last executing test programs:
3.61932544s ago: executing program 2 (id=3):
r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x6e, 0x69, 0x4b, 0x10, 0x1199, 0x9003, 0xd734, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0xfb, 0x7, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd3, 0x6b, 0x5, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xd1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x575, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ba23610030478faffc501"], 0x0)
read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba)
syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x800, 0x20100)
syz_usb_control_io$hid(r4, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902740002010420040904000001020d0000052406000105240000020006000806241a05ed0d0724140e00400005240100020c241b0300af200404010008090581030002580508"], 0x0)
syz_usb_connect$hid(0x3b7d78028ad1c7d4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x3232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x49}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_usb_disconnect(r1)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYRES16=0x0], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000102f1732000000000000010902240001000000000904000001030000000921fcff000122050009058103"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xc, 0x7, {0x7, 0x4, "2657649857"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x0, 0x23, 0x61, {0x61, 0x4, "2ae33d7a48a9de94da7f9f9564b4bbc6fbc223c5aa824684ce64a265896b316a4595a58ea9f8c5dd6e037f3025ed11359547cde52116ebc9348e71daa3198dcd6a5236806835e731d3978d848f14ace3fec3972e9c19640518551e32fb0000"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000300)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x5, "eb046e22"}, @global=@item_012={0x2, 0x1, 0x9, "869f"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xb22}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x40, 0x16, 0x41, "8d1032a7218f6ab770cd32d65bebb27e9b457259ab730912ea0e1c9271f833f593254e34301e576d5295934872ff7da4503555e4af19190fcced93a2d3394d5ebe"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb8, "cff21efc662951b5fb1c92456cc23e01d8cf770abd36faa326944c601cf498015abe643abc74fcb5e528e21ecb1e031e7776633bdd5911b726cba3af3c38f6b4c251782cde4473c30caadbb2505e19c51025b3ee9dd55e45daf93bff2f360d45cab988ff897ab0f1583654a9ca30f7fa6d232fc1f3090ed58e55e6cae2b569b3ba00c05ba582247d4229946056596cdbf963ee9f90a4c31ff8effe6d34136a0e7adf6a1a2c1eb858a933b15dd8be58349233a0f958e20fd7"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}})
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010bd28031900000000000109022400010000800509041700090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xc18}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x9, 0x40, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x26}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x101, 0x2, 0x3, 0x8, 0x6, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x95, {0x8, 0x25, 0x1, 0x6, 0x3e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x0, 0xff, {0x8, 0x25, 0x1, 0x1, 0x3f, 0x4, 0xd96c}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
3.394691271s ago: executing program 1 (id=2):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x14, 0x1a, "28e10424ebc56a5bd72d1a31200b88698d70fbade5873693ac26"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="4015b7"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)
ioctl$EVIOCRMFF(r2, 0x4004550e, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0)
3.252104158s ago: executing program 0 (id=1):
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r1], 0x0)
syz_usb_disconnect(r2) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0)
3.077702646s ago: executing program 4 (id=5):
syz_open_dev$evdev(0x0, 0x7, 0x104141)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580e27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x4a, 0xbe, 0xf, 0x20, 0x572, 0x86d6, 0x8c2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x63, 0x60, 0x5, "", [{{0x9, 0x4, 0x3e, 0x40, 0x0, 0xd9, 0x17, 0x77, 0xb5}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
2.893137676s ago: executing program 3 (id=4):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) (async, rerun: 32)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) (rerun: 32)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x90, {0x90, 0xc, "47a468c1fb56fd4a2625992afe97504bcb6b685b4f6e6c78f94b6e7e15aec50cfa73cddc359cbc4e039f625e7a8b4b60bd7e133686295846aad809943d13831620a24c60b6cf12f3158c6d871fa5d060b51f959ff9f237b65e223d088f44b6ae6231167a3dcaf43957d885ff3778662a263632db064579ab9fb17887f6b94480c087981fcb54ae1d249a8e0daf1a"}}, 0x0}, 0x0)
2.584818791s ago: executing program 3 (id=6):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001002fe70009046b00016a93f000090588ae"], 0x0) (async)
syz_usb_connect$cdc_ecm(0x4, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x31, 0x60, 0x87, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x8, 0x24, 0x6, 0x0, 0x0, "bf7669"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff5, 0xe4, 0x5}, [@acm={0x4, 0x24, 0x2, 0x6}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x3, 0x5, [0x3, 0x7ff, 0x4]}, @ncm={0x6, 0x24, 0x1a, 0xdce5, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x83, 0xd7fb, 0x78}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0xf3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x87, 0x81, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x6, 0x42}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x62, 0xf, 0x1, 0x40, 0x3}, 0x28, &(0x7f0000000140)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xfff, 0xf000, 0x1, [0x30, 0xf0, 0x3f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0xff, 0x4, 0x5}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0xae, &(0x7f00000001c0)=@string={0xae, 0x3, "ca1287cd53c2e71acba9afb31b118cac56e26374eeb461cef80c186a021d1cd99ba90ec354150af1e022fcb9ae3aa4fb32c0df46db16ea64347dfb85f0535fadddb9c984745f2268f9218e812d2852be069daa2221a3079bb8c89ae9e8b05616bda19ca9c3484901cd928862f1931d677385bb4a849f32626f3f1f110f06f70189c5c5fe743b02f16128412a30136ce443d0a704e8fbbcc8352d973af0c3dbaaa862c31e1fce7584353be435"}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "f22fd5f58faa5b09b8f0"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x401}}, {0xfc, &(0x7f0000000300)=@string={0xfc, 0x3, "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"}}, {0xb, &(0x7f0000000400)=@string={0xb, 0x3, "3ff0acc730a983d3f0"}}, {0x51, &(0x7f0000000440)=@string={0x51, 0x3, "08c08ea20864da33691052f353af7a111e14957f4cf79ad093421f1ab678087b82b9c021ac878d223cf6858519c78cd13c33fa983c432f0ef99e59d0f9f769e3bef25c2513f7f2c046d618dde7ef6f"}}]})
1.735694143s ago: executing program 4 (id=7):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0xbe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x80, 0x2, "", [{{0x9, 0x4, 0x2c, 0x7, 0x0, 0x5f, 0x90, 0xe3}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x56, 0x4, 0x40, 0x10, 0x8}, 0x0, 0x0})
syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(0x0, 0x5, 0x200000)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) (async)
syz_open_dev$hidraw(0x0, 0x3cc020af, 0x2181)
syz_usb_control_io$hid(r2, &(0x7f00000037c0)={0x24, 0x0, &(0x7f0000003700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0) (async)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000267b9d406a081001e5b1010203010902120001000000000904"], 0x0)
1.096480065s ago: executing program 3 (id=8):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x2e, 0x2, {0x2, 0xb}}, &(0x7f0000000c00)={0x0, 0x3, 0x49, @string={0x49, 0x3, "3d76b36d6cfe810a2d29f27ff9314e220e515ffb0e7287e471f569e23355c3e76ad5f62f05328b381a8d82bf541d5f923594ecae6f64a73185f74621db926b39b2ccccb3405053"}}}, 0x0)
r3 = syz_usb_connect(0x6, 0x5b, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0x89, 0x88, 0xa3, 0x40, 0x106f, 0x3, 0xd424, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x2, 0x6, 0x0, 0x20, 0x8, "", [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x6f, 0xfd, 0xad, 0xf}}, {{0x9, 0x4, 0x7, 0xf8, 0x0, 0xb7, 0x7b, 0x8c, 0x51, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xcf3, 0x9, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x2, "f1"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x4, 0x8e}, [@acm={0x4, 0x24, 0x2, 0xb}]}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x201, 0x3, 0x2a, 0x1, 0xff, 0x7}, 0x5, &(0x7f0000001a00)={0x5, 0xf, 0x5}})
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000001f80)={{0x12, 0x1, 0x250, 0xf8, 0xf0, 0x21, 0x10, 0x1608, 0x201, 0x4682, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0xe, 0x20, 0x2, "", [{{0x9, 0x4, 0x30, 0x9, 0x2, 0xff, 0x25, 0x77, 0x3, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x7, 0xa, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xb, 0x1, 0x49}}]}}]}}]}}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$evdev(0x0, 0x7fffffffffffffff, 0x210480)
ioctl$EVIOCGLED(r5, 0x80404519, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$hidraw(0x0, 0x7, 0x905c220150a15846) (async)
syz_open_dev$hidraw(0x0, 0x7, 0x905c220150a15846)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_connect$uac2(0x3, 0xe2, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x4, 0xd0, 0x4, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x5, 0x36, 0x6}, [@source_unit={0x8, 0x24, 0xa, 0x9, 0x1, 0x5, 0xf9, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x5, [0x8, 0x7, 0xff]}, @processing_unit={0x11, 0x24, 0x8, 0x6, 0x2, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0]}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x5, [0xc, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x3, 0xd8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xd, 0xce, 0x2, 0x81}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x6, "953b85c0a1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0xe, 0x0, "8f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x31, 0x4, 0x3f, 0x6, "dea0", "e77b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0xc, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x0, 0x4, {0x8, 0x25, 0x1, 0x1, 0xc, 0xe, 0x5}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xf9, 0xfc, 0x3, 0x10, 0x4}, 0x4a, &(0x7f0000000180)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0xffff, 0xf, 0x7fff, [0xff00c0, 0xff00a0, 0xc000, 0x3fc0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x7e, 0x2, 0x9, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xb37, 0xff00, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xd, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x11, 0xbc, 0x68, 0x7d, 0x4}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe886}}, {0x56, &(0x7f0000000240)=@string={0x56, 0x3, "b490aa58afa9fca2fb010a2a45bd6a98487668f3a65368d91ad656e95054880d7c4363b47d743a29b5a725d2170c7bf46e1b70f68fbf081d05ccf248ec73271b3031418e4f4e62e974b2c9b6c1195acef67fa994"}}, {0x81, &(0x7f0000000540)=@string={0x81, 0x3, "32b6570b3fff6a9b22ac2e6c2c96a59ccd1e36dfd80c1b3d7d386c5a5494f608a092b95317790565cca5ef08364e97bda8a30a2bc3f6b3eeb6de1fcd04f7d124eca83cd8af681002afc6717fa51ed900e8e4653b676aa9d01a53376acc5c9de77b63c94b7d1e9db648476a063433078aa4d2bd8bd9fed6da6b05d8565de75c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0a}}, {0x101, &(0x7f0000000380)=@string={0x101, 0x3, "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"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c7f6b200304a4bc23d701020301090212000ae1ffffff0904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
1.01255749s ago: executing program 0 (id=9):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00889ad101020301090212000100000000"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000046617210460d11208f820102030109021b00010000000009040000012247240009050503"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x0, 0x3}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0xbd, 0x9, 0x58, 0x1}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf82ca3761d6d1c25}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x813}}]})
syz_usb_control_io$printer(r3, &(0x7f0000000500)={0x14, &(0x7f00000004c0)={0x40, 0x10, 0x25, {0x25, 0x10, "b4cf54dc079eceab604d5f39ce80949ea65ab9c895ee27d1f5c71474a394496dc4434d"}}, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000900)={0x34, &(0x7f0000000540)={0x0, 0xb, 0x35, "18783b9771552c6668c2391137c5bf41801475dd135453d0b670286113c24ec3b63f9e4c00bc2acaa27dd4f1c81872b07031572dda"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xa3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000800)={0x20, 0x0, 0x5c, {0x5a, "5142093167b14d325b3889b3254109e9e45849ad50d4653ce7a173e5a1d4ca30fa7e0c41c445e2a235bae8269cd4b8e8e9f08c9d2efbc2a89f0e463a4949f258e17e3d96e0bf93f0ca0ae30a25ff1b4dfe07f26ed503fa9adfb5"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x2}})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x80, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x3, 0x7c7a, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x0, 0xbd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x4, 0x6c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x63, 0xfb}}}}}}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
r5 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_disconnect(r5)
r6 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000480)={0x14, &(0x7f0000000440)={0x0, 0x23, 0x16, {0x16, 0x9, "fc2ac38fbddec9acb0151cff800e2e2ef905831b"}}, &(0x7f00000006c0)={0x0, 0x3, 0x40, @string={0x40, 0x3, "1639165a57478fe2bc3f62492a61b48989b31ca26006225a2977b3b9c470071290cbc0b0b68dff9ea8375a94b964f82ea42f1aebac25008b4aa238e0f8f0"}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x20, 0xf, 0xd4, "86abb2de9db2f016dc58727fc3aafc4601db2ec2e3e0723395c85d3d4a36adb9afb48aeabf1dfbfbfded37dc37bf69ae825fb592484e1eea724b014520fc118f4f0fed14fb072b236910f2ece164e8acae1c715d4b7a0aaeb304965c26b29952899bab44776f836c506a3416e733e45e5e0d2d17a2570030c0c961a05bcca3cc935434e2fb53a9a6b4327ece375c055b113a4317a52bdfc4aae0e11b0740a175340c2192e411fae73e6b0d59be6a82ded17aa1d0897fe93416959be7024bcbd3ce57af733be9d9f9b7f4476eda28f613c5448243"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "19"}, &(0x7f0000000c40)={0x20, 0x82, 0x1, "8b"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "e1"}, &(0x7f0000000cc0)={0x20, 0x84, 0x3, "d96cb8"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "ec0f74"}})
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
syz_usb_control_io(r5, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x20, 0x31, 0x9a, {0x9a, 0xb, "05bbe40cf9e67e0bcdc07d3e67bd3bd91e52357de9d8d8eb2e167d7aa010ffe5379aa79f1ed3f5ba48058be7f06914d7b6f6096af9f76a5ebda4f275bb60b66705291967d02c5b54f446ffe37139f765b440d3247490fabc357fa4a3788f80fbd66f15483a4ddc92757dce8898ba784d6a27f415d67e77031a5c98ccc328301884a02d88bdbbec5736c9c6fe1f2854672cf56630d5cc79b3"}}, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000ec0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2d, 0x98, 0x2, 0x6, 0xa3}, @ptm_cap={0x3}]}}, &(0x7f0000000f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe0, 0x1, 0x4, 0x3, "0dcb1bd7", "6abd215e"}}, &(0x7f0000000f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x9, 0x4, 0x6, 0x6, 0xc}}}, &(0x7f0000001440)={0x84, &(0x7f0000000fc0)={0x40, 0x16, 0x58, "1d158906298542f7680fa7dac51f74e6a4ed633a5ce687eab642e614605ca0dbffcfcb48bb792e88290807a6cc8d15f96f388121080e426148fbdcceff939603f4ecbdbf1c12ff28b63f3351d5bb92962628adff34135ea1"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x94}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001100)={0x20, 0x0, 0x8, {0x120, 0x93, [0x0]}}, &(0x7f0000001140)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000001180)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000011c0)={0x40, 0xb, 0x2, "eb98"}, &(0x7f0000001200)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001240)={0x40, 0x13, 0x6}, &(0x7f0000001280)={0x40, 0x17, 0x6, @random="2645feb6e907"}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "f282"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x14c}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x82}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x6}})
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r7 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r7, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac2(r7, &(0x7f0000005700)={0x14, 0x0, &(0x7f00000056c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3525358a", {0x3, 0x7, 0x0, 0x80, 0x5, 0x1}})
1.00904718s ago: executing program 2 (id=10):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000004", @ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x6b, 0x4b, 0x8d, 0x20, 0xb05, 0x18f1, 0x102c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xb0, 0x7f, "", [{{0x9, 0x4, 0xe2, 0x78, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES64], 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
787.663531ms ago: executing program 1 (id=11):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x5, "112f73fe8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000100000406a0500e2e5ad89d5f1c14c0000000000010902240001000040000904000000010581000000000000000000"], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
354.955982ms ago: executing program 4 (id=12):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) (async)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b2010202"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x8f, 0x68, 0x74, 0x40, 0x47e, 0x1001, 0xc606, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80}}]}}, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) (async)
syz_usb_disconnect(r1)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "733b62bc", {0x1, 0x1922, 0x40, 0x1, 0x6}})
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006366e240f30c7593c9310000000109022d00010000000009040000032fadc6000905037fb6"], 0x0)
0s ago: executing program 4 (id=13):
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x401, 0xc2980)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x2, 0x2, 0x7f, 0x40, 0x1e3, 0x7})
read$hiddev(r0, &(0x7f00000000c0)=""/63, 0x3f)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x2000)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x0, 0x4, 0x84e})
r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x40, 0x200000)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000001c0)={0x3, 0xfffffffc, 0x1, 0xc, 0x81, 0x7})
ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000200)={0x76, "caeba24f655b24f7184de2045de9b759557887c99fdd207c6282d172cb73943bee341d5d51c1998a627c1cbb85fe51cdc07538033f6ce0dcf79bae02799d63885febae900d7b44c8684acd7a6f704d61eabd3a3f77987282fd0d6b0790a545f4dc5759f0f99fedd8fe8d68697d0358d1036eb7d36111"})
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x5, 0x402840)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000002c0)={0xfd, "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"})
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000400)={0x1, 0x100, 0x800, 0x0, 0x7ff, 0x7f})
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000440))
r4 = syz_usb_connect(0x3, 0x69b, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x32, 0xfd, 0x95, 0xff, 0x5c6, 0x900b, 0x5f6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x689, 0x3, 0x9, 0x3, 0x80, 0x7, "", [{{0x9, 0x4, 0x2, 0x5d, 0x8, 0x70, 0x51, 0xba, 0x3, [@hid_hid={0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xf2c}}, @hid_hid={0x9, 0x21, 0x8, 0x6d, 0x1, {0x22, 0x4}}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x3, 0x6, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0xfb32}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x4, 0xe2, [@generic={0x28, 0x1, "0291e0152109203fbbe7317b060caf15258af47f12e6d17f35470e11ccb37c4e3f67d850e7d3"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x2e, 0xf5, 0x1}}, {{0x9, 0x5, 0x9, 0x14, 0x20, 0xc, 0x6, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x1, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x61e}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x4, 0xb6, 0x0, [@generic={0xb3, 0x10, "186277f2c1258357da4220b17908eddb9f7fcb997adc789399e732e142e4229dee79731465176e1a0fe94e6b2eb8ec36a9c22054a9e862cbf24a78a15e1fe52a87686ac090264e71e63a340e8c30d4a2222d30d9e64a3a9b0bae04c27c9b02037dbc3709cfd025292fedd2c096e457b67a14cc8281732e55ab9ecac4cd91e5cf9c6300971a9c58f38c62e36585ce6adedfa190c0c08842a7ba0ecc57dcd77ada0b4db0ac35cc0786d637d71ec7c50b4af6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x3, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x8}]}}]}}, {{0x9, 0x4, 0x25, 0x9, 0x8, 0x75, 0xc9, 0x6f, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x25}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x2, "3a8503"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x3, 0x6, [0x8, 0x7, 0x1, 0x4, 0x2, 0x8], 0x6}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xff, 0x3, 0x5e}, {0x6, 0x24, 0x1a, 0x7}, [@country_functional={0x8, 0x24, 0x7, 0xb, 0x9, [0x7a]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x2, 0x3, [@generic={0x8f, 0x29, "e368e3a8d14817963f86e2577d96f6516591fa574915b402e4372c094284333dc073d6ebe4cc0e91ecc563ca3618e82cef95def4668dc73f756b431450cfdc63d71d0e5ee9f887138eb8dde3fb098494d913f895c7af8c208428ab579653c2b8590574ea3e06b5923fb87e29ab313bd8255001a2a435e6323b2de310045b4b3634cc2bce20f936aed1f76c6901"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x15, 0x17, 0x400, 0x4, 0x0, 0x6, [@generic={0xaa, 0xe, "c826ab31f212e732d9bea40dc5af10d671ef57464b482ea0b2f575e017a31805d99d0c735d5134208f8f0e32e8d83f0e8cb914f74af5b3a9d858879d080651ad94b8d1c7625dd3643d369ce118e6234451f17a701242bb4cb234ab5c5e27253cdc9db230fb9f12d3262edd155d16cd75d57dc93541d14ce5d605775027b60fa35abbaf7ff4c47e9e5baa4cbef64ef6a6bde86778e530a1e4688aeddde3ea2fe648e4dd9ee2607d2e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x0, 0x3, 0xa9}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x8, 0x6, 0xc}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x5, 0x3, [@generic={0xd7, 0xc, "1910c5da69fb294640187be63316d3b4426c90d202bb23894200d9cd45afa022ae27e020e10351c26ce7fbb5d752ff1e0f35595e19e38bd2e2f1ba8eb4dbbe1c8e412fac8744b4c6d60a66091fa09a00b296f09f20269e5b77c2cadb1b5ecef7d049508e735b5146ded01690d2461dd209950576d7ce2929f7f643cac1def4b47a21f8d533aa10094f3d58562ad105fdac60ac609518051234b950d29f071e19ce4a3171337e5dfbc4ae7d0893f3d91e6bb28e5efc3417af1e55c23117e8c8d22572b375defb83891ccaa9286952d715df037cce52"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xce, 0x800}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}]}}, {{0x9, 0x4, 0x72, 0xfc, 0x3, 0xa0, 0x43, 0xf8, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "c064e82970"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xf86, 0xa0}, {0x6, 0x24, 0x1a, 0x8b, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x1ff, 0x4, 0x7, 0xed21, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x40}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xb1, 0x81, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x8, 0x7, "b8", 't'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x3, 0x7, 0xfe, 0x5}]}], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xb, 0x17, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x3, 0x18}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xfd, 0x4, 0xff, [@generic={0xe0, 0x24, "1f152e1b066c2ef594b5da8b18b4612aabcafaa77f751f882702a55dd1cb6f66b513f1934b9a90f6b85d12768ecca582828fba8991c2f1b63d092b7778308a8175149aa41de31ffb4365fdcd1831077db003a91281dad938290c54409f35725606f7f9716b15b513d03d759ee28724d757a67ac1250c3d8188f8fb89bca13fba745ca42d0c480242b9c711767dd7f58410fc4832b0d7433fe6647879111cc7b5dfa0f23d672b436fd2c14a617efda440247f4be3c865d24cce2a5d21a97f86289af7c245dc2acff72cac5b422353dd8e38c61390ad221795147763ffe219"}, @generic={0xe9, 0x22, "018831fed2ed96d3112223fce8c812b1e3518f74313f3af91a84d4ad1323f6da2bb32f034e55c9d535d1473b3c2dd97bfc070aa2f3cf850d3548339e70dffbbd2a5e81b97194737ba96697ce85ec3307627368b4b463154bead713e264f5bbeb688a3c6c389572aae6220120c28a667f812e559fea63d35f48bd44c80ed8959e6e62387cee17d2062eb2c0ffa7a989e346f274ffb56991e3b9571dd2d7f784411775763beb173545e32029332401955d9525b4ca1ec9dc9fe14e7684a44c89bd1c9ca5cdc888bffbba1b67d2555d266eaed8f66bf78653ea9d54c9acee9b846987d06e8e1dd610"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x0, 0x2b, 0x1, 0xf4, 0x8, 0xbf}, 0xf, &(0x7f0000000b80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x40, 0x8, 0x2c}]}, 0x1, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x421}}]})
ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000c40)={{0x2, 0x100, 0x5d9da4db, 0x7, 0xfa, 0x1}, 0x263, [0x3, 0x295, 0xc, 0x3, 0x10001, 0x9, 0x0, 0x1ff, 0xc, 0x6, 0x0, 0xc, 0x7, 0x8, 0x100, 0x1, 0x1, 0x416, 0x2, 0xfff, 0x1, 0xe, 0x83e, 0x9, 0x2, 0x9, 0x101, 0xc270, 0x10000, 0x4, 0x4, 0x5, 0xfffffffd, 0x6, 0x3, 0x7, 0x200, 0xa554, 0xfffffff8, 0x4, 0x6, 0xba, 0x0, 0x9, 0x5, 0x1, 0x39c4c00, 0x7, 0x1cd, 0x800, 0x4, 0x3, 0x9, 0x7, 0x80000000, 0x5, 0xfffff430, 0x4, 0xc, 0x9, 0x5, 0x800, 0x4, 0x5, 0x86d, 0x37a, 0x0, 0xaa6d, 0x2, 0x276, 0x0, 0x9, 0x8, 0x2, 0xeb1, 0x3, 0x9, 0x8, 0x8, 0xfffffff9, 0x4, 0xfffffffa, 0x9, 0xf0, 0x6, 0x1, 0x866, 0x2, 0x10001, 0x80000001, 0x1, 0x9, 0x5, 0x2, 0x9, 0x2, 0x1000, 0x5, 0x8001, 0x2, 0x5, 0x3, 0x0, 0xfffff000, 0xa, 0x47, 0x4, 0x2144, 0x55f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x3dd, 0xffffffff, 0x4, 0x4c85ce13, 0x9, 0x401, 0xfffffffb, 0x8, 0xfffffffe, 0x3, 0x1000, 0x5, 0x1, 0x7, 0x0, 0x4, 0x5, 0x23, 0xdd64, 0x7, 0xa, 0x5, 0x1, 0x3, 0x3, 0x5, 0x401, 0x8, 0x1, 0x2, 0x7fff, 0x1, 0x8001, 0x3, 0x1, 0xe, 0x80, 0x5, 0x2, 0x3, 0x9, 0xcc41, 0x10, 0x7, 0x5, 0x8, 0x1ff, 0x6, 0x2, 0xc6, 0x5, 0x9, 0x3, 0x3, 0x0, 0x3ff, 0x8, 0x4, 0xae1, 0x192, 0x5, 0x3, 0x4, 0xfe1, 0x2, 0x7, 0x9, 0x6000000, 0x8, 0xfffffff9, 0x8000000, 0x8, 0x4, 0x6005, 0x8000, 0xffffff46, 0x1ff, 0x86bd, 0x54d2f20a, 0x2, 0x0, 0x9, 0x6, 0x2, 0x673385ed, 0x2, 0x1, 0x1, 0x0, 0x7, 0x6, 0x25, 0x1, 0x0, 0x9, 0xfffffffd, 0x5, 0x3ff, 0xfffffffa, 0x5, 0x0, 0x6, 0x10001, 0x6, 0x2, 0x821, 0x40, 0xfff, 0x7f, 0x99, 0x60, 0x7, 0x36f, 0x68a, 0x29f4, 0x7b71b03e, 0x5, 0x9, 0x8, 0x30, 0xfffff800, 0x0, 0x6, 0xcd8, 0x8001, 0x9, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7, 0x1, 0x9, 0x7, 0x0, 0x2, 0x753b, 0x80, 0xffff, 0x5, 0x59, 0x6, 0x1, 0x6, 0xffffff7f, 0x6, 0xb, 0x646, 0x1, 0x6, 0x40ee, 0x180, 0x3, 0xb, 0x2, 0x9, 0x5, 0x8, 0x4ec, 0xfffffff5, 0x0, 0x1, 0xfffffffd, 0xb30, 0x4, 0x2, 0xffffffff, 0x2, 0x5, 0xa53, 0x9, 0x0, 0x7, 0x6, 0x6, 0x7f, 0x3, 0x2, 0x2, 0xfffffffe, 0x10001, 0x9, 0xa08, 0x8, 0x100, 0x1000, 0x4, 0xfffff001, 0x9, 0xc, 0x4, 0x5, 0x2, 0x1, 0x6, 0x5, 0xb6, 0x7fff, 0x2c00000, 0xbe, 0x7, 0x1, 0x5, 0x5, 0xc91, 0x7, 0x5, 0x80000001, 0xa2, 0x1ff, 0x4, 0x4, 0x5, 0x7, 0x43, 0x9e6d, 0x4, 0x401, 0x7ff, 0x1, 0x7d, 0xd403, 0x1, 0x1b6b, 0x6, 0x6, 0x8, 0x1, 0xff, 0x1, 0x6, 0x3, 0xec, 0x7fffffff, 0xabc, 0x80, 0x8, 0x3, 0x7ebbbaa, 0x7, 0x0, 0x4, 0x7fff, 0x4, 0xa6a, 0x8, 0x101, 0xb2c, 0x2, 0x5, 0x7, 0x401, 0x1, 0x0, 0x10000, 0x1, 0x4, 0x81, 0x80, 0xfffffffb, 0xfff, 0xd, 0x1, 0x3, 0x3, 0x4, 0x0, 0x10001, 0xc90c, 0x200, 0x6, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0xfffffff2, 0xffff, 0x1, 0xdcc, 0xdc5, 0x80000000, 0x401, 0x8, 0x5, 0x80000000, 0x401, 0x7, 0x800, 0x7, 0x5, 0x9, 0x1, 0x7ba, 0x6, 0x8, 0x1, 0x9, 0x4, 0xfff, 0x7ff, 0x9, 0x6, 0x2, 0x5, 0x0, 0x6, 0x444, 0x7, 0x4, 0x0, 0x5, 0x80, 0xbd3d, 0x0, 0xd, 0x7fffffff, 0x10, 0x6, 0x8, 0x5, 0x4, 0x8, 0x0, 0x5, 0x2, 0x1000, 0xd2, 0x6, 0x9, 0x74145b54, 0x2, 0xffff8000, 0x2, 0x8, 0x8, 0x2, 0xfffffff2, 0x9, 0x7fffffff, 0x6, 0xc485, 0x19e7, 0x80000000, 0x0, 0x3, 0x8715, 0x0, 0x2, 0x1, 0x0, 0x8, 0x2, 0x2, 0x0, 0xbc, 0x8424, 0x7ff, 0x6, 0x7, 0x10000, 0x7fffffff, 0x2, 0x526a, 0x7, 0x9, 0x35, 0x6, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0xe9, 0x7, 0x0, 0x200, 0xf0, 0xd, 0x10000, 0x1ff, 0x9, 0x8, 0x6, 0x280, 0x3ff, 0x4, 0x4, 0xfffffff7, 0x0, 0xffff8000, 0xfffffbff, 0x3, 0x0, 0xffc00000, 0x3, 0xfffffe01, 0x80, 0x3ff, 0x4, 0xfffff10a, 0x8, 0x8, 0xcbba, 0x0, 0x80000001, 0x0, 0x8001, 0x7, 0x10000, 0x80, 0x8, 0x8, 0x6, 0x8001, 0x83cb, 0x6, 0x7, 0x4, 0x4, 0x2, 0x6, 0x9, 0xff, 0x80000000, 0x600000, 0x81, 0x7, 0x2, 0x200, 0x1, 0x6, 0xd22, 0x800, 0x401, 0x1, 0x7, 0x10001, 0x21889b2e, 0x7ff, 0x9b49, 0x7c, 0x7, 0x3, 0x8, 0x1, 0x3f, 0x3, 0x5, 0xffff, 0x7f, 0x1, 0x4, 0x2, 0x4, 0x401, 0x6, 0x4, 0x5, 0x9, 0x840, 0x46d2, 0xf, 0x0, 0x3, 0x9, 0x4, 0x8, 0x6, 0x200, 0x1, 0x6, 0xb, 0x8, 0x5, 0x7314, 0x5, 0x7, 0x6, 0x3, 0xfff, 0x3, 0xff, 0x7, 0x6, 0xc5, 0xff, 0x6, 0x2, 0x5, 0x7, 0x2, 0xffff, 0x8, 0x9cd, 0xb23f, 0x5, 0xfffff800, 0x0, 0x80, 0x6, 0x3, 0xfffffff4, 0x3, 0x7, 0x3, 0x2870, 0x8, 0x3, 0x23300, 0x101, 0x2, 0x0, 0x4, 0x0, 0x1000, 0x8, 0x8, 0x3, 0x1, 0x7, 0x6, 0x38f2, 0x3, 0xa, 0x9, 0x3, 0x5be, 0x9, 0x8, 0x53d, 0xa4, 0x5, 0x4, 0x7, 0x200, 0x5, 0x3, 0x5, 0x6, 0x3, 0x1, 0x1, 0x7f, 0x6, 0x7, 0x65c, 0x6, 0x7, 0xc, 0x7, 0x6, 0xfff, 0x5, 0x2, 0x0, 0x5, 0x3, 0x8, 0x1, 0xf, 0x7, 0x8, 0x80, 0x5, 0x1e15, 0x3, 0xfffffffb, 0x7, 0xfffffff3, 0x100, 0x3, 0xfffffffe, 0x101, 0x2, 0x9, 0x100, 0x5, 0x4, 0x7, 0x10001, 0xfffffff9, 0x3, 0x1, 0x2ae, 0x8, 0xcb, 0x5, 0x401, 0x6, 0x4, 0x7, 0x401, 0xffffffff, 0x0, 0x200, 0x6, 0xd, 0x7, 0x5, 0x3, 0x18, 0x80000001, 0x30ab5205, 0x0, 0x7, 0x4, 0xe3dc, 0x1, 0x2, 0xe1, 0x4, 0x4, 0x8, 0x0, 0x0, 0xdd, 0x6, 0x7fff, 0x6, 0x800, 0x3, 0x6ae, 0xfffffffb, 0x7, 0x98, 0x51b, 0xfffffffd, 0xe, 0xe5, 0xe, 0x170, 0x73a, 0xff, 0x3, 0x6, 0x90, 0x4, 0x9, 0x3, 0x82, 0x61ebd4c9, 0x7, 0xee2400, 0x800, 0x2, 0x1, 0x1, 0xfff, 0x80, 0x4, 0x0, 0x8001, 0x4, 0x3, 0xf, 0x60, 0xfffffffe, 0xffffffff, 0x6, 0x1, 0xe, 0x4, 0xfffffff7, 0x7ff, 0x6, 0x6, 0x1000, 0x3, 0x9, 0x200, 0x1ff, 0xfffffb00, 0x0, 0x2, 0x4f1, 0x4, 0x49ed, 0x3, 0x2800, 0x80000001, 0x5, 0x0, 0x5, 0x4, 0x6, 0x5698, 0x2, 0x10, 0xc, 0x6, 0x200, 0x0, 0x7c20679, 0x2, 0x40, 0x9c72, 0x5, 0x8, 0x5, 0x1, 0x43, 0x8, 0x6, 0x9, 0x6, 0x1, 0x35, 0x21b4, 0x9, 0x3, 0x67d, 0x6, 0x6, 0x8, 0x8, 0x1, 0x2, 0x599, 0x8, 0x0, 0x7, 0x7, 0x1, 0x1, 0xa3, 0x400, 0x6, 0x7, 0x3ff, 0x10, 0x2, 0x62, 0x8, 0x6, 0x79, 0x3, 0x8, 0x6, 0x4, 0xfffffffd, 0x4d7, 0x9, 0x4, 0x8, 0x1, 0x7, 0x9, 0xf0, 0x2, 0x5, 0xce9e, 0x7, 0x2, 0x2086457f, 0x1, 0x1000, 0x294, 0xc, 0x9, 0x4ef90fa0, 0x8, 0x6, 0xc, 0x6, 0xc, 0x4, 0x3e039873, 0x3, 0x7, 0x1, 0xa843b22, 0x2, 0x4, 0x9, 0x962, 0x3, 0x4, 0x1, 0x88a8, 0xc27, 0x7, 0x2, 0xd, 0x2d, 0x2, 0xe, 0x0, 0xc, 0x40, 0x2326, 0xef1, 0xfffffffb, 0xffffffff, 0xffffffff, 0x9, 0x9, 0x3ff, 0xff, 0x72c2, 0x1, 0x2, 0x9, 0x9, 0x8, 0xb, 0x100, 0x7, 0x5, 0x346, 0x5, 0x1, 0x7, 0xff, 0x7, 0x4, 0x3, 0x8, 0x4, 0x8, 0x10001, 0xce, 0x6, 0x0, 0xd, 0x1, 0x7, 0x9, 0x3, 0x7f, 0xf4b, 0x6, 0x2, 0xd2cc, 0x7, 0x2, 0x6, 0x1, 0x45, 0x5, 0x8, 0x2, 0x1, 0x6, 0x38000000, 0xe, 0x7, 0x8, 0x3, 0x80, 0x0, 0x0, 0x6c, 0x25b5, 0x2, 0xfffffffd, 0x8, 0x3, 0x6, 0x5970, 0x7, 0x10000, 0x0, 0x6, 0xffffffff, 0x6e3, 0x9, 0x5, 0x9, 0x2, 0xffffffff, 0x57, 0x15f, 0x9, 0x1e2, 0x7ff, 0x0, 0x8, 0x4, 0x800, 0x6, 0xd04e0000, 0x1c00, 0x9, 0x3, 0xfffffffa, 0x9, 0xb39, 0x87b4, 0x9887, 0x7, 0x1, 0x8001, 0x0, 0xca, 0xffffff01, 0x1f5, 0x4, 0x8a1, 0x7fff, 0x6eb, 0x0, 0x6, 0x6, 0x1ff, 0x9, 0xa, 0x0, 0x5]})
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000001c80))
ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000001cc0))
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000001d00)={0x2, 0xffffffff, 0xcc})
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x2dc, &(0x7f0000001d40)={[{0x21, 0x4e00, "8eef6747c85c46e6d7c0ea9e64bf841e0a40fb5d090fb1ad16d4b2801814ec70f3"}, {0xaa, 0x4e00, "c69fb8699a0df77b13b244916c5e9b0dfbee825394cf069b6360d1b5584a9ab4b015817d8e447e61cdd5c36fd279adba5f7fe8fbe95113552f41a8558a2daa0a5a10849c5487ba91ee74321d356b3c028f790365c7c86d8e288bb2376a0ada51eec23cb4e22fb256c670d470b704b53b126c93df8cd1a65d248b47fb389c5a25f1c9d5e12139b8851e079a8054272b5f5552b20349993465d27d74ec252555f6ff3a58755a11fe384c06"}, {0x98, 0x4e00, "08fe60776fc80fb58b8d13d7c5a91641e026d02f82889502e4fdd66c65bfcdff2b9e14061cc7b24761edae3e27424a86844c85c42fb41582c9fb0f142bf9e94d10eea941f8bedb8f6c9708af6e6f2b800c227b65a55fc765aba9ec41fbd047f43e546dffe6cf3ee64cae728e07acfef585bbf03117d5f5e2a6da1518b6d7f191a7307b6fc29fa79ddff221f27d5508bbdac7e8140758d04d"}, {0xa5, 0x4e00, "831829719de46ada63590852af5e1e26a649bf0fffe842c8747aac3f98ca7a0861d457ffeef2b87d3cd6f2cb3ac486de58f3a367b040080d89a9270c81a8388f0f7e64404aab347ecf24fe30c5913fcbbc585e018725b55e097a07c322aeb1680c5959b953339bebabd9767e9990fc3df019e0cfcf4d76f92cc02061130bbeb122430921cbdbce79f021d1c5261bcb2ba3f8ceae39cd402d9891a22ad3403a3dfaebbe6c04"}, {0xb7, 0x4e00, "26c576cef3153f349837d91c578b6fa14cbf39107771edd92f2a3c52cf3298fff9881232249580d1575f35563520f1330c57a8940be92188126415010bb7bd64dfec01bba203d1a666e3b8d1e35713209698c2381fe68e749fddbf573dd926c51bc3451e170a7e64985803303d5d0ed8a48429f9c0bc4a6c16a2b9fc03a06c47ddd670682e922c9980a4c43428b4463c5231eceb7349c909043f25c966d683b9b5c7e9280f086af94ce53ec00d96d5d9de892a3482cc1a"}]})
r5 = syz_usb_connect(0x3, 0xad2, &(0x7f0000002040)={{0x12, 0x1, 0x110, 0xe8, 0x25, 0x92, 0x20, 0x45e, 0x435, 0x20ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac0, 0x4, 0xa, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0xee, 0x8, 0x3, 0x8c, 0xbe, 0xef, 0xc, [@hid_hid={0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0xaaf}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "936e"}, {0x5, 0x24, 0x0, 0x4d}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x958b, 0xffff, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x2}, @obex={0x5, 0x24, 0x15, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x6}, @mdlm_detail={0x11, 0x24, 0x13, 0xbb, "257d4f4b2f83bee648408068a4"}, @country_functional={0x10, 0x24, 0x7, 0xf1, 0x5, [0x4, 0x8, 0x8, 0x8, 0xe00]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}]}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x200}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x7, 0xb, 0xc4, [@generic={0x90, 0x9, "65ad424cb053aff2668d9ac2e391152bebae9d2f1011b143df8daff1fad0c0e3f2a521a093732df1767928d9b49f43888e8809230ff85cee4861ce60720fcb115965048f97663e2bd1b3c104e909f201878250b9a11b611bbddfd053b38d3a664e0d87852f89f46965a8bbed3776e259301b5df4a5b51db85d051439cb90482fb89feb686a3df439dbf20f7afb12"}, @generic={0xbb, 0x22, "54f7e6cc0ee7e8e64c77c1646880954c0d6cc9a534663152382e4d01e3783f205b3ac13f5b75d43c6ab86f23979d2876e8193bfc6d6637a2aea081be993d6b9df6bcaefd5bc4fd6c541956c6152aa3801feed72f0b71821fdfca52df70bbaaa0e2421fd64c96d99edbf179fe7b1cad09767ba66a510e824776c6761441f9d56593364492c2daee98d2b60850bde5fd622eb5bb082c91dca17708387556e2a0fca1bae6e20615bd09cd6062fd2bd58c435186b6557f93119979"}]}}]}}, {{0x9, 0x4, 0x6a, 0x6, 0xc, 0x68, 0xdc, 0x3c, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8840"}, {0x5, 0x24, 0x0, 0x2b8f}, {0xd, 0x24, 0xf, 0x1, 0x73, 0x9bb, 0x3, 0xf8}}, @uac_as], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0xff, 0x2, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4f, 0x401}, @generic={0x30, 0x23, "3a1a8162f84f49bb324ea3c01ebdf13a4e314490f2bf61f2c9b3d75dabb456b83cbfa80850c72b06f6c92129d32a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xd, 0x5, 0x96, [@generic={0x1d, 0x24, "b621b6817359bf30208eb679190f5adbca20671e269df54ce5f534"}, @generic={0xd0, 0x31, "c9a48ddb5d1c495265a5268a86a6e4c899c7c50cade549c6275b48aa469b2b3c14d65c50dee8a5d8e5dc1d2ebd5f33955b811b36229e1aa29952524c0c02897e02abae5fa759059764bfa74436b921876fcea00758b6718c7ce1a8df8fba91a71b3fbaae0f7b01feb16059504010fca9b4abee11484796bcb8007beb751b117b0004c534b10f26966d464876e4518bfc801641c32b5d84214b43fcf3788676311bda04620643ab86272e2e870c36a06dba7465ea38a0f79502500c34a6741637af12536d8a859153c06fe66e3bc5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xfe, 0x9, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x60, 0x6, [@generic={0x63, 0x11, "d1c351b0ed39bf5c4d22c7f22a9eae4a6f54724f210e84f353d13e735cffa0fb800708142e1b5ba423b7971dafe8376061622a18bf3645799c006a56e14618bf322e96e53a24b8b4b8f5119cb1896dedb72be91387ecafbee1de8dbbd0d75cc22d"}, @generic={0x8b, 0x6, "7918a8e17210c005896f920cba59ffe16f2b94c96d6d3c8a55b6bf2fa620b8901a5f755da5a24d9c8ac2b2014169c9352b313bb7dcafd3084775cec28dc37e75550c9bc34ea7cdee8f3e4a0e72d904ea68bb7b727d6a9dc85314d4d36c564ae47bde015f6c2a68717e2a36dc857ab6d7fa58eca310835ed6b7d459a052ec5a549de01f3d1ef8d922ac"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x81, 0x80, 0xff, [@generic={0x8d, 0x30, "191c7d4256a9a3b7bda54a1e92b6403521e89fb733a78c6cb65b003f0b6af8bfe97f80d3e16f148e5eebe7080ee159fd0a8549e5b41c08a1616a78c9c1214efb140497deb67597658b1b758a1da8e26ecbf4047da75e6a29ae0f39f24f82269817db61d31e3f4532b8043c42911a7c89f9073a259c20464e151c191047674ae6da67a09660730f06fb9edc"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x2, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8004}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x80}]}}, {{0x9, 0x5, 0x0, 0x10, 0x410, 0x10, 0x1a, 0x5, [@generic={0xd8, 0x6, "cac3c94e25fb50546bb6e4bf258ec316c9b76cf18e7b0f9efa5392cf135d6bfc22cbbac789ae2445781bcbb0d734b2b2537f3df9bb91af828043e14342adbe60e76c1a16c89644fc898392a0c00bf4471a90397325bb29b6fae0aa4837cc8a095524e2d5df8ec4ac2c2cd6c19d3377d9a7fe65aab6184d206adecabcce727f820677a6931a2f5402c75ff525f9719006e339058143b2ff4a6b20fe9ed0793c48eae1fcbe2788f022ac0c73cf366839439f54330a1a85828674b23e4b02cbcf46a543f19a79b465ed83a08e6b8af3aa8fac0afa4bbc47"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x64faab7eecd8681a, 0x7f, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xa, 0xe, 0x0, [@generic={0x36, 0x21, "7a2233ac0de18720fe217bed614dbe6154671f6614b5c0aaf523b8192ac74a3da254ef9794d5927b233e365cc5697a6edf25ad0f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xbf, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x7a, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8}, @generic={0xa7, 0x8, "7e9a43c3095b38e83b8f93b109dd8100fb08ac18540c0f4f4f4eef0f72b87cd0b6ce524b919cf3d47dc4d613081baeb4f98d17aa1d4d105c258255821d55ac7963bbccb46d36be0dab479915fba33efe7029c7ee5f2b9fbe18d4a077326b5506acfab7e245b20636324dd1992f30b0cc8471ae4adec313ee753e28e3b7760d24317744ff67d46a3644439997b91125f31407ba9ea30d71525a78a3fbfa6d09f7fb033b5bb1"}]}}]}}, {{0x9, 0x4, 0x94, 0x0, 0xe, 0x2a, 0xd, 0x92, 0x6a, [], [{{0x9, 0x5, 0x80, 0x61a6e16f67b37b63, 0x3ff, 0x9d, 0x8, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xa, 0x8, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xc}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xea, 0x3d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x62e}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc7, 0xfffa}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x5, 0x0, 0x6}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x44, 0x40, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xc, 0x1, 0x58, 0x2, 0x2, 0x23}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xff, 0x44, 0x80}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x63, 0x56}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x18, 0xab}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x0, 0x8, [@generic={0xd1, 0x21, "f39a9aa2353af4f221e705ff0fd81ed6a14cd7d0070ff2373196c1cda3ce980df1d2cdabaa9cfcc4524222bfe5613c9968f5f9abf8194079d5d7a9d49f8297a18d092ea55d35f3cc67227f8a8e610a0645388d53d1bd0896d8bc277828214641d6b3b8023d1d77a12ffbefa5582c1b0a387360049a6d230ef25f769b36ae86f3102925ad393d3df4cc6ee8205d74628116e6e4e7db691284765693ebb0d150e5daa7972f0f266602ef0026f00115140511bc3cb9a7744bf6f4e027a53bc4c52ec3cf530cf07ea06ae8b4ed6f5055b4"}]}}, {{0x9, 0x5, 0x0, 0x14, 0x20, 0x7, 0xf3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x1, 0x6}}, {{0x9, 0x5, 0xc, 0xb, 0x200, 0xf, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x5}]}}]}}, {{0x9, 0x4, 0x6c, 0x5, 0x8, 0x33, 0x55, 0x64, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x101, 0x4c2, 0xeb}, [@country_functional={0xc, 0x24, 0x7, 0x8, 0x4, [0x200, 0x9, 0x3]}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0xfff8, 0x10}, [@acm={0x4, 0x24, 0x2, 0xc}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x3, [0x4e85]}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0x7fff, 0xf, 0x4, 0x0, 0x5}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x2, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x7f, 0x7, 0x8}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x88, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2c}]}}, {{0x9, 0x5, 0x85, 0x0, 0x200, 0x0, 0xdf, 0x60}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xfa, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xa, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x56, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x5, 0x7, 0x2, [@generic={0x4a, 0xd, "20dd7562589b3b89f1b99904330df4eacad381dfa403e32204b0eb807766cd67f696cd95dd506939bdc7d60efd9d71b32853c95db5eadac5079d0ed6f7f3c15184c09031f80ae64d"}, @generic={0x3c, 0x7, "2ff2037c31b06fb79092c27e002a6759009aa5d6a732db4041e812fdffdc53742d975136c4561bce6080cb0ab2fe56a746b1098855a8d833dcbb"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0x0, 0x2, [@generic={0xd9, 0x2, "b00f143a2c36d69287b2eafa23e53ffcb6ab061bb44c2c2608e87bf74ecdf0cd11d2ed854050175a9c1ea42c12fdeadb46e775b3624a03ccbb69d59f02aeca97898a500e9636ac9b70d52965a4712d3fed5b89fa26890889b79352c04cb26cdf9e3b399fddb71533b2be159f6b2698e59f8526ecb8713861ef1d6be9427c353eb86c33788002d11f3468c247b8f9d058d7d36731fedf1079777b30d6ec5305dd4d0e32bd51fb73e3898be28fc8a0eb23adb5faabfe13e3ef6f1b4808df634b0b5def5cf4d5fbda4275d7176a2238185d6269dd13c91748"}]}}]}}]}}]}}, &(0x7f0000002cc0)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x300, 0x3, 0x7, 0x1, 0x20, 0x1}, 0x5, &(0x7f0000002b80)={0x5, 0xf, 0x5}, 0x2, [{0x9d, &(0x7f0000002bc0)=@string={0x9d, 0x3, "c4faa5bc5c01630da3c7fd0b5cb591d982977f08bf43671e9644c08f00a97779b7ed6a82a7da22c0b5ea336412a4472511109c12d5892b34c740607fd23a8f7137333d97dab6a9ab3c270e6b555ed7ac8df40092bb70ec7cc1a82ec0ea2f5fb877f02fd7fb0132d87519ec5a162c38946f8a06469c0f6d5356f66529ba6ff2b30051fd0466cbbd310480bfb47c5b9d3487d7d47c431a7529541f90"}}, {0x2d, &(0x7f0000002c80)=@string={0x2d, 0x3, "579faee8c01f6822ffc87099d949e050a6ee3a42ff1e40e1b5652cd34c5c2578d1a7fc737b1ae0b6a437eb"}}]})
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000002d00)={0x3, 0xffffffff, 0x5, 0x7fffffff, 0xcdd68bf, 0x8})
read$hiddev(r3, &(0x7f0000002d40)=""/114, 0x72)
r6 = syz_open_dev$hiddev(&(0x7f0000002dc0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000002e00)={0x1, 0x2, 0xebbe})
syz_open_dev$hidraw(&(0x7f0000002e40), 0x7, 0x8081)
syz_usb_control_io(r5, &(0x7f00000030c0)={0x2c, &(0x7f0000002e80)={0x20, 0x9, 0xf9, {0xf9, 0x24, "7730f442e1d25df7684d1653d156257a7dc21265a9f62dcdd903cbde8f5c72b662cc76be70b4942378e5a8c4ebcc3a423a218fd1ed1d04890291d5fee4d597252e91ea5fefc5e4bb0d0a7648ce1beae6f3b772b77dba52e16a524210499230c6ef844e6ee60c2193372960b7453323ccdb2df2af3296c1e48684613b0fa3dd71a100d346e24bdf96b4b06320d35d116df179dde3c2c41871a6acdb33d1da9874e39d27f9beedc1a2b7d234364534331eef75a9ca1bac6043f03dd2158a27c79d2223a33b1c408a159dd7e798f1c1e2ec446ffbb3bce572c89fb6cbf1f2ff9d5f6b3fffe57066620247be87355f9da69b21cf1b1ae3783d"}}, &(0x7f0000002f80)={0x0, 0x3, 0x61, @string={0x61, 0x3, "d444588c1d935ebce97a923b0f9d86412460f9adfc338df5a5ef7525f573aacce5aad8bcf9858155ccc78c718d6803755508136021e47351e131697f56ddf84c0b11de4ade4cf719fc21e444ea81640f8d550dcb63c56ba1089a010bc9785f"}}, &(0x7f0000003000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0xb3, 0x1, "bf813b80", "efd9a3ae"}}, &(0x7f0000003080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x80, 0x40, 0x11, 0x7, 0xf, 0xd}}}, &(0x7f0000003500)={0x84, &(0x7f0000003100)={0x20, 0xa, 0xd, "891350ac7e1795da21593274c7"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000031c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000003200)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf000]}}, &(0x7f0000003240)={0x40, 0x7, 0x2, 0x14af}, &(0x7f0000003280)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000032c0)={0x40, 0xb, 0x2, "1ecc"}, &(0x7f0000003300)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000003340)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003380)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000033c0)={0x40, 0x19, 0x2, "fe4a"}, &(0x7f0000003400)={0x40, 0x1a, 0x2, 0xffbe}, &(0x7f0000003440)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000003480)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f00000034c0)={0x40, 0x21, 0x1, 0x8c}})
ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f00000035c0))
ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000003600)={0x3, 0x3, 0x7})
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000003640)={0x2, 0x100, 0x40})
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000036c0)=""/210)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
[ 36.969366][ T29] audit: type=1400 audit(1774454107.628:62): avc: denied { mounton } for pid=2955 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 36.993615][ T29] audit: type=1400 audit(1774454107.658:63): avc: denied { mount } for pid=2955 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 36.997201][ T2955] cgroup: Unknown subsys name 'net'
[ 37.023961][ T29] audit: type=1400 audit(1774454107.688:64): avc: denied { unmount } for pid=2955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 37.145170][ T2955] cgroup: Unknown subsys name 'cpuset'
[ 37.153585][ T2955] cgroup: Unknown subsys name 'rlimit'
[ 37.311150][ T29] audit: type=1400 audit(1774454107.968:65): avc: denied { setattr } for pid=2955 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 37.335175][ T29] audit: type=1400 audit(1774454107.968:66): avc: denied { mounton } for pid=2955 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 37.361712][ T29] audit: type=1400 audit(1774454107.968:67): avc: denied { mount } for pid=2955 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 37.386922][ T2958] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 37.397991][ T29] audit: type=1400 audit(1774454108.058:68): avc: denied { relabelto } for pid=2958 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.423899][ T29] audit: type=1400 audit(1774454108.058:69): avc: denied { write } for pid=2958 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.475811][ T29] audit: type=1400 audit(1774454108.138:70): avc: denied { read } for pid=2955 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.477873][ T2955] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 37.502313][ T29] audit: type=1400 audit(1774454108.138:71): avc: denied { open } for pid=2955 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 41.745902][ T3090] modprobe (3090) used greatest stack depth: 23304 bytes left
[ 49.741111][ T29] kauditd_printk_skb: 6 callbacks suppressed
[ 49.741132][ T29] audit: type=1400 audit(1774454120.398:78): avc: denied { create } for pid=2970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 49.823985][ T29] audit: type=1400 audit(1774454120.398:79): avc: denied { write } for pid=2970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 49.912531][ T29] audit: type=1400 audit(1774454120.528:80): avc: denied { read } for pid=2970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 81.246042][ T29] audit: type=1400 audit(1774454151.908:81): avc: denied { mounton } for pid=2970 comm="syz-executor" path="/root/syzkaller.2EQ3IZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 81.312687][ T29] audit: type=1400 audit(1774454151.908:82): avc: denied { mount } for pid=2970 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 81.389112][ T29] audit: type=1400 audit(1774454151.908:83): avc: denied { mounton } for pid=2970 comm="syz-executor" path="/root/syzkaller.2EQ3IZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 81.482478][ T29] audit: type=1400 audit(1774454151.908:84): avc: denied { mount } for pid=2970 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 81.542524][ T29] audit: type=1400 audit(1774454151.908:85): avc: denied { mounton } for pid=2970 comm="syz-executor" path="/root/syzkaller.2EQ3IZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 81.627970][ T29] audit: type=1400 audit(1774454151.908:86): avc: denied { mounton } for pid=2970 comm="syz-executor" path="/root/syzkaller.2EQ3IZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 81.629086][ T2970] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 81.717070][ T29] audit: type=1400 audit(1774454151.938:87): avc: denied { unmount } for pid=2970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 81.772498][ T29] audit: type=1400 audit(1774454151.958:88): avc: denied { mounton } for pid=2970 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 81.852429][ T29] audit: type=1400 audit(1774454152.458:89): avc: denied { read write } for pid=2970 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 81.942520][ T29] audit: type=1400 audit(1774454152.458:90): avc: denied { open } for pid=2970 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 82.163806][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 82.336378][ T10] usb 3-1: not running at top speed; connect to a high speed hub
[ 82.352462][ T1126] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 82.380756][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34
[ 82.390252][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 82.411044][ T10] usb 3-1: Product: syz
[ 82.417905][ T10] usb 3-1: Manufacturer: syz
[ 82.422826][ T10] usb 3-1: SerialNumber: syz
[ 82.552799][ T5210] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 82.574298][ T1126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 82.586080][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.593100][ T1126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 82.604806][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.610032][ T1126] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 82.615632][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.626598][ T1126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 82.632496][ T2804] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 82.644249][ T1126] usb 2-1: config 0 descriptor??
[ 82.657443][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.670483][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.691827][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.701313][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.710807][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.719835][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.729852][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.739038][ T5210] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 82.754707][ T5210] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 82.764184][ T5210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 82.772622][ T5210] usb 1-1: Product: syz
[ 82.777009][ T5210] usb 1-1: Manufacturer: syz
[ 82.781676][ T5210] usb 1-1: SerialNumber: syz
[ 82.816100][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 82.823876][ T2804] usb 5-1: Using ep0 maxpacket: 32
[ 82.833358][ T2804] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 82.841616][ T2804] usb 5-1: config 0 has no interface number 0
[ 82.848290][ T2804] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 82.859358][ T2804] usb 5-1: config 0 interface 1 has no altsetting 0
[ 82.870667][ T2804] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0e
[ 82.879960][ T2804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 82.888689][ T2804] usb 5-1: Product: syz
[ 82.894421][ T2804] usb 5-1: Manufacturer: syz
[ 82.899122][ T2804] usb 5-1: SerialNumber: syz
[ 82.907208][ T2804] usb 5-1: config 0 descriptor??
[ 83.068698][ T10] qmi_wwan 3-1:251.0: probe with driver qmi_wwan failed with error -22
[ 83.116204][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.125328][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.138936][ T2804] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 83.154920][ T2804] cx231xx 5-1:0.1: Not found matching IAD interface
[ 83.165148][ T23] usb 4-1: device descriptor read/64, error -71
[ 83.173649][ T2804] usb 5-1: USB disconnect, device number 2
[ 83.270807][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.280195][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.290026][ T1126] usb 2-1: string descriptor 0 read error: -22
[ 83.290505][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.305774][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.397484][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.407796][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.432452][ T23] usb 4-1: Using ep0 maxpacket: 16
[ 83.439326][ T23] usb 4-1: config 0 has an invalid interface number: 107 but max is 0
[ 83.448043][ T23] usb 4-1: config 0 has no interface number 0
[ 83.454440][ T23] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 83.464588][ T23] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 83.476845][ T23] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 83.486023][ T23] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 83.492762][ T5203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.494365][ T23] usb 4-1: Product: syz
[ 83.507183][ T23] usb 4-1: Manufacturer: syz
[ 83.507648][ T5203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.511892][ T23] usb 4-1: SerialNumber: syz
[ 83.526053][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.527998][ T23] usb 4-1: config 0 descriptor??
[ 83.545463][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.556132][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.565305][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.617938][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.627160][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.702874][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.711986][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.723449][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.733140][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.745835][ T5203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.746573][ T23] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected
[ 83.755960][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 83.771407][ T23] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81
[ 83.773036][ T5203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.781321][ T23] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1
[ 83.789761][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 83.811643][ T23] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 83.815779][ T1126] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5
[ 83.826383][ T23] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2
[ 83.832441][ T5210] usb 1-1: 1:1: cannot get freq at ep 0x1
[ 83.842120][ T23] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 83.857373][ T2804] usb 3-1: USB disconnect, device number 2
[ 83.895211][ T1126] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[ 83.909793][ T23] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4
[ 83.935778][ T23] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 83.937673][ T5210] usb 1-1: USB disconnect, device number 2
[ 83.957839][ T23] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6
[ 83.976574][ T23] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 83.994195][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 84.007514][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 84.009894][ T5212] udevd[5212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 84.028964][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 84.075129][ T2804] usb 2-1: USB disconnect, device number 2
[ 84.081496][ T23] usb 4-1: USB disconnect, device number 2
[ 84.131560][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 84.161323][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 84.180261][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 84.192246][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 84.203734][ T23] keyspan 4-1:0.107: device disconnected
[ 84.212684][ T10] usb 5-1: Using ep0 maxpacket: 32
[ 84.221996][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 84.234391][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 84.245120][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 84.256416][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 84.273179][ T10] usb 5-1: config 0 descriptor??
[ 84.284605][ T10] hub 5-1:0.0: USB hub found
[ 84.484215][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 84.495578][ T10] usbhid 5-1:0.0: can't add hid device: -71
[ 84.501676][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 84.534793][ T10] usb 5-1: USB disconnect, device number 3
[ 84.641325][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 84.652525][ T5210] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 84.672796][ T1126] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 84.792520][ T5210] usb 1-1: device descriptor read/64, error -71
[ 84.804019][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 84.816278][ T23] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 84.825752][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 84.834351][ T23] usb 4-1: Product: syz
[ 84.838582][ T23] usb 4-1: Manufacturer: syz
[ 84.843457][ T23] usb 4-1: SerialNumber: syz
[ 84.847713][ T1126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 84.859258][ T1126] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[ 84.862140][ T23] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 84.869223][ T1126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 84.888302][ T1126] usb 3-1: config 0 descriptor??
[ 84.892498][ T2804] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 84.898772][ T1126] pwc: Askey VC010 type 2 USB webcam detected.
[ 85.029568][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.041912][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.042591][ T5210] usb 1-1: device descriptor read/64, error -71
[ 85.062426][ T2804] usb 2-1: Using ep0 maxpacket: 32
[ 85.069004][ T23] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 85.082114][ T2804] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 85.099085][ T2804] usb 2-1: config 0 has no interface number 0
[ 85.099962][ T23] usb 4-1: USB disconnect, device number 3
[ 85.105410][ T1126] pwc: send_video_command error -71
[ 85.111971][ T1126] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 85.126051][ T2804] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 85.133758][ T1126] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 85.141738][ T2804] usb 2-1: config 0 interface 89 has no altsetting 0
[ 85.155652][ T2804] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 85.166015][ T1126] usb 3-1: USB disconnect, device number 3
[ 85.167160][ T2804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.180409][ T2804] usb 2-1: Product: syz
[ 85.184780][ T2804] usb 2-1: Manufacturer: syz
[ 85.189410][ T2804] usb 2-1: SerialNumber: syz
[ 85.196550][ T2804] usb 2-1: config 0 descriptor??
[ 85.205312][ T2804] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 85.216522][ T2804] em28xx 2-1:0.89: Video interface 89 found:
[ 85.259097][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.268530][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.271739][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.276781][ T5227] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 85.295377][ T5210] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 85.295789][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.309788][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.314266][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.331375][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.340474][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.350780][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 85.351821][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.361107][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.377157][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 85.432553][ T5210] usb 1-1: device descriptor read/64, error -71
[ 85.592456][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 85.612473][ T5255] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 85.672486][ T5210] usb 1-1: device descriptor read/64, error -71
[ 85.722468][ T23] usb 4-1: device descriptor read/64, error -71
[ 85.773839][ T5255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 85.782759][ T5210] usb usb1-port1: attempt power cycle
[ 85.784209][ T5255] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[ 85.798746][ T5255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 85.808626][ T2804] em28xx 2-1:0.89: chip ID is em2710
[ 85.815046][ T5255] usb 3-1: config 0 descriptor??
[ 85.825191][ T5255] pwc: Askey VC010 type 2 USB webcam detected.
[ 85.852438][ T5227] usb 5-1: device not accepting address 4, error -71
[ 85.962460][ T23] usb 4-1: device descriptor read/64, error -71
[ 86.009572][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.018801][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.029325][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.038837][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.051058][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.059906][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.122530][ T5210] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 86.143978][ T5210] usb 1-1: device descriptor read/8, error -71
[ 86.202492][ T5227] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 86.212426][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 86.229047][ T5255] pwc: recv_control_msg error -32 req 02 val 2b00
[ 86.236290][ T5255] pwc: recv_control_msg error -32 req 02 val 2700
[ 86.243593][ T5255] pwc: recv_control_msg error -32 req 02 val 2c00
[ 86.250690][ T5255] pwc: recv_control_msg error -32 req 04 val 1000
[ 86.251534][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.268556][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.280006][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.289062][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.291425][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.299446][ T5210] usb 1-1: device descriptor read/8, error -71
[ 86.315261][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.326505][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.335918][ T5227] usb 5-1: device descriptor read/64, error -71
[ 86.336640][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.353846][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.362453][ T23] usb 4-1: device descriptor read/64, error -71
[ 86.362887][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.380604][ T5255] pwc: recv_control_msg error -71 req 04 val 1300
[ 86.394754][ T2804] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 86.403632][ T2804] em28xx 2-1:0.89: board has no eeprom
[ 86.409309][ T5255] pwc: recv_control_msg error -71 req 04 val 1400
[ 86.418278][ T5255] pwc: recv_control_msg error -71 req 02 val 2000
[ 86.425397][ T5255] pwc: recv_control_msg error -71 req 02 val 2100
[ 86.432533][ T5255] pwc: recv_control_msg error -71 req 04 val 1500
[ 86.439356][ T5255] pwc: recv_control_msg error -71 req 02 val 2500
[ 86.446373][ T5255] pwc: recv_control_msg error -71 req 02 val 2400
[ 86.453524][ T5255] pwc: recv_control_msg error -71 req 02 val 2600
[ 86.460910][ T5255] pwc: recv_control_msg error -71 req 02 val 2900
[ 86.467840][ T5255] pwc: recv_control_msg error -71 req 02 val 2800
[ 86.474418][ T2804] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 86.481624][ T2804] em28xx 2-1:0.89: analog set to bulk mode.
[ 86.488450][ T5255] pwc: recv_control_msg error -71 req 04 val 1100
[ 86.495827][ T5262] em28xx 2-1:0.89: Registering V4L2 extension
[ 86.502690][ T5255] pwc: recv_control_msg error -71 req 04 val 1200
[ 86.512565][ T5255] pwc: Registered as video0.
[ 86.519898][ T5255] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[ 86.548568][ T2804] usb 2-1: USB disconnect, device number 3
[ 86.560449][ T2804] em28xx 2-1:0.89: Disconnecting em28xx
[ 86.574307][ T5210] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 86.583440][ T5255] usb 3-1: USB disconnect, device number 4
[ 86.602433][ T5227] usb 5-1: device descriptor read/64, error -71
[ 86.615074][ T5262] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 86.625592][ T5262] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 86.632820][ T23] usb 4-1: device descriptor read/64, error -71
[ 86.654298][ T5210] usb 1-1: device descriptor read/8, error -71
[ 86.655094][ T5262] em28xx 2-1:0.89: No AC97 audio processor
[ 86.682726][ T5262] usb 2-1: Decoder not found
[ 86.687473][ T5262] em28xx 2-1:0.89: failed to create media graph
[ 86.695433][ T5262] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 86.704839][ T5262] em28xx 2-1:0.89: Registering snapshot button...
[ 86.704976][ T5265] ==================================================================
[ 86.713037][ T5227] usb usb5-port1: attempt power cycle
[ 86.719622][ T5265] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 86.727243][ T5262] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7
[ 86.732503][ T5265] Read of size 8 at addr ffff888122228740 by task v4l_id/5265
[ 86.732527][ T5265]
[ 86.732561][ T5265] CPU: 0 UID: 0 PID: 5265 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 86.732586][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 86.732607][ T5265] Call Trace:
[ 86.732615][ T5265]
[ 86.732625][ T5265] dump_stack_lvl+0x100/0x190
[ 86.732665][ T5265] print_report+0x156/0x4c9
[ 86.732700][ T5265] ? __virt_addr_valid+0x81/0x620
[ 86.732729][ T5265] ? __phys_addr+0xe8/0x180
[ 86.732758][ T5265] ? v4l2_fh_init+0x27d/0x2c0
[ 86.732781][ T5265] kasan_report+0xdf/0x1e0
[ 86.732819][ T5265] ? v4l2_fh_init+0x27d/0x2c0
[ 86.732851][ T5265] v4l2_fh_init+0x27d/0x2c0
[ 86.732874][ T5265] v4l2_fh_open+0x64/0xa0
[ 86.732895][ T5265] em28xx_v4l2_open+0x11e/0x570
[ 86.732931][ T5265] v4l2_open+0x1d2/0x490
[ 86.732954][ T5265] ? __pfx_v4l2_open+0x10/0x10
[ 86.732977][ T5265] chrdev_open+0x234/0x6a0
[ 86.733011][ T5265] ? __pfx_chrdev_open+0x10/0x10
[ 86.733039][ T5265] ? path_get+0x61/0x80
[ 86.733072][ T5265] do_dentry_open+0x68b/0x14b0
[ 86.733102][ T5265] ? __pfx_chrdev_open+0x10/0x10
[ 86.733131][ T5265] ? inode_permission+0x374/0x620
[ 86.733167][ T5265] vfs_open+0x82/0x3f0
[ 86.733198][ T5265] ? may_open+0x1f3/0x410
[ 86.733232][ T5265] path_openat+0x208c/0x31a0
[ 86.733266][ T5265] ? __pfx_path_openat+0x10/0x10
[ 86.733300][ T5265] do_file_open+0x20e/0x430
[ 86.733330][ T5265] ? __pfx_do_file_open+0x10/0x10
[ 86.733370][ T5265] ? alloc_fd+0x42a/0x730
[ 86.733399][ T5265] ? do_getname+0x191/0x390
[ 86.733433][ T5265] do_sys_openat2+0x10d/0x1e0
[ 86.733466][ T5265] ? __pfx_do_sys_openat2+0x10/0x10
[ 86.733504][ T5265] __x64_sys_openat+0x12d/0x210
[ 86.733537][ T5265] ? __pfx___x64_sys_openat+0x10/0x10
[ 86.733572][ T5265] ? do_user_addr_fault+0x3e3/0x11d0
[ 86.733611][ T5265] do_syscall_64+0x106/0x7b0
[ 86.733636][ T5265] ? irqentry_exit+0x117/0x620
[ 86.733673][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.733699][ T5265] RIP: 0033:0x7f552778d407
[ 86.733724][ T5265] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 86.733753][ T5265] RSP: 002b:00007fff3731de60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 86.733780][ T5265] RAX: ffffffffffffffda RBX: 00007f552769f880 RCX: 00007f552778d407
[ 86.733797][ T5265] RDX: 0000000000000000 RSI: 00007fff3731ff27 RDI: ffffffffffffff9c
[ 86.733812][ T5265] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 86.733826][ T5265] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 86.733845][ T5265] R13: 00007fff3731e0b0 R14: 00007f5527f23000 R15: 0000556a1dc164d8
[ 86.733869][ T5265]
[ 86.733877][ T5265]
[ 86.744835][ T23] usb usb4-port1: attempt power cycle
[ 86.750881][ T5265] Allocated by task 5262:
[ 86.784315][ T5262] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 86.787983][ T5265] kasan_save_stack+0x30/0x50
[ 86.793526][ T2804] em28xx 2-1:0.89: Closing input extension
[ 86.797503][ T5265] kasan_save_track+0x14/0x30
[ 86.803391][ T2804] em28xx 2-1:0.89: Deregistering snapshot button
[ 86.806764][ T5265] __kasan_kmalloc+0x8f/0xa0
[ 86.806800][ T5265] em28xx_v4l2_init.cold+0x94/0x3503
[ 87.070205][ T5265] em28xx_init_extension+0x13a/0x200
[ 87.075490][ T5265] request_module_async+0x61/0x80
[ 87.080784][ T5265] process_one_work+0xa23/0x19a0
[ 87.085903][ T5265] worker_thread+0x5ef/0xe50
[ 87.090676][ T5265] kthread+0x370/0x450
[ 87.092551][ T5227] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 87.094835][ T5265] ret_from_fork+0x6c3/0xcb0
[ 87.102683][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 87.107068][ T5265] ret_from_fork_asm+0x1a/0x30
[ 87.119453][ T5265]
[ 87.121905][ T5265] Freed by task 5262:
[ 87.125966][ T5265] kasan_save_stack+0x30/0x50
[ 87.130902][ T5265] kasan_save_track+0x14/0x30
[ 87.134074][ T5227] usb 5-1: device descriptor read/8, error -71
[ 87.135746][ T5265] kasan_save_free_info+0x3b/0x70
[ 87.143017][ T23] usb 4-1: device descriptor read/8, error -71
[ 87.147248][ T5265] __kasan_slab_free+0x43/0x70
[ 87.158503][ T5265] kfree+0x1dc/0x640
[ 87.162388][ T5265] kref_put.isra.0+0x56/0x90
[ 87.166990][ T5265] em28xx_v4l2_init.cold+0x280/0x3503
[ 87.172474][ T5265] em28xx_init_extension+0x13a/0x200
[ 87.177871][ T5265] request_module_async+0x61/0x80
[ 87.182887][ T5265] process_one_work+0xa23/0x19a0
[ 87.187823][ T5265] worker_thread+0x5ef/0xe50
[ 87.192508][ T5265] kthread+0x370/0x450
[ 87.196589][ T5265] ret_from_fork+0x6c3/0xcb0
[ 87.201271][ T5265] ret_from_fork_asm+0x1a/0x30
[ 87.206230][ T5265]
[ 87.208554][ T5265] The buggy address belongs to the object at ffff888122228000
[ 87.208554][ T5265] which belongs to the cache kmalloc-8k of size 8192
[ 87.222713][ T5265] The buggy address is located 1856 bytes inside of
[ 87.222713][ T5265] freed 8192-byte region [ffff888122228000, ffff88812222a000)
[ 87.236869][ T5265]
[ 87.239184][ T5265] The buggy address belongs to the physical page:
[ 87.245766][ T5265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122228
[ 87.255249][ T5265] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 87.263840][ T5265] flags: 0x200000000000040(head|node=0|zone=2)
[ 87.263984][ T5227] usb 5-1: device descriptor read/8, error -71
[ 87.270037][ T5265] page_type: f5(slab)
[ 87.280466][ T5265] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 87.283995][ T23] usb 4-1: device descriptor read/8, error -71
[ 87.289195][ T5265] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 87.304262][ T5265] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 87.313041][ T5265] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 87.321706][ T5265] head: 0200000000000003 ffffea0004888a01 00000000ffffffff 00000000ffffffff
[ 87.330412][ T5265] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 87.339156][ T5265] page dumped because: kasan: bad access detected
[ 87.345653][ T5265] page_owner tracks the page as allocated
[ 87.351349][ T5265] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2945, tgid 2945 (sshd-session), ts 27059479310, free_ts 0
[ 87.372091][ T5265] post_alloc_hook+0x153/0x170
[ 87.376952][ T5265] get_page_from_freelist+0xf10/0x39f0
[ 87.382666][ T5265] __alloc_frozen_pages_noprof+0x273/0x2860
[ 87.388667][ T5265] new_slab+0xa6/0x6c0
[ 87.392742][ T5265] refill_objects+0x26b/0x400
[ 87.397418][ T5265] __pcs_replace_empty_main+0x1ab/0x660
[ 87.402959][ T5265] __kmalloc_node_track_caller_noprof+0x651/0x800
[ 87.409516][ T5265] kmalloc_reserve+0xe8/0x350
[ 87.414436][ T5265] __alloc_skb+0x185/0x710
[ 87.418866][ T5265] netlink_dump+0x662/0x11f0
[ 87.423547][ T5265] netlink_recvmsg+0x7f9/0x9c0
[ 87.428423][ T5265] sock_recvmsg+0x1a4/0x1f0
[ 87.433075][ T5265] ____sys_recvmsg+0x218/0x640
[ 87.437852][ T5265] ___sys_recvmsg+0x16a/0x1a0
[ 87.442531][ T5265] __sys_recvmsg+0x16d/0x220
[ 87.447219][ T5265] do_syscall_64+0x106/0x7b0
[ 87.451843][ T5265] page_owner free stack trace missing
[ 87.457285][ T5265]
[ 87.459596][ T5265] Memory state around the buggy address:
[ 87.465428][ T5265] ffff888122228600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.473578][ T5265] ffff888122228680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.482063][ T5265] >ffff888122228700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.490122][ T5265] ^
[ 87.496403][ T5265] ffff888122228780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.504497][ T5265] ffff888122228800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.512532][ T5227] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 87.512633][ T5265] ==================================================================
[ 87.518070][ T5265] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.518092][ T5265] CPU: 0 UID: 0 PID: 5265 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 87.518123][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.518138][ T5265] Call Trace:
[ 87.518147][ T5265]
[ 87.518155][ T5265] dump_stack_lvl+0x100/0x190
[ 87.518191][ T5265] vpanic+0x552/0x970
[ 87.518219][ T5265] ? __pfx_vpanic+0x10/0x10
[ 87.518249][ T5265] ? v4l2_fh_init+0x27d/0x2c0
[ 87.518272][ T5265] panic+0xd1/0xe0
[ 87.518297][ T5265] ? __pfx_panic+0x10/0x10
[ 87.518326][ T5265] ? v4l2_fh_init+0x27d/0x2c0
[ 87.518347][ T5265] ? preempt_schedule_common+0x42/0xc0
[ 87.518385][ T5265] ? check_panic_on_warn+0x1f/0x90
[ 87.518415][ T5265] check_panic_on_warn.cold+0x19/0x34
[ 87.518535][ T5265] end_report.part.0+0x3a/0x90
[ 87.518572][ T5265] kasan_report.cold+0xe/0x18
[ 87.518605][ T5265] ? v4l2_fh_init+0x27d/0x2c0
[ 87.518631][ T5265] v4l2_fh_init+0x27d/0x2c0
[ 87.518654][ T5265] v4l2_fh_open+0x64/0xa0
[ 87.518676][ T5265] em28xx_v4l2_open+0x11e/0x570
[ 87.518708][ T5265] v4l2_open+0x1d2/0x490
[ 87.518732][ T5265] ? __pfx_v4l2_open+0x10/0x10
[ 87.518755][ T5265] chrdev_open+0x234/0x6a0
[ 87.518784][ T5265] ? __pfx_chrdev_open+0x10/0x10
[ 87.518811][ T5265] ? path_get+0x61/0x80
[ 87.518844][ T5265] do_dentry_open+0x68b/0x14b0
[ 87.518870][ T5265] ? __pfx_chrdev_open+0x10/0x10
[ 87.518898][ T5265] ? inode_permission+0x374/0x620
[ 87.518934][ T5265] vfs_open+0x82/0x3f0
[ 87.518964][ T5265] ? may_open+0x1f3/0x410
[ 87.518999][ T5265] path_openat+0x208c/0x31a0
[ 87.519033][ T5265] ? __pfx_path_openat+0x10/0x10
[ 87.519066][ T5265] do_file_open+0x20e/0x430
[ 87.519096][ T5265] ? __pfx_do_file_open+0x10/0x10
[ 87.519136][ T5265] ? alloc_fd+0x42a/0x730
[ 87.519165][ T5265] ? do_getname+0x191/0x390
[ 87.519199][ T5265] do_sys_openat2+0x10d/0x1e0
[ 87.519232][ T5265] ? __pfx_do_sys_openat2+0x10/0x10
[ 87.519270][ T5265] __x64_sys_openat+0x12d/0x210
[ 87.519303][ T5265] ? __pfx___x64_sys_openat+0x10/0x10
[ 87.519338][ T5265] ? do_user_addr_fault+0x3e3/0x11d0
[ 87.519378][ T5265] do_syscall_64+0x106/0x7b0
[ 87.519402][ T5265] ? irqentry_exit+0x117/0x620
[ 87.519442][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.519467][ T5265] RIP: 0033:0x7f552778d407
[ 87.519488][ T5265] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 87.519511][ T5265] RSP: 002b:00007fff3731de60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 87.519536][ T5265] RAX: ffffffffffffffda RBX: 00007f552769f880 RCX: 00007f552778d407
[ 87.519553][ T5265] RDX: 0000000000000000 RSI: 00007fff3731ff27 RDI: ffffffffffffff9c
[ 87.519568][ T5265] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 87.519583][ T5265] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 87.519598][ T5265] R13: 00007fff3731e0b0 R14: 00007f5527f23000 R15: 0000556a1dc164d8
[ 87.519622][ T5265]
[ 87.520896][ T5265] Kernel Offset: disabled