last executing test programs: 2.775877029s ago: executing program 4 (id=5): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810200020000000904010000020d00000904010102020d000009058202000200000009050302"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x440601) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000080)={0x3, 0x1, 0x7}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0xb, 0x34, {0x34, 0x10, "690445b5acc5fb9893506e414552f990203c87b15be27d4dd38326e0385a9e6f50e5d0fe318aa25ccba32cf07ff1aa54d8dd"}}, &(0x7f0000000100)={0x0, 0x3, 0x60, @string={0x60, 0x3, "cac748262d42526bed0533f94536eeebe6468704d386f9ef2f12d1a5931ba83c01bf0aa78dd548fd67b6ab0d659d50cecbcf1d2bb432629cfd40d901621d96069f5a3626e82ba1f7d1d2e75b620dd0322a064a78ac5bbfc1afe19bf7b531"}}, &(0x7f0000000180)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x7, "17bca986"}, @local=@item_4={0x3, 0x2, 0xa, "81a3fd8c"}, @global=@item_012={0x2, 0x1, 0x2, "74be"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x36, 0x1, {0x22, 0x31a}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000003c0)={0x20, 0x16, 0xda, "9d835f3313eaf927f698e5fe787987c9db41705e423f66c87f33a2934014892ab45cb41cfc469c58aca6fa2f8e0fe1f9bc2a0b7e9ab331ea63c1459cff6d30d476faead4b1ecb45f0fbb3af0a59f9ce8b97a7f6e042dceb2fc5cdbbc603f663e6bd982f3118ccf19e080500ca0e39ffa3e8da30869e352670c81785fe9ff6aa3f2f50b3aa4b6f49a5d046020a7d1b88bbd9111b5cddc03ffe59fd41c5a14cc71605ad9466b63f7fe3c13abbbcb6b1b540c014191d2f46f995fb8b28d62aeb4433c121535c1fe3d2b8c17955811cf51cbcace6f8b7ee804f449c3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc8, "133629ad82c0a5d8daa32c549ac3cb55084b2ed43ff639d9ef12805825da1059c3ebf85766df319ae55b3849002048a9a9e8c78a6020910b3e1a27e43cff4c8eb07dbe77c9068ad633db303d88dee44b41ae4ee80e9b331a6b23d038679eb0b9347a973797a074e92a3383c25039615d6c9d65c467fddc033c7b9521d96a19e0deab533785205e447e3e0dab575482e4c605b866de388e8ffbe44dbcdce38748082abbcb7db877751bec73ff5464eb43d45f513174145660be0134bf8757d7c23e8a71b4e09638a9"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0xb, 0x34, {0x34, 0x10, "690445b5acc5fb9893506e414552f990203c87b15be27d4dd38326e0385a9e6f50e5d0fe318aa25ccba32cf07ff1aa54d8dd"}}, &(0x7f0000000100)={0x0, 0x3, 0x60, @string={0x60, 0x3, "cac748262d42526bed0533f94536eeebe6468704d386f9ef2f12d1a5931ba83c01bf0aa78dd548fd67b6ab0d659d50cecbcf1d2bb432629cfd40d901621d96069f5a3626e82ba1f7d1d2e75b620dd0322a064a78ac5bbfc1afe19bf7b531"}}, &(0x7f0000000180)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x7, "17bca986"}, @local=@item_4={0x3, 0x2, 0xa, "81a3fd8c"}, @global=@item_012={0x2, 0x1, 0x2, "74be"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x36, 0x1, {0x22, 0x31a}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000003c0)={0x20, 0x16, 0xda, "9d835f3313eaf927f698e5fe787987c9db41705e423f66c87f33a2934014892ab45cb41cfc469c58aca6fa2f8e0fe1f9bc2a0b7e9ab331ea63c1459cff6d30d476faead4b1ecb45f0fbb3af0a59f9ce8b97a7f6e042dceb2fc5cdbbc603f663e6bd982f3118ccf19e080500ca0e39ffa3e8da30869e352670c81785fe9ff6aa3f2f50b3aa4b6f49a5d046020a7d1b88bbd9111b5cddc03ffe59fd41c5a14cc71605ad9466b63f7fe3c13abbbcb6b1b540c014191d2f46f995fb8b28d62aeb4433c121535c1fe3d2b8c17955811cf51cbcace6f8b7ee804f449c3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc8, "133629ad82c0a5d8daa32c549ac3cb55084b2ed43ff639d9ef12805825da1059c3ebf85766df319ae55b3849002048a9a9e8c78a6020910b3e1a27e43cff4c8eb07dbe77c9068ad633db303d88dee44b41ae4ee80e9b331a6b23d038679eb0b9347a973797a074e92a3383c25039615d6c9d65c467fddc033c7b9521d96a19e0deab533785205e447e3e0dab575482e4c605b866de388e8ffbe44dbcdce38748082abbcb7db877751bec73ff5464eb43d45f513174145660be0134bf8757d7c23e8a71b4e09638a9"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) 1.450321433s ago: executing program 2 (id=3): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740aacee04a0109022e0001011810040904001d020103000609058e0b20000fd702052103012709058c0200026df7800525"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1.348847686s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x32, {0x32, 0xa, "d79c8647497589b235d55331fd92fb114941481c82fd9a87eda98e7e1b3970d8ddc30633bbdea4b5a1127792e586f631"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "d5234fc84d696a66134dbf3e0ffeeb13ad67ae87dc8b9c7d58d585d6bf246840b1b1a282ecb7fc06d6c0a2d7efa2fc6dac4d3e6352e8332a1d7decafd6aa8161fb9016ab94f5635cf26a0d8377a1856b64184e3b0c0004107d6f3dc05b7887a4c16f12052d6c7bb6d342b0d00e3b6845cad95e9b5326536efd3808708bc4497fc7b2ddaadb62292b0de121b096614755d4b9ec887ace04ceb12ee3fe8bd09535a332ffda511917a827200c53da49c5c0c79d65cb0576f589ecfbb230cf506aa078423fc22109de0859624797a45c1ba3d833d0bb1d73d610b6d1a172b7cc3d694f0d"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0xb, 0xaa, "b0b93da5dca1a023628c09379065102be4d25334c80be620e02b22ac2f45b40854d3e9a4f98bc5ed20535a1d213f6e534fc1fcae5e1e2ebc07b56776cacceb53efcf14090f27684dde810d1f46a496bfb961d924989e39aed7300009fbb7f08bb9c3b36c0a30843b6e0d701ac200dbaa672b6f373748b8851e757e4331cee8053ba4db2f69bbbe2f29ad80d08d8c09b114f59e659e9671a2a53b7e0501d7cb5e7658de55d076dc0f119f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x2, "7ae1"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "63a464"}, &(0x7f0000000480)={0x20, 0x83, 0x2, 'A/'}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "c9"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "1b6c26"}}) syz_usb_connect(0x3, 0x63, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.15919968s ago: executing program 4 (id=6): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0xf3, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x4a, 0x0, 0x1, [{0xfffffffffffffe5d, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9ebcdb86d9b0c2a9}]}}, 0x0}, 0x0) 1.065164903s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x17e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000965bb108a1172801f6050102030109026c0101000000000904"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="20232d0000002d221f2209746d323d9c60dd206aa2fb9f9d0330da2faf95bcb41311a9dc63dabc1b35fcdb719ae55f511d486b"], &(0x7f0000000040)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "ea34fa6d66e87bb9864c71e2d8e6298e426e132a88b85f84"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x0, 0x0, 0xf4, "2b8aec4ea766ab5a28b037e520321d56fb895d2347a2c8a910e0c79736a8b53016cf9a05e4a9b5e03d7c82f0a40a7a97abc5106ac278a8f56a1aad2f204b9b70cc9606f9a4e29620609e4fc90a1e7f8628f4daef1dd8cd256c13aeeb9c7034b0ca61af9829eb36f7c9aa8087727f65600314adaebf3248df82ece3ab230557f218b3a5f8cf57e878905f90c362576c8ba22792c4d03603e0c7eb5382ec75979cc444cae79d06b6b9a49acbf5a211fb72a36ca6547c90c5a957eb43e2024a9293336c341438f334ce8e267e83f42c72adc213b6ec387410c2fdf145b1f7e064db46e0cceba45c004a3f60631fad9d2d71db2e5c9b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x81, 0x1, "b9"}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "4628d8"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, 'o:*'}, &(0x7f0000000340)={0x20, 0x84, 0x1, "02"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "3fae3c"}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05005000000000000109022400010000e80b090400000103f302000921fd7f000122c10109058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0x3, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00032a0000002a03c1bb1f85aedccfd7936f87360dbac4b3"]}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001040)={0xffffffffffffff74, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001680)={0x24, &(0x7f0000001540)={0x0, 0x21, 0x11, {0x11, 0x10, "28320d9ca3d00604cae0f9f9c70682"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) 890.589967ms ago: executing program 0 (id=1): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfa, 0x47, 0x59, 0x8, 0x124a, 0x4023, 0x234a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0x8c, 0x8, 0x0, 0xc2, 0xbe, 0x19, 0x9}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xbe, 0xa0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x2, 0x5}, {0x6, 0x24, 0x1a, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x2, 0x7}}}}}}}]}}, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987"], 0x0) r7 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000000c0)=""/231) r8 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000000040)=0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x13, {[@global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=7): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x46, 0x30, 0x31, 0x20, 0x93a, 0x2470, 0x50ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x9, 0x80, 0xa, "", [{{0x9, 0x4, 0xe, 0x14, 0x0, 0xf, 0xf4, 0x31, 0x89}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@string={0x4, 0x3, "cd82"}}, {0x2, &(0x7f00000000c0)=@string={0x2}}]}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x5452, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/34) syz_usb_connect$cdc_ncm(0x5, 0xa8, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x5, 0x0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "39e908"}, {0x5, 0x24, 0x0, 0xa8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf48a, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xf, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x80, 0x8}, @dmm={0x7, 0x24, 0x14, 0x6, 0xc}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xe, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0x5, 0xad}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x54, 0x7, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0xe, 0x8, 0x28, 0xff, 0x9}, 0x106, &(0x7f00000002c0)={0x5, 0xf, 0x106, 0x3, [@ptm_cap={0x3}, @generic={0x74, 0x10, 0xb, "80df89b2536ef11c850c8c7605a7c14a1b3a1df39f77192c1eec5aa847e17a89667d22a91a4cd9fbcbf48242b2d4010960eaa7312c12d504d344a11c466bf153920148aecf808bb2ce8b8148ca04e9095b8d134f95576f8c27718c47bdddce25064060a1d2cbc6c9daac48340080e9cb95"}, @generic={0x8a, 0x10, 0x3, "2ba8124cebed556e42d2ff6a7ddb511deee00c102e0a631dc98a1ee0a72aaa418dab970b0d9671eff482114e1f458b291b986fa679409b410de5292007ac577466eb31bce1c2766cb88787871634f80db3640de26ac50f8fe52907b632fb4a488193f206d9a8c36963268d5452ba089dde1ade8cd52018388a67b5d7029ca332be70f3a9a1b7ae"}]}, 0x8, [{0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1a034b"]}, {0x60, &(0x7f0000000740)=ANY=[@ANYBLOB="600329028c51f35ff0d64d6dd28023576c7d1d3408c582a9b215730bc2ab6f0b5a7ec0f1198428f1a109240e10ffec47e60d5c6e088a60bddd445916b8734addf1529887e4e840372d87d55c77c76f45b433b84f716ccbaa8496c5d29ef0e179fcdd269b81e9a6841c1eb8a8762fc0d4500480154c6ffc006ccc46c6d042d06695762f55207df89cc2ed134e4df4de127d90e5eaf81ceb46f605ddaa1b183c36a8f9c206f6d67f0800298f174fcfd275c6e7472b8f1a5a84655481490c29bc50d25302a5b034b86eaf671fa5d249431c80e72e62595e6e7e3b14f7596d143db98b5ac866439c94080c0a4b"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}, {0xa0, &(0x7f0000000540)=@string={0xa0, 0x3, "e1ef098d8254403d59eae0ffa861f973237fa9f68f639f6a749092f56d7dd546df438f1038bf3e4c26542ca76cd0c97f232af9b26adc05f84fd8c5a47334f787670257c3c100fc1a8864c3b4fc95a4a305e9f650271377f0f52aebf2d70967464e4bf9b4f0ee1cf0faa3c66285d06326e5577865dc6bb3a6fc2b8e96066364813b1f526916e26277cf0affbfcb6aed3bc5118a54da45ae1c33f572152ee5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x427}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 46.961189][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 46.961211][ T29] audit: type=1400 audit(1785959526.235:77): avc: denied { mounton } for pid=2960 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.993345][ T29] audit: type=1400 audit(1785959526.265:78): avc: denied { mount } for pid=2960 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.007039][ T2960] cgroup: Unknown subsys name 'net' [ 47.024736][ T29] audit: type=1400 audit(1785959526.305:79): avc: denied { unmount } for pid=2960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.164964][ T2960] cgroup: Unknown subsys name 'cpuset' [ 47.174373][ T2960] cgroup: Unknown subsys name 'rlimit' [ 47.303521][ T29] audit: type=1400 audit(1785959526.585:80): avc: denied { setattr } for pid=2960 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.328612][ T29] audit: type=1400 audit(1785959526.585:81): avc: denied { mounton } for pid=2960 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 47.353713][ T29] audit: type=1400 audit(1785959526.585:82): avc: denied { mount } for pid=2960 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 47.396057][ T2962] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 47.405664][ T29] audit: type=1400 audit(1785959526.685:83): avc: denied { relabelto } for pid=2962 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 47.431423][ T29] audit: type=1400 audit(1785959526.685:84): avc: denied { write } for pid=2962 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.500074][ T29] audit: type=1400 audit(1785959526.775:85): avc: denied { read } for pid=2960 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.526318][ T29] audit: type=1400 audit(1785959526.775:86): avc: denied { open } for pid=2960 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.527447][ T2960] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.861457][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 61.861496][ T29] audit: type=1400 audit(1785959541.135:93): avc: denied { create } for pid=2972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.927783][ T29] audit: type=1400 audit(1785959541.175:94): avc: denied { write } for pid=2972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.061442][ T29] audit: type=1400 audit(1785959541.335:95): avc: denied { read } for pid=2972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.877060][ T29] audit: type=1400 audit(1785959580.145:96): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MdGJxm/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.946099][ T29] audit: type=1400 audit(1785959580.145:97): avc: denied { mount } for pid=2972 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.023251][ T29] audit: type=1400 audit(1785959580.145:98): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MdGJxm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.090764][ T29] audit: type=1400 audit(1785959580.145:99): avc: denied { mount } for pid=2972 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.160151][ T29] audit: type=1400 audit(1785959580.145:100): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MdGJxm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 101.220898][ T29] audit: type=1400 audit(1785959580.195:101): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MdGJxm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 101.284507][ T29] audit: type=1400 audit(1785959580.195:102): avc: denied { unmount } for pid=2972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.315992][ T2972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.319906][ T29] audit: type=1400 audit(1785959580.215:103): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 101.433344][ T29] audit: type=1400 audit(1785959580.705:104): avc: denied { read write } for pid=2972 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.516383][ T29] audit: type=1400 audit(1785959580.705:105): avc: denied { open } for pid=2972 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.584484][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.636938][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.716988][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.766894][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.843138][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.037103][ T28] usb 5-1: config 8 has an invalid interface number: 174 but max is 0 [ 102.065360][ T28] usb 5-1: config 8 has no interface number 0 [ 102.083885][ T28] usb 5-1: config 8 interface 174 has no altsetting 0 [ 102.107983][ T28] usb 5-1: New USB device found, idVendor=7392, idProduct=b722, bcdDevice= 7.82 [ 102.125341][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.152371][ T28] usb 5-1: Product: syz [ 102.165493][ T28] usb 5-1: Manufacturer: syz [ 102.179783][ T28] usb 5-1: SerialNumber: syz [ 102.455282][ T28] usb 5-1: This Realtek USB WiFi dongle (0x7392:0xb722) is untested! [ 102.473544][ T28] usb 5-1: Please report results to Jes.Sorensen@gmail.com [ 102.510526][ T28] usb 5-1: Unsupported USB TX end-points [ 102.529957][ T28] usb 5-1: Fatal - failed to identify chip [ 102.548653][ T28] rtl8xxxu 5-1:8.174: probe with driver rtl8xxxu failed with error -524 [ 102.591064][ T28] usb 5-1: USB disconnect, device number 2 [ 103.105182][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.203921][ T119] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.272489][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 103.280407][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.289772][ T28] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.299061][ T28] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice=aa.40 [ 103.308363][ T28] usb 3-1: New USB device strings: Mfr=206, Product=224, SerialNumber=74 [ 103.328454][ T704] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.336758][ T28] usb 3-1: Product: syz [ 103.341270][ T28] usb 3-1: Manufacturer: syz [ 103.346783][ T28] usb 3-1: SerialNumber: syz [ 103.353476][ T119] usb 4-1: device descriptor read/64, error -71 [ 103.462439][ T5223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.493831][ T704] usb 5-1: config 1 interface 0 has no altsetting 0 [ 103.503397][ T704] usb 5-1: string descriptor 0 read error: -22 [ 103.509688][ T704] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 103.519009][ T704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.577820][ T28] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.585687][ T28] usb 3-1: MIDIStreaming interface descriptor not found [ 103.603387][ T119] usb 4-1: device descriptor read/64, error -71 [ 103.613104][ T5223] usb 2-1: Using ep0 maxpacket: 8 [ 103.614578][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.627569][ T28] usb 3-1: USB disconnect, device number 2 [ 103.638258][ T5223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.655872][ T5223] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 103.677558][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.692885][ T5223] usb 2-1: Product: syz [ 103.698543][ T5223] usb 2-1: Manufacturer: syz [ 103.706342][ T5223] usb 2-1: SerialNumber: syz [ 103.711322][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.735944][ T5223] usb 2-1: config 0 descriptor?? [ 103.761493][ T5223] gspca_main: t613-2.14.0 probing 17a1:0128 [ 103.815030][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 103.822950][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.831783][ T11] usb 1-1: config 8 has an invalid interface number: 140 but max is 0 [ 103.840106][ T11] usb 1-1: config 8 has no interface number 0 [ 103.846274][ T11] usb 1-1: config 8 interface 140 has no altsetting 0 [ 103.856235][ T11] usb 1-1: string descriptor 0 read error: -22 [ 103.863198][ T11] usb 1-1: New USB device found, idVendor=124a, idProduct=4023, bcdDevice=23.4a [ 103.872471][ T119] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.880163][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.008571][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.015601][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.022394][ T119] usb 4-1: device descriptor read/64, error -71 [ 104.028794][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.032855][ T11] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 104.035944][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.036210][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.057743][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.064627][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.071493][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.078372][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.085242][ T704] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 104.152355][ T704] asus 0003:0B05:19B6.0001: hidraw0: USB HID v0.02 Device [HID 0b05:19b6] on usb-dummy_hcd.4-1/input0 [ 104.173980][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.190433][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.214865][ T704] usb 5-1: USB disconnect, device number 3 [ 104.238627][ T704] ------------[ cut here ]------------ [ 104.243647][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.244493][ T704] !work->func [ 104.252936][ T704] WARNING: kernel/workqueue.c:4335 at __flush_work+0xa5d/0xcb0, CPU#1: kworker/1:2/704 [ 104.266401][ T704] Modules linked in: [ 104.270615][ T704] CPU: 1 UID: 0 PID: 704 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.270964][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.280513][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.294658][ T119] usb 4-1: device descriptor read/64, error -71 [ 104.298342][ T704] Workqueue: usb_hub_wq hub_event [ 104.309788][ T704] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 104.315612][ T704] Code: 35 00 00 00 00 e8 13 2c 12 00 e8 6e 8d 1b 00 c6 44 24 0f 00 e9 91 fd ff ff e8 0f 00 36 00 90 0f 0b 90 eb eb e8 04 00 36 00 90 <0f> 0b 90 eb e0 e8 f9 ff 35 00 e8 f4 ff 35 00 48 8b 3c 24 e8 6b b8 [ 104.335441][ T704] RSP: 0018:ffffc90002daf228 EFLAGS: 00010283 [ 104.341988][ T704] RAX: 000000000000898f RBX: dffffc0000000000 RCX: ffffc90010da9000 [ 104.347710][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.350491][ T704] RDX: 0000000000100000 RSI: ffffffff817e043c RDI: ffff888108358000 [ 104.363190][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.366789][ T704] RBP: ffff888118ec64d8 R08: 0000000000000001 R09: 0000000000000000 [ 104.382979][ T704] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 104.391492][ T704] R13: ffff888118ec64f0 R14: 0000000000000001 R15: 0000000000000001 [ 104.399868][ T704] FS: 0000000000000000(0000) GS:ffff888268736000(0000) knlGS:0000000000000000 [ 104.408936][ T704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.415661][ T704] CR2: 00005599da04ed68 CR3: 00000000094ac000 CR4: 00000000003506f0 [ 104.423782][ T704] Call Trace: [ 104.424038][ T5241] fido_id[5241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 104.427129][ T704] [ 104.442767][ T119] usb usb4-port1: attempt power cycle [ 104.444798][ T704] ? rwsem_mark_wake+0x64e/0x970 [ 104.452622][ T5232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.455149][ T704] ? __pfx___flush_work+0x10/0x10 [ 104.467745][ T704] ? __pfx___might_resched+0x10/0x10 [ 104.473245][ T704] ? find_held_lock+0x2b/0x80 [ 104.477988][ T704] cancel_work_sync+0xd1/0xf0 [ 104.482815][ T704] asus_remove+0x182/0x1f0 [ 104.487381][ T704] ? __pfx_asus_remove+0x10/0x10 [ 104.492937][ T704] hid_device_remove+0xd1/0x270 [ 104.497884][ T704] ? __pfx_hid_device_remove+0x10/0x10 [ 104.503469][ T704] device_remove+0xcb/0x180 [ 104.508042][ T704] device_release_driver_internal+0x44e/0x620 [ 104.514240][ T704] bus_remove_device+0x2bc/0x560 [ 104.519246][ T704] ? __pfx_bus_remove_device+0x10/0x10 [ 104.524773][ T704] ? __pfx_device_remove_attrs+0x10/0x10 [ 104.530464][ T704] device_del+0x376/0x9b0 [ 104.534869][ T704] ? __pfx_device_del+0x10/0x10 [ 104.539816][ T704] hid_destroy_device+0x19c/0x240 [ 104.544955][ T704] usbhid_disconnect+0xa0/0xe0 [ 104.549961][ T704] usb_unbind_interface+0x1dd/0x9e0 [ 104.555264][ T704] ? __pfx_usb_unbind_interface+0x10/0x10 [ 104.561045][ T704] device_remove+0x12a/0x180 [ 104.565775][ T704] device_release_driver_internal+0x44e/0x620 [ 104.571988][ T704] bus_remove_device+0x2bc/0x560 [ 104.577020][ T704] ? __pfx_bus_remove_device+0x10/0x10 [ 104.582575][ T704] ? __pfx_device_remove_attrs+0x10/0x10 [ 104.588267][ T704] device_del+0x376/0x9b0 [ 104.592683][ T704] ? __pfx_device_del+0x10/0x10 [ 104.597611][ T704] ? kobject_put+0xb9/0x640 [ 104.602145][ T704] usb_disable_device+0x367/0x810 [ 104.607281][ T704] usb_disconnect+0x2e2/0x9a0 [ 104.612013][ T704] hub_event+0x1d0c/0x4af0 [ 104.616987][ T704] ? __lock_acquire+0x49f/0x1a40 [ 104.622358][ T5232] usb 3-1: Using ep0 maxpacket: 32 [ 104.622536][ T704] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.629918][ T5232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.633016][ T704] ? __pfx_hub_event+0x10/0x10 [ 104.642948][ T5232] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 104.645693][ T704] ? debug_object_deactivate+0x2e4/0x3b0 [ 104.654569][ T5232] usb 3-1: config 0 has no interface number 0 [ 104.659447][ T704] ? rcu_is_watching+0x12/0xc0 [ 104.666242][ T5232] usb 3-1: config 0 interface 14 has no altsetting 0 [ 104.670470][ T704] process_one_work+0xa23/0x1940 [ 104.670542][ T704] ? __pfx_process_one_work+0x10/0x10 [ 104.680386][ T5232] usb 3-1: New USB device found, idVendor=093a, idProduct=2470, bcdDevice=50.ed [ 104.682270][ T704] ? __pfx_hub_event+0x10/0x10 [ 104.682371][ T704] worker_thread+0x5ef/0xe50 [ 104.688543][ T5232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.697046][ T704] ? __pfx_worker_thread+0x10/0x10 [ 104.697101][ T704] ? kthread+0x13a/0x450 [ 104.702800][ T5232] usb 3-1: Product: syz [ 104.706657][ T704] ? __pfx_worker_thread+0x10/0x10 [ 104.716807][ T5232] usb 3-1: SerialNumber: syz [ 104.719882][ T704] kthread+0x370/0x450 [ 104.719929][ T704] ? __pfx_kthread+0x10/0x10 [ 104.729327][ T5232] usb 3-1: config 0 descriptor?? [ 104.733747][ T704] ret_from_fork+0x69a/0xc80 [ 104.757088][ T704] ? __pfx_ret_from_fork+0x10/0x10 [ 104.762338][ T704] ? __switch_to+0x7f6/0x10e0 [ 104.767085][ T704] ? __switch_to_asm+0x39/0x70 [ 104.772090][ T704] ? __pfx_kthread+0x10/0x10 [ 104.776885][ T704] ret_from_fork_asm+0x1a/0x30 [ 104.781734][ T704] [ 104.782438][ T11] usb 1-1: device descriptor read/64, error -71 [ 104.784849][ T704] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.784871][ T704] CPU: 1 UID: 0 PID: 704 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.784902][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.784919][ T704] Workqueue: usb_hub_wq hub_event [ 104.784959][ T704] Call Trace: [ 104.784968][ T704] [ 104.784979][ T704] dump_stack_lvl+0x100/0x190 [ 104.785018][ T704] vpanic+0x552/0x970 [ 104.785049][ T704] ? __pfx_vpanic+0x10/0x10 [ 104.785091][ T704] panic+0xd1/0xe0 [ 104.785120][ T704] ? __pfx_panic+0x10/0x10 [ 104.785200][ T704] check_panic_on_warn.cold+0x19/0x34 [ 104.785233][ T704] ? __flush_work+0xa5d/0xcb0 [ 104.785267][ T704] __warn.cold+0x191/0x318 [ 104.785302][ T704] __report_bug+0x30f/0x440 [ 104.785331][ T704] ? __flush_work+0xa5d/0xcb0 [ 104.785368][ T704] ? __pfx___report_bug+0x10/0x10 [ 104.785402][ T704] ? __lock_acquire+0x49f/0x1a40 [ 104.785440][ T704] ? __lock_acquire+0x49f/0x1a40 [ 104.785479][ T704] ? __flush_work+0xa5d/0xcb0 [ 104.785514][ T704] report_bug+0xb2/0x220 [ 104.785542][ T704] ? __flush_work+0xa5d/0xcb0 [ 104.785576][ T704] handle_bug+0x16a/0x2a0 [ 104.785609][ T704] exc_invalid_op+0x17/0x50 [ 104.785640][ T704] asm_exc_invalid_op+0x1a/0x20 [ 104.785667][ T704] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 104.785702][ T704] Code: 35 00 00 00 00 e8 13 2c 12 00 e8 6e 8d 1b 00 c6 44 24 0f 00 e9 91 fd ff ff e8 0f 00 36 00 90 0f 0b 90 eb eb e8 04 00 36 00 90 <0f> 0b 90 eb e0 e8 f9 ff 35 00 e8 f4 ff 35 00 48 8b 3c 24 e8 6b b8 [ 104.785727][ T704] RSP: 0018:ffffc90002daf228 EFLAGS: 00010283 [ 104.785750][ T704] RAX: 000000000000898f RBX: dffffc0000000000 RCX: ffffc90010da9000 [ 104.785768][ T704] RDX: 0000000000100000 RSI: ffffffff817e043c RDI: ffff888108358000 [ 104.785786][ T704] RBP: ffff888118ec64d8 R08: 0000000000000001 R09: 0000000000000000 [ 104.785802][ T704] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 104.785819][ T704] R13: ffff888118ec64f0 R14: 0000000000000001 R15: 0000000000000001 [ 104.785848][ T704] ? __flush_work+0xa5c/0xcb0 [ 104.785887][ T704] ? __flush_work+0xa5c/0xcb0 [ 104.785923][ T704] ? rwsem_mark_wake+0x64e/0x970 [ 104.785964][ T704] ? __pfx___flush_work+0x10/0x10 [ 104.786024][ T704] ? __pfx___might_resched+0x10/0x10 [ 104.786058][ T704] ? find_held_lock+0x2b/0x80 [ 104.786090][ T704] cancel_work_sync+0xd1/0xf0 [ 104.786130][ T704] asus_remove+0x182/0x1f0 [ 104.786177][ T704] ? __pfx_asus_remove+0x10/0x10 [ 104.786213][ T704] hid_device_remove+0xd1/0x270 [ 104.786249][ T704] ? __pfx_hid_device_remove+0x10/0x10 [ 104.786287][ T704] device_remove+0xcb/0x180 [ 104.786319][ T704] device_release_driver_internal+0x44e/0x620 [ 104.786361][ T704] bus_remove_device+0x2bc/0x560 [ 104.786391][ T704] ? __pfx_bus_remove_device+0x10/0x10 [ 104.786418][ T704] ? __pfx_device_remove_attrs+0x10/0x10 [ 104.786458][ T704] device_del+0x376/0x9b0 [ 104.786493][ T704] ? __pfx_device_del+0x10/0x10 [ 104.786534][ T704] hid_destroy_device+0x19c/0x240 [ 104.786572][ T704] usbhid_disconnect+0xa0/0xe0 [ 104.786603][ T704] usb_unbind_interface+0x1dd/0x9e0 [ 104.786651][ T704] ? __pfx_usb_unbind_interface+0x10/0x10 [ 104.786692][ T704] device_remove+0x12a/0x180 [ 104.786723][ T704] device_release_driver_internal+0x44e/0x620 [ 104.786765][ T704] bus_remove_device+0x2bc/0x560 [ 104.786796][ T704] ? __pfx_bus_remove_device+0x10/0x10 [ 104.786823][ T704] ? __pfx_device_remove_attrs+0x10/0x10 [ 104.786862][ T704] device_del+0x376/0x9b0 [ 104.786897][ T704] ? __pfx_device_del+0x10/0x10 [ 104.786924][ T704] ? kobject_put+0xb9/0x640 [ 104.786970][ T704] usb_disable_device+0x367/0x810 [ 104.787017][ T704] usb_disconnect+0x2e2/0x9a0 [ 104.787060][ T704] hub_event+0x1d0c/0x4af0 [ 104.787123][ T704] ? __lock_acquire+0x49f/0x1a40 [ 104.787166][ T704] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.787207][ T704] ? __pfx_hub_event+0x10/0x10 [ 104.787242][ T704] ? debug_object_deactivate+0x2e4/0x3b0 [ 104.787293][ T704] ? rcu_is_watching+0x12/0xc0 [ 104.787326][ T704] process_one_work+0xa23/0x1940 [ 104.787377][ T704] ? __pfx_process_one_work+0x10/0x10 [ 104.787422][ T704] ? __pfx_hub_event+0x10/0x10 [ 104.787461][ T704] worker_thread+0x5ef/0xe50 [ 104.787505][ T704] ? __pfx_worker_thread+0x10/0x10 [ 104.787541][ T704] ? kthread+0x13a/0x450 [ 104.787569][ T704] ? __pfx_worker_thread+0x10/0x10 [ 104.787600][ T704] kthread+0x370/0x450 [ 104.787631][ T704] ? __pfx_kthread+0x10/0x10 [ 104.787665][ T704] ret_from_fork+0x69a/0xc80 [ 104.787705][ T704] ? __pfx_ret_from_fork+0x10/0x10 [ 104.787746][ T704] ? __switch_to+0x7f6/0x10e0 [ 104.787774][ T704] ? __switch_to_asm+0x39/0x70 [ 104.787799][ T704] ? __pfx_kthread+0x10/0x10 [ 104.787832][ T704] ret_from_fork_asm+0x1a/0x30 [ 104.787875][ T704] [ 104.791398][ T704] Kernel Offset: disabled