program:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018101c1b021b000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
syz_usb_disconnect(r0)
[ 93.213983][ T46] Bluetooth: hci0: command tx timeout
[ 93.237468][ T9] cfg80211: failed to load regulatory.db
[ 93.725409][ T5303] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.885554][ T5303] usb 5-1: Using ep0 maxpacket: 16
[ 93.889513][ T5303] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 93.891234][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 93.891247][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 93.891265][ T5303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 93.924050][ T5303] usb 5-1: config 0 descriptor??
[ 94.374211][ T5303] corsair 0003:1B1C:1B02.0002: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[ 94.593410][ T5303] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71).
[ 94.622424][ T5303] usb 5-1: USB disconnect, device number 2
[ 94.645089][ T5303] ------------[ cut here ]------------
[ 94.645098][ T5303] ODEBUG: free active (active state 0) object: ffff8880517f7ac8 object type: work_struct hint: k90_record_led_work+0x0/0x1e0
[ 94.645439][ T5303] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/0:5/5303
[ 94.657037][ T5303] Modules linked in:
[ 94.659210][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 94.662876][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.667319][ T5303] Workqueue: usb_hub_wq hub_event
[ 94.669426][ T5303] RIP: 0010:debug_print_object+0x18a/0x230
[ 94.671789][ T5303] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 5d bb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 a5 8d 0b 48 83 c4 10 5b 41 5c
[ 94.680029][ T5303] RSP: 0018:ffffc9000ec6efd0 EFLAGS: 00010246
[ 94.682668][ T5303] RAX: 1ffffffff1816f44 RBX: dffffc0000000000 RCX: 0000000000000000
[ 94.686323][ T5303] RDX: ffffffff8c6dd940 RSI: ffffffff8c6dd3c0 RDI: ffffffff9085b190
[ 94.689808][ T5303] RBP: ffffffff8c6dd940 R08: ffff8880517f7ac8 R09: ffffffff8c0b8c40
[ 94.693095][ T5303] R10: dffffc0000000000 R11: ffffffff818f8860 R12: 0000000000000000
[ 94.696523][ T5303] R13: ffffffff9085b190 R14: ffff8880517f7ac8 R15: ffffffff8c0b7a20
[ 94.699625][ T5303] FS: 0000000000000000(0000) GS:ffff88808c2bb000(0000) knlGS:0000000000000000
[ 94.703646][ T5303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.706502][ T5303] CR2: 00007f4d2aff37b0 CR3: 0000000044146000 CR4: 0000000000352ef0
[ 94.709887][ T5303] Call Trace:
[ 94.711376][ T5303]
[ 94.712706][ T5303] ? __pfx_k90_record_led_work+0x10/0x10
[ 94.715628][ T5303] ? __pfx_k90_record_led_work+0x10/0x10
[ 94.718176][ T5303] debug_check_no_obj_freed+0x2e3/0x450
[ 94.720545][ T5303] kfree+0x13e/0x650
[ 94.722270][ T5303] ? corsair_remove+0xfd/0x260
[ 94.724128][ T5303] corsair_remove+0xfd/0x260
[ 94.726073][ T5303] ? __pfx_corsair_remove+0x10/0x10
[ 94.728299][ T5303] hid_device_remove+0xc5/0x1c0
[ 94.730282][ T5303] ? __pfx_hid_device_remove+0x10/0x10
[ 94.732751][ T5303] device_release_driver_internal+0x48b/0x880
[ 94.735384][ T5303] bus_remove_device+0x444/0x560
[ 94.737672][ T5303] ? __pfx_bus_remove_device+0x10/0x10
[ 94.740153][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.742748][ T5303] device_del+0x524/0x8f0
[ 94.744623][ T5303] ? __pfx_device_del+0x10/0x10
[ 94.746851][ T5303] hid_destroy_device+0x6b/0x1b0
[ 94.749000][ T5303] usbhid_disconnect+0x9f/0xc0
[ 94.751103][ T5303] usb_unbind_interface+0x295/0x9f0
[ 94.753349][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.755957][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.758264][ T5303] ? __pfx_usb_unbind_interface+0x10/0x10
[ 94.760681][ T5303] device_release_driver_internal+0x4f5/0x880
[ 94.763164][ T5303] bus_remove_device+0x444/0x560
[ 94.765332][ T5303] ? __pfx_bus_remove_device+0x10/0x10
[ 94.767675][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.769998][ T5303] device_del+0x524/0x8f0
[ 94.771985][ T5303] ? irqentry_exit+0x218/0x910
[ 94.774463][ T5303] ? __pfx_device_del+0x10/0x10
[ 94.776855][ T5303] usb_disable_device+0x3d4/0x8d0
[ 94.779130][ T5303] usb_disconnect+0x346/0x9a0
[ 94.781353][ T5303] hub_event+0x1bbb/0x4d30
[ 94.783362][ T5303] ? do_raw_spin_unlock+0x4d/0x200
[ 94.785916][ T5303] ? register_lock_class+0x31/0x2e0
[ 94.788270][ T5303] ? __pfx_hub_event+0x10/0x10
[ 94.790399][ T5303] ? rcu_is_watching+0x16/0xb0
[ 94.792548][ T5303] ? process_scheduled_works+0x97a/0x1630
[ 94.795016][ T5303] process_scheduled_works+0xc3d/0x1630
[ 94.797236][ T5303] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.799525][ T5303] ? assign_work+0x3cf/0x5d0
[ 94.801423][ T5303] worker_thread+0xa47/0xfb0
[ 94.803807][ T5303] kthread+0x38b/0x480
[ 94.805785][ T5303] ? __pfx_worker_thread+0x10/0x10
[ 94.807751][ T5303] ? __pfx_kthread+0x10/0x10
[ 94.809729][ T5303] ret_from_fork+0x514/0xb70
[ 94.811651][ T5303] ? __pfx_ret_from_fork+0x10/0x10
[ 94.813612][ T5303] ? __switch_to+0xc89/0x1420
[ 94.815600][ T5303] ? __pfx_kthread+0x10/0x10
[ 94.817466][ T5303] ret_from_fork_asm+0x1a/0x30
[ 94.819462][ T5303]
[ 94.820793][ T5303] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.823751][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 94.827443][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.831426][ T5303] Workqueue: usb_hub_wq hub_event
[ 94.833429][ T5303] Call Trace:
[ 94.834762][ T5303]
[ 94.835962][ T5303] vpanic+0x56d/0xa60
[ 94.837561][ T5303] ? __pfx__printk+0x10/0x10
[ 94.839355][ T5303] ? __pfx_vpanic+0x10/0x10
[ 94.841272][ T5303] ? is_bpf_text_address+0x292/0x2b0
[ 94.843314][ T5303] ? is_bpf_text_address+0x26/0x2b0
[ 94.845392][ T5303] panic+0xc5/0xd0
[ 94.846992][ T5303] ? __pfx_panic+0x10/0x10
[ 94.848939][ T5303] ? ret_from_fork_asm+0x1a/0x30
[ 94.851077][ T5303] __warn+0x315/0x4c0
[ 94.852746][ T5303] ? debug_print_object+0xec/0x230
[ 94.854948][ T5303] ? debug_print_object+0xec/0x230
[ 94.857184][ T5303] __report_bug+0x276/0x570
[ 94.859121][ T5303] ? debug_print_object+0xec/0x230
[ 94.861431][ T5303] ? __pfx___report_bug+0x10/0x10
[ 94.863654][ T5303] ? kasan_save_free_info+0x40/0x50
[ 94.865941][ T5303] ? __kasan_slab_free+0x5c/0x80
[ 94.868113][ T5303] ? kfree+0x1c5/0x650
[ 94.869794][ T5303] report_bug_entry+0x19b/0x290
[ 94.871773][ T5303] ? debug_print_object+0x18a/0x230
[ 94.873779][ T5303] ? debug_print_object+0x18f/0x230
[ 94.875930][ T5303] handle_bug+0xce/0x200
[ 94.877692][ T5303] exc_invalid_op+0x1a/0x50
[ 94.879613][ T5303] asm_exc_invalid_op+0x1a/0x20
[ 94.881758][ T5303] RIP: 0010:debug_print_object+0x18a/0x230
[ 94.884213][ T5303] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 5d bb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 a5 8d 0b 48 83 c4 10 5b 41 5c
[ 94.892243][ T5303] RSP: 0018:ffffc9000ec6efd0 EFLAGS: 00010246
[ 94.894796][ T5303] RAX: 1ffffffff1816f44 RBX: dffffc0000000000 RCX: 0000000000000000
[ 94.898086][ T5303] RDX: ffffffff8c6dd940 RSI: ffffffff8c6dd3c0 RDI: ffffffff9085b190
[ 94.901248][ T5303] RBP: ffffffff8c6dd940 R08: ffff8880517f7ac8 R09: ffffffff8c0b8c40
[ 94.904661][ T5303] R10: dffffc0000000000 R11: ffffffff818f8860 R12: 0000000000000000
[ 94.907914][ T5303] R13: ffffffff9085b190 R14: ffff8880517f7ac8 R15: ffffffff8c0b7a20
[ 94.911155][ T5303] ? __pfx_work_debug_hint+0x10/0x10
[ 94.913449][ T5303] ? __pfx_k90_record_led_work+0x10/0x10
[ 94.915681][ T5303] ? __pfx_k90_record_led_work+0x10/0x10
[ 94.917720][ T5303] debug_check_no_obj_freed+0x2e3/0x450
[ 94.919879][ T5303] kfree+0x13e/0x650
[ 94.921387][ T5303] ? corsair_remove+0xfd/0x260
[ 94.923296][ T5303] corsair_remove+0xfd/0x260
[ 94.925122][ T5303] ? __pfx_corsair_remove+0x10/0x10
[ 94.927059][ T5303] hid_device_remove+0xc5/0x1c0
[ 94.928941][ T5303] ? __pfx_hid_device_remove+0x10/0x10
[ 94.931089][ T5303] device_release_driver_internal+0x48b/0x880
[ 94.933545][ T5303] bus_remove_device+0x444/0x560
[ 94.935571][ T5303] ? __pfx_bus_remove_device+0x10/0x10
[ 94.937747][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.939910][ T5303] device_del+0x524/0x8f0
[ 94.941630][ T5303] ? __pfx_device_del+0x10/0x10
[ 94.943589][ T5303] hid_destroy_device+0x6b/0x1b0
[ 94.945655][ T5303] usbhid_disconnect+0x9f/0xc0
[ 94.947607][ T5303] usb_unbind_interface+0x295/0x9f0
[ 94.949723][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.952098][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.954524][ T5303] ? __pfx_usb_unbind_interface+0x10/0x10
[ 94.957010][ T5303] device_release_driver_internal+0x4f5/0x880
[ 94.959620][ T5303] bus_remove_device+0x444/0x560
[ 94.961794][ T5303] ? __pfx_bus_remove_device+0x10/0x10
[ 94.964097][ T5303] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.966560][ T5303] device_del+0x524/0x8f0
[ 94.968350][ T5303] ? irqentry_exit+0x218/0x910
[ 94.970354][ T5303] ? __pfx_device_del+0x10/0x10
[ 94.972310][ T5303] usb_disable_device+0x3d4/0x8d0
[ 94.974619][ T5303] usb_disconnect+0x346/0x9a0
[ 94.976774][ T5303] hub_event+0x1bbb/0x4d30
[ 94.978769][ T5303] ? do_raw_spin_unlock+0x4d/0x200
[ 94.980982][ T5303] ? register_lock_class+0x31/0x2e0
[ 94.983348][ T5303] ? __pfx_hub_event+0x10/0x10
[ 94.985500][ T5303] ? rcu_is_watching+0x16/0xb0
[ 94.987590][ T5303] ? process_scheduled_works+0x97a/0x1630
[ 94.990129][ T5303] process_scheduled_works+0xc3d/0x1630
[ 94.992601][ T5303] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.995192][ T5303] ? assign_work+0x3cf/0x5d0
[ 94.997233][ T5303] worker_thread+0xa47/0xfb0
[ 94.999175][ T5303] kthread+0x38b/0x480
[ 95.000976][ T5303] ? __pfx_worker_thread+0x10/0x10
[ 95.003275][ T5303] ? __pfx_kthread+0x10/0x10
[ 95.005430][ T5303] ret_from_fork+0x514/0xb70
[ 95.007562][ T5303] ? __pfx_ret_from_fork+0x10/0x10
[ 95.009909][ T5303] ? __switch_to+0xc89/0x1420
[ 95.012230][ T5303] ? __pfx_kthread+0x10/0x10
[ 95.014403][ T5303] ret_from_fork_asm+0x1a/0x30
[ 95.016669][ T5303]
[ 95.018495][ T5303] Kernel Offset: disabled
[ 95.020387][ T5303] Rebooting in 86400 seconds..