last executing test programs: 4.119895686s ago: executing program 0 (id=1): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4a100) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x0, 0xc0, 0x12, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "5690"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800005, 0x1, 0x8, 0x3}, [@call_mgmt={0x4, 0x24, 0x1, 0x2, 0xa}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x6, 0xa, [0x2]}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc2, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x89, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0x6, 0x6, 0x3, 0x534e13a0faf3a481, 0xcf}, 0x71, &(0x7f0000000c00)=ANY=[], 0x2, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x7c63}}, {0x4, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x80c}}]}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x8, 0x1f, 0x6, 0x8, "a90b75f590d649fca0004738719387353bf489920cc5506e18b3ce5e95ff2f32"}) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x8, 0x1f, 0x6, 0x8, "a90b75f590d649fca0004738719387353bf489920cc5506e18b3ce5e95ff2f32"}) 3.955992475s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x4, 0x4000) read$hidraw(r1, &(0x7f0000000140)=""/159, 0x9f) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x45, {0x45, 0x22, "61639c545d2ce9daa7602630c686377369efa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7b274"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.572830194s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000588c4b10f0fff0ff0c630102030109021b000100000000090463000108b1c60009055121"], 0x0) 3.490567804s ago: executing program 1 (id=2): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x1357f60cf9e07b9f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x32e, [{{0x9, 0x2, 0xb78022b9e72c3477}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xbb, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x7, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xf9}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x6, 0x2, [0x7, 0x6], 0x80}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0x8, 0x8, 0x9, 0x9, 0x2], 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfe, 0xf8, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0xa, {0x7, 0x25, 0x1, 0x2, 0x0, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6a, 0x2, "9f8e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7f, 0x81, "caf6", "7011"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x0, "f0", 'j'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x80, 0xbd, {0x7, 0x25, 0x1, 0x81, 0xca, 0x5}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x2, 0x1, 0x8, 0x40, 0x3}, 0x55, &(0x7f00000003c0)={0x5, 0xf, 0x55, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x5, 0xff00, 0xffc0, [0xc000, 0xff3f17, 0x101feb0, 0x7f4000, 0x3f]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0xc, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0xc0, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xe100, 0xbf1e, [0x30, 0x8, 0x3f00, 0xff0000]}]}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x414}}, {0x21, &(0x7f00000004c0)=@string={0x21, 0x3, "3a9dc9a5c72e77a2528a9c52bbed4a267ab17b69a9303c611a4f3511ec2c16"}}, {0xab, &(0x7f0000000500)=@string={0xab, 0x3, "34bf438797e361af429de681413a09c28026227476c733864dab25905b63365f0b9b3dbb8f741eeeaa574435f8558678a6ce3f82680829c8b7db8b162b82e25c950dab38e7e5f189cd73b7d391ca4edd434c150fe5451df69659d2a7aa49702b27e320ef839d1ae27c069fb5c150c3274d4748a1a07365155b5162bb1242b4ebe79e01961a795df247e155200b6c0aea156209ce13abc9d031d1b1748ee2853c505dcf52a7422186e0"}}, {0xf3, &(0x7f00000005c0)=@string={0xf3, 0x3, "eef5ca28e688ff062c0b23ee5c558e4bd694d678e1e21b639fce2f70510982b7c203b8edec40e77b5be36ebc4c4132f2711c5d3d6bf5da30d0372f2a1bd03548204ac554477829657a1dca034a9b06a75f007c7c516debd8c581de6a915cf45cfa35ab0165a2b5504a439d18e75185594eea1886bdaffb9cdeb341c1cfe16a37e291d57af502e21139f73f01d3aa35ddc478d6c900d965e1e6fb55f57dcc5a457c7824fcb0c58c75163a39da4cdf43d039d3f00b59036737ae80aa4793140761784bb4571ea2542fb6f832f3117c0b9c3565da35eaf7cc53d741626c3b0733415dd45f0c6d02cd305bda34beae3987181d"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x7d, &(0x7f0000000700)=@string={0x7d, 0x3, "30d4460ed33d6f34f76e9eba8e414bb201f922273b78d1b6ff534bbb4b479db034dc3aefde0996a86032a07e3d56cd437e22d0d1de3ec775b8fe14f0b8a6b0c2855fee43b0880cf2517f4c6ba4cd2e8f97819af1b247ae8c08ed12c91aadd834dbf0950d5d932684f3ab604c8c7fa8e9be9d9eaa741e309c5d4492"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0xb8, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xc, 0x5, 0x1, {0x22, 0x3fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0xa, 0xa, 0x10, 0xc}, 0x59, &(0x7f0000000140)={0x5, 0xf, 0x59, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0xf, 0xcf}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x402, 0xee00, 0x0, [0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "8147240271ff133133f3e44076ea5d38"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0xd5, 0x2, 0x4, 0xf1e, 0x0, [0xff00c0, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x6, 0x10}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3401}}]}) 3.449206034s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x288, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x6, 0x42, 0x26, 0x8, 0x424, 0xc001, 0xd174, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x276, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x6, 0xfa, 0xfb, 0xcd, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x66, 0x7, 0x7, [@generic={0x68, 0x11, "c11debd5d9e78ecc238172e0e8c6bba59a37fa01764684ffa4263cd6c80c49304e2dd5d1dff95690ad5088e16f23784a4f657c7f02257b7a2a7b28efc65952baa06131a5b52b2dc1544a69b95d545b6acb4238d87bd2fc762b31e44d48487b08de547b9b7565"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x1}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x3, 0x2, 0x9}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x0, 0x0, [@generic={0x9e, 0x23, "950a6d9daa0fd620f881c0ce5a0cd74e2c5f5037de3b086d31bdb8975e7c05bf99430067755afb48641ebaf05d7dd6dace95c121e2d3a3cda5bbd371c5ea0ae071a2397a23fa66a0550fc2adfaf392789bba5314ad89aeda825cdba0e653392a640d863793b86884fdc57e6f3b3bf60c799eea7d8521e09d6baf0b810a987251bc1b0126c1c4c1ff423e652f77275ff133bce5c531e0a9b943f42264"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xc7, 0x81, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x93, 0x7}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0xf, 0x6, 0xc, [@generic={0xb8, 0xa, "f7ca5c4cd5e9b694ad05cf60251475ec5706125f84297406aeb19514c5dd9f4456651670373de7eb320631fe9a39d4d1c3896a740264453bde062625c63fd8d686f70828785dfe91ef8e2f7365724c4d54c517d071c51205d5d19790e12a457f35c4c6237c3a8c43f289ec1ac71cba234bb6eeef1c7dd53b5a85230a3d5caefdaa6790ab67c200d85d627535805fc0f76f5fa58636c0d2867718671c1530df066ad62fcafb4b1d898857e5f0526f841897706f14b7dd"}]}}, {{0x9, 0x5, 0x3, 0x18, 0x200, 0x9, 0x8, 0x7f, [@generic={0x62, 0x21, "5deb47244fbdfdb8815affd8dabd27fd4573660027de3d19e8c38bcc65b3581b23c9d146b8c5096371a91d553516665bda5372ecb9c3bb764ca9c19179ff2160970f3ecaeb5e9bd1d039e79a2523158c0cefdeb2e7da735a4d24eedd7ccdf1e1"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0000006bb75b5d22a97db054f393c22cee30f7f1f75db2210b19bf74b5de3feabb6c514c90925bdd997b9b9f6f191bc28d1903351fd6bf83a05f4bcd64ef413cc03362354a9c44bce72de2e6947467c1ee223c20749b406798ff5798603cb4f130728e9e7982f777e99c7e94bc8671168dadce9a20dd10d96a58d0df623adeb279cdc7ce6b0b71b6628117b3a4c3e8d9c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xae, 0x8c, 0xd8, 0x10, 0xbda, 0x2005, 0xa678, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 2.68810279s ago: executing program 3 (id=6): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xc0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x563}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6, 0xc}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x7a, 0x7, 0x40, 0xc}, 0x10, &(0x7f0000000740)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x9, 0x9, 0x40, 0x6}]}, 0x5, [{0xaf, &(0x7f0000000780)=@string={0xaf, 0x3, "ff237cc71a724a1e8b1fa999c7383ad5fa9ee792bca79da62a9ccf1c5393240b0b97709321255e11f9961a650468e78efae67974a22ec33eff4f7f5148c9579cd0824e30b4e373386a3381b98ac40e090c85bb0f263b894e8a0124804370b05cb2bbbf231f1dfcf5d9fe83741dff6d8a36a11290d48984c09e1acd122849874a3413575c2c221e796b95a1c6e2b8ef3c1de10b8d29053c1706483e09ad602887f2ed3a03072203429e2471189d"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40d}}, {0x101, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0xd6, &(0x7f0000000a80)=@string={0xd6, 0x3, "d398fe7f9f2700352af21cdb5eeec6317d30ee5d7156640718348e734eaa44793f5785182f1da2e243f62f54588f30ff1eca8a29de0d73139ed76ac6f2e32e7dd0e59988486212257e910cc92f9eef2faf296ff656b36d1e13dab604a3e9bf69d7d54703acdbb0a6b1078e9226d49e9868911095404dc82d3cc20b0e2356e02320bff540761441ae58ebed778b692913a6420682fb8f7c0d2f906afaee8a169719a8073ed5b1e7285de1d08b30dbec02f578a1a582bad74daff14e7d1e0284e02695ae3780a07a8cef24bb7427dd742dff9ae2c1"}}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) syz_usb_connect$uac1(0x2, 0x7a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x2, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x6, 0x9f, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x0, 0x3, {0x7, 0x25, 0x1, 0x80, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x6, 0x81, {0x7, 0x25, 0x1, 0x3, 0x1}}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c1010"], 0x0) syz_usb_connect(0x2, 0x3f8, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x2b, 0x36, 0xaa, 0x40, 0x1266, 0x1006, 0x7bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e6, 0x3, 0x80, 0x9d, 0xe0, 0x4, [{{0x9, 0x4, 0xc9, 0x2, 0x8, 0xff, 0xfb, 0xed, 0xc, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0xc0, 0x6, "34202263ba55be"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x93, 0x3, 0x80, 0x5d, "", "e41797"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x4, 0x6, "2e8812eea035f2"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x9, 0x4}}, {{0x9, 0x5, 0xc, 0x1f, 0x58, 0xe, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x80, 0x39, 0x1, [@generic={0x84, 0x23, "b7a70070f88992f7bbbdced01e8f46368d4156018e973b2f930f3251c6dfc0779d3b8a2cfa2876cc4365d28c7608750aab5f7d9f3076607414406391526070c57e7696d3616fee1fbeab264c6c39880cd022f28193c585b786cfbf98718362d96632fa89ee83ee0de8e57ef823e40b9d7e863e51bdec7dd0fd3f77be04d4042f9fec"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x43, 0x5, 0x0, [@generic={0xf5, 0x11, "d9794e003ec16017489bb3032d1bef2e35f98c642f4f73da9aac7b34a7682f97d24d10958f3f95868ed212f52ac2cab7cd572eb70cd69e682975c23f7c41905b6462b1f2c3fdf05e95bfd9b9bac38709a7f0196a850003206a52508b469fd1faad790fa64124c02ed31d539a7ef9f4c3be271f8741e1e3d1e56652a582969d4d4ab33ef2089c2284e911956393b3cab14443e09249aec613b2ddb88f4730dec44cd3d621fdbffd4f029eea4609a9978e0866fed4d3b782fbcaec4f47cf3b91a1e10c0a86d02b1566425c1d7701914b3c72e9ed1025f12aa30368ce4708e59f5bdbcdcb860fee0e276b64046b06ffeeda04ef81"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xc, 0x6, 0x5, [@generic={0x13, 0x23, "b4c90c295f53ec1e733ec4cb8f9f290580"}, @generic={0x84, 0x22, "8c4fe461ac9ac5befff0d363eba5b487db6bf7a98029fabe3f10424218ff4dbb2f7ac32c68bd552e662961729cbd06da1368c54816b2df535e03fac2a8da61f8f522f89a7ce63981bc6bcbf79e1e898e6aef05a70b2ab976dcad1ac07fd0be9d59c2235b3c2fb05869899e76a9d1a8eda87cc64c8a656e1422d541223feb9c931cf1"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0xa1, 0x1, 0x6f}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x4}]}}]}}, {{0x9, 0x4, 0xba, 0x0, 0x0, 0x4c, 0x22, 0xf8, 0x80, [@hid_hid={0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xebe}}]}}, {{0x9, 0x4, 0x5, 0xb, 0x9, 0x19, 0xa9, 0xdf, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0xd31}}], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0x0, 0x1e}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xf0, 0x1, 0x4, [@generic={0x8e, 0xf, "f01e584937c40c6ac1d005330073884c8e23987234bc69c3666a6e1e150b778411f77e1624421d61add5cff204b758bd03529741f4699b42490a15475512fc312b8e7a3ded567bd4420719b8acf4ce44886fdd30e0a68e0a1155b0a42f01b0cceab239ed3e9f9a828126034bbcd9f954eca26a749e5e39568b2e50355675f09f8ebe8f06a19d95a0cdecbc9e"}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x0, 0xfb, 0xfe}}, {{0x9, 0x5, 0x8, 0x1f, 0x400, 0x0, 0xac, 0x1}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x2, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xdc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xcea18a29358962a0, 0xb, 0x1}]}}, {{0x9, 0x5, 0x3, 0x2, 0x410, 0xd, 0xc0}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x0, 0x1b, 0xd}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x9, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf7, 0x3}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7f, 0x2e, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8000}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x111, 0x1, 0x8, 0x6, 0x60, 0x2}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x51, 0x15, 0x1, 0xf}]}, 0x2, [{0xb2, &(0x7f0000000c80)=@string={0xb2, 0x3, "3ea54c9e2f65826f0c17bfdd34260a12fdb7c2b8bf65b7bce69ff65c550b0f3a5d5e46d6aad7d01433b2d05cf912e3e0eb65ff9639d095faa53575b8d8b1776db19039ac98a2032a0849a683745968dfa3e083cf7e4d2dfd5333c5101fd29f48913eac4e5a78d6e7e7e0d4a929cdd77ce0359abd0a1ee4e702678562bc5e3bd76434d1d1be83fdbe2ef4b739b20e70cbfaf39e2bc20fb8d2523820b12c631f1555a3d4532477867e9acc1f0015032ad6"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x427}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x9a, 0xb, 0x20, 0x1004, 0x6000, 0xca96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000500)=0x400000) 2.5623654s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000840)=""/150) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, &(0x7f00000001c0)={0x40, 0xb, 0xd4, {0xd4, 0xf, "5e081f29104061b0849cd31d14433ceec8afd0344871b4cca3dd36ee9677f3608259741d355606f17de2375d905c6a25b9d01d45659e98bc597aa46e2481df676717d5186e67602a0e99216f2d5e231c930c26e8dcddd81fcb1014c1795a1d57bad715efc9a1541332c1cf42f7ccd1cf7504188bcb199fbf66608e0f822ff4be913e2d08f01253de62a9b06ee5cad1468f661958df0031d39caba8054dee4b94ead2a7956278159f7137b6e3127126f908d3f6d030de71a4e291e2a4c47ecce2ac2dc527810a6169b7ca46060cedc9149739"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="7c070000000000005ae7660d7b2d7eb8a2debd7e0c16a355f74fc48c77b5ab80314b9d080ee50ce2fb8d126098146236925d28f6ded4314bc9f1db4a300a07d5211a45b170932434c0cd12afa7e285156a78025b784fca1d7f7b4f2bcb9d99438e587849419fd9b67f3c50ef0a48c0a0a3"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000040ef0e010000000000000109020101000000000000040000010300480105810300"/54], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x8f, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0xea, 0x99, 0x6d, 0x10, 0x2001, 0x7e16, 0xc090, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x12, 0xd0, 0x32, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1523"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xce06, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x85a4}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x5, 0x7f, 0x0, 0x200, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7, 0x1000}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'eQ\''}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x9, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x1d, 0x8, 0x61}]}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_connect$uac1(0x6, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x1, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x2, 0x6, "c49da9e50f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0xf9, 0x7, "0ccf", "d176"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1f, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0xe, 0x7, {0x7, 0x25, 0x1, 0x81, 0x61, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x6, 0x1f, {0x7, 0x25, 0x1, 0x2, 0x4, 0x1ff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xf7, 0x8, 0x1, 0xff, 0x6}, 0xdf, &(0x7f00000004c0)=ANY=[@ANYBLOB="050fdf8604b0100a18e84a41609c5e0967cd0078fca07937d0b60999e03f4921d1ba66f43c7c29cc19739e7aed253856df0be47726255d369702a970554769e03902ba595c33ce317db9f160d4d1579f5e372959e780c643e0770b1d3ecc5456d246f65c9b778b866ef0a7f4325eb20c5fa88e517a0a4679c39dcc8c437390bab7cf077fcc1121b8b07a9aab2451fc8f84ef12c7c9a992cb9952087e3c0ec2d91c30d33e749d92f18c7f24ed95cafdebf25ff7c6ab141004101c1dfa4f17247ad69ce1607694e135e00b1001048800000bff077f506204f643ba929e286766efe5680000000000000000"], 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b0a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe0, 0x51, 0x8a, 0x10, 0x846, 0x9030, 0x5442, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xde, 0x57, 0x4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x3}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00), 0xfffffffffffffffc, 0x84640) ioctl$EVIOCGMASK(r3, 0x5460, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000340), 0x7, 0x10c0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000380)) 1.958491658s ago: executing program 2 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xbc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x7c, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0xb, 0x40, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6ed235b59098"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x800, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x800, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xa8, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xe, 0xa}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x80, 0x7, 0x0, 0x10, 0x6}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x9}]}, 0x9, [{0xfffffffffffffe5e, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}, {0x33, &(0x7f0000000200)=@string={0x33, 0x3, "d23ea568ecd26fb12565fc48097036b3ed83fff28eadc6aee4ae33ac76929a16a2e2594818540621f57e7887b50508b054"}}, {0x57, &(0x7f00000000c0)=@string={0x57, 0x3, "fa32445360d5c7fb8afa6311342a8091fb641cbf4021d5de0913399fd223e1a1ca86c68daa159733c8dabcc6f1f55f84fd287535f58784dc7d330230e282512b3334ea4a2bb57e9524c1c9748d02815b4c58de1736"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0xe5, &(0x7f0000000c80)=@string={0xe5, 0x3, "caedab4529aebe8751351c17050682cccf17a18f124fd2f598aec153a6e34b89ceb4ee4debc7f8c954f59b771e4c766838a765113cdc78557978ccce6756a31bda053a99b07323b72b3d9d8ffe7f086ba45bc959f35925a1c75fe73197e656b9e898968084aae992bff5fa8f28420d323fd8080b72d9cf2c577b80dd0b8c15f8f29215c888b366575ae00d5edea5e3b0efc6d4169838200823733faf26da07809d9ee5120f3e89c1d21c0116cab18d7739f3800166a22ae517f3d03c242703efef182e123a88dcdba7779719de06eea38649fcc8a28bdd9c1a224bee18867c235f1d99"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x20, 0x9, 0xef, {0xef, 0x30, "783594930f9bb22605d424e6c1968db4fa8cf6012371be65ee0b9f14a3ee72de0d54f6a2b74cfb5cf247fedf0c5c4874528b21474d5a412a1c112a5848330e86edf04e36c973732dab3d049e6193842ce3273f0fa59aa36e3388f2603486cf0b9ef2f70e718059e0465011cb47959b2d9e670106cc41abf8ec8c00a6183c3e25d2ead23af19b81211e2b1391d737b7641ecec3d219979df1b2f7f4c0f687f1f5b488eacdf253056f9af28465f54ff54b1d4f12701e0d3a07848a9c98af0a7ea219511d180aa3175ad63e598ef216330218b62c1c4e300cc5ea1b0d27bfc398a1a101694482e3d821fd90e38fd8"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000600)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x8, 0x6}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1, 0x1, "ed1081c7", "acf3591e"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4f0d00cfc34220e9, 0x4, 0xff, 0x80, 0x3, 0x6}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x0, 0xc, 0x75, "9afe2564ffa0a5140bd0147227c721634e36d072245991334276ad235b35325e96f147a397dd22937ec4bacd07aa28e88202f50bfc280d9d7be5d14d94a48e58b008786cd2b2a7503e9ce81f9fab97ef0e8811c3147947271190059ac17f2f9019150df0ac0a80de91ac549a2210bded5072b01db9"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x96}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1000, 0x80, [0xee]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0xb, 0x2, "830a"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="20c4f3b9a95e"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "73fa"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xbc}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x7c, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0xb, 0x40, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6ed235b59098"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x800, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x800, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xa8, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xe, 0xa}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x80, 0x7, 0x0, 0x10, 0x6}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x9}]}, 0x9, [{0xfffffffffffffe5e, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}, {0x33, &(0x7f0000000200)=@string={0x33, 0x3, "d23ea568ecd26fb12565fc48097036b3ed83fff28eadc6aee4ae33ac76929a16a2e2594818540621f57e7887b50508b054"}}, {0x57, &(0x7f00000000c0)=@string={0x57, 0x3, "fa32445360d5c7fb8afa6311342a8091fb641cbf4021d5de0913399fd223e1a1ca86c68daa159733c8dabcc6f1f55f84fd287535f58784dc7d330230e282512b3334ea4a2bb57e9524c1c9748d02815b4c58de1736"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0xe5, &(0x7f0000000c80)=@string={0xe5, 0x3, "caedab4529aebe8751351c17050682cccf17a18f124fd2f598aec153a6e34b89ceb4ee4debc7f8c954f59b771e4c766838a765113cdc78557978ccce6756a31bda053a99b07323b72b3d9d8ffe7f086ba45bc959f35925a1c75fe73197e656b9e898968084aae992bff5fa8f28420d323fd8080b72d9cf2c577b80dd0b8c15f8f29215c888b366575ae00d5edea5e3b0efc6d4169838200823733faf26da07809d9ee5120f3e89c1d21c0116cab18d7739f3800166a22ae517f3d03c242703efef182e123a88dcdba7779719de06eea38649fcc8a28bdd9c1a224bee18867c235f1d99"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}]}) (async) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x20, 0x9, 0xef, {0xef, 0x30, "783594930f9bb22605d424e6c1968db4fa8cf6012371be65ee0b9f14a3ee72de0d54f6a2b74cfb5cf247fedf0c5c4874528b21474d5a412a1c112a5848330e86edf04e36c973732dab3d049e6193842ce3273f0fa59aa36e3388f2603486cf0b9ef2f70e718059e0465011cb47959b2d9e670106cc41abf8ec8c00a6183c3e25d2ead23af19b81211e2b1391d737b7641ecec3d219979df1b2f7f4c0f687f1f5b488eacdf253056f9af28465f54ff54b1d4f12701e0d3a07848a9c98af0a7ea219511d180aa3175ad63e598ef216330218b62c1c4e300cc5ea1b0d27bfc398a1a101694482e3d821fd90e38fd8"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000600)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x8, 0x6}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1, 0x1, "ed1081c7", "acf3591e"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4f0d00cfc34220e9, 0x4, 0xff, 0x80, 0x3, 0x6}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x0, 0xc, 0x75, "9afe2564ffa0a5140bd0147227c721634e36d072245991334276ad235b35325e96f147a397dd22937ec4bacd07aa28e88202f50bfc280d9d7be5d14d94a48e58b008786cd2b2a7503e9ce81f9fab97ef0e8811c3147947271190059ac17f2f9019150df0ac0a80de91ac549a2210bded5072b01db9"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x96}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1000, 0x80, [0xee]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0xb, 0x2, "830a"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="20c4f3b9a95e"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "73fa"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) 701.295963ms ago: executing program 1 (id=9): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x0, "12d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f00000024c8c8c503000000a8eb767e3aea"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d704046022196324f01020300090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) 415.877462ms ago: executing program 2 (id=10): syz_usb_disconnect(0xffffffffffffffff) 0s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "89991d7c", {0x1, 0x2, 0x3, 0xd}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="050f0f"]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 35.548855][ T29] audit: type=1400 audit(1734759123.057:80): avc: denied { mounton } for pid=2935 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.554028][ T2935] cgroup: Unknown subsys name 'net' [ 35.571775][ T29] audit: type=1400 audit(1734759123.057:81): avc: denied { mount } for pid=2935 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.599288][ T29] audit: type=1400 audit(1734759123.087:82): avc: denied { unmount } for pid=2935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.758562][ T2935] cgroup: Unknown subsys name 'cpuset' [ 35.766668][ T2935] cgroup: Unknown subsys name 'rlimit' [ 35.977430][ T29] audit: type=1400 audit(1734759123.487:83): avc: denied { setattr } for pid=2935 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.000945][ T29] audit: type=1400 audit(1734759123.487:84): avc: denied { mounton } for pid=2935 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.025897][ T29] audit: type=1400 audit(1734759123.487:85): avc: denied { mount } for pid=2935 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.056060][ T2938] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.065443][ T29] audit: type=1400 audit(1734759123.567:86): avc: denied { relabelto } for pid=2938 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.091166][ T29] audit: type=1400 audit(1734759123.567:87): avc: denied { write } for pid=2938 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.115111][ T2935] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.117650][ T29] audit: type=1400 audit(1734759123.617:88): avc: denied { read } for pid=2935 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.151479][ T29] audit: type=1400 audit(1734759123.617:89): avc: denied { open } for pid=2935 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.729116][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 45.729138][ T29] audit: type=1400 audit(1734759133.237:96): avc: denied { create } for pid=2945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.828682][ T29] audit: type=1400 audit(1734759133.237:97): avc: denied { write } for pid=2945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.849379][ T29] audit: type=1400 audit(1734759133.287:98): avc: denied { append } for pid=2826 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.871747][ T29] audit: type=1400 audit(1734759133.287:99): avc: denied { open } for pid=2826 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.894336][ T29] audit: type=1400 audit(1734759133.287:100): avc: denied { getattr } for pid=2826 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.917312][ T29] audit: type=1400 audit(1734759133.337:101): avc: denied { read } for pid=2945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.078968][ T29] audit: type=1400 audit(1734759158.587:102): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/root/syzkaller.ZBv5ZG/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.146001][ T29] audit: type=1400 audit(1734759158.607:103): avc: denied { mount } for pid=2950 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.168198][ T29] audit: type=1400 audit(1734759158.607:104): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/root/syzkaller.ZBv5ZG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.193533][ T29] audit: type=1400 audit(1734759158.617:105): avc: denied { mount } for pid=2950 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.215486][ T29] audit: type=1400 audit(1734759158.617:106): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/root/syzkaller.ZBv5ZG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.242230][ T29] audit: type=1400 audit(1734759158.617:107): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/root/syzkaller.ZBv5ZG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.269762][ T29] audit: type=1400 audit(1734759158.617:108): avc: denied { unmount } for pid=2950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.289431][ T29] audit: type=1400 audit(1734759158.637:109): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.403008][ T2950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.227311][ T29] audit: type=1400 audit(1734759159.737:110): avc: denied { read write } for pid=2950 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.296003][ T29] audit: type=1400 audit(1734759159.777:111): avc: denied { open } for pid=2950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.747393][ T41] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.886163][ T2805] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 72.939434][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.949545][ T41] usb 1-1: not running at top speed; connect to a high speed hub [ 72.959600][ T41] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 72.970160][ T41] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.983197][ T41] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.992456][ T41] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.001621][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.009715][ T41] usb 1-1: Product: syz [ 73.013909][ T41] usb 1-1: SerialNumber: syz [ 73.026209][ T41] cdc_ether 1-1:1.0: skipping garbage [ 73.031736][ T41] cdc_ether 1-1:1.0: skipping garbage [ 73.056253][ T2805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.066740][ T41] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 73.067419][ T2805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 73.086431][ T2805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 73.099380][ T2805] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 73.108637][ T2805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.140129][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.150223][ T2805] usb 3-1: config 0 descriptor?? [ 73.156672][ T5205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.206005][ T1122] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.227134][ T41] usb 1-1: USB disconnect, device number 2 [ 73.286196][ T5225] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.317763][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 73.326955][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.338687][ T9] usb 4-1: config 0 descriptor?? [ 73.356523][ T1122] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 73.366526][ T1122] usb 2-1: config 0 has no interfaces? [ 73.373013][ T1122] usb 2-1: config 0 has no interfaces? [ 73.379870][ T1122] usb 2-1: config 0 has no interfaces? [ 73.386621][ T1122] usb 2-1: config 0 has no interfaces? [ 73.393162][ T1122] usb 2-1: config 0 has no interfaces? [ 73.399924][ T1122] usb 2-1: config 0 has no interfaces? [ 73.407082][ T1122] usb 2-1: config 0 has no interfaces? [ 73.413547][ T1122] usb 2-1: config 0 has no interfaces? [ 73.421186][ T1122] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.430335][ T1122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.438442][ T1122] usb 2-1: Product: syz [ 73.442674][ T1122] usb 2-1: Manufacturer: syz [ 73.447378][ T1122] usb 2-1: SerialNumber: syz [ 73.454479][ T1122] usb 2-1: config 0 descriptor?? [ 73.456491][ T5225] usb 5-1: Using ep0 maxpacket: 8 [ 73.478167][ T5225] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 73.486458][ T5225] usb 5-1: config 0 has no interface number 0 [ 73.492790][ T5225] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 73.503747][ T5225] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 73.514943][ T5225] usb 5-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.525951][ T5225] usb 5-1: config 0 interface 29 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 73.536694][ T5225] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 73.549057][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.550571][ T5225] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=d1.74 [ 73.558245][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.566765][ T5225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.582741][ T5225] usb 5-1: Product: syz [ 73.587039][ T5225] usb 5-1: Manufacturer: syz [ 73.591726][ T5225] usb 5-1: SerialNumber: syz [ 73.601138][ T2805] aureal 0003:0755:2626.0001: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 73.611863][ T2805] aureal 0003:0755:2626.0001: unknown main item tag 0x6 [ 73.618980][ T2805] aureal 0003:0755:2626.0001: report_id 29495 is invalid [ 73.626116][ T2805] aureal 0003:0755:2626.0001: item 0 2 1 8 parsing failed [ 73.635133][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 73.641341][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.653693][ T9] usb 4-1: USB disconnect, device number 2 [ 73.666507][ T2805] aureal 0003:0755:2626.0001: probe with driver aureal failed with error -22 [ 73.677462][ T5225] usb 5-1: config 0 descriptor?? [ 73.686010][ T1122] usb 2-1: USB disconnect, device number 2 [ 73.800028][ T41] usb 3-1: USB disconnect, device number 2 [ 74.056033][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.075987][ T5225] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.116002][ T1122] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.227483][ T9] usb 4-1: config 0 has no interfaces? [ 74.234329][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.243516][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.251602][ T9] usb 4-1: Product: syz [ 74.255786][ T9] usb 4-1: Manufacturer: syz [ 74.260486][ T5225] usb 1-1: Using ep0 maxpacket: 32 [ 74.266577][ T1122] usb 2-1: too many configurations: 46, using maximum allowed: 8 [ 74.275204][ T5225] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 74.275719][ T1122] usb 2-1: config index 0 descriptor too short (expected 13431, got 76) [ 74.283445][ T5225] usb 1-1: config 0 has no interface number 0 [ 74.291873][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.299206][ T9] usb 4-1: config 0 descriptor?? [ 74.326718][ T5225] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 74.327641][ T1122] usb 2-1: config index 1 descriptor too short (expected 13431, got 76) [ 74.335917][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.344273][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.352320][ T5225] usb 1-1: Product: syz [ 74.352351][ T5225] usb 1-1: Manufacturer: syz [ 74.371372][ T5225] usb 1-1: SerialNumber: syz [ 74.371468][ T1122] usb 2-1: config index 2 descriptor too short (expected 13431, got 76) [ 74.384500][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.396015][ T1122] usb 2-1: config index 3 descriptor too short (expected 13431, got 76) [ 74.404433][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.421850][ T1122] usb 2-1: config index 4 descriptor too short (expected 13431, got 76) [ 74.430448][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.441952][ T1122] usb 2-1: config index 5 descriptor too short (expected 13431, got 76) [ 74.445359][ T5225] usb 1-1: config 0 descriptor?? [ 74.450409][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.452622][ T1122] usb 2-1: config index 6 descriptor too short (expected 13431, got 76) [ 74.460581][ T5225] smsc95xx v2.0.0 [ 74.466125][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.489029][ T1122] usb 2-1: config index 7 descriptor too short (expected 13431, got 76) [ 74.497521][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.509800][ T1122] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.519060][ T1122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.527227][ T1122] usb 2-1: Product: syz [ 74.531464][ T1122] usb 2-1: Manufacturer: syz [ 74.536176][ T1122] usb 2-1: SerialNumber: syz [ 74.541300][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.551610][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.561259][ T1122] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 74.563132][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.581542][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.593413][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.602654][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.612364][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.621670][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.631037][ T2805] usb 4-1: USB disconnect, device number 3 [ 74.653839][ T41] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 74.685988][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.856575][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 74.867781][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.874579][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 74.883993][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.902484][ T5225] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 74.913354][ T5225] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 74.924466][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.933268][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.945139][ T9] usb 3-1: config 0 descriptor?? [ 74.951753][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.968647][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.980629][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.989853][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.004098][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.014658][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.024146][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.033515][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.050398][ T5231] usb 2-1: USB disconnect, device number 3 [ 75.096010][ T2805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.143656][ T5225] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 75.154771][ T5225] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 75.266278][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.270255][ T2805] usb 4-1: config index 0 descriptor too short (expected 36, got 27) [ 75.275153][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.285602][ T2805] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 75.299971][ T2805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.314934][ T2805] usb 4-1: config 0 descriptor?? [ 75.323553][ T2805] yurex 4-1:0.0: Could not find endpoints [ 75.330849][ T2805] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 75.353653][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.362839][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.372709][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.374023][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.381538][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.388810][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.403609][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.403927][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.414961][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.420377][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.432541][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.435325][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.448554][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.451224][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.466640][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.474115][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.481635][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.489126][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.496687][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.504152][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.511629][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.519136][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.526737][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.534183][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.541668][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.549173][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.556678][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.564114][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.571613][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.579103][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.586598][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.594064][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.601582][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.609079][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.616603][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.624066][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.631598][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.639096][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.646997][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.655004][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.662541][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.670010][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.677490][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.684945][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.692423][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.699899][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.707367][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.714822][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.722288][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.729752][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.737254][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.744720][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.752214][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.759677][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.767143][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.774574][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.782039][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.786073][ T41] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 75.789488][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.797438][ T41] ath9k_htc: Failed to initialize the device [ 75.803786][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.803829][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.812148][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.817267][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.832142][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.833061][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.845571][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.848345][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.861990][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.864151][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.887044][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.894497][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.901997][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x1 [ 75.909491][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.917032][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.924594][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.932510][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.940614][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x1 [ 75.948139][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x1 [ 75.955604][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x1 [ 75.963130][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.970633][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.978142][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.985583][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 75.993060][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.000517][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.007983][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.015437][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.022928][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.030839][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.038349][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.045787][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.053259][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.060760][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.068246][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.075701][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x2 [ 76.083201][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.090700][ T9] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 76.098187][ T9] steelseries 0003:1038:1410.0002: unexpected long global item [ 76.106224][ T5231] usb 2-1: ath9k_htc: USB layer deinitialized [ 76.114720][ T9] steelseries 0003:1038:1410.0002: parse failed [ 76.121205][ T9] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22 [ 76.136477][ T9] usb 3-1: USB disconnect, device number 3 [ 76.308565][ T2805] usb 4-1: USB disconnect, device number 4 [ 76.341127][ T9] usb 5-1: USB disconnect, device number 2 [ 76.359044][ T9] ================================================================== [ 76.367180][ T9] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250 [ 76.374893][ T9] Read of size 8 at addr ffff8881183b9890 by task kworker/0:1/9 [ 76.382588][ T9] [ 76.384982][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 [ 76.395047][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 76.405159][ T9] Workqueue: usb_hub_wq hub_event [ 76.410274][ T9] Call Trace: [ 76.413590][ T9] [ 76.416549][ T9] dump_stack_lvl+0x116/0x1f0 [ 76.421276][ T9] print_report+0xc3/0x620 [ 76.425730][ T9] ? __virt_addr_valid+0x5e/0x590 [ 76.430792][ T9] ? __phys_addr+0xc6/0x150 [ 76.435327][ T9] kasan_report+0xd9/0x110 [ 76.439772][ T9] ? hdm_disconnect+0x227/0x250 [ 76.444671][ T9] ? hdm_disconnect+0x227/0x250 [ 76.449551][ T9] hdm_disconnect+0x227/0x250 [ 76.454261][ T9] usb_unbind_interface+0x1e2/0x960 [ 76.459538][ T9] ? kernfs_find_ns+0x2ee/0x3f0 [ 76.464442][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.470195][ T9] device_remove+0x122/0x170 [ 76.474830][ T9] device_release_driver_internal+0x44a/0x610 [ 76.480941][ T9] bus_remove_device+0x22f/0x420 [ 76.485992][ T9] device_del+0x396/0x9f0 [ 76.490352][ T9] ? __pfx_device_del+0x10/0x10 [ 76.495242][ T9] ? kobject_put+0x210/0x5a0 [ 76.499949][ T9] usb_disable_device+0x36c/0x7f0 [ 76.504999][ T9] usb_disconnect+0x2e1/0x920 [ 76.509711][ T9] hub_event+0x1bed/0x4f40 [ 76.514164][ T9] ? lock_acquire+0x2f/0xb0 [ 76.518706][ T9] ? __pfx_hub_event+0x10/0x10 [ 76.523499][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.529198][ T9] ? rcu_is_watching+0x12/0xc0 [ 76.534016][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 76.539235][ T9] ? process_one_work+0x921/0x1ba0 [ 76.544408][ T9] ? lock_acquire+0x2f/0xb0 [ 76.548935][ T9] ? process_one_work+0x921/0x1ba0 [ 76.554077][ T9] process_one_work+0x9c5/0x1ba0 [ 76.559048][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.564715][ T9] ? __pfx_process_one_work+0x10/0x10 [ 76.570112][ T9] ? rcu_is_watching+0x12/0xc0 [ 76.574911][ T9] ? assign_work+0x1a0/0x250 [ 76.579534][ T9] worker_thread+0x6c8/0xf00 [ 76.584263][ T9] ? __kthread_parkme+0x148/0x220 [ 76.589342][ T9] ? __pfx_worker_thread+0x10/0x10 [ 76.594496][ T9] kthread+0x2c1/0x3a0 [ 76.598610][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.603871][ T9] ? __pfx_kthread+0x10/0x10 [ 76.608515][ T9] ret_from_fork+0x45/0x80 [ 76.612961][ T9] ? __pfx_kthread+0x10/0x10 [ 76.617587][ T9] ret_from_fork_asm+0x1a/0x30 [ 76.622381][ T9] [ 76.625417][ T9] [ 76.627748][ T9] Allocated by task 5225: [ 76.632082][ T9] kasan_save_stack+0x33/0x60 [ 76.636781][ T9] kasan_save_track+0x14/0x30 [ 76.641485][ T9] __kasan_kmalloc+0x8f/0xa0 [ 76.646116][ T9] hdm_probe+0xb3/0x1880 [ 76.650382][ T9] usb_probe_interface+0x300/0x9c0 [ 76.655523][ T9] really_probe+0x23e/0xa90 [ 76.660061][ T9] __driver_probe_device+0x1de/0x440 [ 76.665398][ T9] driver_probe_device+0x4c/0x1b0 [ 76.670450][ T9] __device_attach_driver+0x1df/0x310 [ 76.675853][ T9] bus_for_each_drv+0x157/0x1e0 [ 76.680742][ T9] __device_attach+0x1e8/0x4b0 [ 76.685531][ T9] bus_probe_device+0x17f/0x1c0 [ 76.690416][ T9] device_add+0x114b/0x1a70 [ 76.694955][ T9] usb_set_configuration+0x10cb/0x1c50 [ 76.700441][ T9] usb_generic_driver_probe+0xb1/0x110 [ 76.705950][ T9] usb_probe_device+0xec/0x3e0 [ 76.710734][ T9] really_probe+0x23e/0xa90 [ 76.715256][ T9] __driver_probe_device+0x1de/0x440 [ 76.720596][ T9] driver_probe_device+0x4c/0x1b0 [ 76.725686][ T9] __device_attach_driver+0x1df/0x310 [ 76.731100][ T9] bus_for_each_drv+0x157/0x1e0 [ 76.735977][ T9] __device_attach+0x1e8/0x4b0 [ 76.740822][ T9] bus_probe_device+0x17f/0x1c0 [ 76.745713][ T9] device_add+0x114b/0x1a70 [ 76.750242][ T9] usb_new_device+0xd90/0x1a10 [ 76.755025][ T9] hub_event+0x2e58/0x4f40 [ 76.759643][ T9] process_one_work+0x9c5/0x1ba0 [ 76.764603][ T9] worker_thread+0x6c8/0xf00 [ 76.769219][ T9] kthread+0x2c1/0x3a0 [ 76.773319][ T9] ret_from_fork+0x45/0x80 [ 76.777787][ T9] ret_from_fork_asm+0x1a/0x30 [ 76.782567][ T9] [ 76.784898][ T9] Freed by task 9: [ 76.788621][ T9] kasan_save_stack+0x33/0x60 [ 76.793309][ T9] kasan_save_track+0x14/0x30 [ 76.798004][ T9] kasan_save_free_info+0x3b/0x60 [ 76.803050][ T9] __kasan_slab_free+0x37/0x50 [ 76.807827][ T9] kfree+0x130/0x470 [ 76.811757][ T9] device_release+0xa1/0x240 [ 76.816397][ T9] kobject_put+0x1e4/0x5a0 [ 76.820837][ T9] device_unregister+0x2f/0xc0 [ 76.825621][ T9] hdm_disconnect+0x10b/0x250 [ 76.830340][ T9] usb_unbind_interface+0x1e2/0x960 [ 76.835583][ T9] device_remove+0x122/0x170 [ 76.840189][ T9] device_release_driver_internal+0x44a/0x610 [ 76.846300][ T9] bus_remove_device+0x22f/0x420 [ 76.851297][ T9] device_del+0x396/0x9f0 [ 76.855692][ T9] usb_disable_device+0x36c/0x7f0 [ 76.860770][ T9] usb_disconnect+0x2e1/0x920 [ 76.865499][ T9] hub_event+0x1bed/0x4f40 [ 76.869962][ T9] process_one_work+0x9c5/0x1ba0 [ 76.874606][ T1122] usb 1-1: USB disconnect, device number 3 [ 76.874924][ T9] worker_thread+0x6c8/0xf00 [ 76.885407][ T9] kthread+0x2c1/0x3a0 [ 76.889542][ T9] ret_from_fork+0x45/0x80 [ 76.894022][ T9] ret_from_fork_asm+0x1a/0x30 [ 76.898842][ T9] [ 76.901198][ T9] The buggy address belongs to the object at ffff8881183b8000 [ 76.901198][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 76.915306][ T9] The buggy address is located 6288 bytes inside of [ 76.915306][ T9] freed 8192-byte region [ffff8881183b8000, ffff8881183ba000) [ 76.929358][ T9] [ 76.931728][ T9] The buggy address belongs to the physical page: [ 76.938190][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1183b8 [ 76.947110][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.955663][ T9] flags: 0x200000000000040(head|node=0|zone=2) [ 76.961879][ T9] page_type: f5(slab) [ 76.965905][ T9] raw: 0200000000000040 ffff888100042280 ffffea000488a800 0000000000000002 [ 76.974550][ T9] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 76.983192][ T9] head: 0200000000000040 ffff888100042280 ffffea000488a800 0000000000000002 [ 76.991886][ T9] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 77.000578][ T9] head: 0200000000000003 ffffea000460ee01 ffffffffffffffff 0000000000000000 [ 77.009259][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 77.017933][ T9] page dumped because: kasan: bad access detected [ 77.024371][ T9] page_owner tracks the page as allocated [ 77.030093][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2938, tgid 2938 (mkswap), ts 36065853609, free_ts 36038767574 [ 77.048879][ T9] post_alloc_hook+0x2d1/0x350 [ 77.053669][ T9] get_page_from_freelist+0xe76/0x2b90 [ 77.059151][ T9] __alloc_pages_noprof+0x21c/0x22a0 [ 77.064468][ T9] alloc_pages_mpol_noprof+0xeb/0x400 [ 77.069878][ T9] new_slab+0x2c9/0x410 [ 77.074077][ T9] ___slab_alloc+0xd1d/0x16e0 [ 77.078778][ T9] __slab_alloc.constprop.0+0x56/0xb0 [ 77.084171][ T9] __kmalloc_cache_noprof+0x217/0x3e0 [ 77.089592][ T9] audit_log_d_path+0xce/0x1e0 [ 77.094389][ T9] common_lsm_audit+0x7e7/0x2250 [ 77.099349][ T9] slow_avc_audit+0x17d/0x210 [ 77.104049][ T9] avc_has_perm+0x18d/0x1c0 [ 77.108616][ T9] inode_has_perm+0x168/0x1d0 [ 77.113310][ T9] file_has_perm+0x2e8/0x350 [ 77.117911][ T9] selinux_file_permission+0x40d/0x580 [ 77.123394][ T9] security_file_permission+0x3e/0x80 [ 77.128792][ T9] page last free pid 2938 tgid 2938 stack trace: [ 77.135130][ T9] free_unref_page+0x661/0xe40 [ 77.139918][ T9] __put_partials+0x14c/0x170 [ 77.144618][ T9] qlist_free_all+0x4e/0x120 [ 77.149241][ T9] kasan_quarantine_reduce+0x195/0x1e0 [ 77.154719][ T9] __kasan_slab_alloc+0x4e/0x70 [ 77.159583][ T9] kmem_cache_alloc_noprof+0x154/0x3b0 [ 77.165066][ T9] getname_flags.part.0+0x4c/0x550 [ 77.170196][ T9] getname+0x8d/0xe0 [ 77.174107][ T9] do_sys_openat2+0x104/0x1e0 [ 77.178813][ T9] __x64_sys_openat+0x175/0x210 [ 77.183675][ T9] do_syscall_64+0xcd/0x250 [ 77.188197][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.194119][ T9] [ 77.196468][ T9] Memory state around the buggy address: [ 77.202102][ T9] ffff8881183b9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.210171][ T9] ffff8881183b9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.218244][ T9] >ffff8881183b9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.226325][ T9] ^ [ 77.230921][ T9] ffff8881183b9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.238996][ T9] ffff8881183b9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.247061][ T9] ================================================================== [ 77.255474][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.262711][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 [ 77.272757][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 77.282851][ T9] Workqueue: usb_hub_wq hub_event [ 77.287912][ T9] Call Trace: [ 77.291212][ T9] [ 77.294156][ T9] dump_stack_lvl+0x3d/0x1f0 [ 77.298809][ T9] panic+0x71d/0x800 [ 77.302726][ T9] ? mark_held_locks+0x9f/0xe0 [ 77.307529][ T9] ? __pfx_panic+0x10/0x10 [ 77.311963][ T9] ? irqentry_exit+0x3b/0x90 [ 77.316568][ T9] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.321792][ T9] check_panic_on_warn+0xab/0xb0 [ 77.326749][ T9] end_report+0x117/0x180 [ 77.331113][ T9] kasan_report+0xe9/0x110 [ 77.335579][ T9] ? hdm_disconnect+0x227/0x250 [ 77.340479][ T9] ? hdm_disconnect+0x227/0x250 [ 77.345360][ T9] hdm_disconnect+0x227/0x250 [ 77.350074][ T9] usb_unbind_interface+0x1e2/0x960 [ 77.355303][ T9] ? kernfs_find_ns+0x2ee/0x3f0 [ 77.360189][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 77.366027][ T9] device_remove+0x122/0x170 [ 77.370639][ T9] device_release_driver_internal+0x44a/0x610 [ 77.376737][ T9] bus_remove_device+0x22f/0x420 [ 77.381696][ T9] device_del+0x396/0x9f0 [ 77.386083][ T9] ? __pfx_device_del+0x10/0x10 [ 77.390969][ T9] ? kobject_put+0x210/0x5a0 [ 77.395604][ T9] usb_disable_device+0x36c/0x7f0 [ 77.400668][ T9] usb_disconnect+0x2e1/0x920 [ 77.405368][ T9] hub_event+0x1bed/0x4f40 [ 77.409817][ T9] ? lock_acquire+0x2f/0xb0 [ 77.414343][ T9] ? __pfx_hub_event+0x10/0x10 [ 77.419138][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 77.424805][ T9] ? rcu_is_watching+0x12/0xc0 [ 77.429622][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 77.434884][ T9] ? process_one_work+0x921/0x1ba0 [ 77.440068][ T9] ? lock_acquire+0x2f/0xb0 [ 77.444632][ T9] ? process_one_work+0x921/0x1ba0 [ 77.449808][ T9] process_one_work+0x9c5/0x1ba0 [ 77.454807][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 77.460484][ T9] ? __pfx_process_one_work+0x10/0x10 [ 77.465920][ T9] ? rcu_is_watching+0x12/0xc0 [ 77.470754][ T9] ? assign_work+0x1a0/0x250 [ 77.475387][ T9] worker_thread+0x6c8/0xf00 [ 77.480033][ T9] ? __kthread_parkme+0x148/0x220 [ 77.485123][ T9] ? __pfx_worker_thread+0x10/0x10 [ 77.490312][ T9] kthread+0x2c1/0x3a0 [ 77.494506][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.499857][ T9] ? __pfx_kthread+0x10/0x10 [ 77.504500][ T9] ret_from_fork+0x45/0x80 [ 77.508969][ T9] ? __pfx_kthread+0x10/0x10 [ 77.513625][ T9] ret_from_fork_asm+0x1a/0x30 [ 77.518427][ T9] [ 77.521928][ T9] Kernel Offset: disabled [ 77.526268][ T9] Rebooting in 86400 seconds..