program:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)
[ 94.164088][ T5279] Bluetooth: hci0: command tx timeout
[ 94.494534][ T5302] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.645671][ T5302] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[ 94.647561][ T5302] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 94.647576][ T5302] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 94.647594][ T5302] usb 5-1: config 0 interface 0 has no altsetting 0
[ 94.647614][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.683789][ T5302] usb 5-1: config 0 descriptor??
[ 95.133883][ T5302] saitek 0003:06A3:0CD0.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input0
[ 95.718070][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI
[ 95.723597][ C0] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[ 95.727095][ C0] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.731105][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.735200][ C0] RIP: 0010:saitek_event+0x51/0x2b0
[ 95.737505][ C0] Code: a8 f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 cd 58 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 b0 58 1b f9 49 8b 06 48 89 04 24
[ 95.745585][ C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010006
[ 95.748174][ C0] RAX: 0000000000000003 RBX: ffff888032c25d88 RCX: ffff888034392580
[ 95.751531][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88801fbcc000
[ 95.754915][ C0] RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000
[ 95.758657][ C0] R10: ffff888032c25da8 R11: ffffffff891f4740 R12: ffffffff910c2fe8
[ 95.762089][ C0] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88801fbcc000
[ 95.765479][ C0] FS: 00007f20045ab6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 95.769972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.772918][ C0] CR2: 000055fe7072e168 CR3: 000000001485b000 CR4: 0000000000352ef0
[ 95.776326][ C0] Call Trace:
[ 95.777792][ C0]
[ 95.779082][ C0] ? hid_process_event+0x18f/0x620
[ 95.781354][ C0] hid_process_event+0x436/0x620
[ 95.783567][ C0] ? hidraw_report_event+0x37e/0x3a0
[ 95.785896][ C0] ? __pfx_saitek_event+0x10/0x10
[ 95.788204][ C0] hid_report_raw_event+0xf6a/0x1900
[ 95.790693][ C0] __hid_input_report+0x454/0x580
[ 95.793242][ C0] ? __pfx_saitek_raw_event+0x10/0x10
[ 95.795566][ C0] hid_ctrl+0x204/0x580
[ 95.797410][ C0] ? usb_anchor_suspend_wakeups+0x3b/0x50
[ 95.799878][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 95.802196][ C0] dummy_timer+0xa91/0x4cc0
[ 95.804167][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 95.806380][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 95.809101][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 95.811231][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 95.813322][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 95.815408][ C0] handle_softirqs+0x226/0x860
[ 95.817271][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 95.819343][ C0] __irq_exit_rcu+0xcb/0x220
[ 95.821317][ C0] irq_exit_rcu+0x9/0x30
[ 95.823028][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 95.825267][ C0]
[ 95.826463][ C0]
[ 95.827635][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.830119][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 95.832667][ C0] Code: f7 e8 1d 90 b6 f5 f7 c3 00 02 00 00 74 05 e8 20 f0 e2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 8d a7 f5 65 48 8b 05 0c 40 a9 08 48 85 c0 74 18 5b 41 5e e9
[ 95.839677][ C0] RSP: 0018:ffffc9000e087a08 EFLAGS: 00000206
[ 95.841796][ C0] RAX: 0000000000000002 RBX: 0000000000000287 RCX: 8000000000000001
[ 95.844674][ C0] RDX: 0000000000000006 RSI: ffffffff8e46c494 RDI: 0000000000000001
[ 95.848003][ C0] RBP: dffffc0000000000 R08: ffffffff917a967f R09: 1ffffffff22f52cf
[ 95.851408][ C0] R10: dffffc0000000000 R11: fffffbfff22f52d0 R12: ffff88801fa26100
[ 95.854744][ C0] R13: 0000000000000000 R14: ffff88801fa26100 R15: 0000000000000287
[ 95.858113][ C0] __mod_timer+0xb53/0xed0
[ 95.860118][ C0] schedule_timeout+0x14d/0x2c0
[ 95.862267][ C0] ? __pfx_schedule_timeout+0x10/0x10
[ 95.864693][ C0] ? __pfx_process_timeout+0x10/0x10
[ 95.867124][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.869776][ C0] ? prepare_to_wait_event+0x436/0x480
[ 95.872208][ C0] usbhid_wait_io+0x248/0x430
[ 95.874311][ C0] ? __pfx_usbhid_wait_io+0x10/0x10
[ 95.876533][ C0] ? __pfx_autoremove_wake_function+0x10/0x10
[ 95.879193][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80
[ 95.881617][ C0] usbhid_init_reports+0x114/0x270
[ 95.883763][ C0] hiddev_ioctl+0x8f8/0x16f0
[ 95.885816][ C0] ? __pfx_hiddev_ioctl+0x10/0x10
[ 95.888053][ C0] ? __fget_files+0x2a/0x420
[ 95.890151][ C0] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.892350][ C0] ? __pfx_hiddev_ioctl+0x10/0x10
[ 95.894549][ C0] __se_sys_ioctl+0xfc/0x170
[ 95.896592][ C0] do_syscall_64+0x166/0x520
[ 95.898636][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.901439][ C0] ? clear_bhb_loop+0x70/0xc0
[ 95.903542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.906135][ C0] RIP: 0033:0x7f200379e1d9
[ 95.908073][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.916339][ C0] RSP: 002b:00007f20045aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.919942][ C0] RAX: ffffffffffffffda RBX: 00007f2003a26090 RCX: 00007f200379e1d9
[ 95.923431][ C0] RDX: 0000000000000000 RSI: 00000000c018480d RDI: 0000000000000004
[ 95.926950][ C0] RBP: 00007f2003835888 R08: 0000000000000000 R09: 0000000000000000
[ 95.930349][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.933809][ C0] R13: 00007f2003a26128 R14: 00007f2003a26090 R15: 00007ffc1783c6e8
[ 95.937280][ C0]
[ 95.938643][ C0] Modules linked in:
[ 95.940382][ C0] ---[ end trace 0000000000000000 ]---
[ 95.942684][ C0] RIP: 0010:saitek_event+0x51/0x2b0
[ 95.942706][ C0] Code: a8 f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 cd 58 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 b0 58 1b f9 49 8b 06 48 89 04 24
[ 95.942715][ C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010006
[ 95.942726][ C0] RAX: 0000000000000003 RBX: ffff888032c25d88 RCX: ffff888034392580
[ 95.942735][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88801fbcc000
[ 95.942743][ C0] RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000
[ 95.942750][ C0] R10: ffff888032c25da8 R11: ffffffff891f4740 R12: ffffffff910c2fe8
[ 95.942757][ C0] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88801fbcc000
[ 95.942765][ C0] FS: 00007f20045ab6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 95.942775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.942783][ C0] CR2: 000055fe7072e168 CR3: 000000001485b000 CR4: 0000000000352ef0
[ 95.942820][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 95.983206][ C0] Kernel Offset: disabled
[ 95.984908][ C0] Rebooting in 86400 seconds..