last executing test programs: 2.158569829s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 2.099696122s ago: executing program 4 (id=5): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000010000000524050000082407000000009e0c240700000000c80975f9070d240701000000fab8f86300cf0924030000000001000904010000010206000904010101010200000905010900000000000725010000000009040200000102000009040201010102000600058209000000000007250100000000"], 0x0) (async) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000010000000524050000082407000000009e0c240700000000c80975f9070d240701000000fab8f86300cf0924030000000001000904010000010206000904010101010200000905010900000000000725010000000009040200000102000009040201010102000600058209000000000007250100000000"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="5bff007e"]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000d00)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000040)={0x20, 0x31, 0xa1, {0xa1, 0xb, "58e9536d5704ff00717ad26f78e161f333c8f2154c041efdd27806c3af4002d1fe6e5cd04078689ddbc5cd83e352a5a844c078dceb7ff7376389c0048c7a198a2c9a5c035ceddca063b478d73c786e7ea6d8824db0c780ff924b437936fea143e42590e374344ae251228355546816e080e95f7ec11bbf6aa2f6876aaccdb6cb364d749f20da92c4eee3b949c7b7497cc489eb16a4778abda1f076ec80b88f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, "be"}, @main=@item_012={0x1, 0x0, 0xa, "d6"}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x2, "314caf19"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4474, 0x53, 0x1, {0x22, 0xbdf}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x38, "530f0171572e2d35fe67f6d44238ed99604164c6c8992b46d1c0e7b27ea31fb45759fa9db31f036e07f0435ae4bfcffb5c60f00448c47c18"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000040)={0x20, 0x31, 0xa1, {0xa1, 0xb, "58e9536d5704ff00717ad26f78e161f333c8f2154c041efdd27806c3af4002d1fe6e5cd04078689ddbc5cd83e352a5a844c078dceb7ff7376389c0048c7a198a2c9a5c035ceddca063b478d73c786e7ea6d8824db0c780ff924b437936fea143e42590e374344ae251228355546816e080e95f7ec11bbf6aa2f6876aaccdb6cb364d749f20da92c4eee3b949c7b7497cc489eb16a4778abda1f076ec80b88f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, "be"}, @main=@item_012={0x1, 0x0, 0xa, "d6"}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x2, "314caf19"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4474, 0x53, 0x1, {0x22, 0xbdf}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x38, "530f0171572e2d35fe67f6d44238ed99604164c6c8992b46d1c0e7b27ea31fb45759fa9db31f036e07f0435ae4bfcffb5c60f00448c47c18"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000004c0)={0x1, 0x0, 0x2, 0xfdf, 0x7f, 0x3}) read$char_usb(r3, 0x0, 0x0) (async) read$char_usb(r3, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0xf0, &(0x7f0000000180)={0x5, 0xf, 0xf0, 0x2, [@generic={0xdf, 0x10, 0xb, "776c345b8b85a69c7e27c9030153ff7f984ee0404c5aa702130c3f7ac72de4aad41771e25d77a24ab6f8fab7eba5a78203126b51aeaefd0c1c0174ce23e83d2f5e2bc93f8504eeff170198cf08a2acbcce7d56125e24de5e37eeb2bbebb4209e542c641d93e552bc59fa64135b65586b79114c758154bc3166474d28ae2535fa6d06c5abd1ce2a8285fa056a1f9f6af44a057fe1bd2e2aaa9041016159dff3ad2f701fe3497a04dd5685996a3fe6003acc63d7aba9ed69b7a9a4b6432a78b08f86d6d41955adbc7a1a528d4ca2c6d5312030db7a5169ff2ebc8018bd"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00f, 0x1}]}, 0x1, [{0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "04842093bf22e6567026563378535823f46b95e712d833a6e68892fe1d90db693653664866eebdafff10ec1666e8096b69e6c83d3733c238"}}]}) (async) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0xf0, &(0x7f0000000180)={0x5, 0xf, 0xf0, 0x2, [@generic={0xdf, 0x10, 0xb, "776c345b8b85a69c7e27c9030153ff7f984ee0404c5aa702130c3f7ac72de4aad41771e25d77a24ab6f8fab7eba5a78203126b51aeaefd0c1c0174ce23e83d2f5e2bc93f8504eeff170198cf08a2acbcce7d56125e24de5e37eeb2bbebb4209e542c641d93e552bc59fa64135b65586b79114c758154bc3166474d28ae2535fa6d06c5abd1ce2a8285fa056a1f9f6af44a057fe1bd2e2aaa9041016159dff3ad2f701fe3497a04dd5685996a3fe6003acc63d7aba9ed69b7a9a4b6432a78b08f86d6d41955adbc7a1a528d4ca2c6d5312030db7a5169ff2ebc8018bd"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00f, 0x1}]}, 0x1, [{0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "04842093bf22e6567026563378535823f46b95e712d833a6e68892fe1d90db693653664866eebdafff10ec1666e8096b69e6c83d3733c238"}}]}) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3b, &(0x7f00000005c0)=@string={0x3b, 0x3, "c2e38a20451f00c8fa29149bda4e5502ec34e0227a76313d35fcd32e6f0d699372bf2841ec88fe0f4f005ad51c8bf03f22f54aea3341f512f1"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12014000f2"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffddf, &(0x7f0000000040)=ANY=[]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x202000) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x202000) 1.599063075s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.260213838s ago: executing program 2 (id=3): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103) syz_usb_connect(0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed522005000000786b8d7ade0000000001090209000000000000"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x1f, {0x1f, 0x0, "bf0fa7d69c8bc8b96bf0b9a7b9a841d31fe38fad7b95289ed8bf9d227a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x3) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x84, {0x84, 0x0, "ad56f1d8c88153b6280c84d5a56b4fea30dd0321ddb7a1132f09886cf86ecd30370e90bb9fc736462459928c02220d9d8412e6b06850bd7a62ea576a43f3b77123ad5faae94120ede4e848e9f99da1a54d496f88788d01d044ae477aef73f21f3524224435b8fcf38a5fd82d417fbb0f97ab7984e2907c520e7dbe27728f94cf13d1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, &(0x7f0000006800)="10", 0x1) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x8a, 0xad, 0xc, 0x20, 0xb48, 0x1009, 0x5533, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x22, 0x36}}]}}]}}, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/22) syz_usb_connect(0x3, 0xcb9, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x19, 0xa9, 0x9b, 0x20, 0x7d1, 0x3c10, 0x6d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca7, 0x4, 0x9d, 0x7, 0xa0, 0xfe, [{{0x9, 0x4, 0x84, 0x0, 0xa, 0x15, 0x51, 0x7, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x5, 0x4, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, '\t'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x2, 0x0, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0xf9c1, 0x40, "e930077a91bd"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x5, 0x3, 0x0], 0xe}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xb, "7b3ef799"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x81, 0x8, 0x80}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x2, 0xd0, [@generic={0x10, 0x21, "9d9323d3abeeeff345dfc1287d83"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x73, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x7f, 0x9e, 0x4, [@generic={0xde, 0x7, "d0d7b9afa8b04ca615ae692a1953be42fc4266b730a1088691abed61d731c4428fbea0b7882342bf7de732eab6a786e2240370a175a874bf753168c689e0d76326cd514eb4c7f97035952c433f9c96f607fc0cb3a51e62330dd96d4107dcd18b7934194eed299de265070a8ea0885190229b23f0c3dfe3abc0af557527a27e492a6cd2a8e4404816ac757ad6ac3da3604b090cc5a70f007dc468c12c74c831853165fc262d811915e7d5a1e5f78f8d72b8e244677e6be9f3cc090e646e50552dbec8c2a50523601a1aa310ce92b22ae7951fa136325f2a038198c655"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xb, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x4, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x52, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xa, 0xfa, 0x1, [@generic={0xf, 0x23, "426bfd9d0c3fca0fb09dc8d2f1"}]}}]}}, {{0x9, 0x4, 0xbb, 0xf2, 0x10, 0x9f, 0x70, 0xfb, 0xff, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0xe, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x10, 0x9, 0x9, [@generic={0xa1, 0x23, "502ecb1a3fad3b8d1cc13e8657618a9e7e430145652a16ad0d89457181f499e8a5092ce4ec2e88a57b9434ff37457c0c161890e6aaf955c3854797369176dac59934e44a0161b11115185557a5d82f682bf995b4e9c55a4f4c912be835baea67b8f034862addda5ebc28c3991a0c72bd92c907ef6f35ab82614bc8081e3d1087897116aed9e1b724dacdf57847a4845395d638427904561c31057333e8940b"}, @generic={0x39, 0xd, "57b0a607dc782140ee2cadf381666c8df9c834a59a5df0959303bb161d6ab3be4926e008b774084c9cae2d50f9ecc2bcc98eedcee2bd8d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x1b, 0x4, 0x6, [@generic={0x63, 0x23, "9383b92e496583cff71bfba0000484dce9f52070fea1e97500dec4c206c6df26530c5be8d7bc25c80c71615db8ed67780549fa798e41b588664184b81c659649ad2669ad8d0f97a4974e4993cb811a44839236a6232f011199fe5f698791b4dfd3"}, @generic={0xc, 0x6, "127150937e43e2641718"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x71, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3e7, 0x23, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x1, 0x5, [@generic={0x85, 0x22, "b2a95d198c288467a69b57d7dfc3555248c751f9d417243c7fc0c41448bfeac914a860eeacb35a28bb3090e93af2fa0bf6d6a65892138855f3ce6d7f7d7e8802a8900fe044207a571975a81c314a8155093448bda449c7e7116a04ee221426d248109ed2e3e1b04bc2501f56c0f4250ff8e119f6efe9d9fa7f975b9366ea7b244d0e49"}, @generic={0xde, 0x1f, "5acae6f35b8652b90fa567d2e905ce926aca929ed29132d50dbad44ae7c5c6f78703d7b7042606d48f896d4266774d32d1a09544037e010809573a8cbc58c1fbcde3931d2d3df6bc615d2763c9335de82720a0f1187dd69aab9198a6d0ce5a1c545160fd6da7bb6818768732a8760a1111afa52bc4861a224c9c4b35b4c77556580e5fe4bcad92604b1c8878391d945b98f665a24cb1687de91689134d76c938d626ae6cf03357b0f2cf063c4df882932520f70e88c7e3f425364007f01a3df602e98ded760609cd96de2c65a4ee269902bb3d310ed084cb254ca014"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0xd, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0x3ff}, @generic={0x60, 0x22, "5b5771fd7e2727f8cd459a7a430adaec1bf018216f3fd850c65f834222a9f86aed9902c3681c69f18bc823fa1a57fe763db8bfd53883cfdba05402f3722fe510096dc99e3eff420d43a382609d6ebf862aa92ae37a1c12c0c2f30c1db5e1"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x80, 0x10, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0x23, 0xf, "ec029c273147ff5b0670dc8445ce7e119ab04b4b9bc08d17e7b370903fc93b86c2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe, 0x6, 0xf}}, {{0x9, 0x5, 0x5, 0x13, 0x20, 0xf, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x64, 0x8}}, {{0x9, 0x5, 0x3, 0x1f, 0x8, 0x5, 0x28, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x6, 0xeb, 0xcd}}]}}, {{0x9, 0x4, 0xdc, 0x7f, 0x2, 0x3f, 0xaa, 0x6b, 0xd9, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x9, 0x1, [@generic={0x14, 0x23, "1ff46a787f98b70dac00d6ea91eef1f8b2c0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x43, 0xc, 0xc, 0xfd, 0xdb, 0x6, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x1, 0xbf, 0x4, 0xff, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0xd, 0x800, 0x40, 0x3e}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x9, "4ff791d164"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xe5, "7115bc89b390"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x40, "ac"}]}, @generic={0x43, 0x22, "f66de9f4082d458157d06fca663edbc09f5af03248bc4ddf26f2c0090f728eb8997e00ebd109899aacf49bceae047f47f67d75b9c686189196cf4b72a7167cb0f7"}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xb, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x6, 0x47}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3, 0x6, 0xc0, [@generic={0xed, 0x5, "0e868fc51044749253ea5efef73d4a6939d163e521e7f22c4c6796e0c11b73946589dabfd479215b532466e3edb00b7837c4b533b1fdc2399ae24523635aebe6f10d817f5c978c0fa66bab00156609548ae8d4d8621fb4971cab8c3ef8df155442978ad95a45970b6d8834c0c77696b67125107ccec1028ba46fb2f4b653b9f58fe807f402dd14386de0d29b6c67f89c5f95e955c0062359ae8ac69c4334a6631c961b749e4edcccc60be728766210a795094e87a69a0c3e5f7ff963d19b6ff574a85cf0c3d8a5f3c20b84c08e50c3fe3cb73331a1a20abebb531d506a911607a55ac3d9b72fe3b8bf4e22"}, @generic={0xff, 0x21, "bc652ac4a5b09fc535a0d6dcfff4a5e45fffe525aac91c9b9a2a60cb440ae887b2151a6319f985873f6f184de9c5f7b000cc2bb9f67be75f3ec58cf8f8c694b480d0050944478ee8e3594e5d923ebfb7d78729d73cc561bdac8b85a8c951dc515f0f5ef15e5c0ee32daf16532b00980a5791df1024ca25e56dafbdb3e14878641d01aed714079bd72b5198db49e9b7a22244c5c330fd2feb26e85a65696d45a5ffd21a4f2af4f69363d5e4929eb0c611f6bbf04589a5d9be95486d7625e1c938e97bb02b3c3a3d0154126b6b3eec17611ff670004b19201f535404e42b4354ce4fb1cde817817aa502c17a21cc87d76428cd70510f3e03499ac624589c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x16, 0x3, 0xfe}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xff, 0xe, 0x9, [@generic={0x5f, 0xe, "50e1a262a384f04548bb0dda6bfa808dfc647d2c3f840c5d8c6105a7892252196b2238399623092a386d7ec5dc5c11120e9feb541f06fe5e1343524f81d3405676efc501975f2af595a0f7a9c9df381c87849f7316708862343118b774"}, @generic={0xb0, 0x23, "12bb99c56efdc9cba821dd64fd9330e0f8fca4bacc14d5a70df973134a48d12dc50555f754161169ba168062712d252ef0c9ff9905a08dcf6c8775333caa8fe100f69d051c99bc50c86db82ef6c0ad67e4eb3703f748e4df4702f3fa2479d9de9bcefd98f2db580a7b64f7e78c2ad84cc58e7914ed3f69de6d9568111c804bb8f71cd1d7189bfb4c17311f30e80c4e7c82c517085e217527bcd2cd1a57b3ce125330b13ad33e8c77ac96a99fd794"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x9, 0x4, [@generic={0x57, 0x24, "6851b92051d7143aee4fd2c576727df643c4bfd1efded52a9c9233c84ed45f88bd860478cda7c01d0b39b592dc3153279452881a9fc775274009322189a4410626c3359c9a4f62a6f10b95071fd7f5a329f9d4a5f3"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8dd3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x7, 0x4}, @generic={0xd2, 0x7, "758ff151421d0653c26f3bd95937b6e4fb5406c3fc1aa1f982a50e9956305caaa94ee09ecc048ef7f132dcefa2d6824f873ac86dd9c91c5209b66f3ced193679ae6a8270c513fd9bccb6bfe16897726028a508013d8e7131aaecaf61a4a0f2a4f866147c6921e7d12f74e1ec73d52af25950ce0642115338a140ab079e32bf1bb6608420b48dc228e9c740ab2c6b5a20c84b305e30b36276ac73b9ffaa805b3fdef4013c3d26f574d16f63ec567ebae17a16718699423481cb2e19e04ce7e77e599ed7aea0f1100e46bc004dd5e2fe53"}]}}, {{0x9, 0x5, 0x72580cfb5d397ee2, 0x0, 0x8, 0x3, 0x7f, 0x4, [@generic={0x9e, 0xf, "9d6ed21cec577115ab3df2499191a66b2df76ddbd9561c302869cf1ae41dc9e68b09bb45fe8140849908bdd00a3b45774b7890a75d98725629c37bccaece1415b3dd5a1833fabf9f1e81596e64ef71ca3c5989610e4ab2fed6efca75e5eee3eebd105f5e0499ee7cb9c9b9586e04f728184f50a8ad5e7dc51e80c4078da7f9f63a98d63d8d46f1848630b4037d181331e7c90c5358f6a904dfefcbd0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x25, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf9, 0x80, 0xd, [@generic={0x98, 0x21, "0385f9ece32c07e2e745b3c9e1d131fbb001f9c7c4b584432fc4bb41f80f30c3f76ce9e22f3ce21dc131c955bd820913d97e631b7e778fb5d0b9eed72f278059e142e9b1b92b0158863ffc1610f916021852d7c7e454de9f9f9059b4c056465614e1c2641461f38f97fd60c17449ea7c2b8296a2addc09ef25ad69e647863d319d3fc831d978f1b336625ffc682cb8c4eb3f4a9e22e2"}, @generic={0x33, 0x21, "df97ac6b383edf8752a08b354ade06013344ce9b2b0fa5ed8a67a24c7732f39ec97f4f8b8abdef9002b0d4a59b45ffb0cd"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x8, 0x7, 0xff, 0x3}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x1, [@generic={0x29, 0x10, 0x1, "92e3be5024fb8cc97d3a59716cd2ec5c1da46b5204e39a1971659ef58014ab090958b44b283a"}]}, 0x3, [{0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2403149ab945ac5a885a50e6fe2a82990ad804d4e10351"]}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "8cb17611f5"}}, {0x43, &(0x7f0000000240)=@string={0x43, 0x3, "156b2a94a0be2c94ee4e361be11ae2add9eef5bfef2b0eeb54a1248358b0bc6c2c148bfcd991387d8aa1b21c28b5c09bbcbc145899eeca90537bfa5c001e7cfa86"}}]}) 1.196451372s ago: executing program 1 (id=2): syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600030109022400020908b006090405090184435f07090501030000c003000904d40100f3a0ed070000000000"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=6): syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x13, 0xf, 0xd3, 0x40, 0x187f, 0x10, 0x48f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0x18, 0x12, 0x64, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x400}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x8028c003, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 34.421370][ T29] audit: type=1400 audit(1726412205.233:80): avc: denied { mounton } for pid=2637 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.427261][ T2637] cgroup: Unknown subsys name 'net' [ 34.444170][ T29] audit: type=1400 audit(1726412205.233:81): avc: denied { mount } for pid=2637 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.473853][ T29] audit: type=1400 audit(1726412205.283:82): avc: denied { unmount } for pid=2637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.605564][ T2637] cgroup: Unknown subsys name 'rlimit' [ 34.784846][ T29] audit: type=1400 audit(1726412205.593:83): avc: denied { setattr } for pid=2637 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.808233][ T29] audit: type=1400 audit(1726412205.593:84): avc: denied { mounton } for pid=2637 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.833144][ T29] audit: type=1400 audit(1726412205.593:85): avc: denied { mount } for pid=2637 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.875513][ T2640] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.885367][ T29] audit: type=1400 audit(1726412205.693:86): avc: denied { relabelto } for pid=2640 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 34.910935][ T29] audit: type=1400 audit(1726412205.693:87): avc: denied { write } for pid=2640 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.949512][ T29] audit: type=1400 audit(1726412205.763:88): avc: denied { read } for pid=2637 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.975348][ T29] audit: type=1400 audit(1726412205.763:89): avc: denied { open } for pid=2637 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.975733][ T2637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.021667][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 46.021686][ T29] audit: type=1400 audit(1726412216.833:96): avc: denied { create } for pid=2647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.117881][ T29] audit: type=1400 audit(1726412216.833:97): avc: denied { write } for pid=2647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.138743][ T29] audit: type=1400 audit(1726412216.883:98): avc: denied { append } for pid=2527 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.161249][ T29] audit: type=1400 audit(1726412216.883:99): avc: denied { open } for pid=2527 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.184125][ T29] audit: type=1400 audit(1726412216.883:100): avc: denied { getattr } for pid=2527 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.207077][ T29] audit: type=1400 audit(1726412216.923:101): avc: denied { read } for pid=2647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.729203][ T29] audit: type=1400 audit(1726412245.533:102): avc: denied { mounton } for pid=2648 comm="syz-executor" path="/root/syzkaller.ZT4yce/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.789763][ T29] audit: type=1400 audit(1726412245.573:103): avc: denied { mount } for pid=2648 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.812209][ T29] audit: type=1400 audit(1726412245.573:104): avc: denied { mounton } for pid=2648 comm="syz-executor" path="/root/syzkaller.ZT4yce/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.837627][ T29] audit: type=1400 audit(1726412245.573:105): avc: denied { mount } for pid=2648 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.860005][ T29] audit: type=1400 audit(1726412245.583:106): avc: denied { unmount } for pid=2648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.879977][ T29] audit: type=1400 audit(1726412245.603:107): avc: denied { mounton } for pid=2648 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.466242][ T29] audit: type=1400 audit(1726412246.273:108): avc: denied { read write } for pid=2647 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.563719][ T29] audit: type=1400 audit(1726412246.303:109): avc: denied { open } for pid=2647 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.588304][ T29] audit: type=1400 audit(1726412246.303:110): avc: denied { ioctl } for pid=2647 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.637257][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.682541][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.728276][ T29] audit: type=1400 audit(1726412246.403:111): avc: denied { read write } for pid=4883 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.047984][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.067912][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.267958][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 76.273348][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 76.294805][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 76.306697][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 76.317745][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 76.347493][ T43] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.356288][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.370689][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 76.381624][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.398223][ T43] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.413508][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 76.422661][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.430990][ T9] usb 1-1: Product: syz [ 76.435170][ T9] usb 1-1: Manufacturer: syz [ 76.439820][ T9] usb 1-1: SerialNumber: syz [ 76.448868][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.458091][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.466097][ T43] usb 5-1: Product: syz [ 76.470349][ T43] usb 5-1: Manufacturer: syz [ 76.474963][ T43] usb 5-1: SerialNumber: syz [ 76.485825][ T9] usb 1-1: config 0 descriptor?? [ 76.505836][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 76.515321][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 76.547564][ T4892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.717700][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.726961][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.730309][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.736333][ T4892] usb 4-1: Using ep0 maxpacket: 16 [ 76.751391][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.753360][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.762307][ T4892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 76.779310][ T4892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.791008][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.793696][ T4892] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 76.808018][ T4892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.813485][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.816044][ T4892] usb 4-1: Product: syz [ 76.828657][ T4892] usb 4-1: Manufacturer: syz [ 76.833283][ T4892] usb 4-1: SerialNumber: syz [ 76.838548][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.842293][ T4892] usb 4-1: config 0 descriptor?? [ 76.847795][ T2346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.858920][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.862016][ T4892] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 76.876289][ T4892] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 76.880844][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.892495][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.971571][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.980461][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.989378][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.998652][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.009106][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.018647][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.038118][ T43] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 77.047453][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 77.052661][ T2346] usb 3-1: Using ep0 maxpacket: 16 [ 77.062022][ T2346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.073340][ T2346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.083156][ T2346] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 77.090194][ T43] usb 5-1: USB disconnect, device number 2 [ 77.092220][ T2346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.092354][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.118572][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 77.126212][ T42] usb 2-1: can't read configurations, error -61 [ 77.135498][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.146150][ T2346] usb 3-1: config 0 descriptor?? [ 77.146507][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.181673][ T4895] udevd[4895]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.277489][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.281398][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.294078][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 77.294689][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.302002][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 77.315350][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 77.322391][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 77.328254][ T9] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 77.407901][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 77.414428][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 77.422015][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 77.429043][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 77.467428][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 77.475027][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.486439][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 77.494100][ T42] usb 2-1: can't read configurations, error -61 [ 77.501599][ T42] usb usb2-port1: attempt power cycle [ 77.535516][ T4892] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 77.542370][ T4892] em28xx 4-1:0.0: Config register raw data: 0x41 [ 77.601031][ T2346] saitek 0003:06A3:0621.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 77.680296][ T9] usb 1-1: USB disconnect, device number 2 [ 77.693392][ T9] em28xx 1-1:0.0: Disconnecting em28xx #2 [ 77.699300][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 77.709897][ T9] em28xx 1-1:0.0: Freeing device [ 77.715021][ T9] em28xx 1-1:0.0: Freeing device [ 77.755826][ T2346] usb 4-1: USB disconnect, device number 2 [ 77.773485][ T2346] em28xx 4-1:0.0: Disconnecting em28xx [ 77.792976][ T2346] ================================================================== [ 77.797217][ T4926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.801051][ T2346] BUG: KASAN: use-after-free in __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 77.801111][ T2346] Read of size 8 at addr ffff88810732c250 by task kworker/1:2/2346 [ 77.801131][ T2346] [ 77.801147][ T2346] CPU: 1 UID: 0 PID: 2346 Comm: kworker/1:2 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 77.801177][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.849222][ T2346] Workqueue: usb_hub_wq hub_event [ 77.854310][ T2346] Call Trace: [ 77.857595][ T2346] [ 77.860533][ T2346] dump_stack_lvl+0x116/0x1f0 [ 77.865242][ T2346] print_report+0xc3/0x620 [ 77.869682][ T2346] ? __virt_addr_valid+0x5e/0x590 [ 77.874725][ T2346] ? __phys_addr+0xc6/0x150 [ 77.880207][ T2346] kasan_report+0xd9/0x110 [ 77.884641][ T2346] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 77.891049][ T2346] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 77.897458][ T2346] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 77.903699][ T2346] em28xx_close_extension+0x10e/0x2b0 [ 77.909089][ T2346] em28xx_usb_disconnect+0x19d/0x610 [ 77.914382][ T2346] usb_unbind_interface+0x1e8/0x970 [ 77.919570][ T2346] ? kernfs_find_ns+0x2ee/0x3f0 [ 77.924419][ T2346] ? __pfx_usb_unbind_interface+0x10/0x10 [ 77.930127][ T2346] device_remove+0x122/0x170 [ 77.934706][ T2346] device_release_driver_internal+0x44a/0x610 [ 77.937465][ T4892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.940765][ T2346] bus_remove_device+0x22f/0x420 [ 77.940802][ T2346] device_del+0x396/0x9f0 [ 77.957492][ T2346] ? __pfx_device_del+0x10/0x10 [ 77.962362][ T2346] ? kobject_put+0x210/0x5a0 [ 77.966944][ T2346] usb_disable_device+0x36c/0x7f0 [ 77.971973][ T2346] usb_disconnect+0x2e1/0x920 [ 77.976644][ T2346] hub_event+0x1bed/0x4f40 [ 77.981060][ T2346] ? __pfx_hub_event+0x10/0x10 [ 77.985813][ T2346] ? __pfx_lock_acquire+0x10/0x10 [ 77.990825][ T2346] ? __pfx_lock_release+0x10/0x10 [ 77.995840][ T2346] process_one_work+0x9c5/0x1b40 [ 78.000771][ T2346] ? __pfx_lock_acquire+0x10/0x10 [ 78.005783][ T2346] ? __pfx_process_one_work+0x10/0x10 [ 78.011146][ T2346] ? assign_work+0x1a0/0x250 [ 78.015742][ T2346] worker_thread+0x6c8/0xed0 [ 78.020327][ T2346] ? __kthread_parkme+0x148/0x220 [ 78.025335][ T2346] ? __pfx_worker_thread+0x10/0x10 [ 78.030456][ T2346] kthread+0x2c1/0x3a0 [ 78.034514][ T2346] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.039703][ T2346] ? __pfx_kthread+0x10/0x10 [ 78.044277][ T2346] ret_from_fork+0x45/0x80 [ 78.048682][ T2346] ? __pfx_kthread+0x10/0x10 [ 78.053258][ T2346] ret_from_fork_asm+0x1a/0x30 [ 78.058015][ T2346] [ 78.061015][ T2346] [ 78.063315][ T2346] The buggy address belongs to the physical page: [ 78.069700][ T2346] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10732c [ 78.078543][ T2346] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.087017][ T2346] memcg:ffff88810577ea01 [ 78.091231][ T2346] flags: 0x200000000000040(head|node=0|zone=2) [ 78.097377][ T2346] page_type: 0xfdffffff(slab) [ 78.102047][ T2346] raw: 0200000000000040 ffff88810004f140 dead000000000122 0000000000000000 [ 78.110613][ T2346] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff88810577ea01 [ 78.119181][ T2346] head: 0200000000000040 ffff88810004f140 dead000000000122 0000000000000000 [ 78.127848][ T2346] head: 0000000000000000 0000000000100010 00000001fdffffff ffff88810577ea01 [ 78.129248][ T4892] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.136514][ T2346] head: 0200000000000002 ffffea00041ccb01 ffffffffffffffff 0000000000000000 [ 78.136535][ T2346] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 78.136549][ T2346] page dumped because: kasan: bad access detected [ 78.144548][ T4892] usb 5-1: config 0 has no interface number 0 [ 78.153134][ T2346] page_owner tracks the page as allocated [ 78.153143][ T2346] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2534, tgid 2534 (klogd), ts 77818434036, free_ts 77714984747 [ 78.153185][ T2346] post_alloc_hook+0x2d1/0x350 [ 78.153217][ T2346] get_page_from_freelist+0x1311/0x25f0 [ 78.167493][ T4892] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 78.168248][ T2346] __alloc_pages_noprof+0x21e/0x2290 [ 78.176750][ T4892] usb 5-1: New USB device found, idVendor=187f, idProduct=0010, bcdDevice=48.f5 [ 78.179980][ T2346] alloc_slab_page+0x4e/0xf0 [ 78.180009][ T2346] new_slab+0x84/0x260 [ 78.180036][ T2346] ___slab_alloc+0xdac/0x1870 [ 78.180064][ T2346] __slab_alloc.constprop.0+0x56/0xb0 [ 78.202324][ T4892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.206906][ T2346] __kmalloc_node_track_caller_noprof+0x14e/0x3e0 [ 78.212556][ T4892] usb 5-1: Product: syz [ 78.223237][ T2346] kmalloc_reserve+0xef/0x2c0 [ 78.223268][ T2346] __alloc_skb+0x164/0x380 [ 78.228557][ T4892] usb 5-1: Manufacturer: syz [ 78.237512][ T2346] alloc_skb_with_frags+0xe4/0x710 [ 78.237542][ T2346] sock_alloc_send_pskb+0x7f1/0x980 [ 78.242110][ T4892] usb 5-1: SerialNumber: syz [ 78.246143][ T2346] unix_dgram_sendmsg+0x467/0x1920 [ 78.257163][ T4892] usb 5-1: config 0 descriptor?? [ 78.264096][ T2346] __sys_sendto+0x47f/0x4e0 [ 78.264121][ T2346] __x64_sys_sendto+0xe0/0x1c0 [ 78.264141][ T2346] do_syscall_64+0xcd/0x250 [ 78.264167][ T2346] page last free pid 9 tgid 9 stack trace: [ 78.264179][ T2346] free_unref_page+0x698/0xce0 [ 78.280928][ T4892] smsusb:smsusb_probe: board id=13, interface number 1 [ 78.283770][ T2346] __folio_put+0x1dc/0x260 [ 78.288844][ T4892] smsusb:smsusb_probe: stellar device in cold state was found at usb\5-1. [ 78.293417][ T2346] em28xx_usb_disconnect+0x4e0/0x610 [ 78.293443][ T2346] usb_unbind_interface+0x1e8/0x970 [ 78.317454][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.317899][ T2346] device_remove+0x122/0x170 [ 78.379926][ T2346] device_release_driver_internal+0x44a/0x610 [ 78.385983][ T2346] bus_remove_device+0x22f/0x420 [ 78.390903][ T2346] device_del+0x396/0x9f0 [ 78.395218][ T2346] usb_disable_device+0x36c/0x7f0 [ 78.400232][ T2346] usb_disconnect+0x2e1/0x920 [ 78.404897][ T2346] hub_event+0x1bed/0x4f40 [ 78.409301][ T2346] process_one_work+0x9c5/0x1b40 [ 78.414229][ T2346] worker_thread+0x6c8/0xed0 [ 78.418818][ T2346] kthread+0x2c1/0x3a0 [ 78.422864][ T2346] ret_from_fork+0x45/0x80 [ 78.427267][ T2346] ret_from_fork_asm+0x1a/0x30 [ 78.432038][ T2346] [ 78.434342][ T2346] Memory state around the buggy address: [ 78.439947][ T2346] ffff88810732c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.447986][ T2346] ffff88810732c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.456027][ T2346] >ffff88810732c200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.464065][ T2346] ^ [ 78.470715][ T2346] ffff88810732c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.478773][ T2346] ffff88810732c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.486560][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.486819][ T2346] ================================================================== [ 78.487329][ T2346] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.487346][ T2346] CPU: 1 UID: 0 PID: 2346 Comm: kworker/1:2 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 78.487374][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.487389][ T2346] Workqueue: usb_hub_wq hub_event [ 78.487423][ T2346] Call Trace: [ 78.487431][ T2346] [ 78.487440][ T2346] dump_stack_lvl+0x3d/0x1f0 [ 78.487468][ T2346] panic+0x6dc/0x7c0 [ 78.487496][ T2346] ? mark_held_locks+0x9f/0xe0 [ 78.487523][ T2346] ? __pfx_panic+0x10/0x10 [ 78.487551][ T2346] ? irqentry_exit+0x3b/0x90 [ 78.487576][ T2346] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.487622][ T2346] check_panic_on_warn+0xab/0xb0 [ 78.487652][ T2346] end_report+0x117/0x180 [ 78.487684][ T2346] kasan_report+0xe9/0x110 [ 78.487710][ T2346] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 78.487744][ T2346] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 78.487779][ T2346] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 78.487812][ T2346] em28xx_close_extension+0x10e/0x2b0 [ 78.487849][ T2346] em28xx_usb_disconnect+0x19d/0x610 [ 78.487873][ T2346] usb_unbind_interface+0x1e8/0x970 [ 78.487897][ T2346] ? kernfs_find_ns+0x2ee/0x3f0 [ 78.487925][ T2346] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.487951][ T2346] device_remove+0x122/0x170 [ 78.487977][ T2346] device_release_driver_internal+0x44a/0x610 [ 78.488009][ T2346] bus_remove_device+0x22f/0x420 [ 78.488036][ T2346] device_del+0x396/0x9f0 [ 78.488063][ T2346] ? __pfx_device_del+0x10/0x10 [ 78.488087][ T2346] ? kobject_put+0x210/0x5a0 [ 78.488117][ T2346] usb_disable_device+0x36c/0x7f0 [ 78.488154][ T2346] usb_disconnect+0x2e1/0x920 [ 78.488189][ T2346] hub_event+0x1bed/0x4f40 [ 78.488236][ T2346] ? __pfx_hub_event+0x10/0x10 [ 78.488270][ T2346] ? __pfx_lock_acquire+0x10/0x10 [ 78.488297][ T2346] ? __pfx_lock_release+0x10/0x10 [ 78.488332][ T2346] process_one_work+0x9c5/0x1b40 [ 78.488369][ T2346] ? __pfx_lock_acquire+0x10/0x10 [ 78.488396][ T2346] ? __pfx_process_one_work+0x10/0x10 [ 78.488431][ T2346] ? assign_work+0x1a0/0x250 [ 78.488460][ T2346] worker_thread+0x6c8/0xed0 [ 78.488495][ T2346] ? __kthread_parkme+0x148/0x220 [ 78.488518][ T2346] ? __pfx_worker_thread+0x10/0x10 [ 78.488548][ T2346] kthread+0x2c1/0x3a0 [ 78.488569][ T2346] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.488602][ T2346] ? __pfx_kthread+0x10/0x10 [ 78.488625][ T2346] ret_from_fork+0x45/0x80 [ 78.488656][ T2346] ? __pfx_kthread+0x10/0x10 [ 78.488684][ T2346] ret_from_fork_asm+0x1a/0x30 [ 78.488720][ T2346] [ 78.495306][ T2346] Kernel Offset: disabled