C0] ? find_held_lock+0x2b/0x80
[ 117.876236][ C0] ? __might_fault+0xc5/0x140
[ 117.876278][ C0] __do_sys_clone+0xd9/0x120
[ 117.876303][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 117.876356][ C0] do_syscall_64+0x10b/0x7f0
[ 117.876390][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.876416][ C0] RIP: 0033:0x7f2fd1056b52
[ 117.876438][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 117.876460][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 117.876482][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 117.876504][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 117.876522][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 117.876536][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 117.876557][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 117.876586][ C0]
[ 117.876612][ C0] ODEBUG: object ffffc90000007a70 is NOT on stack ffffc90001450000, but annotated.
[ 117.877686][ C0]
[ 117.877693][ C0] ======================================================
[ 117.877701][ C0] WARNING: possible circular locking dependency detected
[ 117.877713][ C0] syzkaller #0 Tainted: G W
[ 117.877725][ C0] ------------------------------------------------------
[ 117.877732][ C0] syz-executor/2973 is trying to acquire lock:
[ 117.877744][ C0] ffffffff895eeb40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[ 117.877812][ C0]
[ 117.877812][ C0] but task is already holding lock:
[ 117.877819][ C0] ffffffff941c2170 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0
[ 117.877880][ C0]
[ 117.877880][ C0] which lock already depends on the new lock.
[ 117.877880][ C0]
[ 117.877888][ C0]
[ 117.877888][ C0] the existing dependency chain (in reverse order) is:
[ 117.877895][ C0]
[ 117.877895][ C0] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}:
[ 117.877932][ C0] lock_acquire+0x1b9/0x370
[ 117.877962][ C0] _raw_spin_lock_irqsave+0x3a/0x60
[ 117.877999][ C0] debug_object_assert_init+0x142/0x310
[ 117.878033][ C0] hrtimer_start_range_ns+0x4e/0x240
[ 117.878073][ C0] rpm_suspend+0x788/0x11a0
[ 117.878111][ C0] rpm_idle+0x60c/0x790
[ 117.878145][ C0] rpm_resume+0x3b9/0x1320
[ 117.878171][ C0] pm_runtime_work+0x10c/0x150
[ 117.878203][ C0] process_one_work+0xa23/0x1940
[ 117.878233][ C0] worker_thread+0x5ef/0xe50
[ 117.878261][ C0] kthread+0x370/0x450
[ 117.878287][ C0] ret_from_fork+0x69a/0xc80
[ 117.878322][ C0] ret_from_fork_asm+0x1a/0x30
[ 117.878343][ C0]
[ 117.878343][ C0] -> #2 (&dev->power.lock){-...}-{3:3}:
[ 117.878386][ C0] lock_acquire+0x1b9/0x370
[ 117.878415][ C0] _raw_spin_lock_irqsave+0x3a/0x60
[ 117.878450][ C0] __pm_runtime_resume+0xa9/0x170
[ 117.878480][ C0] __uart_start+0x1b0/0x510
[ 117.878507][ C0] uart_write+0x211/0xb20
[ 117.878540][ C0] n_tty_write+0x431/0x1160
[ 117.878575][ C0] file_tty_write.isra.0+0x4d2/0x890
[ 117.878604][ C0] redirected_tty_write+0xd4/0x120
[ 117.878633][ C0] vfs_write+0x6ac/0x1050
[ 117.878667][ C0] ksys_write+0x12a/0x250
[ 117.878700][ C0] do_syscall_64+0x10b/0x7f0
[ 117.878728][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.878751][ C0]
[ 117.878751][ C0] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 117.878780][ C0] lock_acquire+0x1b9/0x370
[ 117.878809][ C0] _raw_spin_lock_irqsave+0x3a/0x60
[ 117.878844][ C0] serial8250_console_write+0x177/0x1a50
[ 117.878870][ C0] console_flush_one_record+0x790/0xe50
[ 117.878892][ C0] console_unlock+0x103/0x260
[ 117.878911][ C0] vprintk_emit+0x407/0x6b0
[ 117.878932][ C0] _printk+0xcf/0x110
[ 117.878960][ C0] register_console.cold+0xc0/0x248
[ 117.878987][ C0] univ8250_console_init+0x6f/0x80
[ 117.879020][ C0] console_init+0x3d5/0x5b0
[ 117.879041][ C0] start_kernel+0x30f/0x490
[ 117.879076][ C0] x86_64_start_reservations+0x24/0x30
[ 117.879111][ C0] x86_64_start_kernel+0x12b/0x130
[ 117.879145][ C0] common_startup_64+0x13e/0x158
[ 117.879168][ C0]
[ 117.879168][ C0] -> #0 (console_owner){-.-.}-{0:0}:
[ 117.879197][ C0] check_prev_add+0xeb/0xe60
[ 117.879225][ C0] __lock_acquire+0x136c/0x1a40
[ 117.879255][ C0] lock_acquire+0x1b9/0x370
[ 117.879284][ C0] console_lock_spinning_enable+0x72/0x80
[ 117.879322][ C0] console_flush_one_record+0x739/0xe50
[ 117.879343][ C0] console_unlock+0x103/0x260
[ 117.879368][ C0] vprintk_emit+0x407/0x6b0
[ 117.879389][ C0] _printk+0xcf/0x110
[ 117.879412][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40
[ 117.879449][ C0] __debug_object_init+0x2a9/0x3d0
[ 117.879481][ C0] __synchronize_srcu+0x1c3/0x300
[ 117.879516][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 117.879547][ C0] wakeup_source_unregister+0x1f/0x30
[ 117.879576][ C0] mmc_host_classdev_release+0x42/0x120
[ 117.879606][ C0] device_release+0xd2/0x270
[ 117.879644][ C0] kobject_put+0x1f7/0x640
[ 117.879678][ C0] put_device+0x1f/0x30
[ 117.879696][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 117.879727][ C0] call_timer_fn+0x19a/0x610
[ 117.879752][ C0] __run_timers+0x757/0xb00
[ 117.879778][ C0] run_timer_base+0x114/0x190
[ 117.879805][ C0] run_timer_softirq+0x1a/0x50
[ 117.879832][ C0] handle_softirqs+0x1dd/0x990
[ 117.879872][ C0] __irq_exit_rcu+0x160/0x210
[ 117.879907][ C0] irq_exit_rcu+0x9/0x30
[ 117.879926][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 117.879948][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 117.879973][ C0] check_preemption_disabled+0x26/0xe0
[ 117.880001][ C0] rcu_is_watching+0x12/0xc0
[ 117.880022][ C0] pfn_valid+0x2d0/0x4a0
[ 117.880046][ C0] page_table_check_set+0x25/0x580
[ 117.880073][ C0] __page_table_check_ptes_set+0x217/0x270
[ 117.880102][ C0] copy_page_range+0x1c87/0x56a0
[ 117.880131][ C0] dup_mmap+0xcd8/0x1f60
[ 117.880157][ C0] copy_process+0x4996/0x7dd0
[ 117.880178][ C0] kernel_clone+0x176/0x9d0
[ 117.880199][ C0] __do_sys_clone+0xd9/0x120
[ 117.880219][ C0] do_syscall_64+0x10b/0x7f0
[ 117.880247][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.880269][ C0]
[ 117.880269][ C0] other info that might help us debug this:
[ 117.880269][ C0]
[ 117.880276][ C0] Chain exists of:
[ 117.880276][ C0] console_owner --> &dev->power.lock --> &obj_hash[i].lock
[ 117.880276][ C0]
[ 117.880310][ C0] Possible unsafe locking scenario:
[ 117.880310][ C0]
[ 117.880316][ C0] CPU0 CPU1
[ 117.880322][ C0] ---- ----
[ 117.880328][ C0] lock(&obj_hash[i].lock);
[ 117.880342][ C0] lock(&dev->power.lock);
[ 117.880362][ C0] lock(&obj_hash[i].lock);
[ 117.880377][ C0] lock(console_owner);
[ 117.880391][ C0]
[ 117.880391][ C0] *** DEADLOCK ***
[ 117.880391][ C0]
[ 117.880396][ C0] 12 locks held by syz-executor/2973:
[ 117.880409][ C0] #0: ffffffff89823d10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x498b/0x7dd0
[ 117.880460][ C0] #1: ffff888123fdceb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x11f/0x1f60
[ 117.880516][ C0] #2: ffff888118e9e7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1ba/0x1f60
[ 117.880583][ C0] #3: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.880651][ C0] #4: ffff88810cf5e8b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[ 117.880707][ C0] #5: ffffffff896e2bc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300
[ 117.880774][ C0] #6: ffff888123d09f18 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_page_range+0xcc2/0x56a0
[ 117.880844][ C0] #7: ffffffff896e2b00 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4a0
[ 117.880898][ C0] #8: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610
[ 117.880953][ C0] #9: ffffffff941c2170 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0
[ 117.881015][ C0] #10: ffffffff896cef80 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[ 117.881069][ C0] #11: ffffffff896ceff8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[ 117.881120][ C0]
[ 117.881120][ C0] stack backtrace:
[ 117.881135][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy)
[ 117.881168][ C0] Tainted: [W]=WARN
[ 117.881176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 117.881190][ C0] Call Trace:
[ 117.881197][ C0]
[ 117.881206][ C0] dump_stack_lvl+0x100/0x190
[ 117.881239][ C0] print_circular_bug.cold+0x178/0x1c7
[ 117.881264][ C0] check_noncircular+0x146/0x160
[ 117.881297][ C0] check_prev_add+0xeb/0xe60
[ 117.881328][ C0] __lock_acquire+0x136c/0x1a40
[ 117.881370][ C0] lock_acquire+0x1b9/0x370
[ 117.881400][ C0] ? console_lock_spinning_enable+0x61/0x80
[ 117.881440][ C0] ? console_lock_spinning_enable+0x4a/0x80
[ 117.881481][ C0] console_lock_spinning_enable+0x72/0x80
[ 117.881520][ C0] ? console_lock_spinning_enable+0x61/0x80
[ 117.881559][ C0] console_flush_one_record+0x739/0xe50
[ 117.881584][ C0] ? __pfx_console_flush_one_record+0x10/0x10
[ 117.881607][ C0] ? __lock_acquire+0xd5b/0x1a40
[ 117.881641][ C0] ? is_printk_cpu_sync_owner+0x32/0x40
[ 117.881669][ C0] console_unlock+0x103/0x260
[ 117.881691][ C0] ? __pfx_console_unlock+0x10/0x10
[ 117.881714][ C0] ? do_raw_spin_unlock+0x145/0x1e0
[ 117.881754][ C0] ? _printk+0xcf/0x110
[ 117.881781][ C0] vprintk_emit+0x407/0x6b0
[ 117.881804][ C0] ? __pfx_vprintk_emit+0x10/0x10
[ 117.881831][ C0] _printk+0xcf/0x110
[ 117.881857][ C0] ? __pfx__printk+0x10/0x10
[ 117.881886][ C0] ? do_raw_spin_lock+0x128/0x260
[ 117.881926][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40
[ 117.881965][ C0] __debug_object_init+0x2a9/0x3d0
[ 117.882001][ C0] ? __pfx___debug_object_init+0x10/0x10
[ 117.882034][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 117.882060][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 117.882095][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 117.882129][ C0] ? __init_swait_queue_head+0xca/0x150
[ 117.882155][ C0] __synchronize_srcu+0x1c3/0x300
[ 117.882190][ C0] ? __pfx___synchronize_srcu+0x10/0x10
[ 117.882230][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0
[ 117.882261][ C0] ? synchronize_srcu+0xa8/0x380
[ 117.882297][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 117.882329][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.882366][ C0] wakeup_source_unregister+0x1f/0x30
[ 117.882396][ C0] mmc_host_classdev_release+0x42/0x120
[ 117.882426][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 117.882457][ C0] device_release+0xd2/0x270
[ 117.882495][ C0] kobject_put+0x1f7/0x640
[ 117.882530][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.882561][ C0] put_device+0x1f/0x30
[ 117.882580][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 117.882611][ C0] call_timer_fn+0x19a/0x610
[ 117.882638][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 117.882667][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.882698][ C0] ? mark_held_locks+0x40/0x70
[ 117.882731][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 117.882761][ C0] __run_timers+0x757/0xb00
[ 117.882793][ C0] ? __pfx___run_timers+0x10/0x10
[ 117.882826][ C0] ? ktime_get+0x9f/0x320
[ 117.882854][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 117.882891][ C0] run_timer_base+0x114/0x190
[ 117.882920][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 117.882951][ C0] run_timer_softirq+0x1a/0x50
[ 117.882979][ C0] handle_softirqs+0x1dd/0x990
[ 117.883019][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 117.883058][ C0] ? _raw_spin_unlock+0x28/0x50
[ 117.883093][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 117.883119][ C0] __irq_exit_rcu+0x160/0x210
[ 117.883157][ C0] irq_exit_rcu+0x9/0x30
[ 117.883177][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 117.883201][ C0]
[ 117.883208][ C0]
[ 117.883216][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 117.883243][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 117.883275][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 117.883297][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 117.883316][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 117.883331][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 117.883347][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 117.883382][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 117.883395][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 117.883414][ C0] ? pfn_valid+0xe9/0x4a0
[ 117.883442][ C0] rcu_is_watching+0x12/0xc0
[ 117.883464][ C0] pfn_valid+0x2d0/0x4a0
[ 117.883491][ C0] page_table_check_set+0x25/0x580
[ 117.883522][ C0] __page_table_check_ptes_set+0x217/0x270
[ 117.883553][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 117.883584][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 117.883625][ C0] copy_page_range+0x1c87/0x56a0
[ 117.883670][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 117.883707][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 117.883743][ C0] ? __pfx___might_resched+0x10/0x10
[ 117.883776][ C0] ? dup_mmap+0xc92/0x1f60
[ 117.883803][ C0] ? down_write+0x146/0x1f0
[ 117.883831][ C0] ? up_write+0x2e5/0x5c0
[ 117.883868][ C0] dup_mmap+0xcd8/0x1f60
[ 117.883901][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 117.883929][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 117.883970][ C0] ? __lock_acquire+0x49f/0x1a40
[ 117.884002][ C0] ? find_held_lock+0x2b/0x80
[ 117.884024][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 117.884061][ C0] copy_process+0x4996/0x7dd0
[ 117.884091][ C0] ? __pfx_copy_process+0x10/0x10
[ 117.884116][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 117.884144][ C0] ? do_raw_spin_lock+0x128/0x260
[ 117.884183][ C0] kernel_clone+0x176/0x9d0
[ 117.884206][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 117.884233][ C0] ? find_held_lock+0x2b/0x80
[ 117.884256][ C0] ? __might_fault+0xc5/0x140
[ 117.884295][ C0] __do_sys_clone+0xd9/0x120
[ 117.884318][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 117.884360][ C0] do_syscall_64+0x10b/0x7f0
[ 117.884391][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.884415][ C0] RIP: 0033:0x7f2fd1056b52
[ 117.884435][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 117.884488][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 117.884515][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 117.884534][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 117.884551][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 117.884570][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 117.884589][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 117.884615][ C0]
[ 119.869605][ C0] ------------[ cut here ]------------
[ 119.875180][ C0] 1
[ 119.875204][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#0: syz-executor/2973
[ 119.889250][ C0] Modules linked in:
[ 119.893204][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy)
[ 119.905742][ C0] Tainted: [W]=WARN
[ 119.909569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 119.919671][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 119.926760][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 5e 58 06 83 c5 01 89 2d 40 c7 ea 12 4c 89 e6 48 c7 c7 40 62 b1 87 e8 51 c5 fa ff 90 <0f> 0b 90 e9 12 81 b5 01 83 c5 01 89 2d 1f c7 ea 12 49 39 c4 73 da
[ 119.946684][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010086
[ 119.952789][ C0] RAX: 0000000000000050 RBX: ffff8881190cf1f8 RCX: 0000000000000000
[ 119.960894][ C0] RDX: 0000000000000050 RSI: ffffffff8192f709 RDI: fffff52000000f11
[ 119.968891][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 119.976887][ C0] R10: 0000000000000105 R11: 0000000000000001 R12: ffffc90000007a70
[ 119.984886][ C0] R13: ffff8881236b0000 R14: 0000000000000001 R15: 0000000000000000
[ 119.992984][ C0] FS: 000055558a399500(0000) GS:ffff888268633000(0000) knlGS:0000000000000000
[ 120.001950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 120.008563][ C0] CR2: 00007fa4161b1f50 CR3: 0000000125a5a000 CR4: 00000000003506f0
[ 120.016568][ C0] Call Trace:
[ 120.019875][ C0]
[ 120.022746][ C0] __debug_object_init+0x2a9/0x3d0
[ 120.027942][ C0] ? __pfx___debug_object_init+0x10/0x10
[ 120.033708][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 120.038953][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 120.044378][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 120.049894][ C0] ? __init_swait_queue_head+0xca/0x150
[ 120.055499][ C0] __synchronize_srcu+0x1c3/0x300
[ 120.060660][ C0] ? __pfx___synchronize_srcu+0x10/0x10
[ 120.066267][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0
[ 120.071859][ C0] ? synchronize_srcu+0xa8/0x380
[ 120.076843][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 120.083304][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 120.089506][ C0] wakeup_source_unregister+0x1f/0x30
[ 120.094940][ C0] mmc_host_classdev_release+0x42/0x120
[ 120.100804][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 120.107361][ C0] device_release+0xd2/0x270
[ 120.112008][ C0] kobject_put+0x1f7/0x640
[ 120.116476][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.123221][ C0] put_device+0x1f/0x30
[ 120.127607][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 120.133941][ C0] call_timer_fn+0x19a/0x610
[ 120.138614][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 120.143823][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.150702][ C0] ? mark_held_locks+0x40/0x70
[ 120.155544][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.162292][ C0] __run_timers+0x757/0xb00
[ 120.166867][ C0] ? __pfx___run_timers+0x10/0x10
[ 120.171942][ C0] ? ktime_get+0x9f/0x320
[ 120.176318][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 120.181398][ C0] run_timer_base+0x114/0x190
[ 120.186123][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 120.191504][ C0] run_timer_softirq+0x1a/0x50
[ 120.196327][ C0] handle_softirqs+0x1dd/0x990
[ 120.201232][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 120.206570][ C0] ? _raw_spin_unlock+0x28/0x50
[ 120.211468][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 120.217226][ C0] __irq_exit_rcu+0x160/0x210
[ 120.222058][ C0] irq_exit_rcu+0x9/0x30
[ 120.226338][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 120.232146][ C0]
[ 120.235108][ C0]
[ 120.238065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 120.244121][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 120.250542][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 120.270307][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 120.276419][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 120.284509][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 120.292546][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 120.300577][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 120.308746][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 120.316759][ C0] ? pfn_valid+0xe9/0x4a0
[ 120.321139][ C0] rcu_is_watching+0x12/0xc0
[ 120.325775][ C0] pfn_valid+0x2d0/0x4a0
[ 120.330059][ C0] page_table_check_set+0x25/0x580
[ 120.335211][ C0] __page_table_check_ptes_set+0x217/0x270
[ 120.341327][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 120.347954][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 120.353382][ C0] copy_page_range+0x1c87/0x56a0
[ 120.358382][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 120.363627][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 120.368959][ C0] ? __pfx___might_resched+0x10/0x10
[ 120.374400][ C0] ? dup_mmap+0xc92/0x1f60
[ 120.378855][ C0] ? down_write+0x146/0x1f0
[ 120.383408][ C0] ? up_write+0x2e5/0x5c0
[ 120.387784][ C0] dup_mmap+0xcd8/0x1f60
[ 120.392264][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 120.396978][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 120.402862][ C0] ? __lock_acquire+0x49f/0x1a40
[ 120.408105][ C0] ? find_held_lock+0x2b/0x80
[ 120.412826][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 120.418789][ C0] copy_process+0x4996/0x7dd0
[ 120.423525][ C0] ? __pfx_copy_process+0x10/0x10
[ 120.428964][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 120.433915][ C0] ? do_raw_spin_lock+0x128/0x260
[ 120.439013][ C0] kernel_clone+0x176/0x9d0
[ 120.443559][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 120.448710][ C0] ? find_held_lock+0x2b/0x80
[ 120.453425][ C0] ? __might_fault+0xc5/0x140
[ 120.458162][ C0] __do_sys_clone+0xd9/0x120
[ 120.462793][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 120.468045][ C0] do_syscall_64+0x10b/0x7f0
[ 120.472858][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.478794][ C0] RIP: 0033:0x7f2fd1056b52
[ 120.483240][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 120.503020][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 120.511493][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 120.519511][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 120.527534][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 120.535568][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 120.543606][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 120.551744][ C0]
[ 120.554808][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 120.562149][ C0] CPU: 0 UID: 0 PID: 2973 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy)
[ 120.573239][ C0] Tainted: [W]=WARN
[ 120.577084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 120.587169][ C0] Call Trace:
[ 120.590476][ C0]
[ 120.593456][ C0] dump_stack_lvl+0x100/0x190
[ 120.598209][ C0] vpanic+0x552/0x970
[ 120.602261][ C0] ? __pfx_vpanic+0x10/0x10
[ 120.606827][ C0] ? lock_release+0x24d/0x310
[ 120.611556][ C0] panic+0xd1/0xe0
[ 120.615318][ C0] ? __pfx_panic+0x10/0x10
[ 120.619787][ C0] ? check_panic_on_warn+0x1f/0x90
[ 120.625033][ C0] check_panic_on_warn.cold+0x19/0x34
[ 120.630453][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 120.636933][ C0] __warn.cold+0x191/0x318
[ 120.641505][ C0] __report_bug+0x30f/0x440
[ 120.646106][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 120.652703][ C0] ? __pfx___report_bug+0x10/0x10
[ 120.657863][ C0] ? irq_work_queue+0xce/0x100
[ 120.662667][ C0] ? __wake_up_klogd+0xe2/0x140
[ 120.667919][ C0] ? vprintk_emit+0x1c9/0x6b0
[ 120.672634][ C0] ? __pfx_vprintk_emit+0x10/0x10
[ 120.677742][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 120.684262][ C0] report_bug+0xb2/0x220
[ 120.688675][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 120.695180][ C0] handle_bug+0x16a/0x2a0
[ 120.699581][ C0] exc_invalid_op+0x17/0x50
[ 120.704131][ C0] asm_exc_invalid_op+0x1a/0x20
[ 120.709130][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40
[ 120.716295][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 5e 58 06 83 c5 01 89 2d 40 c7 ea 12 4c 89 e6 48 c7 c7 40 62 b1 87 e8 51 c5 fa ff 90 <0f> 0b 90 e9 12 81 b5 01 83 c5 01 89 2d 1f c7 ea 12 49 39 c4 73 da
[ 120.736146][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010086
[ 120.742534][ C0] RAX: 0000000000000050 RBX: ffff8881190cf1f8 RCX: 0000000000000000
[ 120.750545][ C0] RDX: 0000000000000050 RSI: ffffffff8192f709 RDI: fffff52000000f11
[ 120.758577][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 120.766586][ C0] R10: 0000000000000105 R11: 0000000000000001 R12: ffffc90000007a70
[ 120.774591][ C0] R13: ffff8881236b0000 R14: 0000000000000001 R15: 0000000000000000
[ 120.782599][ C0] ? vprintk_emit+0x1c9/0x6b0
[ 120.787413][ C0] __debug_object_init+0x2a9/0x3d0
[ 120.792576][ C0] ? __pfx___debug_object_init+0x10/0x10
[ 120.798255][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 120.803497][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 120.808916][ C0] ? lockdep_init_map_type+0x5c/0x250
[ 120.814350][ C0] ? __init_swait_queue_head+0xca/0x150
[ 120.819984][ C0] __synchronize_srcu+0x1c3/0x300
[ 120.825083][ C0] ? __pfx___synchronize_srcu+0x10/0x10
[ 120.830703][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0
[ 120.836500][ C0] ? synchronize_srcu+0xa8/0x380
[ 120.841496][ C0] wakeup_source_unregister.part.0+0x12c/0x540
[ 120.847793][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 120.853989][ C0] wakeup_source_unregister+0x1f/0x30
[ 120.859402][ C0] mmc_host_classdev_release+0x42/0x120
[ 120.864989][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 120.871187][ C0] device_release+0xd2/0x270
[ 120.875835][ C0] kobject_put+0x1f7/0x640
[ 120.880389][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.887114][ C0] put_device+0x1f/0x30
[ 120.891322][ C0] vub300_inactivity_timer_expired+0x42f/0x550
[ 120.897611][ C0] call_timer_fn+0x19a/0x610
[ 120.902295][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 120.907478][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.914474][ C0] ? mark_held_locks+0x40/0x70
[ 120.919295][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 120.926017][ C0] __run_timers+0x757/0xb00
[ 120.930586][ C0] ? __pfx___run_timers+0x10/0x10
[ 120.935671][ C0] ? ktime_get+0x9f/0x320
[ 120.940131][ C0] ? _raw_spin_lock_irq+0x45/0x50
[ 120.945222][ C0] run_timer_base+0x114/0x190
[ 120.949944][ C0] ? __pfx_run_timer_base+0x10/0x10
[ 120.955197][ C0] run_timer_softirq+0x1a/0x50
[ 120.960000][ C0] handle_softirqs+0x1dd/0x990
[ 120.964915][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 120.970266][ C0] ? _raw_spin_unlock+0x28/0x50
[ 120.975173][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 120.980865][ C0] __irq_exit_rcu+0x160/0x210
[ 120.985717][ C0] irq_exit_rcu+0x9/0x30
[ 120.990019][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 120.995700][ C0]
[ 120.998748][ C0]
[ 121.001796][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 121.007912][ C0] RIP: 0010:check_preemption_disabled+0x26/0xe0
[ 121.014292][ C0] Code: 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 1f 82 05 65 f7 05 56 1f 82 05 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 1e 1f 82 05 48 89
[ 121.034024][ C0] RSP: 0018:ffffc90001457430 EFLAGS: 00000286
[ 121.040249][ C0] RAX: 0000000000000000 RBX: 0000000000125cae RCX: ffffffff82216929
[ 121.048258][ C0] RDX: ffff8881236b0000 RSI: ffffffff87b15680 RDI: ffffffff87b156c0
[ 121.056269][ C0] RBP: ffff88823ff5d480 R08: 0000000000000005 R09: 0000000000000000
[ 121.064271][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 121.072299][ C0] R13: ffff88823ff5e000 R14: dffffc0000000000 R15: 0000000000000000
[ 121.080314][ C0] ? pfn_valid+0xe9/0x4a0
[ 121.084702][ C0] rcu_is_watching+0x12/0xc0
[ 121.089339][ C0] pfn_valid+0x2d0/0x4a0
[ 121.093627][ C0] page_table_check_set+0x25/0x580
[ 121.098816][ C0] __page_table_check_ptes_set+0x217/0x270
[ 121.104691][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 121.111069][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 121.116690][ C0] copy_page_range+0x1c87/0x56a0
[ 121.121794][ C0] ? mas_wr_store_entry+0xa1/0x1e80
[ 121.127047][ C0] ? __pfx_copy_page_range+0x10/0x10
[ 121.132564][ C0] ? __pfx___might_resched+0x10/0x10
[ 121.137932][ C0] ? dup_mmap+0xc92/0x1f60
[ 121.142490][ C0] ? down_write+0x146/0x1f0
[ 121.147062][ C0] ? up_write+0x2e5/0x5c0
[ 121.151540][ C0] dup_mmap+0xcd8/0x1f60
[ 121.155863][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 121.160592][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 121.166762][ C0] ? __lock_acquire+0x49f/0x1a40
[ 121.171776][ C0] ? find_held_lock+0x2b/0x80
[ 121.176563][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0
[ 121.182607][ C0] copy_process+0x4996/0x7dd0
[ 121.187367][ C0] ? __pfx_copy_process+0x10/0x10
[ 121.192448][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 121.197602][ C0] ? do_raw_spin_lock+0x128/0x260
[ 121.202687][ C0] kernel_clone+0x176/0x9d0
[ 121.207336][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 121.212442][ C0] ? find_held_lock+0x2b/0x80
[ 121.217361][ C0] ? __might_fault+0xc5/0x140
[ 121.222240][ C0] __do_sys_clone+0xd9/0x120
[ 121.226908][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 121.232187][ C0] do_syscall_64+0x10b/0x7f0
[ 121.236855][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.242997][ C0] RIP: 0033:0x7f2fd1056b52
[ 121.247468][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 121.267322][ C0] RSP: 002b:00007ffc26622180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 121.275883][ C0] RAX: ffffffffffffffda RBX: 00007ffc26622180 RCX: 00007f2fd1056b52
[ 121.284068][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 121.292249][ C0] RBP: 00007ffc2662230c R08: 0000000000000000 R09: 0000000000000001
[ 121.300361][ C0] R10: 000055558a3997d0 R11: 0000000000000246 R12: 0000000000000000
[ 121.308472][ C0] R13: 00000000000927c0 R14: 000000000001c243 R15: 00007ffc26622360
[ 121.316669][ C0]
[ 121.320383][ C0] Kernel Offset: disabled
[ 121.324726][ C0] Rebooting in 86400 seconds..