last executing test programs: 3.13062056s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x55, 0xb5, 0xa2, 0x20, 0x424, 0xcf19, 0x1d7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0xc, 0x95, 0xe5, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x200, 0x0, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x29, 0x15, {0x15, 0xd, "40aa079e09e36a28923dcba1be0a0c80adb532"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f00000000c0)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4f, "1f743cad19607bf760108e0fe54b22e5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xb, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x30, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0x0, 0x4, [0xffff00, 0x0, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0xce, "c875c14258819f793ce4d8b3d459983d"}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7d, 0x8, 0x2, 0x0, "8ac1db66", "a5d8270f"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0xb0, 0xba, 0x0, 0x8, 0x6}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x15, 0x92, "01bf96449432477b8788f8818130f1cc523e71b0be8c09621f3cf3787050d4640b14fdff4e5e58d36e50b8c37c818708090ab57abf95b0c39aa798303c0e1a276c5ac19bded1791588d6f9f368b6c183cd0082044a6b1440cf35ec63a76d8f9982da522752bf056e953a65bd8ef1e94ea292533f60682a79bfaf92a14542b776437cb4f0ea410c0d6305bc4e2be6915d9b9e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x47}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x10, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "32ab"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "4eb4"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x10}}) syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090240000101008000090400000002020000052406000005240000000d240f01000000000000000000052401"], 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404", @ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x0, 0x11, 0x70, {0x70, 0x9, "128033bb3f8c72c8456f6a2799f0f1df797a853871f2251a72c861d5d8da43ad230bd68354d8aa73371f9557a6a89b64320fa29442b090e37d5367a9e96e75f3fbbf4df9c663ffd866ea8c9a764b9dd6357187a8f2b05da1a69a6887ad498188aa6fcad616ccfe9244a02f566335"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000880)={0x0, 0xf, 0x129, {0x5, 0xf, 0x129, 0x6, [@generic={0x8a, 0x10, 0xb, "5e681b643382c769e0c739ed87224dda55ef98441980eb6e0b325b155ec230f09cfed0f9f9bef4572adaa0a2af9afa48bc2966a3b394e4f12f02073bffdc18373236a460b73c3c5353a5ebc6558eb015f77570e5811982df1f2698579292b69206211c4cb3a23242ff09a03af7e8069f2fa999c76f8b14a574fca0e23c58e2d1556be82946433f"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "fb70a9e96a1102a197371a535b9e2de6"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "be99861744310bfbaee2a21b17871f25"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x80, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x2}, @generic={0x61, 0x10, 0x9, "a165859e3377bfbbb4293ffa71b9d1b0906d2439f05ca44684c8df7071f06ca92ff8ac44faaa1d9dd3a1571538746c50eeba3b05cc575ce728cc8940f795e76be9a891052c12f2b40b828338f8fe69cba2672f6632cd292965794e5f063e"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xec, 0x90, 0x2, 0x81, "cbed8a0c", "f2a79be3"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x10, 0x2, 0x6, 0x2, 0x2, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x9, 0xf0, "801603eb1a86cfab0a7d39ee497392d24d82fa1e2ef39253bc1308e61b48df1bb1f58e555b32cbfcd9bbee0142b2de3c4007d74c20657898f58da3d3ea9d220a73086987b4cc87853d5f5b7d32b07240ca5a7e28207e7d4d51f6691b86df68a4229e32f63006cb77f46dfc9fdbe93ebdcf66b5a5e278159bdf564dea9413a54b1c22e0bfa83e4367bab9cd4a6c87b34a5d5997297f320385739b3a8ffb627386765abb2f56678530d5e9f6d013956217ed9c9c395c2d1eafd5322a473a8a8546f073cf0aa1c59aa3b5c12fec8879a045ed7c34ffd7db8e177e816efe006f3b2da678fb0576192e6771d9fc6dfe249e77"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "cb74"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x380}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "39db"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000e80)={0x40, 0x1c, 0x1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1}, &(0x7f0000000f00)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000102312073f00000000ad9335fd"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES32], 0x0) 2.992319303s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308f31e"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0xc0041) ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000400)="b9425b44651dd2323696") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308f31e"], 0x0) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0xc0041) (async) ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000400)="b9425b44651dd2323696") (async) 2.817946277s ago: executing program 1 (id=2): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003d00)=@ready={0x0, 0x0, 0x8, "6d761ee7", {0x1, 0x5, 0x0, 0x0, 0x6}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x88, &(0x7f0000005140)=@generic={0x3, 0x2, 0x80, "e658140c", "dc4f45a265d154762b22349355851d5b0bf2af86e1b94801c298bde6d5afc6a7cb40e80871c71d650d4ad6edb92a4bdeb3d225f269936519afdb4f5599dc0ec29493cadd4dcc49f764682ee34f51784f03605c0e88c0bf6ff016af2ba6abff3a9842648ed029df92adb0e92525d60f8f0ff0aa4f74c65c1c153a2dc37142e62f"}) r1 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x16, @string={0x16, 0x3, "f7447e660b61c1c818f4ae4f5a567a34f682e064"}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_usb_connect$uac1(0x5, 0xea, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x8a, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x4, 0x1, 0xe5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x5, 0x99, 0x8, 0x8, 0x7f}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x8, 0xa, 0x7, 0x7, 0xa, 0x5], 0x12}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x5, "0404e53b"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x2, 0x4, "44d662"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0x9e}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x4, 0x30, {0x7, 0x25, 0x1, 0x82, 0x7a, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0xbd, "d111b0", "5bf1df"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff80, 0x7f, 0x1, "207764c80116"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x43, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x8, 'p*', "2804"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x94, 0x6}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0xcd, 0x2, 0x10, 0x7}, 0xda, &(0x7f00000003c0)={0x5, 0xf, 0xda, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "8cf5fb6fc9e6b40cbff878d942b22662"}, @generic={0x95, 0x10, 0x4, "4c17b46b9366f2129138f094499d344ae8c5124e743cdd22f767af714bbc3708d4cd72cb8f865252c31f030fedd668eb555ca9cd4f8f567a8b0943c2d0fda84fcc7fc85f7b1019684fcdb1c21b6ef7c628eaa2cfb4733d0173525378ff0b7b95df7c706b920721c498fe918cfa5a614f1890cb4ac761d2ad0faa6a6868334c902962ac0086073b86ff30705ae5b5435fc058"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0xc0, 0x6, 0x4, 0x47}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb9, 0x7, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x2, 0xff00, 0xfb7, [0x30]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000002c0)={0x14, &(0x7f00000004c0)={0x40, 0x1, 0xfc, {0xfc, 0x23, "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"}}, &(0x7f0000000280)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "fbe8d7f76551e94b91bb786e74864728cc9c9559f5fd55451c87e58fab6da2a51641c5582ed4ebe18bfeb8"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x0, 0x0, 0x8, "5ae00a13b907073f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "d15abf"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "b3e1"}, &(0x7f0000000740)={0x20, 0x83, 0x1, '\\'}, &(0x7f0000000780)={0x20, 0x84, 0x3, "a03456"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "c2de51"}}) 2.797665976s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x2, 0x7dc, &(0x7f0000000f80)={{0x12, 0x1, 0x250, 0x8e, 0xc6, 0x3b, 0x20, 0x177f, 0x1163, 0x4623, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ca, 0x3, 0xd, 0x10, 0x0, 0x5, [{{0x9, 0x4, 0x7f, 0x10, 0xb, 0xc4, 0x6a, 0xf1, 0x7, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '/'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x1, 0x2, 0x1}, [@acm={0x4, 0x24, 0x2, 0xe}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5d, 0x4, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x1, 0xd, 0x2, [@generic={0x6c, 0x23, "ff1db454e5f6e249d877ce757b82d8e935bd091ff9cd702680ba4449505bc535207f665c63cb54a4cd4d5bf9695dadb5b90e68904329747889c380b33ed2d5f7a1c48742c7d5eebb7b941d057999139cca15bf715c636cb8042902661e7210fdb7cc8f5acda00e1938f2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x4, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8b, 0x9, 0xd5, [@generic={0x81, 0x31, "0a4ace7a70faf751814dddb5cac4402f6b080f8122d767d54e3d84a09a1d86c5cb2639a91669fc6fb91fc7f387e40dd5a7ecfc204039adb980639224ca7c8d398d747fb43047fce710c0f6a0b994e8f79296451993a9b37249a40b1f4eee43a5492a04dc1c3fdc1050dffd86aa54b6ac6193c32885dec208251610e358eb0c"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x9, 0x35, 0x2, [@generic={0x15, 0x11, "6a734fef33c31f49fd0bbe5d683381531b5321"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x3, 0x9, [@generic={0xba, 0x23, "0a55daec101424c8c6f7b99b9818518cf0a2396c8e612a262c10befeb838f287594ee3c5831effd06d87efbc6c1b034ae25a05f55ff2faa89ea88c42b1a1d0503f9ef1b282b3e2c80d7672ab65ba3d4a39f58d964616aadbcd4b52b50370bb34ce677a565cbc18b6b27b0194aba8d1d29fd8a9a2a859a59dc0e74a4201b58392eabcdd4c3050ad00107daa122ae23848fda5f2ba64ee46437c66a950f1e86a43eb1e65ae45f73233c9c87c6200f2799c0e6679156a112d48"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x1, 0x4, 0x4, [@generic={0x23, 0x3, "3e04fb0d667b16d244c28c55a9214e4dcaf8e99bc4bc5842c604343c19135c4acc"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x2, 0x9, 0x7f, [@generic={0x30, 0x1, "8b895ed8cb3b3429aef5747174c1ed8dbf4377dbefdc271b747fdcfb70ac2d084eb3e87607b3ac9821d18d7ba77d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0x31, 0xa, [@generic={0x82, 0x3, "e6df2b3566fe7349b26ba3aab27e05c439a592a7c3c4a6d396ab91a2b011095331ec8ca76b866d30c47b94ca1beb599aaede945c8ba5e8dfb482c224765d6d551ee84e8c1dc6256983e54ef73add160d7b4018210694d1e4e0d4cb1df251e0007659d9eefdc8e0d3b154eb412a9b5fcf5081e9bedca2a1681e1a1a60d209506b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xfc, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0xa, 0x99, 0x2}}]}}, {{0x9, 0x4, 0x83, 0x75, 0x2, 0x55, 0x4d, 0x5f, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x10, 0x5, [@generic={0x9a, 0x22, "5d3532e78d461b0452297ee31ecfa11f39f728b32efe37df5d6ef7286493e20f2077a77250605996f0374db9b2545b6bc71fb613f2ded099cf1f7ca9fc6ea22c446a2ec40d8cbec23330770a2cde7abed8573f2644f3bf823eeeb04a179c7250f06f9291021a496621dd941b052d8094753c1b7db382f749b90f030c2fd42fdadae36abc62fca24569536101b14982c2d38537548e1df716"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8001}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x93, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}]}}, {{0x9, 0x4, 0x86, 0x68, 0xc, 0xa8, 0x61, 0x31, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xe025, 0x2}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0x8, "dc"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0xe, 0x5, 0x6, 0x7}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "338186"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb, 0x8000, 0xbf}, {0x6, 0x24, 0x1a, 0xf, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x1, 0xce, 0x7f, [@generic={0x79, 0xc, "606b12420f9cf9407ad7eedd698506f5708fe9af091f43914b7755ad012bc9b60fe768e39f1780bbce04bf36edfa238f708e3e4d1848701a8012c1b2fd321428d0e89d05c8c4b4df9f3d541a30621ccea82e8b3712dbdd16f711f87b8ddf03ad0fc003402fb1ad8b2b23ddc6e78fa33ce3f910e7d12acc"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x17, 0x2, 0x3ff, 0x1, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x7, 0xa, 0x10, 0x9b, 0xe, 0x61, [@generic={0x4a, 0x24, "5fc4f1eb6052a10564d0afaa3c1e22e0c5ebbccfb82aa868981b098a4cd5ce8058059044565bf731a30701402498639f583b4e8afa0cb87c8c7efdc7b4d928fa5678c3e3b9b15e33"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0x0, 0x1}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x8, 0x1f, 0x0, 0x7f}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8, 0x80, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x89f8dcece3f4c4df, 0xb, 0x8, 0x3e}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xc, 0x0, 0xf}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x2, 0x0, [@generic={0x1e, 0x3, "fa558b27fdc30a6a7d5e27f34c32547b5b674cbacf998a4028cc02fd"}, @generic={0xa3, 0x8, "aa8a3c1cfd8108d5ded4f6010e6ca8d18b288aad5d83b7c5d6e6c92a5d5f588d48280dd59989149fdb92477b0eb9226d6138a81fef274cca8496b46bcd95e22f2b1be8a0e7415561654f9508ed664e5ceb43009d09468ff4f9be7a456389fff103fe51dccb75da31d2454f64e96c676479b9bd6baaa1dbbb4a8574328bc2fda4412be8c7e8ff3b51005d9e06b65033374b3630f3ca860ba82e12c332c28ff808e4"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0xf1, 0x8, [@generic={0xa5, 0x1e, "f11fffc48e74fc4def6266b98ab28d00a557ce6db3430b144808fd05321738e0d1a12ccd731a337989ef42f4c7679095279bcc74062f5d7c2b881ea403a6795abf83997d9b7075f8ebb6abb03d77efff8b5b427752e42e1bf1b4deaff779eeca6b82f8bc2da0635c609395cc1c68104543c2934a68b8b16b03a9d8aafe44302d99bf895e83de34ca913c655b54a72715b69b6106585a536b0b5e02f5ab6369dc6bdca9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x7, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xe}, @generic={0x3e, 0x9, "de989aa4ca7ba0c79b2c71d96c050996dc79636179e92ba32173fa8ff01a11c1e0e93fa2b9ff88d5da85f68d28185a31deba3d5b8269ff50f0d5f176"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xd, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfff6}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x39, 0x4, 0xa, [@generic={0x23, 0x21, "370be1bb8887e1ff70e46cac8f7d63e3f3f8d93706a61b54a95a78a7f47b33e8bf"}, @generic={0x11, 0x30, "a835815e6ded2fe307b1eec324d8db"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0x8, 0xc, 0x9, 0xff, 0x69}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x4, [{0x102, &(0x7f0000000540)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xc2, &(0x7f00000007c0)=@string={0xc2, 0x3, "c0efdd92babcb719d9b5dfe5d72b08d2fd876f08f8f101f52876f61f008ef0c22adbf93b7b5781595d14c752093e85eb856171f0b1d849f53eaaf853ddcc32ce26e3f0fa6c9cbb9358eaea91bd7df1b7433be060405955c2e2d999e20bc2de5bbcec55ce6bcd4a87151497d70623797a8442fa8cabe7f7bc8fa9f53638a190f8054893a5930d6480d88ce1a77f1657d85b0f64f93c09ebd255d65fe9eb26cf212eb0f0a8a3bc6ec2dc5ec84ab15c9c1f11ca2e64c7809cbb3123040671c96ff4"}}, {0xf3, &(0x7f0000000980)=@string={0xf3, 0x3, "0947a9963882cb91798fca4f94ab9b0e47b35ff0f22800cf9dc43bf946140ce19adc74488888750412bc2a37b1ec280932bae7b6e0d05f29448ccba908e54c9e8f0cf04879d24a084cdc9844e5c8b9074882f3dd43a75f09e857a41252d4cf8b6e3a933dd0d827a62ef0e9eb8d6f0a4fa3fd9472447fec0788f8c1ac84a1204ae449cc0a0a96cf92522e1fb60d3a43d51a98c71c2886838764c40759103a97891148ccc023ccb600f055abda99aad5d28f731e469a400262860b018cb1c84eb8dbb6a221a4af69c3afd517539e4c97de9e87b6cfc67fe3f86ebf6547e2e3b84568104c07d668389ca3c1487d6d2ba2e069"}}]}) r1 = syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000a80)={0x20, 0xf, 0x82, "601e3a8bb26813624a4d72a57968be68bdb84287016440cdb24eef7074535556102c2c0a9cffc9f449c78ecb00b5badb5dfc5a3be643790956dd03c7bd9f433a7407b93947143350e8815ed9a05e35082819406e1939ced5f1d0ed804da86f915d9ea2a01d0b69d9eed8f8c708d613230de8815b32945efb3e2cb32f8d0000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x1, '{;'}, @local=@item_012={0x2, 0x2, 0x0, "c2f2"}]}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0xc, 0x6, "59d10698eead"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000008c0)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="2003be000000be0ceefda1fcc5d5659385cd7769ca92abf5a1fce10e3eacb40f38b48132953976965d9be7a6e4ed4c0d1bb774361fc2f258a06ce8c29cb51e39a4a707454265b6001a824642cb275ddb3a428a5916d71fc48a3f532645b8cee1f20a985ffbbabfed474c8f656230e9aec9468697ee62c9d787f7b8c456b1262fdbfa3bd3ef0f949ff4ff8d34717cfc0e5dae8f37c28ec91932898a077042b742cd45f0b38087d4d5262d54e9d1320eed4a41e77200000000000000000000000000000000b33f658478c110048318f19ac19a05815b8998a8bcb0ea9bbb34ba397d433b9e1fcc"], &(0x7f0000000740)={0x0, 0x3, 0x29, @string={0x29, 0x3, "2702d0f44d1af88c35f67dfcfa4498b9339a32e0a1ba583c61e92503a0274323129b2bf326a1b8"}}}, &(0x7f0000000e40)={0x34, &(0x7f0000000b80)={0x40, 0x11, 0xc5, "aeb1e9b10fb4d08a9c1d9cf9e4fa0ec035684312dd2811e52b2a3166fb6221d452b70d129c2450c5d9f7a432abe8b363140b9efa5e83a36045291e39190aaa8243b596be77539347eaae46232f92c77ed92c2d693e2ed5878e5c4fd1a9b39259d538eaca1d37d295d711510e6135a633bd505eabd707c6535deb2ba6251cc86ece4144e605c6c297ada7e7f67a07771c420049d70ed25141f74715751603a917cf83713828d6d318d4d74da63d818111b5235b184606344a156399a4a0c31d44411adee9fb"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d00)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000d40)={0x40, 0xa0, 0x4}, &(0x7f0000000e00)={0xc0, 0xa2, 0x2f, "e3e98bdf6416340934876ed3cc614e09273edfa126f07f13dabfcc345a67ec16f257b9645027da17e0a80f25e34937"}}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB='\a', @ANYRES32=0x0, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d80)={0x0, 0x0, 0xf, "13c823cb91228757fad8f37e15b5be"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x24, 0x18, {0x18, 0x9, "1ed1598c7d1a63fc62e050be446754ad434886aaa2b6"}}, &(0x7f0000000080)={0x0, 0x3, 0x8, @string={0x8, 0x3, "c500e7250048"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x16, 0x90, "d7382c0637e290a10db7c72badb7015ca8e28f6ade9c939f8c6a68d0c42c70ca1085d86746f02d8140512d6d8d85c1a13fe316ecdbc053705d3654990636f4b83a209f8142a58c244ff48bee3cd89a25ddc1a65e490d4f883748f9c678672e112fd2ddc22cd5b9098b1151e1a55bcb99088f4786e6ef8ab0d2bd0c162880600fce53720ffbbf0c2a7012bdbc6f85b79d"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "f6b8e7692b9b0be6d9b68ec9a5c08573b7ebce0ba382c740f802435aee72e7dd8605667330f114b88ba5f315cf6977"}}) 2.739173808s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d0001000000000904000005030002000921000033012205000905810300000c00070905020300ec0008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x3d, {0x3d, 0x10, "60d4115e4a6b086995dbb816a4f923936b455bd612c103dd040379d2ea130943c7f66c4274954a0c063c8d4fc851204a6ea2bd449644e9448512e0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/95) (async, rerun: 32) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 1.662775208s ago: executing program 2 (id=6): syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16=0xffffffffffffffff], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c0052766d48357e27e88129ca3f14f50ce22c7faeb636872bec213dbc0c73158ed134a7edbe031870d920d2281f2ed0429e2480cdef6846a4b7a5f37e8dbe17a05dc202e36d2583e02cef0bdb975295157d461d712ad9d47eaef20e2b3d2a0ab734266aec6ac27919a2b00e43345344d264b1e042706a40b6963dac50fffb60c0a3208c73e23bf041aa7a2eb9451d1e51d5a498f9f9da0c0b1691ece0333806a26b55d61725613a2868fb"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c0052766d48357e27e88129ca3f14f50ce22c7faeb636872bec213dbc0c73158ed134a7edbe031870d920d2281f2ed0429e2480cdef6846a4b7a5f37e8dbe17a05dc202e36d2583e02cef0bdb975295157d461d712ad9d47eaef20e2b3d2a0ab734266aec6ac27919a2b00e43345344d264b1e042706a40b6963dac50fffb60c0a3208c73e23bf041aa7a2eb9451d1e51d5a498f9f9da0c0b1691ece0333806a26b55d61725613a2868fb"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0xa5, 0x6b, 0x77, 0x20, 0x24c6, 0x830a, 0xdb08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xde, 0x2, 0x2, 0xff, 0x47, 0xd0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000800009040000120701030009050102000000000009058202"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007bacdc10431955220d910102030109022400010000000009048e0002ba92dc000905f302000409088c09050b"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ec17060000000000000109022400010000000009040000010300000009210000000122f804090581030000000300"], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ec17060000000000000109022400010000000009040000010300000009210000000122f804090581030000000300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 1.264048606s ago: executing program 4 (id=7): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x113, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x2, 0x1, 0x7, 0x20, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x81, 0x7, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x22}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x9b, 0x24, 0x13, 0x2, "3a4528888a0d178c0c650aad7fc3e09bb6042d621d6248ab718c13b55d512aecccf47c3834db1c62cc21dc2dbc0d4d5d0150ba5958d489ece5f91bbf695339caa321ea1e27de1bd2b136a179967189fd6cb1c513b584be65564ae30c5bd5ad1a5048bd764cf6bdaa3e9edec7ef9876afd33a2448d3a0dd50009428a6e367ea159fef54f430b115e43aaf6f490fe286d3e04bfe6c937f8d"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfe}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6e, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x4, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x4, 0xfa}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x68, 0x5, 0x8, 0xb6}, 0xd5, &(0x7f0000000400)={0x5, 0xf, 0xd5, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x9, 0x8}, @generic={0x47, 0x10, 0xa, "2fb40e05d315057222bc7e01498411e50b78f98a01a99e29913a8931eb41b1887e09b8c68b4af370d38b0632c2988137934dba2f237fa41ba5749fc091ef34228697a145"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f017407aa66e0910f4d79c4b16b3ceef"}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "a26db91579c9b19b11b64469d5050a3a"}, @generic={0x57, 0x10, 0x3, "cd90898762f8fb9d90af5113c22e45173678c00e10e741ed77a76f6b6ae0e7821573d5d7975c855e9a180a05075866863aed826a6bda894104df45302f09bbe1ab5eca8e26a204f9a6caee043f43b1898e6ccf62"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x843}}, {0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "01bc3342ac57a0f00a967b446afc5b139e6b09016452d1d160c2b9b913a6e5ab28a38afcd46d1e9f92a8015b34a967e5766bb8c603845a5b95a0b8d5027e8931b94a0c86bcc46998f0dc6eaaf8d595ac7d01d0737bfbe1a2933e28a32eb6572e56e628ad063908bc4a321e02ea7fd7c18d12c91c126cb0d831"}}, {0x84, &(0x7f0000000580)=@string={0x84, 0x3, "4ec7046f59ca4e2f71d40399c80b588130bd45a7571b82c94cd5e82bff5314a727ce6741b7cf4e3fae1d6ad193e02a87d68ee7e1d144d844f25b3beef0f2891ddd8ee54cfa3359bae2cbc8a7039310c34e6c2a12c52c8b8d37737e52b9755067480d0ecdcd69d76e09cfc8a05ff972f19c0f6f1c41c643fb37d8989837bed19d69df"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x813}}, {0x9f, &(0x7f0000000680)=@string={0x9f, 0x3, "0e6af5e2368c2db2c24fbf8892cc49c0a51f64b681a351250d2a7d05bafbaf68787cae00a00eb9fbc24d0153f1c6673ea19cf843b65a9ffc00fe11b3e0d912b7f69947bed95f4a8d67b825566679c8e7a4c70669d05e0fc90824e584f12824880a0f92924f329e8edd95a3173b3fceebb221b608195c96cdd8c8ae0e825c88b9a2bf444b5089613af748909ac8ee0ed07e9881ac37e7626257f2e7e6d2"}}, {0xe7, &(0x7f0000000740)=@string={0xe7, 0x3, "5906b566c2281c6387bb091a94131c6cafdf083203c44b97f640d2cfa4d1969ab8401b71943f52a25b76679945a3b03c30edca2c95d01e121908579336738418c5be8bfa53be2d99f67f39c2e18be729ab5a6604e9d4e1a0680c9215eca2182b62e7967856a539edbc717b448539c61870fd3b9c1367a044b92a631b0d4d9feb5093c03d84fd84d7b8a3a7bef455326680ee445198486792b080d7421ce21b9947ebeb7b2905fdbc315460387a02c18c148c28d6ba5d2cd3c227bab94b9a486681c07d7644bbf2acaee2595e47c41bb210edc6f8998304484d691bc0992a8052da8b0b98e6"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x500a}}, {0x63, &(0x7f0000000880)=@string={0x63, 0x3, "2eee43261f0db8f9190316c4cfb163bcc024daee3f90b93e1a94ec0c7e8029a2cd5cf0353e84b62e2ca4cd76ca6d4413a000fddc81cbc8bbf1c08f024079d43062c4989da25185fafa77f831e51a8bdc3c83027253643860c9e857964154dd56ab"}}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x87, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x2, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x60, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 590.207988ms ago: executing program 3 (id=8): syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec47200000000000109022d0001020000000904000007030003000921000036012205000905810300040c028e0905020320"], 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec47200000000000109022d0001020000000904000007030003000921000036012205000905810300040c028e0905020320"], 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003f7512210a3058883f4a70102030109022b000181093000090432fa026a6f920209010c02100000fdda0705fda2"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0x4, 0x8a, &(0x7f0000000040)="b7507547ef9c62ab02ca114c7ad75b1610c8d895d703dfff55e88f41f58fca6bcdef59c13f0e4e3c63e83d75d37199c437f2c96e6d4ec7285d4752e10402b9936911fe0d1096e2ddd47e9e581b4a5e3c02bea19d285c769df3909debfb01d9d3e769afca656f090e6f753519dc14bd5643f4dc37d87726ed02f8a9b6ffd309fc0535621c7ad3010b7ff2") (async) syz_usb_ep_write(r1, 0x4, 0x8a, &(0x7f0000000040)="b7507547ef9c62ab02ca114c7ad75b1610c8d895d703dfff55e88f41f58fca6bcdef59c13f0e4e3c63e83d75d37199c437f2c96e6d4ec7285d4752e10402b9936911fe0d1096e2ddd47e9e581b4a5e3c02bea19d285c769df3909debfb01d9d3e769afca656f090e6f753519dc14bd5643f4dc37d87726ed02f8a9b6ffd309fc0535621c7ad3010b7ff2") syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x20, 0x6, 0x3, "95f06e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 520.66245ms ago: executing program 1 (id=9): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000001600)={{0x12, 0x1, 0x300, 0x56, 0x99, 0x8, 0x10, 0x57c, 0x8503, 0xa4c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x2, 0x40, 0x7, [{{0x9, 0x4, 0xd7, 0x7, 0x1, 0xea, 0xbe, 0xaf, 0x6, [], [{{0x9, 0x5, 0x6dd3c75cfbedce9b, 0x1cea0c4c6302b366, 0x3ff, 0x0, 0x9, 0xc}}]}}]}}]}}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_disconnect(r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x20, 0x0, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf7, 0xc6, 0x34, 0x10, 0x2ef5, 0xa, 0x229d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x0, 0xfe, 0x3e, 0x9c}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000100)={0x60, 0x0, 0x64, {0x64, 0x0, "79441ae97c331ab9ad5c0101d83f64e2ccad5e691ef0763586e10dd56fe683d61b9112ebc852839edef1525f431b9eb68027272409a608673dd3c9161a44eaf3b4b88b2a87b77df4a97f8755d7a6e63d6e9785e223c248ae17245cdb24b5f44f35cf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x1, "02"}, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 44.872680][ T29] audit: type=1400 audit(1758655692.441:61): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 44.878811][ T2950] cgroup: Unknown subsys name 'net' [ 44.895585][ T29] audit: type=1400 audit(1758655692.441:62): avc: denied { mount } for pid=2950 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.923133][ T29] audit: type=1400 audit(1758655692.471:63): avc: denied { unmount } for pid=2950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.028260][ T2950] cgroup: Unknown subsys name 'cpuset' [ 45.037875][ T2950] cgroup: Unknown subsys name 'rlimit' [ 45.275262][ T29] audit: type=1400 audit(1758655692.841:64): avc: denied { setattr } for pid=2950 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.298740][ T29] audit: type=1400 audit(1758655692.851:65): avc: denied { mounton } for pid=2950 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 45.323661][ T29] audit: type=1400 audit(1758655692.851:66): avc: denied { mount } for pid=2950 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 45.360585][ T2953] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 45.370018][ T29] audit: type=1400 audit(1758655692.941:67): avc: denied { relabelto } for pid=2953 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.395589][ T29] audit: type=1400 audit(1758655692.941:68): avc: denied { write } for pid=2953 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.410770][ T2950] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.423137][ T29] audit: type=1400 audit(1758655692.981:69): avc: denied { read } for pid=2950 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.455950][ T29] audit: type=1400 audit(1758655692.981:70): avc: denied { open } for pid=2950 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.320387][ T3012] modprobe (3012) used greatest stack depth: 24072 bytes left [ 51.165122][ T3132] modprobe (3132) used greatest stack depth: 23656 bytes left [ 60.230264][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 60.230292][ T29] audit: type=1400 audit(1758655707.801:77): avc: denied { create } for pid=2962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.305518][ T29] audit: type=1400 audit(1758655707.831:78): avc: denied { write } for pid=2962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.415638][ T29] audit: type=1400 audit(1758655707.981:79): avc: denied { read } for pid=2962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.236738][ T4212] modprobe (4212) used greatest stack depth: 23336 bytes left [ 100.499429][ T29] audit: type=1400 audit(1758655748.071:80): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/root/syzkaller.7x7gXg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.570848][ T29] audit: type=1400 audit(1758655748.101:81): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.592969][ T29] audit: type=1400 audit(1758655748.101:82): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/root/syzkaller.7x7gXg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.618329][ T29] audit: type=1400 audit(1758655748.101:83): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.640423][ T29] audit: type=1400 audit(1758655748.111:84): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/root/syzkaller.7x7gXg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.667261][ T29] audit: type=1400 audit(1758655748.121:85): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/root/syzkaller.7x7gXg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.695212][ T29] audit: type=1400 audit(1758655748.121:86): avc: denied { unmount } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.714931][ T29] audit: type=1400 audit(1758655748.141:87): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.861704][ T2961] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.970432][ T29] audit: type=1400 audit(1758655748.531:88): avc: denied { read write } for pid=2961 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.994963][ T29] audit: type=1400 audit(1758655748.531:89): avc: denied { open } for pid=2961 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.475890][ T38] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.592147][ T1121] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.635497][ T38] usb 1-1: Using ep0 maxpacket: 32 [ 101.642904][ T38] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 101.651100][ T38] usb 1-1: config 0 has no interface number 0 [ 101.657398][ T38] usb 1-1: config 0 interface 9 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.670717][ T38] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=1d.7a [ 101.679858][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.687933][ T38] usb 1-1: Product: syz [ 101.692131][ T38] usb 1-1: Manufacturer: syz [ 101.696814][ T38] usb 1-1: SerialNumber: syz [ 101.705743][ T38] usb 1-1: config 0 descriptor?? [ 101.715593][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.725764][ T5211] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.735557][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.746921][ T1121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 101.758203][ T1121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58120, setting to 1024 [ 101.769472][ T1121] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.778727][ T1121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.790797][ T1121] usb 5-1: config 0 descriptor?? [ 101.880020][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.887516][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.889221][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.898996][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 101.906994][ T9] usb 2-1: Product: syz [ 101.917865][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58368, setting to 1024 [ 101.922042][ T9] usb 2-1: Manufacturer: syz [ 101.922071][ T9] usb 2-1: SerialNumber: syz [ 101.933183][ T5211] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.941517][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 101.942447][ T5211] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 101.972282][ T5211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.981746][ T10] usb 4-1: config 13 has an invalid interface number: 127 but max is 2 [ 101.990244][ T10] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 101.999138][ T10] usb 4-1: config 13 has an invalid interface number: 131 but max is 2 [ 102.006767][ T5211] usb 3-1: config 0 descriptor?? [ 102.007468][ T10] usb 4-1: config 13 has an invalid interface number: 134 but max is 2 [ 102.020720][ T10] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 102.031021][ T10] usb 4-1: config 13 has no interface number 0 [ 102.037268][ T10] usb 4-1: config 13 has no interface number 1 [ 102.043567][ T10] usb 4-1: config 13 has no interface number 2 [ 102.051180][ T10] usb 4-1: config 13 interface 127 altsetting 16 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 102.062509][ T10] usb 4-1: config 13 interface 127 altsetting 16 has a duplicate endpoint with address 0xD, skipping [ 102.073852][ T10] usb 4-1: config 13 interface 127 altsetting 16 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 102.085099][ T10] usb 4-1: config 13 interface 127 altsetting 16 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 102.096234][ T10] usb 4-1: config 13 interface 127 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 102.107376][ T10] usb 4-1: config 13 interface 127 altsetting 16 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 102.118506][ T10] usb 4-1: config 13 interface 127 altsetting 16 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 102.129636][ T10] usb 4-1: config 13 interface 127 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 102.140885][ T10] usb 4-1: config 13 interface 127 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 102.153414][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.169445][ T10] usb 4-1: config 13 interface 131 altsetting 117 has a duplicate endpoint with address 0xC, skipping [ 102.183867][ T10] usb 4-1: config 13 interface 134 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 102.197394][ T10] usb 4-1: config 13 interface 127 has no altsetting 0 [ 102.204315][ T10] usb 4-1: config 13 interface 131 has no altsetting 0 [ 102.211273][ T10] usb 4-1: config 13 interface 134 has no altsetting 0 [ 102.218794][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 102.223769][ T1121] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 102.241869][ T10] usb 4-1: New USB device found, idVendor=177f, idProduct=1163, bcdDevice=46.23 [ 102.251076][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.259183][ T10] usb 4-1: Product: 鋝벺ᦷ뗙⯗툈蟽࡯瘨ῶ踀싰㯹坻妁ᑝ勇㸉憅꨾司쳝츲﫰鱬鎻釪綽럱㭃惠奀쉕숋寞칕쵫蝊ᐕ힗⌆穹䊄賺볷ꦏ㛵ꄸ䠅ꖓඓ聤賘꟡ᙿཛ磻़틫확⛫⇏뀮꣰벣쉮廜䫈岱ᾜ쨑搮胇뮜⌱؄쥱 [ 102.286731][ T1121] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 102.287147][ T10] usb 4-1: Manufacturer: Ⰺ [ 102.303093][ T10] usb 4-1: SerialNumber: 䜉隩舸釋轹俊ꮔປ덇⣲케쒝碌ᑆ䡴袈ѵ밒㜪न먲뛧탠⥟豄꧋鹌ಏ䣰퉹ࡊ䒘죥޹艈ꝃय़埨ኤ푒诏㩮㶓꘧澍伊ﶣ犔罄߬곁ꆄ䨠䧤ૌ阊鋏⹒똟㨍핃頚᳇蘨螃쑤备㨐覗䠑샌찣¶嗰ꪙ틕玏䘞䂚戂ஆ谁좱롎뛛↢꾤썩햯北䲞螞쾶翆뽮䝥䖸ၨ݌棖鰸솣絈⭭ [ 102.303961][ T5211] usbhid 3-1:0.0: can't add hid device: -71 [ 102.342978][ T5211] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.352808][ T5216] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 102.374358][ T5218] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.411158][ T5211] usb 3-1: USB disconnect, device number 2 [ 102.428812][ C1] usb 5-1: input irq status -75 received [ 102.508284][ T1121] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 102.587940][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.604169][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.617611][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.640140][ T5210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.652912][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.670629][ T5210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.681959][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.700658][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.750265][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.766362][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.774350][ T5211] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.776423][ T9] usb 5-1: USB disconnect, device number 2 [ 102.794689][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.804998][ T5213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.826176][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.836001][ T5213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.859569][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.878579][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.889696][ T1121] usb 2-1: USB disconnect, device number 2 [ 102.937478][ T5211] usb 3-1: Using ep0 maxpacket: 32 [ 102.948768][ T5211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.957856][ T5211] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 102.966609][ T5211] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 102.977315][ T5211] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 102.986619][ T5211] usb 3-1: config 128 has no interface number 0 [ 102.995522][ T5211] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 103.006910][ T5211] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.017178][ T5211] usb 3-1: config 128 interface 127 has no altsetting 0 [ 103.027359][ T5211] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 103.036920][ T5211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.044971][ T5211] usb 3-1: Product: syz [ 103.049326][ T5211] usb 3-1: Manufacturer: syz [ 103.053987][ T5211] usb 3-1: SerialNumber: syz [ 103.215184][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.224609][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.236113][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.244987][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.255468][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.260097][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.272815][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.275051][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.283509][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.300279][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.309735][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.309786][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.320987][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.334668][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.343874][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.417222][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 103.428443][ T9] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 103.437603][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.449861][ T9] usb 5-1: config 0 descriptor?? [ 103.455531][ T5238] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.591760][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.606463][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.621996][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.623271][ T5211] usb 3-1: USB disconnect, device number 3 [ 103.640889][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.652198][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.662593][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.672196][ T5218] usb 2-1: Service connection timeout for: 256 [ 103.679078][ T5218] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 103.682076][ T5208] udevd[5208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.691093][ T5218] ath9k_htc: Failed to initialize the device [ 103.714235][ T1121] usb 2-1: ath9k_htc: USB layer deinitialized [ 103.890352][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.899368][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.908365][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.917295][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.927054][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.936442][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.952769][ T9] belkin 0003:1020:0006.0002: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 103.995690][ T10] usb 4-1: reset full-speed USB device number 2 using dummy_hcd [ 104.015544][ T1121] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.150536][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.160223][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.170412][ T5211] usb 5-1: USB disconnect, device number 3 [ 104.174339][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.176385][ T1121] usb 2-1: Using ep0 maxpacket: 16 [ 104.187023][ T1121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.189883][ T10] usb 4-1: device firmware changed [ 104.200722][ T1121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.210593][ T10] ieee80211 phy1: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -19 [ 104.215858][ T1121] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 104.227978][ T10] ieee80211 phy1: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 104.236909][ T1121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.255124][ T10] ieee80211 phy1: rt2x00lib_probe_dev: Error - Failed to allocate device [ 104.279215][ T1121] usb 2-1: config 0 descriptor?? [ 104.290552][ T10] ieee80211 phy2: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -19 [ 104.302552][ T10] ieee80211 phy2: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 104.313315][ T10] ieee80211 phy2: rt2x00lib_probe_dev: Error - Failed to allocate device [ 104.328457][ T10] ieee80211 phy3: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -19 [ 104.340906][ T10] ieee80211 phy3: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 104.350962][ T10] ieee80211 phy3: rt2x00lib_probe_dev: Error - Failed to allocate device [ 104.370897][ T10] usb 4-1: USB disconnect, device number 2 [ 104.388740][ T5221] usb 1-1: USB disconnect, device number 2 [ 104.408784][ T5221] ================================================================== [ 104.416914][ T5221] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250 [ 104.424633][ T5221] Read of size 8 at addr ffff8881187f9898 by task kworker/1:4/5221 [ 104.432661][ T5221] [ 104.435043][ T5221] CPU: 1 UID: 0 PID: 5221 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.435089][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.435114][ T5221] Workqueue: usb_hub_wq hub_event [ 104.435177][ T5221] Call Trace: [ 104.435188][ T5221] [ 104.435201][ T5221] dump_stack_lvl+0x116/0x1f0 [ 104.435244][ T5221] print_report+0xcd/0x630 [ 104.435297][ T5221] ? __virt_addr_valid+0x81/0x610 [ 104.435342][ T5221] ? __phys_addr+0xe8/0x180 [ 104.435386][ T5221] ? hdm_disconnect+0x227/0x250 [ 104.435422][ T5221] kasan_report+0xe0/0x110 [ 104.435466][ T5221] ? hdm_disconnect+0x227/0x250 [ 104.435512][ T5221] hdm_disconnect+0x227/0x250 [ 104.435554][ T5221] usb_unbind_interface+0x1da/0x9e0 [ 104.435588][ T5221] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 104.435632][ T5221] ? __pfx_usb_unbind_interface+0x10/0x10 [ 104.435666][ T5221] device_remove+0x122/0x170 [ 104.435717][ T5221] device_release_driver_internal+0x44b/0x620 [ 104.435779][ T5221] bus_remove_device+0x22f/0x420 [ 104.435828][ T5221] device_del+0x396/0x9f0 [ 104.435881][ T5221] ? __pfx_device_del+0x10/0x10 [ 104.435929][ T5221] ? __pfx___mutex_lock+0x10/0x10 [ 104.435961][ T5221] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 104.436014][ T5221] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.436057][ T5221] usb_disable_device+0x355/0x7d0 [ 104.436109][ T5221] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.436169][ T5221] usb_disconnect+0x2e1/0x9c0 [ 104.436223][ T5221] hub_event+0x1aa2/0x5060 [ 104.436298][ T5221] ? __lock_acquire+0xb97/0x1ce0 [ 104.436333][ T5221] ? __pfx_hub_event+0x10/0x10 [ 104.436384][ T5221] ? interval_tree_remove+0x850/0xee0 [ 104.436439][ T5221] ? rcu_is_watching+0x12/0xc0 [ 104.436490][ T5221] process_one_work+0x9cf/0x1b70 [ 104.436544][ T5221] ? __pfx_process_one_work+0x10/0x10 [ 104.436596][ T5221] ? assign_work+0x1a0/0x250 [ 104.436640][ T5221] worker_thread+0x6c8/0xf10 [ 104.436691][ T5221] ? __kthread_parkme+0x19e/0x250 [ 104.436726][ T5221] ? __pfx_worker_thread+0x10/0x10 [ 104.436772][ T5221] kthread+0x3c5/0x780 [ 104.436813][ T5221] ? __pfx_kthread+0x10/0x10 [ 104.436855][ T5221] ? rcu_is_watching+0x12/0xc0 [ 104.436902][ T5221] ? __pfx_kthread+0x10/0x10 [ 104.436943][ T5221] ret_from_fork+0x56d/0x700 [ 104.436971][ T5221] ? __pfx_kthread+0x10/0x10 [ 104.437010][ T5221] ret_from_fork_asm+0x1a/0x30 [ 104.437063][ T5221] [ 104.437074][ T5221] [ 104.669085][ T5221] Allocated by task 38: [ 104.673252][ T5221] kasan_save_stack+0x33/0x60 [ 104.677964][ T5221] kasan_save_track+0x14/0x30 [ 104.682679][ T5221] __kasan_kmalloc+0x8f/0xa0 [ 104.687297][ T5221] hdm_probe+0xb3/0x19a0 [ 104.691568][ T5221] usb_probe_interface+0x303/0xa40 [ 104.696702][ T5221] really_probe+0x241/0xa90 [ 104.701243][ T5221] __driver_probe_device+0x1de/0x440 [ 104.706659][ T5221] driver_probe_device+0x4c/0x1b0 [ 104.711739][ T5221] __device_attach_driver+0x1df/0x310 [ 104.717152][ T5221] bus_for_each_drv+0x159/0x1e0 [ 104.722041][ T5221] __device_attach+0x1e4/0x4b0 [ 104.726851][ T5221] bus_probe_device+0x17f/0x1c0 [ 104.731734][ T5221] device_add+0x1148/0x1aa0 [ 104.736260][ T5221] usb_set_configuration+0x1187/0x1e20 [ 104.741758][ T5221] usb_generic_driver_probe+0xb1/0x110 [ 104.747347][ T5221] usb_probe_device+0xec/0x3e0 [ 104.752153][ T5221] really_probe+0x241/0xa90 [ 104.756692][ T5221] __driver_probe_device+0x1de/0x440 [ 104.762019][ T5221] driver_probe_device+0x4c/0x1b0 [ 104.767086][ T5221] __device_attach_driver+0x1df/0x310 [ 104.772497][ T5221] bus_for_each_drv+0x159/0x1e0 [ 104.777377][ T5221] __device_attach+0x1e4/0x4b0 [ 104.782183][ T5221] bus_probe_device+0x17f/0x1c0 [ 104.787069][ T5221] device_add+0x1148/0x1aa0 [ 104.791593][ T5221] usb_new_device+0xd07/0x1a60 [ 104.796391][ T5221] hub_event+0x2fce/0x5060 [ 104.800843][ T5221] process_one_work+0x9cf/0x1b70 [ 104.805817][ T5221] worker_thread+0x6c8/0xf10 [ 104.810435][ T5221] kthread+0x3c5/0x780 [ 104.814528][ T5221] ret_from_fork+0x56d/0x700 [ 104.819141][ T5221] ret_from_fork_asm+0x1a/0x30 [ 104.824032][ T5221] [ 104.826373][ T5221] Freed by task 5221: [ 104.830644][ T5221] kasan_save_stack+0x33/0x60 [ 104.835362][ T5221] kasan_save_track+0x14/0x30 [ 104.840082][ T5221] kasan_save_free_info+0x3b/0x60 [ 104.845136][ T5221] __kasan_slab_free+0x3e/0x50 [ 104.849932][ T5221] kfree+0x283/0x470 [ 104.853860][ T5221] device_release+0xa4/0x240 [ 104.858560][ T5221] kobject_put+0x1e7/0x5a0 [ 104.863013][ T5221] device_unregister+0x2f/0xc0 [ 104.867829][ T5221] hdm_disconnect+0x10b/0x250 [ 104.872535][ T5221] usb_unbind_interface+0x1da/0x9e0 [ 104.877752][ T5221] device_remove+0x122/0x170 [ 104.882382][ T5221] device_release_driver_internal+0x44b/0x620 [ 104.888490][ T5221] bus_remove_device+0x22f/0x420 [ 104.893456][ T5221] device_del+0x396/0x9f0 [ 104.897820][ T5221] usb_disable_device+0x355/0x7d0 [ 104.902921][ T5221] usb_disconnect+0x2e1/0x9c0 [ 104.907649][ T5221] hub_event+0x1aa2/0x5060 [ 104.912098][ T5221] process_one_work+0x9cf/0x1b70 [ 104.917066][ T5221] worker_thread+0x6c8/0xf10 [ 104.921685][ T5221] kthread+0x3c5/0x780 [ 104.925788][ T5221] ret_from_fork+0x56d/0x700 [ 104.930400][ T5221] ret_from_fork_asm+0x1a/0x30 [ 104.935191][ T5221] [ 104.937523][ T5221] The buggy address belongs to the object at ffff8881187f8000 [ 104.937523][ T5221] which belongs to the cache kmalloc-8k of size 8192 [ 104.951599][ T5221] The buggy address is located 6296 bytes inside of [ 104.951599][ T5221] freed 8192-byte region [ffff8881187f8000, ffff8881187fa000) [ 104.965588][ T5221] [ 104.967930][ T5221] The buggy address belongs to the physical page: [ 104.974379][ T5221] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1187f8 [ 104.983265][ T5221] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.991902][ T5221] anon flags: 0x200000000000040(head|node=0|zone=2) [ 104.998535][ T5221] page_type: f5(slab) [ 105.002538][ T5221] raw: 0200000000000040 ffff888100042280 0000000000000000 dead000000000001 [ 105.011145][ T5221] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 105.019753][ T5221] head: 0200000000000040 ffff888100042280 0000000000000000 dead000000000001 [ 105.028448][ T5221] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 105.037147][ T5221] head: 0200000000000003 ffffea000461fe01 00000000ffffffff 00000000ffffffff [ 105.045850][ T5221] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 105.054540][ T5221] page dumped because: kasan: bad access detected [ 105.061046][ T5221] page_owner tracks the page as allocated [ 105.066766][ T5221] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2899, tgid 2899 (mkdir), ts 25437550136, free_ts 24756639336 [ 105.085467][ T5221] post_alloc_hook+0x1c0/0x230 [ 105.090284][ T5221] get_page_from_freelist+0xf98/0x2ce0 [ 105.095800][ T5221] __alloc_frozen_pages_noprof+0x259/0x21e0 [ 105.101737][ T5221] alloc_pages_mpol+0xe4/0x410 [ 105.106534][ T5221] new_slab+0x247/0x330 [ 105.110726][ T5221] ___slab_alloc+0xc55/0x1620 [ 105.115440][ T5221] __slab_alloc.constprop.0+0x56/0xb0 [ 105.120850][ T5221] __kmalloc_cache_noprof+0x209/0x3c0 [ 105.126257][ T5221] audit_log_d_path+0xe7/0x200 [ 105.131056][ T5221] audit_log_lsm_data+0xf87/0x1fe0 [ 105.136194][ T5221] common_lsm_audit+0x238/0x300 [ 105.141075][ T5221] slow_avc_audit+0x186/0x210 [ 105.145782][ T5221] avc_has_perm+0x1b5/0x1f0 [ 105.150314][ T5221] inode_has_perm+0x168/0x1d0 [ 105.155036][ T5221] selinux_inode_getattr+0x34e/0x4d0 [ 105.160353][ T5221] security_inode_getattr+0xbf/0x110 [ 105.165667][ T5221] page last free pid 2884 tgid 2884 stack trace: [ 105.172013][ T5221] __free_frozen_pages+0x78a/0xfd0 [ 105.177161][ T5221] __put_partials+0x165/0x1c0 [ 105.181880][ T5221] qlist_free_all+0x4d/0x120 [ 105.186496][ T5221] kasan_quarantine_reduce+0x195/0x1e0 [ 105.191981][ T5221] __kasan_slab_alloc+0x4e/0x70 [ 105.196865][ T5221] kmem_cache_alloc_noprof+0x14f/0x3b0 [ 105.202368][ T5221] __anon_vma_prepare+0xae/0x5e0 [ 105.207345][ T5221] __vmf_anon_prepare+0x11c/0x240 [ 105.212403][ T5221] __handle_mm_fault+0x90c/0x3210 [ 105.217468][ T5221] handle_mm_fault+0x589/0xd10 [ 105.222266][ T5221] do_user_addr_fault+0x613/0x1240 [ 105.227403][ T5221] exc_page_fault+0x5c/0xb0 [ 105.231946][ T5221] asm_exc_page_fault+0x26/0x30 [ 105.236822][ T5221] [ 105.239159][ T5221] Memory state around the buggy address: [ 105.244805][ T5221] ffff8881187f9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.252886][ T5221] ffff8881187f9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.260970][ T5221] >ffff8881187f9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.269050][ T5221] ^ [ 105.273924][ T5221] ffff8881187f9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.282005][ T5221] ffff8881187f9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.290081][ T5221] ================================================================== [ 105.298294][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.299227][ T5221] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.299254][ T5221] CPU: 1 UID: 0 PID: 5221 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.299301][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.299327][ T5221] Workqueue: usb_hub_wq hub_event [ 105.299386][ T5221] Call Trace: [ 105.299399][ T5221] [ 105.299413][ T5221] dump_stack_lvl+0x3d/0x1f0 [ 105.299457][ T5221] vpanic+0x6e8/0x7a0 [ 105.299502][ T5221] ? __pfx_vpanic+0x10/0x10 [ 105.299550][ T5221] ? hdm_disconnect+0x227/0x250 [ 105.299608][ T5221] panic+0xca/0xd0 [ 105.299648][ T5221] ? __pfx_panic+0x10/0x10 [ 105.299698][ T5221] check_panic_on_warn+0xab/0xb0 [ 105.299743][ T5221] end_report+0x107/0x170 [ 105.299791][ T5221] kasan_report+0xee/0x110 [ 105.299841][ T5221] ? hdm_disconnect+0x227/0x250 [ 105.299894][ T5221] hdm_disconnect+0x227/0x250 [ 105.299959][ T5221] usb_unbind_interface+0x1da/0x9e0 [ 105.300000][ T5221] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 105.300049][ T5221] ? __pfx_usb_unbind_interface+0x10/0x10 [ 105.300087][ T5221] device_remove+0x122/0x170 [ 105.300150][ T5221] device_release_driver_internal+0x44b/0x620 [ 105.300227][ T5221] bus_remove_device+0x22f/0x420 [ 105.300282][ T5221] device_del+0x396/0x9f0 [ 105.300339][ T5221] ? __pfx_device_del+0x10/0x10 [ 105.300394][ T5221] ? __pfx___mutex_lock+0x10/0x10 [ 105.300429][ T5221] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 105.300488][ T5221] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.300537][ T5221] usb_disable_device+0x355/0x7d0 [ 105.300593][ T5221] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.300657][ T5221] usb_disconnect+0x2e1/0x9c0 [ 105.300715][ T5221] hub_event+0x1aa2/0x5060 [ 105.300786][ T5221] ? __lock_acquire+0xb97/0x1ce0 [ 105.300825][ T5221] ? __pfx_hub_event+0x10/0x10 [ 105.300885][ T5221] ? interval_tree_remove+0x850/0xee0 [ 105.300945][ T5221] ? rcu_is_watching+0x12/0xc0 [ 105.301001][ T5221] process_one_work+0x9cf/0x1b70 [ 105.301062][ T5221] ? __pfx_process_one_work+0x10/0x10 [ 105.301119][ T5221] ? assign_work+0x1a0/0x250 [ 105.301168][ T5221] worker_thread+0x6c8/0xf10 [ 105.301234][ T5221] ? __kthread_parkme+0x19e/0x250 [ 105.301272][ T5221] ? __pfx_worker_thread+0x10/0x10 [ 105.301325][ T5221] kthread+0x3c5/0x780 [ 105.301370][ T5221] ? __pfx_kthread+0x10/0x10 [ 105.301417][ T5221] ? rcu_is_watching+0x12/0xc0 [ 105.301468][ T5221] ? __pfx_kthread+0x10/0x10 [ 105.301514][ T5221] ret_from_fork+0x56d/0x700 [ 105.301550][ T5221] ? __pfx_kthread+0x10/0x10 [ 105.301595][ T5221] ret_from_fork_asm+0x1a/0x30 [ 105.301655][ T5221] [ 105.306118][ T5221] Kernel Offset: disabled