last executing test programs: 452.01772ms ago: executing program 3 (id=4): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @cond=[{0x283, 0xfff, 0x1, 0x1, 0x3ff, 0x401}, {0x400, 0x2, 0x5, 0x6, 0x4, 0x200}]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x1, 0xe8, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e640b0e755f45f91f4b30c8c49475cfb6045b3a4886bddc89b17f03b46ca395d2fab9052906ea669df28484652822fb0bb0b395d161aec424718d1e1dcc5adc4cef9363a93024159b6d7e4e0e2d5cc8ab637193f3efe80d0a2fdcd22b8e4e96dffb6bb350d25a82f272ad0ee1237a9a7b0b3f7dc9ca26d2d54cbf2181d2194cc62965a20bba7b1729b8eccd05d4fe3221476a3f84e565bc054a47fb49d34831e0d9515dce4c3b24b6c432e9916d1cdb9cad4672ab05adc0a8b773cba8d6a26d8bbe8f0edf5b43aa258c76fd"}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x4, "74a93919"}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000000)=0x2) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x83, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400501"]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x83, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001b00)={0x2c, &(0x7f0000001900)={0x20, 0x0, 0x4, "1281ab5f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x6fc, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x8c, 0x17, 0xec, 0x8, 0x411, 0x9, 0x607d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ea, 0x2, 0x3, 0x8, 0x80, 0x6, "", [{{0x9, 0x4, 0x9d, 0x9, 0xa, 0x2, 0x95, 0xa1, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "4328f00f90"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0xc415, 0x2, 0x1, 0x56}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x1, 0xd}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x5, [0x2, 0x3, 0x9]}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x9, [0x8, 0x4, 0x1, 0xfffb, 0x62, 0x8]}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x42, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0x7, 0xc, 0x800, 0xd}, @mdlm_detail={0x5c, 0x24, 0x13, 0x6, "811baafb42124975cd69c51f0516d9cf9a0e796605cbd6e9d5d6a8d81db6e540a4b4b964a18ae0800c017eb396868a6994457fc28614e7b9dfccfcb16ddf70b948e8c42bcced98af7cade0c96e0cac2896f54234e229611b"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "2df457"}, {0x5, 0x24, 0x0, 0x7e9}, {0xd, 0x24, 0xf, 0x1, 0xaa, 0x400, 0xfff8, 0x1}, [@acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0xb, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xff, 0x3, 0xe}]}], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x6, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x5, 0xf2, [@generic={0xc0, 0x21, "8363b259a0c979c895a2c90729bd4ae4f1395ed0c628bae2f1b595dab374d349d7ecf44324738491c11e5f74a8f4829571bcc72603c4b33d74204eda71dab2ca224b4c576e287293814ff84e19e11b71e0ee0a19482a214c7cc227be4dc3b981b0a4d324e52aead3d6edb9dd67869953e7a4a6834f25ce9e4bed06bec78f4fef0e19c90fbcd0dc7cfb460b782ca0b94ea1614c6c515f68ddcc65853c4ce0452e094d54dec4f98d21c8c8a5c158990423a568a684b8c3820f3ff9c6f6b1cb"}]}}, {{0x9, 0x5, 0xd, 0x15, 0x3ff, 0xa, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5d, 0x2}]}}, {{0x9, 0x5, 0x7, 0x12, 0x10, 0x2, 0x81, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6f, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x100}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x6, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xc}, @generic={0xac, 0x23, "fdf2e531f7e130f5c4a620f8b03d9bf2e1a0db8cab65b5ecbf22900268fcbf0bde13f13cb9864f4620dda28d86438d0d7083e41b949a68d6342ec5e8c5cd5335e2d8b5e067efc8e965dca483938dbd4ed6775a02fd07c16be2b8a98aadd8c8ddba725665e87c7e57d8afc9f340ee648243757a8560a5720ea3e07c54a825361f8c94ef73da5962d82434051c8586294eca64c60bec20a0bbeb0c31cd176fc7a19da2fdd00fa529c401d4"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x2, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @generic={0xa5, 0x22, "d33faadf9e5ec3d25bca256578b346da7e0fa5c191d99f47b53a0cc228086e8c733982dc12b20dd0e4f108fdc412a6402caea776f5752ae9115d9652826682a1279dc47db5f6de9763f1b2b431dbaefb41150695f325f5da29a036df37ce638cfdb7c2fdd793fb2ca7a2b3ff772db02240b071b3ed98a894e93a06f889c45a6b68bf6e09c3c01147c2cafc57a8a890cc3851261da79f2677e608a226c459327c12359e"}]}}, {{0x9, 0x5, 0x3, 0x13, 0x3ff, 0x2, 0x6, 0x9, [@generic={0xa4, 0xe, "af1711a7c0d3e0c631af391b81e32566841166e8c9c61e301b58f6cd7237a12bda07d619cd2a5c4577e6dc583dfea12e8b8b95f2f675265f81a42c851084d6b3c75e61038f8885b80324c1e10a3eabeae06d1da76d47b7700d17638186b067c80dd0fe28a7316790eb1aa177b590ab76f59ec9914593bb619a53cf9e605071537100f53bfb3a9456d7e4ac130ca4c0e836fe4630c0e7bbca7bc28b9c834f4b2048c5"}, @generic={0x3c, 0x31, "b8fe7df7431d53ff393126b5056d1e228c242d319f978557ce9014472a9a7fddbe98707a3214f5aab1355d754e5d62a424cb1b9d5fcbde293c80"}]}}, {{0x9, 0x5, 0xc, 0x5, 0x3ff, 0x8, 0x2, 0xb4, [@generic={0x5c, 0xb, "59bc3dce31985128d5b06a63c12eec679cf6363876410e39d396f6f9929e428b35d3000eef57daa32b7a8c4de97ff482491f39c457f5e195471a19ee028e05b8c013695f3aa19426b21cd3b64ee5c214bb70dfa4b6f02af40e33"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf}]}}]}}, {{0x9, 0x4, 0x10, 0x1, 0x6, 0xd5, 0x78, 0xa4, 0x55, [], [{{0x9, 0x5, 0xc, 0x3, 0x3cf, 0x2, 0x1, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x5, 0xff, 0x81}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7f, 0x7, 0x80, [@generic={0x80, 0xa, "8caf3ddb7900f733ac8113474e5a2f8037df56e0e1dddbd0ef7d6bc410b717406b5196ced6cf726dc040402e10a469665b44e6c9b3d02f306b5dda1a8db5a2edb30768b45696430c7c383ce922c6d3885e3a3733cebc09736f0789561bfbe01fb2c82139a339d0e34c077def783a04d1a7dc8f87f2120a7ebdc643c2388f"}, @generic={0x7c, 0x24, "fbae96d8c5fd4d1b9a81f5919a96f2dee8577a9414ed41940f08df7d31a331997594d3c76f452e2fe62edff02551aa90bf969efb821fa40cc8e42e59cfb7efea209b885ddab9f7d699adef8f3fe95f37a840640a7648e8bcce11c2fbc4c510549ac637f019908ecb509146c836f5d7a3399de62f8a0f3fb81a19"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x1, 0x6, 0x2b, [@generic={0xb8, 0x21, "14f2d07aa0b3c8395e1479e48f1db26b359a5196fdc1f812060abecfddd75e82a259f11aa0680c7e8a49c866341501ec1a3a025fb140d34fa6a70a36ae4fdcbd788ddf3f0ca05a65b9406d5c4e22dd77716b693574dd2d59dbfc32be0e7986bd2b884b8df79adab93122c535e2d1a32b701a52893a033f8a9b051a7577dabad0b735dd3810dc2f072f969e0d973d450d91d41728f9798b18e47eccf1f3ab96304e47afc09309b5001f7c875c1bbc598512f5646d9035"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xde}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xe, 0xe6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xa14b5238601fb616, 0x4, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0x8, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xda, 0x4}]}}]}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x310, 0x0, 0x9, 0x7, 0x10, 0x9}, 0x35, &(0x7f0000001300)={0x5, 0xf, 0x35, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x33, 0xd, 0x0, 0x100, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x9, 0x4, 0x0, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "f0250546cf7065b0051aaff5560792fd"}]}, 0x4, [{0x86, &(0x7f0000001340)=@string={0x86, 0x3, "fd5504c1edde73cd5b636cf0abf610327a7d483c101dfa2b41536cf4dd6b6bc7e08ed1d17a542fd69d9787d2671ce0b72e2111f76fd9184024dc736114b1848dd3dad58e9fdf2a19494ded18055e3e939262752772b1498d55783a84eea9630b824711acafd8b4ee4c0f1da79a61d862969a8707222d84d56154ea44ad69c31c1073090f"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x411}}, {0xcd, &(0x7f0000001440)=@string={0xcd, 0x3, "d823860ae29e83417471dc48cb9973cdad685a12a389682104b86ab1851ccdb16b55ac97890c4852ea46aa96fcd242cec24f7433220738ca30865afc11de0f7367ed46b6f4cf728f9ed34bc64072191ff1aaed946b17dca85ae27fe04c95b735b14e03ee45d80ab121dc818885886ee93fbad06679f193ba385bb7a43b307e67b8977916e79ad87fea42d9fbfdb084c8f87817a4d4e4b57626426ea37bb4c1fe6ef93b722ed72c381c593f936464e085217d153cdba93a4e8a3b559c36c2aaadf34422e50a5f360a6659af"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x430}}]}) 258.306394ms ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r2, 0x81, 0x14, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a") (async) syz_usb_ep_write(r2, 0x81, 0x14, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a") syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xa, 0x0, 0x81}]}}) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x4, "00bd24ba"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x4, "00bd24ba"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000007c0)={0x20, 0x18, 0x4, "7f46cf1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 192.643326ms ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000640)={0x0, 0x40, 0x51, "27e9a3b20dc06d0efa7ef24e4c34682bead8359c71a20b3d9a81000000000000006e4e425569d83e5a88abd653ee9b22783b1b3b0292592433aaa4f8ad6c529e9b3be5f8d6e32fbac94148777321f0008d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x196, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x184, 0x2, 0x1, 0x6, 0x40, 0x62, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8c, 0x7, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8ef, 0x3, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2d}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xff, 0x14, 0x8, 0x4, 0xc1}, @mbim={0xc, 0x24, 0x1b, 0xccd, 0xa, 0x7, 0x6, 0xfff}, @mdlm_detail={0xfc, 0x24, 0x13, 0xb, "17c0d743a8e533fc5a01e998fb61ecfd54ade689578ad4b703443a12060bcea584c762fd4c2a9a9a22326866b0e8993a1dfc69e8c12fb56d42f4c7889d5fc1a1426dd5b65a2d3b213a573ca0a4ea4a008cd455fa28e6ab06014a0ce07710fed9a7d8daf8bd7f5a3ae410025fc6d18c243b71e605ce5fb1c4262c148fa334ea841e266f560107c65107962f626822019e9f4a671f0cf14f42f4128727cfa9056a0f282a866c2fbf8a79ed67779f72a21a495fd42a4a4cab01b3f02c9264c86956b4c7ba5db72f313b8d0be6e6b604bdaa6e225d1d7878461078533681cd8d3e9b4aa4307bfba49086b4d12a7f82dce785dc3c11a6e6158fea"}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x210, 0x6, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x13, 0x87, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x7, 0xf8}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x0, 0xfe, 0xcd, 0xdf, 0x7}, 0x15, &(0x7f00000008c0)={0x5, 0xf, 0x15, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x8, 0x1, 0x5}, @generic={0x9, 0x10, 0xa, "196bc5f51738"}]}, 0x3, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x448}}, {0x1d, &(0x7f0000000980)=@string={0x1d, 0x3, "cf30b27a5ef06949f81e0be43ca98f1cae59fc10bab091e759804d"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)={0x40, 0x36, 0x5, "af58bc656e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xb, 0x2, 0xf7, 0x0, 0x3, 0x5, 0x5, 0x6, 0x814, 0xfc, 0x4, 0x4f}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x5, {0x5, 0x12, "18eb60"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x20, 0x1, 0x8d, "57459f4df59a5fb871009081a7a4fc3902f19a92eadda5f60abb199ef7c870c9d8270c43c83e3b8316f8eb4a38a6a53557d4d60eca50b8a74703fed3d1b8ab79b02ccef00b6f2500e7f0204c4f9637f604e1c76ccb0449dff42b9d20b5c96eec1f0929458c3e51069b6ec2d0e0d8ee13e74612e1e51ef87d45ccecbddde75fa7abbb9677f82ea41220b90de168"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x3, 0x9c88, 0x7, 0x6, 0x6, 0x4, 0x8, 0x8001, 0x4, 0xf, 0x4, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x9fd}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) 167.738776ms ago: executing program 1 (id=2): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a3010524"], 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) syz_usb_connect(0x5, 0x777, &(0x7f0000000840)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x2, 0x3, &(0x7f0000000580)="05c75f") syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="ff0987") syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x13, 0x82, 0x7f, 0x10, 0x1614, 0x407, 0xfcb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x13, 0x6, 0x0, 0x8, 0x1a, 0x27, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 0s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab120000eb1e000000010902240001b30000040904410017ff5d81000905f7ffff"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 44.688674][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 44.688747][ T29] audit: type=1400 audit(1788053832.420:77): avc: denied { mounton } for pid=2962 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 44.693342][ T29] audit: type=1400 audit(1788053832.420:78): avc: denied { mount } for pid=2962 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.697122][ T2962] cgroup: Unknown subsys name 'net' [ 44.699527][ T29] audit: type=1400 audit(1788053832.430:79): avc: denied { unmount } for pid=2962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.864813][ T2962] cgroup: Unknown subsys name 'cpuset' [ 44.872564][ T2962] cgroup: Unknown subsys name 'rlimit' [ 45.023709][ T29] audit: type=1400 audit(1788053832.760:80): avc: denied { setattr } for pid=2962 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.131370][ T2965] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 45.142258][ T29] audit: type=1400 audit(1788053832.860:81): avc: denied { relabelto } for pid=2965 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 45.142325][ T29] audit: type=1400 audit(1788053832.870:82): avc: denied { write } for pid=2965 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.188374][ T2962] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.206981][ T29] audit: type=1400 audit(1788053832.920:83): avc: denied { read } for pid=2962 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.207094][ T29] audit: type=1400 audit(1788053832.920:84): avc: denied { open } for pid=2962 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.013094][ T29] audit: type=1400 audit(1788053833.750:85): avc: denied { execmem } for pid=2966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.400514][ T29] audit: type=1400 audit(1788053834.120:86): avc: denied { read } for pid=2971 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.306699][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 59.306749][ T29] audit: type=1400 audit(1788053847.040:91): avc: denied { create } for pid=2971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.337906][ T29] audit: type=1400 audit(1788053847.040:92): avc: denied { write } for pid=2971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.489823][ T29] audit: type=1400 audit(1788053847.220:93): avc: denied { read } for pid=2971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.576800][ T4090] modprobe (4090) used greatest stack depth: 23000 bytes left [ 100.645375][ T29] audit: type=1400 audit(1788053888.380:94): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/root/syzkaller.1RmSrP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.646464][ T29] audit: type=1400 audit(1788053888.380:95): avc: denied { mount } for pid=2971 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.648972][ T29] audit: type=1400 audit(1788053888.380:96): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/root/syzkaller.1RmSrP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.657111][ T29] audit: type=1400 audit(1788053888.380:97): avc: denied { mount } for pid=2971 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.661576][ T29] audit: type=1400 audit(1788053888.380:98): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/root/syzkaller.1RmSrP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.664526][ T29] audit: type=1400 audit(1788053888.380:99): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/root/syzkaller.1RmSrP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.668656][ T29] audit: type=1400 audit(1788053888.380:100): avc: denied { unmount } for pid=2971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.679313][ T29] audit: type=1400 audit(1788053888.410:101): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 101.079447][ T2971] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.105081][ T29] audit: type=1400 audit(1788053888.840:102): avc: denied { read write } for pid=2971 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.107916][ T29] audit: type=1400 audit(1788053888.840:103): avc: denied { open } for pid=2971 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.359420][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.360074][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.482771][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.622406][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.642982][ T11] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 101.645754][ T11] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.645815][ T11] usb 4-1: config 0 has no interface number 0 [ 101.645864][ T11] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.648019][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.648049][ T11] usb 4-1: Product: syz [ 101.648069][ T11] usb 4-1: Manufacturer: syz [ 101.648089][ T11] usb 4-1: SerialNumber: syz [ 101.657684][ T11] usb 4-1: config 0 descriptor?? [ 101.664347][ T5224] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.677684][ T11] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 101.742458][ T5228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.772269][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 101.772960][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.774076][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.774107][ T9] usb 5-1: config 0 has no interface number 0 [ 101.774186][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 101.776614][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.776651][ T9] usb 5-1: Product: syz [ 101.776671][ T9] usb 5-1: Manufacturer: syz [ 101.776723][ T9] usb 5-1: SerialNumber: syz [ 101.785138][ T9] usb 5-1: config 0 descriptor?? [ 101.813764][ T5224] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 101.814992][ T5224] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.815053][ T5224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.815117][ T5224] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.815148][ T5224] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.815197][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.825347][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.893104][ T5228] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 101.894567][ T5228] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 101.894616][ T5228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.894647][ T5228] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.894700][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.905272][ T5232] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 101.950003][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 101.996397][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.996923][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.009390][ T11] usb 4-1: USB disconnect, device number 2 [ 102.018298][ T11] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 102.055061][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.055613][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.076810][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.090867][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.090926][ T24] usb 1-1: Product: syz [ 102.090973][ T24] usb 1-1: Manufacturer: syz [ 102.091001][ T24] usb 1-1: SerialNumber: syz [ 102.116113][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.120508][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.134960][ T24] usb 1-1: config 0 descriptor?? [ 102.291711][ T5223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.291995][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.296324][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.298310][ T5223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.346508][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.353937][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 102.468414][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.474105][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.522320][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.526483][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.527410][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.529557][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.530566][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.672826][ T11] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 102.674063][ T11] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 102.674130][ T11] usb 4-1: config 0 has no interface number 0 [ 102.674205][ T11] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.676741][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.676771][ T11] usb 4-1: Product: syz [ 102.676791][ T11] usb 4-1: Manufacturer: syz [ 102.676810][ T11] usb 4-1: SerialNumber: syz [ 102.686508][ T11] usb 4-1: config 0 descriptor?? [ 102.708436][ T11] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 102.745728][ T5236] Bluetooth: hci0: Reading Intel version command failed (-71) [ 102.750083][ T11] usb 2-1: USB disconnect, device number 2 [ 102.900817][ T5224] ------------[ cut here ]------------ [ 102.900845][ T5224] [PLANE:35:plane-0] pixel format with alpha exposed but blend mode not setup [ 102.900880][ T5224] WARNING: drivers/gpu/drm/drm_mode_config.c:872 at drm_mode_config_validate+0xfb4/0x1be0, CPU#0: kworker/0:3/5224 [ 102.929687][ T5224] Modules linked in: [ 102.934057][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.943686][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.954088][ T5224] Workqueue: usb_hub_wq hub_event [ 102.959336][ T5224] RIP: 0010:drm_mode_config_validate+0xfbb/0x1be0 [ 102.966790][ T5224] Code: 00 49 8b 57 18 48 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 00 0b 00 00 48 8d 3d fc 06 ce 07 41 8b b7 c8 00 00 00 <67> 48 0f b9 3a e9 fa fd ff ff 48 8b 5c 24 20 e8 31 3d 68 fe 48 8d [ 102.987779][ T5224] RSP: 0018:ffffc900028cedd0 EFLAGS: 00010246 [ 102.994932][ T5224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90010668000 [ 103.003657][ T5224] RDX: ffff888104ea8fe0 RSI: 0000000000000023 RDI: ffffffff8b1a99a0 [ 103.012020][ T5224] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 103.021233][ T5224] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed102240f9ca [ 103.029520][ T5224] R13: ffffed102240f9cb R14: 0000000000000001 R15: ffff88811207cd60 [ 103.038147][ T5224] FS: 0000000000000000(0000) GS:ffff8882683eb000(0000) knlGS:0000000000000000 [ 103.047646][ T5224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.054728][ T5224] CR2: 00005606a748aa28 CR3: 0000000133738000 CR4: 00000000003506f0 [ 103.063092][ T5224] Call Trace: [ 103.066703][ T5224] [ 103.070120][ T5224] ? __debugfs_create_file+0x347/0x4d0 [ 103.076606][ T5224] drm_dev_register+0x56e/0x7b0 [ 103.081756][ T5224] gud_probe+0x17f4/0x1c20 [ 103.086769][ T5224] ? __pfx_gud_probe+0x10/0x10 [ 103.091933][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.098731][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.105236][ T5224] ? __pm_runtime_set_status+0x13c/0x970 [ 103.111840][ T5224] usb_probe_interface+0x386/0x9b0 [ 103.117314][ T5224] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.123661][ T5224] ? kernfs_put+0x3f/0x60 [ 103.128284][ T5224] ? sysfs_create_link+0x68/0xc0 [ 103.133649][ T5224] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.139804][ T5224] really_probe+0x241/0xa60 [ 103.144764][ T5224] __driver_probe_device+0x210/0x460 [ 103.150223][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.156163][ T5224] driver_probe_device+0x4a/0x140 [ 103.161618][ T5224] __device_attach_driver+0x1df/0x320 [ 103.167867][ T5224] ? __pfx___device_attach_driver+0x10/0x10 [ 103.173882][ T5224] bus_for_each_drv+0x159/0x1e0 [ 103.178801][ T5224] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.184395][ T5224] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.189824][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.196007][ T5224] __device_attach+0x1e4/0x4d0 [ 103.200912][ T5224] ? __pfx___device_attach+0x10/0x10 [ 103.206342][ T5224] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.211735][ T5224] device_initial_probe+0xaf/0xd0 [ 103.216892][ T5224] bus_probe_device+0x64/0x160 [ 103.221877][ T5224] device_add+0x121d/0x1970 [ 103.226590][ T5224] ? __pfx_device_add+0x10/0x10 [ 103.231520][ T5224] ? mark_held_locks+0x40/0x70 [ 103.237061][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.243214][ T5224] usb_set_configuration+0xd97/0x1c60 [ 103.249608][ T5224] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.256021][ T5224] usb_generic_driver_probe+0xa1/0xe0 [ 103.261857][ T5224] usb_probe_device+0xef/0x400 [ 103.266990][ T5224] ? __pfx_usb_probe_device+0x10/0x10 [ 103.272607][ T5224] really_probe+0x241/0xa60 [ 103.277423][ T5224] __driver_probe_device+0x210/0x460 [ 103.283149][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.289288][ T5224] driver_probe_device+0x4a/0x140 [ 103.294567][ T5224] __device_attach_driver+0x1df/0x320 [ 103.300237][ T5224] ? __pfx___device_attach_driver+0x10/0x10 [ 103.306427][ T5224] bus_for_each_drv+0x159/0x1e0 [ 103.311491][ T5224] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.317348][ T5224] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.322725][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.328668][ T5224] __device_attach+0x1e4/0x4d0 [ 103.333665][ T5224] ? __pfx___device_attach+0x10/0x10 [ 103.339328][ T5224] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.344770][ T5224] device_initial_probe+0xaf/0xd0 [ 103.349951][ T5224] bus_probe_device+0x64/0x160 [ 103.354958][ T5224] device_add+0x121d/0x1970 [ 103.359895][ T5224] ? __pfx_device_add+0x10/0x10 [ 103.365249][ T5224] usb_new_device.part.0+0xcc2/0x1686 [ 103.370723][ T5224] ? do_raw_spin_lock+0x128/0x260 [ 103.376591][ T5224] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 103.383089][ T5224] ? mark_held_locks+0x40/0x70 [ 103.388487][ T5224] hub_event.cold+0x51a/0xe9d [ 103.394112][ T5224] ? __pfx_hub_event+0x10/0x10 [ 103.398982][ T5224] ? trace_contention_begin+0x50/0x1a0 [ 103.404748][ T5224] ? process_one_work+0x906/0x1b10 [ 103.410130][ T5224] ? process_one_work+0x906/0x1b10 [ 103.415370][ T5224] process_one_work+0xac7/0x1b10 [ 103.420426][ T5224] ? __pfx_process_one_work+0x10/0x10 [ 103.426224][ T5224] ? __pfx_hub_event+0x10/0x10 [ 103.432374][ T5224] worker_thread+0x5ef/0xe50 [ 103.437352][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 103.443224][ T5224] ? kthread+0x13a/0x450 [ 103.448563][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 103.453960][ T5224] kthread+0x373/0x450 [ 103.458938][ T5224] ? __pfx_kthread+0x10/0x10 [ 103.464108][ T5224] ret_from_fork+0x69f/0xc90 [ 103.469050][ T5224] ? __pfx_ret_from_fork+0x10/0x10 [ 103.474545][ T5224] ? __switch_to+0x7f6/0x10e0 [ 103.479817][ T5224] ? __switch_to_asm+0x39/0x70 [ 103.485326][ T5224] ? __pfx_kthread+0x10/0x10 [ 103.490398][ T5224] ret_from_fork_asm+0x1a/0x30 [ 103.496298][ T5224] [ 103.499564][ T5224] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.507366][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.517141][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.528024][ T5224] Workqueue: usb_hub_wq hub_event [ 103.533549][ T5224] Call Trace: [ 103.537086][ T5224] [ 103.540048][ T5224] dump_stack_lvl+0x100/0x190 [ 103.545036][ T5224] vpanic+0x553/0x970 [ 103.549104][ T5224] ? __pfx_vpanic+0x10/0x10 [ 103.553956][ T5224] panic+0xd1/0xe0 [ 103.557930][ T5224] ? __pfx_panic+0x10/0x10 [ 103.562745][ T5224] check_panic_on_warn.cold+0x19/0x34 [ 103.568717][ T5224] ? drm_mode_config_validate+0xfb4/0x1be0 [ 103.575543][ T5224] __warn.cold+0x191/0x318 [ 103.580450][ T5224] __report_bug+0x30f/0x440 [ 103.585411][ T5224] ? drm_mode_config_validate+0xfb4/0x1be0 [ 103.591978][ T5224] ? __pfx___report_bug+0x10/0x10 [ 103.597737][ T5224] report_bug_entry+0xe2/0x290 [ 103.602928][ T5224] ? drm_mode_config_validate+0xfbb/0x1be0 [ 103.608880][ T5224] handle_bug+0x1cd/0x2a0 [ 103.613270][ T5224] exc_invalid_op+0x17/0x50 [ 103.617981][ T5224] asm_exc_invalid_op+0x1a/0x20 [ 103.623435][ T5224] RIP: 0010:drm_mode_config_validate+0xfbb/0x1be0 [ 103.630232][ T5224] Code: 00 49 8b 57 18 48 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 00 0b 00 00 48 8d 3d fc 06 ce 07 41 8b b7 c8 00 00 00 <67> 48 0f b9 3a e9 fa fd ff ff 48 8b 5c 24 20 e8 31 3d 68 fe 48 8d [ 103.650755][ T5224] RSP: 0018:ffffc900028cedd0 EFLAGS: 00010246 [ 103.657036][ T5224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90010668000 [ 103.665405][ T5224] RDX: ffff888104ea8fe0 RSI: 0000000000000023 RDI: ffffffff8b1a99a0 [ 103.674330][ T5224] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 103.683761][ T5224] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed102240f9ca [ 103.692519][ T5224] R13: ffffed102240f9cb R14: 0000000000000001 R15: ffff88811207cd60 [ 103.700657][ T5224] ? __debugfs_create_file+0x347/0x4d0 [ 103.707216][ T5224] drm_dev_register+0x56e/0x7b0 [ 103.712214][ T5224] gud_probe+0x17f4/0x1c20 [ 103.716899][ T5224] ? __pfx_gud_probe+0x10/0x10 [ 103.721723][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.727610][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.733916][ T5224] ? __pm_runtime_set_status+0x13c/0x970 [ 103.739623][ T5224] usb_probe_interface+0x386/0x9b0 [ 103.744846][ T5224] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.750744][ T5224] ? kernfs_put+0x3f/0x60 [ 103.755217][ T5224] ? sysfs_create_link+0x68/0xc0 [ 103.760493][ T5224] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.766390][ T5224] really_probe+0x241/0xa60 [ 103.771781][ T5224] __driver_probe_device+0x210/0x460 [ 103.777138][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.783353][ T5224] driver_probe_device+0x4a/0x140 [ 103.788524][ T5224] __device_attach_driver+0x1df/0x320 [ 103.794029][ T5224] ? __pfx___device_attach_driver+0x10/0x10 [ 103.800234][ T5224] bus_for_each_drv+0x159/0x1e0 [ 103.805334][ T5224] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.811240][ T5224] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.816846][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.824006][ T5224] __device_attach+0x1e4/0x4d0 [ 103.829917][ T5224] ? __pfx___device_attach+0x10/0x10 [ 103.835487][ T5224] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.840751][ T5224] device_initial_probe+0xaf/0xd0 [ 103.845845][ T5224] bus_probe_device+0x64/0x160 [ 103.850852][ T5224] device_add+0x121d/0x1970 [ 103.855422][ T5224] ? __pfx_device_add+0x10/0x10 [ 103.860511][ T5224] ? mark_held_locks+0x40/0x70 [ 103.865758][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.871986][ T5224] usb_set_configuration+0xd97/0x1c60 [ 103.878042][ T5224] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.884375][ T5224] usb_generic_driver_probe+0xa1/0xe0 [ 103.890332][ T5224] usb_probe_device+0xef/0x400 [ 103.895139][ T5224] ? __pfx_usb_probe_device+0x10/0x10 [ 103.900682][ T5224] really_probe+0x241/0xa60 [ 103.905228][ T5224] __driver_probe_device+0x210/0x460 [ 103.910561][ T5224] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.916408][ T5224] driver_probe_device+0x4a/0x140 [ 103.921533][ T5224] __device_attach_driver+0x1df/0x320 [ 103.927220][ T5224] ? __pfx___device_attach_driver+0x10/0x10 [ 103.933600][ T5224] bus_for_each_drv+0x159/0x1e0 [ 103.938598][ T5224] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.944131][ T5224] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.949680][ T5224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.955574][ T5224] __device_attach+0x1e4/0x4d0 [ 103.960824][ T5224] ? __pfx___device_attach+0x10/0x10 [ 103.966533][ T5224] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.971909][ T5224] device_initial_probe+0xaf/0xd0 [ 103.977110][ T5224] bus_probe_device+0x64/0x160 [ 103.982751][ T5224] device_add+0x121d/0x1970 [ 103.987975][ T5224] ? __pfx_device_add+0x10/0x10 [ 103.993116][ T5224] usb_new_device.part.0+0xcc2/0x1686 [ 103.998576][ T5224] ? do_raw_spin_lock+0x128/0x260 [ 104.005577][ T5224] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 104.012601][ T5224] ? mark_held_locks+0x40/0x70 [ 104.017433][ T5224] hub_event.cold+0x51a/0xe9d [ 104.022303][ T5224] ? __pfx_hub_event+0x10/0x10 [ 104.027198][ T5224] ? trace_contention_begin+0x50/0x1a0 [ 104.032890][ T5224] ? process_one_work+0x906/0x1b10 [ 104.038709][ T5224] ? process_one_work+0x906/0x1b10 [ 104.043896][ T5224] process_one_work+0xac7/0x1b10 [ 104.049058][ T5224] ? __pfx_process_one_work+0x10/0x10 [ 104.054773][ T5224] ? __pfx_hub_event+0x10/0x10 [ 104.059851][ T5224] worker_thread+0x5ef/0xe50 [ 104.064606][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 104.069952][ T5224] ? kthread+0x13a/0x450 [ 104.074410][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 104.079570][ T5224] kthread+0x373/0x450 [ 104.084091][ T5224] ? __pfx_kthread+0x10/0x10 [ 104.089290][ T5224] ret_from_fork+0x69f/0xc90 [ 104.094005][ T5224] ? __pfx_ret_from_fork+0x10/0x10 [ 104.099169][ T5224] ? __switch_to+0x7f6/0x10e0 [ 104.103918][ T5224] ? __switch_to_asm+0x39/0x70 [ 104.108829][ T5224] ? __pfx_kthread+0x10/0x10 [ 104.113521][ T5224] ret_from_fork_asm+0x1a/0x30 [ 104.118553][ T5224] [ 104.121949][ T5224] Kernel Offset: disabled [ 104.126316][ T5224] Rebooting in 86400 seconds..