Extracting prog: 12m58.170798932s
Minimizing prog: 34m52.53175284s
Simplifying prog options: 0s
Extracting C: 2m13.146939906s
Simplifying C: 7m17.926776391s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xf0, 0xfe, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xfaf9, 0x2, 0x1, {0x22, 0x472}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0xc, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0xa, 0x8d, 0x40, 0x1}, 0x104, &(0x7f0000000200)={0x5, 0xf, 0x104, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6aa2ea73a535d97a685a9033e4c378f2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x9, 0x7, 0x8, 0x8}, @generic={0xe0, 0x10, 0x0, "7c392ce0a73c69e46db296845f1be0e26fbb9f4ed2d3d0cd7d7f2d11714a882c59f873de16574b718356ae437e54abbec69e75994ed0eb8765238523a8a8c5564a6251f8bb2487074430fe0fb9c167018a9d5c6a6214a9a0c68fd3690f1495eb10109c014ea4bb0d7c400d4cfe494ac84e6fc5294c8584f7158f47a6ecce3adeef84bb9b1a703b7330b66a6da342ef67901e7c59359ca309c89e84e58f8c77f7e6328a9c2b9c86cdb289309351c18399278ab728fb224c28caf7724c9739ad8655d70e58389262b768728c423152fe1c7d57a671908ea5300cdac9d54f"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}]})
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f0001220c0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_connect-syz_usb_control_io$hid-syz_usb_disconnect-syz_open_dev$evdev-syz_open_dev$evdev-syz_usb_control_io$uac1-ioctl$EVIOCGMASK-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_ep_write-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x168, &(0x7f0000000040)=ANY=[@ANYBLOB="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"])
syz_usb_connect(0x1, 0x3d7, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x49}, 0x0, 0x0})
syz_usb_disconnect(r1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0)
r5 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r7, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
syz_usb_control_io$uac1(r5, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0xa, 0x88, {0x88, 0x21, "50495a9a45ca3cbbdb102fe1787d737b2152c42029a5c47194ff55c540e0db5c59c00a7d6d108508ba0b2891f8c3902e7c70d54750b6c32b17b53aa7d12dc4862b34f512718e8593ea2be3586935f799c6ce6f44323eb3a2777da3c26838adf70e4006caeed63484c4fea7ece512feec1a063d23d475ab0b7bf2134aa4261414e7fa88262413"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x20, 0x10, 0x4b, "3fa80f52d8caa82a8bb040e4fe4df831f401e9fa3884ec9946dc9424388f8b1126f5e111579fb0194b337e05bd9132a9acf9b7d623a5dc15ed7f3c0d95f7bed7eaa4171c294c691393e95d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000540)={0x20, 0x81, 0x3, "cf26a9"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "53d5c3"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, ',G'}, &(0x7f0000000600)={0x20, 0x84, 0x3, "dcfce9"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "9ebef5"}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$uac2-syz_usb_control_io$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x8, 0xc, "e7e75cffdec33b302ccc566d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x86, {0x86, 0x24, "5f3debd32f98c3134ef0fff9d2fc8651468c06726bca7639e89aabe27f4ad92e4dbeb8ce5894ad6dc28dda2f22c79b85f6d22f9049a8cef4b0dd0781dbfae852b8b4358b20838754b53e8d028411b2152c1a3332b9a822ddaf57bbcac3beda4085bd5d59fc727caaaa67b1d2f9ea8535adc0f548275b716c67ace9722d5d1ed486edb883"}}, &(0x7f0000000100)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "053ac0578a02248dae729f260a6073f36cc6878dfa4473d7f2c42f7ff6f4ca61311be1b9a2caff6794848e3b426b9cffb1174afa791004de8996efcc71fb799f44864ae4077afe8e30cf07b3141efa25c2922cfdf91d5894430b21f1c5"}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x8, 0x74, "3896f9ee56675817a6cbbb1d95ac98deccc0079fd3c2f1e60eb99f865b1f7d10efba595f9d5edb9cb418133a7f92e33e2714d044c8a96faa3a8bb57f05e49b021e77eb7de2ee096dca5cc430a7720004da6324c88313b8c6842333e117ece12bf9dbd657657dcef01bd245df475570917bd0aa8d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x87}, &(0x7f00000002c0)={0x20, 0x81, 0x1, 'D'}, &(0x7f0000000300)={0x20, 0x82, 0x2, "5716"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "15d2"}, &(0x7f0000000380)={0x20, 0x84, 0x4, '@K\f]'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "87d482"}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x2, "0411"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x3, "9ed28a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 11, 27, 14, 2, 18, 8, 19, 25, 7, 28, 13, 16, 8, 26, 27, 14, 6, 24, 4, 7, 4, 8, 30, 4, 11, 6, 28, 4]
detailed listing:
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x50, 0xfff, 0x560c, {0x636, 0x5d6}, {0x20b, 0x6}, @ramp={0x8, 0x2, {0x8, 0x401, 0xfffc, 0x1}}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00004500000045003b651763da2333ddbb3c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200f324150400001020304"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904620000d1d8a3ff72699780f01ae70d"], 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b40809050602ff03090000090582060000ee"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x407}}]})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000206d0401c100001600000109022400010000803c09040006010300000009218f0d030122180009058103200000fcf9"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfc3, 0x8100)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5a"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000000))
read$hidraw(r2, &(0x7f0000000100)=""/14, 0xe)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000180)=ANY=[], 0x0)
r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r6)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$uac3(r5, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x40, 0x23, 0xb0, {0xb0, 0x22, "bd52220100668e01c54b02f043595f33d8beecc27785de510906fc3f25f38198062ca3674b9a565dda8b715abfae60bb9d1275cc87733c53e6a693b89dbc762f5001c7bbf09af31d4f7f64830d38dbecd8634bb923da4eb85599bb14a4c96a490a4c4a8501e568c994b16f1793ca39b946d39cb81050ecdda911b914d8b4d4c7cb9c2d80b92d5c312769f73e9f11d98ec948815db3615b7b54ad9234567cfe5847116668f9e03d7cb47139d0c270"}}, &(0x7f0000000480)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "975e875ea3d3e51c8ce80fb4ce667a7e1fdfb424948d98884460da05c65ddac161bd0916b56086e5bdb1d63cdb2688e3719174a8e2eddb33d677ec214e060ce3a8716f3f38e70a71a329055f042b2f642ecb8fc8efbcdd56908ee3fdd1"}}}, &(0x7f0000000900)={0x44, &(0x7f00000005c0)={0x0, 0xb, 0xa6, "f238c6ccf4b49294aaa5ab9a28aea313fc8e6867234b645a5caf8dd68527c4b7bce5409801aefc933db496609a4eac6bc30ee5f0ede0fdf3b13bc4cfbb17eaf8be19bfd6edb6ab881659395745e11e23f11787b29df839b590c86ae1bd9ef153a5af9b4a20551da0c8305f79957c7ca94f8e8dd7d5e60a5194a69e8852bd848bcb82088cdc2b9aa451f5b59d45341d938d7f0c570e9a1bc69f403117be71f79328df070650a8"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x81, 0x2, "ff30"}, &(0x7f0000000740)={0x20, 0x82, 0x2, 'Kh'}, &(0x7f0000000780)={0x20, 0x83, 0x1, "b7"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "06"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "f09777"}})
syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000280)=@string={0x8, 0x3, "6a37df7d66ee"}}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x8, &(0x7f0000000280)=ANY=[])
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff"], 0x0)
syz_usb_ep_read(r0, 0xff, 0xa, &(0x7f0000000000)=""/10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800f3ff00050080050945811302020000000904010000020d00000904010102020d00000905820200f6f10000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x9, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7fffffff, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x17, &(0x7f0000000400)=@string={0x17, 0x3, "6264e701664c67a5954e71f7420b64d0f1dba41a5b"}}]})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102f9bb05102c1051627c6201021b070902120001020940060904"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0xa0, 0x33, 0x9a, 0x20, 0x1d50, 0x60a1, 0x4202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb2, 0x2, 0x60, 0x6, "", [{{0x9, 0x4, 0xf2, 0xb, 0x0, 0xb4, 0x28, 0x64, 0x12}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800"], 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da1700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be00a3"], 0x0}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x20, 0x6, 0x3, "95f06e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESOCT], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYBLOB="1f89c5"], 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x77, 0x0, 0xa, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x81, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="001206"], 0x0, 0x0})
syz_usb_connect$uac3(0x1, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xee, 0xa0, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x24, 0x9}, [@mixer_unit={0x6, 0x24, 0x5, 0x5, 0x2c, '<'}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x200, 0x1, 0x8, 0x7, 0x7, 0xfffa, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf8, 0x1, 0xc, {0xa, 0x25, 0x25, 0x3, 0xde, 0x868}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3e, 0x6, 0x9, {0xa, 0x25, 0x25, 0x17a1, 0x6, 0x6e50}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x1, 0xfb, 0x8}, 0x23, &(0x7f0000000240)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ccf5a58556f42643128a0a409e3e994e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4f, 0x2, 0x1}]}, 0x8, [{0x58, &(0x7f0000000340)=@string={0x58, 0x3, "05a272e581f94125199897f23693602da4123bf982b70566e050912fcbdfc59687a78564f8ba1660bd3697edc5e21c091be8a9e2df78c5755bc575c453050dbb5c6ab15ee3fff73fb3410be9126d642e3d9f6197b850"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x3c, &(0x7f0000000440)=@string={0x3c, 0x3, "6ebbdd731acbb3f5cb2d82ad4ee891afc1be40630203fb667be478ae94828a4533f460d034e71fc9f2030cf1910518cb7077edd282e054d3ecb7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1407}}, {0xc6, &(0x7f00000005c0)=@string={0xc6, 0x3, "f34e07600032c3997eb63221e4bcfdee5109313b0f4d0b8f4081380e492af7a76be6821ea9adaa2e0d624a085482915d0704cf0443f669b05a83597150e9eadf2c0ef310830a3a91cea8b727c4d4ed83e486173a6536edce048ecc9fa3b6222dd6e74103a1f6ced564f0491f88d81ee786d72ed3da7abad9b12aeda3e287ce88acbcc01a4d78e879efc89fe8533513d6c7f4b4e0d8f31363a828af225c46eb043006f18c86bf688a462ca32d1ead9cd4822bc5bd6f00aeca686630fc3923d14ac0f4f36a"}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "c59294de98a5e78849590b7e49d2bbe8744bff076452a273d5db2acfb56f7b3a6496d25e663543c5c54582754fcf324c0ffadc98dd1a7a1a5327ec9a4b95befabd0b8d6adb0cb135020110bbac25ebbcddbea54fa88bb2eeff36ff6e85a218169f5fc9db8a701486"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x67, &(0x7f0000000840)=@string={0x67, 0x3, "d34e4c6fb4e0c5367d6544293f2cdd10eec29c59cb72175d1527161169a9eb652018581d4aa3cda6c7259c5a89ae7c9c6bf3cda6fae19178c72d92b261ab1ee11888f9e19f13f38b742559f6a6a7cf72f9d7ae119a37c701b98c1136dc4ded33e46b233879"}}]})
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000004c0)={0x20, 0x15, 0x5, "a6d1431f0c"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0xb3, &(0x7f0000000300)={0x20, 0x3, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x2, "0411"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x3, "9ed28a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x89, 0x2}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402404345500010000000109021900010100e00009040000010900000007058103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xe6, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, 'A'}]}}, 0x0}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x2e, 0x2, '\a\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000005bcca2023030109021b001400000000090400000198dc4a08000500000000000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="15e353da6501c9cfa6ec95a6f8765889a0ec1e359b0ae98f85f9b19736b8be1d09ca4750a0d580cbef34688791daf857e7440a040b1fc6e2b622d3e5acd0a3b3e4bc7c64d5bf314457be39cef54c58871b924e7204ec2ec3cf3d03bfbebd6f7ef0e8454a778c2d968d1a34934284cf0185172c3abcd61f3c"], 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x6, 0x2, {0x2, 0xe}}, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="070003"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="070003"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000009c0)={0x20, 0x5, 0x3, "f9c598"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000840)=ANY=[@ANYRES8=r0], 0x0)
syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x168, &(0x7f0000000040)=ANY=[@ANYBLOB="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"])
syz_usb_connect(0x1, 0x3d7, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x49}, 0x0, 0x0})
syz_usb_disconnect(r1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0)
r5 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r7, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
syz_usb_control_io$uac1(r5, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0xa, 0x88, {0x88, 0x21, "50495a9a45ca3cbbdb102fe1787d737b2152c42029a5c47194ff55c540e0db5c59c00a7d6d108508ba0b2891f8c3902e7c70d54750b6c32b17b53aa7d12dc4862b34f512718e8593ea2be3586935f799c6ce6f44323eb3a2777da3c26838adf70e4006caeed63484c4fea7ece512feec1a063d23d475ab0b7bf2134aa4261414e7fa88262413"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x20, 0x10, 0x4b, "3fa80f52d8caa82a8bb040e4fe4df831f401e9fa3884ec9946dc9424388f8b1126f5e111579fb0194b337e05bd9132a9acf9b7d623a5dc15ed7f3c0d95f7bed7eaa4171c294c691393e95d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000540)={0x20, 0x81, 0x3, "cf26a9"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "53d5c3"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, ',G'}, &(0x7f0000000600)={0x20, 0x84, 0x3, "dcfce9"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "9ebef5"}})
executing program 0:
r0 = syz_usb_connect(0x4, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200020007050302000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x200, 0x860c1)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x80, 0x3, 0x9b, {0x9b, 0x7, "6375acc475c16bb63e3e384c9e260487507d0638cc5daff147b5b9074e1f254334dde777072bef3f22fa63e951f06b341bed6a28a5239f4cfffdf8f0de75b700b00c5ba94e1aaf969c90de4a7b13a6ed5f4605dec63a35617ad1c04eb672ec12ea981c65b941ea47eb665f2fc2d079350fb52b95307f8018b678cfb0886e3838e0c926a0c9d0690336caeb5203814c4b409c5a9fd9bb9ece8a"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000340)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0xd9, 0x1, {0x22, 0x9a}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0x14, 0x50, "db0094bfb178c3f7f2e4d95b5bb2a86e873bc211982d4d151718ac599ed4cf8a1442b718f325ed5eeef2c1574488804c5f66230f3c07f1bf002c0f54c66ff2f20c03f1d61d2277bd79effc9a3b68082c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0x82, "1b2138c003876af32ea721cdd78f32b8eade6cee0acd07c66b3e7a1f5407c65b68157a7eda6874829bbef81655b7ff0d42a43bd8f564c43e13d5dcdb72d4268305cd05feb471affe5fa00db1187f566995dd57d49e26d573d8f8f6a3ae1465258b322677389de6951b0d626064a2d405e0357ab9b6d30f7fa0de2c883a26226dcfed"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}})
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x3, &(0x7f0000000040)="40a647")
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000180)=""/136)
executing program 1:
r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x40, 0xe, 0x65, 0x8}, {0x9, 0x5, 0x3, 0x2, 0x20, 0x48, 0x8, 0x9}, {0x9, 0x5, 0x7, 0x3, 0x8, 0x5, 0x2, 0x2}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x40, 0xe, 0x65, 0x8}, {0x9, 0x5, 0x3, 0x2, 0x20, 0x48, 0x8, 0x9}, {0x9, 0x5, 0x7, 0x3, 0x8, 0x5, 0x2, 0x2}}}}}}]}}, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async)
executing program 3:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0xd, 0x0, "00090001", "c9c24ba1"}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0xc, {0xc, 0x21, "d68132c1fcd875046e2f"}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20c81e0000004d61501d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_open_dev$evdev(0x0, 0x95b6, 0x240)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0xb24}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000fc0), 0x5, 0x42240)
r1 = syz_usb_connect$uac3(0x544869bf54e338c2, 0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001f80)={{0x12, 0x1, 0x310, 0x2, 0xb3, 0x21, 0x8, 0x471, 0x311, 0x7e1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x20, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0xff, 0x0, 0xb8, 0x1, 0x71, 0xe3}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0xffffffffffffff42, 0x0})
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x220, 0x6d, 0xc0, 0x22, 0x10, 0x6f8, 0x4, 0x4764, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0xff, 0x80, 0x2, "", [{{0x9, 0x4, 0x1d, 0x7, 0x1, 0x53, 0xb0, 0x9e, 0x9, [], [{{0x9, 0x5, 0x4, 0x8, 0x0, 0x80, 0x7, 0xa0}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x3, 0x302)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0xc, 0x2080)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(r5)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffffffffffff, 0x822b01)
ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})
syz_usb_disconnect(r5)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x31, 0x3, "9e07f8"}, 0x0, 0x0, 0x0, 0x0})
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xcc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0}, 0x0)
executing program 0:
syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904"], 0x0)
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x2, {0x2, 0xc}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000940)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_disconnect(r0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x139c, &(0x7f00000010c0)={[{0x1000, 0x4e00, "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"}, {0xa8, 0x4e00, "2b82fb6a355a5b7233c86de77bb977004150f0ae7607db5c4c3e3ff598d2009000ed9498610f1fc1de353950521a6d9c1729eb4465a7bbe66fd17ef4ebe8a4ba2324cb4350053a3fbdf2c2470ab85eb7d53690e7e81830f8a06cc25b72b69b4a14c8f334e063aa9bee2507470e559e2bf6b5b7d6ce6d40664a313ab5b5f2f080468fb4a81fe6e01ef88e1232b38c5f9e2a80c305b7b9ece707b6d2a731d0a30a9517007acc2c5430"}, {0x1d, 0x4e00, "be51989e5be361846ac05d23bb4bd39677ded317de3f484df0c28dff73"}, {0x1, 0x4e00, "84"}, {0x66, 0x4e00, "aa1389d218be626ea84bcdbf5e053b42b493d7993ea08ed2a64a557ad51e74c0169650384842cd723261f2bb444aa2323592cca138d3b512260fd296697b5ab0f4de356bf5b347c91b53685da23769d87fbc044451b2bece3dae1ccd0b439002699509f4952a"}, {0xe, 0x4e00, "5d697efe1d09c1ea7288a0043111"}, {0x78, 0x4e00, "9ad4e3f868cd593eca5569a604f4f7dff0db3225c571357102326bb0913ed7cc294a732663a57c13993fe159f860f2d798fbea29d4ed2ad65ea9f6e7e207fcd4400a283b7d18a7cd50f002e49870a3015b3720b421d06581cdf6368c981457cbe617ec2fb93fdfb016ab25ea323a25c3ee5b2cb6735d3360"}, {0x7e, 0x4e00, "f31b8d77b41ab17858b296e64da7f770e82f0187006a6ac15e5ef3257759c2c17e2d952a0a9c06a1f941af4ef3213ecadb1c9899969cb1bf3e8a05dfe91d77589bce2aaec30cf746ecc700788f46661687679c3e912612d9c683fa4f896efc24a63fa19de3f2e73a9f7117a572dc768eb560e3444cb7a78edd9c97138831"}, {0xdf, 0x4e00, "e885fac80f6e4a9339be35f03e58cc356dd5194032c5492c29a2b69db8a2eb84fd9428005e2d3a4b4e65ee3259b02b7932ac0082ed4dd404a7c064a29b14e59ad0e1468cf953e6b8bcc85f0d3e7cf1cb450d10cd4c627bfcf0980cfc0c92b5f5ab250863b4f4079577dea6e318703a2bae0cc228fc40e4160f8c9b7b9b5166b1f53ab3256f052799f61bdb7aa541b646a9e9d0444d8288f1dfa3e3d19c0399e7f02fbeb62f20514bdf56ed06582be5225fa9ad5930c256f38901f781f524f1e2d57134991363c906f01ba8c43182bbd23bfd53946f202fb291c05e7857625d"}, {0x55, 0x4e00, "cfb48c001e26861bc8072ab6338186f7bffe030c8c3eb5f9fd7652e7276f4d27f3007117f302fd08b2bb0cd49fc8541731c8c83b42d03d4e7d08d72274eb99d6a5a9ce5258d51cc3921e114dad8021eff24870c97a"}]})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)={0x0, 0x10, 0xe6, "0ed6b4b6f180800a09af476b2962fd479e349eda54075042aa1f5923ac786931fc3eaf38ee33600de435099e2dc7ae719e318fdd17a48bf90952483363cbfa04fd45107a88cc0e8062604d002176108eb74fe7d0e6fc2003fc5f6ba522be6c61421daf5ab71d22b82ba865b4034089a048497cd61766c039d39345d73c142a38c6d2af9e6ca2141fe373153e4d73518eee71df20a885bbe15b4fb88fd54019977c808326daf85236d26fec84013168b22908570115e4114242e68ff0ca183270370c645f5a7b0180707459d4f3e41f3c5282610948f7a21ab97fca2cacec57951d24ef4468cf"}, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x15, 0x5, "59acb52bf1"}, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x4d, 0xf, 0xc7, 0x10, 0xeb0, 0x9071, 0x9bbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x7, 0xc9, 0x0, 0x1, "", [{{0x9, 0x4, 0xa7, 0xfb, 0x3, 0xca, 0xe4, 0x85, 0x1, [], [{{0x9, 0x5, 0x8, 0x3, 0x400, 0x55, 0xb8, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x0, 0x81}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xf1, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000001780)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000002600)={0x44, &(0x7f0000002340)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x31, 0xe3, {0xe3, 0x5, "2173df441599a1ea826271445099b16e66bf9b37c19e67f717ba5aab805d3de3289243a522374100bf6862e16210d21961b1693e7be048e776c9855a6ea45012844dbe10564cdcacfbff1b84da8f1fc0fa8036f289c95cd4de3f4cf30111d1937d532a57523debf77fe83b3e01a0ecd4d368bc34b0e2719a6d95eeaa7088504dc01b02ec3457295e2c2697dc04b9cb93f9e26f3f50b6142506d297360c4a6dee6a635cf4828f93b08e15fc4edb33c850278f91485db195e26ce7cbd65da2a42adf7772adc755754975e48356b46f0b1fef1b1574fbd6ea4d2c6b5cb263266d2d4e"}}, &(0x7f0000000100)={0x0, 0x3, 0x7e, @lang_id={0x0, 0x3, 0x44e}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x17, 0xdf, "2dd7bcfcc720df7c60299a8ef1131ba6595c1a59df72456066227b8f01cf491fb8ccab3ab1ffd4015ac1a4931bed962ce7fd3e02e7355c11f96c38c2912605033b641df88df67200ee89774f74054cdb40cf53b880fc17b23c5451d35176282f0b5ab0a2d9985f9cf63d3b6c911a2730800c768b93b64402622da6bd7226fb768cc5fff25df8b18273c47872f2a8b2cc48"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x81, 0x1, "86"}, &(0x7f0000000380)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f00000003c0)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000400)={0x20, 0x84, 0x2, 'f$'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "ee6bba"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000003a00)={0x2c, &(0x7f0000003800)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003c80)={0x34, &(0x7f0000003b00)={0x0, 0x5, 0x1, "a7"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a42500010203010902bd0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402df032402"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000006040)={0x1c, &(0x7f0000005f40)={0x0, 0x12, 0x1, '|'}, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af439010203010902"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff00070582"], 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="b8", 0x1)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x1b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x79, 0x88, 0xd2, 0x10, 0x5ac, 0x290, 0xe1c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x7, 0xe0, 0x2, "", [{{0x9, 0x4, 0xfe, 0x2, 0x0, 0x3, 0xfb, 0x2, 0xe}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700000000000038840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(0x0, 0x100000401, 0x701440)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x5d, {0xb, 0x7, 0xa, 0x7, 0x2, 0xc00, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x9, 0x7b, &(0x7f0000000140)=""/123)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec001d00010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20000103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000800)={0x20, 0x11, 0x2, "d756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x90000)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0))
executing program 3:
r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x3, 0xe5, {0xe5, 0x24, "1599e69288cb4b5ca1ab0771c12a247154d2b5e76ca9f81f9e6aeb87350bd9197f05158c7ff92a99e5b8e731c66f56815630f3a95e57bd3edacf2903b6ef141398afbeff635fa5bfb04bc8a5535f555d4b70305ebb7c47879d90f1c9d4d0b62a99a81aaba0ec9d67618ed8975cf7f51ac467ad061fee6703f7eeb61ffad5a133054b78618b5ed6e148cd55d7aa8c1222cefd0fc1044689870571c9e0471e650b4ee6901927a416e6d03816cb097f96c2454c84b7b8f70093f2f41cc2ce6e3866f508d71ff4a6a86c71111c13c3738a5c16422ef069a9ef12d32f8e2d4ac8ca01042e9a"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000440)={0x40, 0x7, 0x73, "d54fd905272745c02248d4867113b70df751e5c9f79b637499422864a2e5ce55a59267a659039f573f9d0ceaa37ae1c429d7408201f6decccf1228e417f6dd1dc15c7e8d12b9d1ffcc13fd125675c6c009b394937749edaa7c177aa7ec9805d20304183377d8fae9dc04175390590ad53abd05"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x1ff}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "f3298e801ce4746d5e10161e07d28fbd973a675ca017ff65ed2e76abf96793ece800a0b2c88a8726014e172629319d"}})
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x20, 0x4, {0x8, 0xb, 0x1, 0x2, 0x1, 0x22, 0x30, 0xe3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x80, 0x9, 0x32, {0xa, 0x25, 0x25, 0x4e, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbc, 0xff, 0x10, {0xa, 0x25, 0x25, 0x1, 0x6, 0x4}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x28, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x3, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x8, 0x3}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x210, 0x4, 0x8, 0x59, 0x8, 0x3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfb, "eb9203ce1f2b1fbbe2793eae94d3072d"}]}})
executing program 4:
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x2, "0411"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x3, "9ed28a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x0, 0x2, 0xa5, {0xa5, 0x1, "62e2e7d2e7375357ca70ed0462a77c03ebbdb5ee3ee64119e4042d1a222d259003ffd6e9e06028c39d57a0ace93c5cd46ac283c7345b3228dc05682fa8d112fbaa74964f1f808ee6618fbeb08d54aaf0e5912b885f67d91b23370815e59a7026fc77d5ab403c127a39d8614af3f4055577f7a79c1d47f09172594d7ec3c3bd4b77fdd56f3a30f4d4b005d9832c0a0570c5217eaf332d2689015c63affb27f5dd785dc9"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000000400)={0x40, 0x13, 0xe9, "f8cfb1517f04317a83bf1113d34d5f98a355fac08c06e063479e19dec7910f4e58d0f94e709747cb22aa18817564b57ed57e92681f3b8efe19357996cca5c7fcb7051eda0124aa843bd43e9c8e8803ee8954d297a6cfc16e24fc5db095e48aedf7c4392e69cea7bf234dbca0eb17f8aaf1eb31bf1f2fcff602c79d21645fd730d78f2b83f68fa5e21f785c57fe7338e93b0bc84bcf60a7eb15ae86ebbb963f331282e29367bdf80583420c6041f53c82f7f7e25b243f9ce91cc66be1172a29e50498bcd8fa17ea31ecc75a62fbb04f79e059ab3d511c243fece1de9346318e12573317c60e7196e372"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x0, 0x7, 0xfffffffd, 0x0, 0x200, 0x5, 0x200, 0xf3cd, 0x5, 0x55, 0x7, 0x1000}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x2e97}, &(0x7f0000000780)={0x20, 0x89, 0x2}})
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xa3, 0xda, 0xdc, 0x8, 0x506, 0xdf, 0xe905, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000080804013040000102030109022400010104400d09040002025c5e00000921690ca00122bc02090581030004070109"], &(0x7f0000000300)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x7c, 0x85a}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x22800)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_connect$uac3(0x2, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101020000001004160580400001020301090278000301021004080b0101012530800904000000010130000a2401090a00010400000904010000010230000904010101010230000a240202000001000f0609050109ff030803090a25250001000044ffff09040200000102300009040201010102300009058209000225f100000004000a"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x133882)
syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x6, 0x27c, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x36, 0xc4, 0xac, 0x20, 0x2040, 0x200a, 0x1c33, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26a, 0x3, 0x80, 0xa3, 0x40, 0xe5, "", [{{0x9, 0x4, 0xf3, 0x4, 0x6, 0xc0, 0xf5, 0x7f, 0xca, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x4c}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x7, 0x7, 0x4, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x82, "b405ed12"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x7, 0x1, 0x6, 0x4, 0x2], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x5, 0x4, 0x7, 0x2, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x2, 0x1, 0x8}]}, @generic={0xed, 0x2, "0bfe60d612d35c86d76003466af9ccc1f19dc29a57107c6e0565a2f68ae7fa3c6d75ceda5af599279c072e7954e2abc7435b6514c361f20fe34203d9ec578002a2be4a50119e54cd95d382bc0a55d743c26b9438c13d0eaee11daba1386ffe17a9b4351d9c5868b6399fb730db18a77a2e154ec744236d00dcdfad7a0a1d27c6839825ecbe37d8585a4d9c0d23965f07f90974fe9bf7897578ddb13bffd536872822b8ad39d58647f81136156ec0e06bc02110e12d93dbe5d191519c46aa4211d11a54361900a905482a76f2156a4d7a18f69c97ef7bfacee6529b368bd147f19e9aadf17ebc623b4a7dba"}], [{{0x9, 0x5, 0xd, 0xc, 0x8, 0x6, 0x1, 0x83}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x97, 0xff6c}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x50, 0x6}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x4, 0x2, 0xbe}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x0, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0xf6ca11d0d087bdda, 0x10, 0x4, 0x5, 0x7, [@generic={0x57, 0x8, "c000f0198cd6a9e0cb9e7ec24792da8c05dd06a1239ec17a3a4a05a8f3f98b637921a8464f7d5b0a7c11a814d67ef96ff524443996974ee9952ab09a343c87293eb077cbfea5fa3346eebbca5f74c778c69f9889c0"}]}}, {{0x9, 0x5, 0x9f, 0x8, 0x10, 0xf8, 0x4, 0x0, [@generic={0x29, 0x9, "217a66009d084d723843a994da2c97b1d44854af7c09a69e03e7e82e38f6a3071793154f8f057d"}]}}]}}, {{0x9, 0x4, 0x30, 0x2, 0x2, 0xff, 0x0, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x80c}}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0xe2, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x1ff}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x8, 0x81, 0x6c}}]}}, {{0x9, 0x4, 0xdf, 0x0, 0x2, 0xaf, 0xc7, 0x39, 0x0, [], [{{0x9, 0x5, 0xc, 0x4, 0x400, 0x3, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x39, 0xfd}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x0, 0x6, 0xd, 0x4, 0x50, 0x7}, 0x43, &(0x7f0000000ac0)={0x5, 0xf, 0x43, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x49, "0dbd0b57959f0d51563fc147b12bbfc6"}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x79c3, 0x0, 0x1c, [0xc030, 0xff00, 0xffa0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0xa, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x5b, 0x40, 0x1, 0x3}]}, 0xa, [{0xfb, &(0x7f0000000b80)=@string={0xfb, 0x3, "30be6c95f9fb5317fc94d44fa4f171d77a539f4f0598eadd1b24189906d28a6e499cd2d861e02923a06258d801de09b22480761f69466cf9468297f3c1a262c548307ac641ce1900d6d42ca8b9460e652320d178d66cda1315bf91bb2f9fd5673534fdc61f8a811b81e640622e02b22ba78e840fa4323148445aedea691ea006603cadb2c8c713ec58112c5e38efeab1ab98d6012c1bf484bb60ea59bb08054261b12ae9db3edbdd7859cc8a75f7b92a4347c48d9024c9f785229eecbe91afefcc7e75006580db7895abd599a39191b6206761202a4d58b6453c5f9caecb13a1f3b46ef134bb7f8bf656f4e3717a406cd8323e66709977eb5f"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x403}}, {0xc8, &(0x7f0000000cc0)=@string={0xc8, 0x3, "9e467150fea4d87a53e7061faf28fdea0e3a7fc9c734abdb7f8c0e9e646d2947006962ec23dcaffc71aff38f58aa676db6a3b07dd843ef8d2422f13296aa2cbc79acf4375b1ca5f2fb44881c8aea2febb7e0a9058ed6fbc20f13aeb9f09da770f3be63baf2172e155b08bec19fd95956c604796ca85b4224389a3877d868830303d8da1b57778a482e18b650ce9a1beb5cf5c70081c2c0b8d65a8f9c30eda812d7e316e3c5794841a6a485a807f50d2fc000b350e29be83c4ee899f5022eb6ab9a9de2d44f1b"}}, {0xa3, &(0x7f0000000dc0)=@string={0xa3, 0x3, "70367da935c6dfa0a9fa5e0997eca469e1397217736d1005d1b86fbe70fdea1431b68d00a84e6d6face99f12eede5e23f411a58f272d3ce4f7cc59580a4cd34df767ad47b7bab4bfa0546e839929816fa0508d05683856a1c7466153df525dd313c992caf2ecaf4035e129e1cecd48dda75164a76c4973a681c2a773536d520ea2da3c776adb60f57f095f16670e7e01b8daf77f28e70af8a69a62259fb481ea28"}}, {0x98, &(0x7f0000000e80)=@string={0x98, 0x3, "de9b7ede0ab034e8e676085e71b2ba36ef271acf00334402414d5df74f87ed496fd2219def6b4cea91defe8049615db975f59ed5ae6b79fee4c0b3bd02667e7fb2f62ca2573478e07c0cbadd05bc2cb9421b353723fd163e01134083873d5adecbe6272f3c052bc9de1b31ade43072fcd9cbf8ba26bd4286d756157a1073448f6294c131a2c87978022d76e2e177dce6294ae705b62a"}}, {0x6b, &(0x7f0000000f40)=@string={0x6b, 0x3, "3cd6321f4cf6346a1a6b46179bfbc21975ddaead37952c544b2907272bbb388f07b2ad30b6900de603a5fd01aa65ffc7c73883feae6c3a378bd60d53480eb4b6d98fca1805c05f065f1b268e95f06a3aef9b9c16b04db0f324e2d9694e159db0e1d8e18d6366d4c0da"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x421}}, {0xa7, &(0x7f0000001000)=@string={0xa7, 0x3, "176acbbf5a8d0722e4dc75cfb3c5de685ee76d005ebf8d5866f374e308230b019a3ea72d3d42e1679073ad68e8b034183e627a8374d0717b8cac9eb05064725a3ce26ce843d16c90809f3eab94365b823133aec390794835b07778eba8078a4033b8e63d9eb9853443802eeacbc8cf8c67c4da4dbb7bde939c1673860322224b28a6455a3b79e46f1dfeab346bef1038dd9a7a2d82edf2796f7e8d8c95f281ccbd2ecb8386"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001100)=@string={0x4, 0x3, "8cd7"}}]})
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x7c, 0x29, 0xbf, 0x40, 0x77d, 0x4aa, 0x94b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0xc8, 0x6, 0x0, 0x2c, 0x23, 0x82, 0xfb}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="10")
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x8, 0xc, "e7e75cffdec33b302ccc566d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x86, {0x86, 0x24, "5f3debd32f98c3134ef0fff9d2fc8651468c06726bca7639e89aabe27f4ad92e4dbeb8ce5894ad6dc28dda2f22c79b85f6d22f9049a8cef4b0dd0781dbfae852b8b4358b20838754b53e8d028411b2152c1a3332b9a822ddaf57bbcac3beda4085bd5d59fc727caaaa67b1d2f9ea8535adc0f548275b716c67ace9722d5d1ed486edb883"}}, &(0x7f0000000100)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "053ac0578a02248dae729f260a6073f36cc6878dfa4473d7f2c42f7ff6f4ca61311be1b9a2caff6794848e3b426b9cffb1174afa791004de8996efcc71fb799f44864ae4077afe8e30cf07b3141efa25c2922cfdf91d5894430b21f1c5"}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x8, 0x74, "3896f9ee56675817a6cbbb1d95ac98deccc0079fd3c2f1e60eb99f865b1f7d10efba595f9d5edb9cb418133a7f92e33e2714d044c8a96faa3a8bb57f05e49b021e77eb7de2ee096dca5cc430a7720004da6324c88313b8c6842333e117ece12bf9dbd657657dcef01bd245df475570917bd0aa8d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x87}, &(0x7f00000002c0)={0x20, 0x81, 0x1, 'D'}, &(0x7f0000000300)={0x20, 0x82, 0x2, "5716"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "15d2"}, &(0x7f0000000380)={0x20, 0x84, 0x4, '@K\f]'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "87d482"}})
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000406d0404c70000000000010902240001000050000904000002030002000921000000012218000905810300000006fd804d828c834ddac666c1a4de51f129780eb808c205df09afee43e4268aeca35be3d1338dc881f79b11b54b33392e8dfdc496aabdca492e4a222910d25aa80303a0fa4bb227b1091bd3feabcacb6ce759467e042270503d397bf5d2f61dbbbf2fb02c9b29259e8903c85abf60056b2481e59ba0a6c3d578c7422433aeaf3745b1134b5ba72ce3e569cbaefe3fa0ec6e092e44ae0c6d93628a8b9d6f2cd16f10660b5e740ddadaddb0ad1d92703b82d0d2e77bb37fed65737e717519442fc163b6222e71c1a89f31d0f4da0fc30ec009ccada48a524753c579229b04250c474b8cf8d9a072e4cad055719f915081a98683a9650d18168bf166658bba36fa306a852e310e72a253206dc1b7fcdd8420e54f5352c3bdf7b64e242e895d01812675036501e4ebdebba377e37f451ac5fd4dd5e5aba0bd97f241ad2863df40266b8b68ff4362b6f6df169affd72f9023f5bd635763eeea098b02575be2ca64f69db291a4b5390f8c178945cccd9e975d70a3d55fa583ef6ace4f51e5bd92c79ab6b5400b4da49c31de32f7ee5c9ab819f82cf2e269f93f1d38eb652ce8b4cd5019c7be54935a8ec3a4096abbcf2c65583c9c40e6ce864ea711edc7751b843f89cd2bdc3fc9dfa672240d611585d6016e208be86159d9b9e720139e84466b4c1d6c3fa59560e3a67848df355b036534c3e4b33450525841631a9028816193aa4e0ff711be2c90c87541225d9697f3e4e1fc8e978ec04a9707a74753f0738e4a7336999614eca8635c2dd30f0aa9a4438de1e54e677762097e3e4940eaf917ef774ef364a8809dd24a5d16073b23f89e1930803afdc7ac2a4ad42d642d5400"/668], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0xd, 0x0, "00090001", "c9c24ba1"}}, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402004c68e0100000001090212000100000000090400"], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x7fff, 0x200400)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x168, &(0x7f0000000040)=ANY=[@ANYBLOB="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"])
syz_usb_connect(0x1, 0x3d7, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x49}, 0x0, 0x0})
syz_usb_disconnect(r1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0)
r5 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r7, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
syz_usb_control_io$uac1(r5, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0xa, 0x88, {0x88, 0x21, "50495a9a45ca3cbbdb102fe1787d737b2152c42029a5c47194ff55c540e0db5c59c00a7d6d108508ba0b2891f8c3902e7c70d54750b6c32b17b53aa7d12dc4862b34f512718e8593ea2be3586935f799c6ce6f44323eb3a2777da3c26838adf70e4006caeed63484c4fea7ece512feec1a063d23d475ab0b7bf2134aa4261414e7fa88262413"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x20, 0x10, 0x4b, "3fa80f52d8caa82a8bb040e4fe4df831f401e9fa3884ec9946dc9424388f8b1126f5e111579fb0194b337e05bd9132a9acf9b7d623a5dc15ed7f3c0d95f7bed7eaa4171c294c691393e95d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000540)={0x20, 0x81, 0x3, "cf26a9"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "53d5c3"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, ',G'}, &(0x7f0000000600)={0x20, 0x84, 0x3, "dcfce9"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "9ebef5"}})
executing program 2:
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xf0, 0xfe, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xfaf9, 0x2, 0x1, {0x22, 0x472}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0xc, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0xa, 0x8d, 0x40, 0x1}, 0x104, &(0x7f0000000200)={0x5, 0xf, 0x104, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6aa2ea73a535d97a685a9033e4c378f2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x9, 0x7, 0x8, 0x8}, @generic={0xe0, 0x10, 0x0, "7c392ce0a73c69e46db296845f1be0e26fbb9f4ed2d3d0cd7d7f2d11714a882c59f873de16574b718356ae437e54abbec69e75994ed0eb8765238523a8a8c5564a6251f8bb2487074430fe0fb9c167018a9d5c6a6214a9a0c68fd3690f1495eb10109c014ea4bb0d7c400d4cfe494ac84e6fc5294c8584f7158f47a6ecce3adeef84bb9b1a703b7330b66a6da342ef67901e7c59359ca309c89e84e58f8c77f7e6328a9c2b9c86cdb289309351c18399278ab728fb224c28caf7724c9739ad8655d70e58389262b768728c423152fe1c7d57a671908ea5300cdac9d54f"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}]})
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f0001220c0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xf0, 0xfe, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xfaf9, 0x2, 0x1, {0x22, 0x472}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0xc, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0xa, 0x8d, 0x40, 0x1}, 0x104, &(0x7f0000000200)={0x5, 0xf, 0x104, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6aa2ea73a535d97a685a9033e4c378f2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x9, 0x7, 0x8, 0x8}, @generic={0xe0, 0x10, 0x0, "7c392ce0a73c69e46db296845f1be0e26fbb9f4ed2d3d0cd7d7f2d11714a882c59f873de16574b718356ae437e54abbec69e75994ed0eb8765238523a8a8c5564a6251f8bb2487074430fe0fb9c167018a9d5c6a6214a9a0c68fd3690f1495eb10109c014ea4bb0d7c400d4cfe494ac84e6fc5294c8584f7158f47a6ecce3adeef84bb9b1a703b7330b66a6da342ef67901e7c59359ca309c89e84e58f8c77f7e6328a9c2b9c86cdb289309351c18399278ab728fb224c28caf7724c9739ad8655d70e58389262b768728c423152fe1c7d57a671908ea5300cdac9d54f"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}]})
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f0001220c0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_connect-syz_usb_control_io$hid-syz_usb_disconnect-syz_open_dev$evdev-syz_open_dev$evdev-syz_usb_control_io$uac1-ioctl$EVIOCGMASK-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_ep_write-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x168, &(0x7f0000000040)=ANY=[@ANYBLOB="6101004e689544c1da98352f1b429a6bc18632b77a2d3cbde3674b55f60dacce1dc20b15344706373e7092260f2a140adacb43471f78a2953c86ea97f25ca4e653c6e9eb60aaa79ba486e1e2b3d38c1a7b7f6bd915dd21ca98dc1bba06d794c01d86a7e17c98d7419432727193b57947d0c1413b30cf58b8bbc6ad110ac116c7bbb909abbee5cc16e913b9ea09e5c10332a37dbb894c0f1f0e49119efd5254017dc6791d6fbbbf6cfdcb8db76970c734bd07c63aaaba8fdac19cca6e9ca6374a892c825206840b973a3e918fcd93c7c4a29db5092cfdf67831ec4609b535d5e275180bc211851e2dbb33bdcda15263236ae9fe900532867ffb8859bf5cca3cd41a49344fee18afd64879f8db0bddabca5ceebfbff53fc0df5ee3016958b84a94e0802b756a138c3428c3d95c39ae74143e6e6e9d83c725bd3346982df996eca6b0e8ec5bb02bed7d347bfb56f30fb20d12ebc137ba85ac52706dec22eb6e551af174ca"])
syz_usb_connect(0x1, 0x3d7, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x49}, 0x0, 0x0})
syz_usb_disconnect(r1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0)
r5 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r7, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
syz_usb_control_io$uac1(r5, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0xa, 0x88, {0x88, 0x21, "50495a9a45ca3cbbdb102fe1787d737b2152c42029a5c47194ff55c540e0db5c59c00a7d6d108508ba0b2891f8c3902e7c70d54750b6c32b17b53aa7d12dc4862b34f512718e8593ea2be3586935f799c6ce6f44323eb3a2777da3c26838adf70e4006caeed63484c4fea7ece512feec1a063d23d475ab0b7bf2134aa4261414e7fa88262413"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x20, 0x10, 0x4b, "3fa80f52d8caa82a8bb040e4fe4df831f401e9fa3884ec9946dc9424388f8b1126f5e111579fb0194b337e05bd9132a9acf9b7d623a5dc15ed7f3c0d95f7bed7eaa4171c294c691393e95d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000540)={0x20, 0x81, 0x3, "cf26a9"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "53d5c3"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, ',G'}, &(0x7f0000000600)={0x20, 0x84, 0x3, "dcfce9"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "9ebef5"}})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program crashed: inconsistent lock state in fs_reclaim_acquire
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(0x0, 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
program crashed: inconsistent lock state in fs_reclaim_acquire
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program crashed: inconsistent lock state in fs_reclaim_acquire
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program crashed: inconsistent lock state in fs_reclaim_acquire
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101098da1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

program crashed: inconsistent lock state in fs_reclaim_acquire
validation run: crashed=true
reproducing took 1h2m43.441833657s
repro crashed as (corrupted=false):
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.3.17/3986 [HC0[0]:SC1[1]:HE0:SE0] takes:
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: might_alloc include/linux/sched/mm.h:316 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4636 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: slab_alloc_node mm/slub.c:4974 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: __do_kmalloc_node mm/slub.c:5413 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xcc/0x820 mm/slub.c:5545
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire kernel/locking/lockdep.c:5942 [inline]
  lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
  __fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
  fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
  might_alloc include/linux/sched/mm.h:316 [inline]
  xa_alloc include/linux/xarray.h:876 [inline]
  mem_cgroup_alloc mm/memcontrol.c:4160 [inline]
  mem_cgroup_css_alloc+0x7e/0x1ce0 mm/memcontrol.c:4225
  cgroup_init_subsys+0x223/0x700 kernel/cgroup/cgroup.c:6431
  cgroup_init+0x569/0xe50 kernel/cgroup/cgroup.c:6558
  start_kernel+0x470/0x490 init/main.c:1176
  x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
  x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
  common_startup_64+0x13e/0x158
irq event stamp: 323
hardirqs last  enabled at (322): [<ffffffff878ad162>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last  enabled at (322): [<ffffffff878ad162>] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:221
hardirqs last disabled at (323): [<ffffffff878acd32>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline]
hardirqs last disabled at (323): [<ffffffff878acd32>] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:181
softirqs last  enabled at (308): [<ffffffff8177a2a8>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last  enabled at (308): [<ffffffff8177a2a8>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last  enabled at (308): [<ffffffff8177a2a8>] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
softirqs last disabled at (319): [<ffffffff8177a2a8>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last disabled at (319): [<ffffffff8177a2a8>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last disabled at (319): [<ffffffff8177a2a8>] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(fs_reclaim);
  <Interrupt>
    lock(fs_reclaim);

 *** DEADLOCK ***

locks held by syz.3.17/3986: 1, on CPU#0:
 #0: ffff888122aaac70 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x165/0x15b0 drivers/hid/usbhid/hiddev.c:610

stack backtrace:
CPU: 0 UID: 0 PID: 3986 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_usage_bug.part.0+0x258/0x340 kernel/locking/lockdep.c:4086
 print_usage_bug kernel/locking/lockdep.c:4054 [inline]
 valid_state kernel/locking/lockdep.c:4100 [inline]
 mark_lock_irq kernel/locking/lockdep.c:4311 [inline]
 mark_lock+0x956/0x1020 kernel/locking/lockdep.c:4797
 mark_usage kernel/locking/lockdep.c:4686 [inline]
 __lock_acquire+0x7f1/0x1f40 kernel/locking/lockdep.c:5242
 lock_acquire kernel/locking/lockdep.c:5942 [inline]
 lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
 fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
 might_alloc include/linux/sched/mm.h:316 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0xcc/0x820 mm/slub.c:5545
 alloc_dr drivers/base/devres.c:141 [inline]
 devm_kmalloc+0xa5/0x2b0 drivers/base/devres.c:951
 devm_kzalloc include/linux/device/devres.h:50 [inline]
 mt_allocate_report_data+0x59/0xcc0 drivers/hid/hid-multitouch.c:695
 mt_find_report_data drivers/hid/hid-multitouch.c:745 [inline]
 mt_event+0x1bf/0x270 drivers/hid/hid-multitouch.c:1570
 hid_process_event+0x37d/0x5a0 drivers/hid/hid-core.c:1572
 hid_process_report drivers/hid/hid-core.c:1730 [inline]
 hid_report_raw_event+0xb14/0x14c0 drivers/hid/hid-core.c:2109
 __hid_input_report.constprop.0+0x349/0x470 drivers/hid/hid-core.c:2180
 hid_ctrl+0x4a4/0x560 drivers/hid/usbhid/hid-core.c:486
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b
RSP: 0018:ffffc9000180f9f0 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780
RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008
 __mod_timer+0x409/0xca0 kernel/time/timer.c:1139
 add_timer+0x62/0x90 kernel/time/timer.c:1249
 schedule_timeout+0x122/0x280 kernel/time/sleep_timeout.c:98
 usbhid_wait_io+0x24e/0x420 drivers/hid/usbhid/hid-core.c:648
 usbhid_init_reports+0x1a7/0x390 drivers/hid/usbhid/hid-core.c:787
 hiddev_ioctl+0xddb/0x15b0 drivers/hid/usbhid/hiddev.c:794
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a7de159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc08a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc08aa66090 RCX: 00007fc08a7de159
RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004
RBP: 00007fc08a87503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08aa66128 R14: 00007fc08aa66090 R15: 00007ffe22118998
 </TASK>
------------[ cut here ]------------
do not call blocking ops when !TASK_RUNNING; state=2 set at [<ffffffff818d66ad>] prepare_to_wait_event+0x8d/0x720 kernel/sched/wait.c:318
WARNING: kernel/sched/core.c:9179 at __might_sleep+0x94/0xc0 kernel/sched/core.c:9179, CPU#0: syz.3.17/3986
Modules linked in:
CPU: 0 UID: 0 PID: 3986 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__might_sleep+0x97/0xc0 kernel/sched/core.c:9179
Code: 8b 94 24 c0 17 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c d9 92 09 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 20 9c 00 eb 9f 89 74 24 04 e8 22 21 9c
RSP: 0018:ffffc90000007828 EFLAGS: 00010082
RAX: dffffc0000000000 RBX: ffffffff8931ad45 RCX: ffffffff818d66ad
RDX: ffffffff818d66ad RSI: 0000000000000002 RDI: ffffffff8b16a1e0
RBP: 0000000000000142 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88810c2b5ac0
R13: 0000000000000dc0 R14: 00000000ffffffff R15: 00000000ffffffff
FS:  00007fc08a61e6c0(0000) GS:ffff8882683e4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc08a61dff8 CR3: 000000011970a000 CR4: 00000000003506f0
Call Trace:
 <IRQ>
 might_alloc include/linux/sched/mm.h:322 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x473/0x820 mm/slub.c:5545
 alloc_dr drivers/base/devres.c:141 [inline]
 devm_kmalloc+0xa5/0x2b0 drivers/base/devres.c:951
 devm_kzalloc include/linux/device/devres.h:50 [inline]
 mt_allocate_report_data+0x59/0xcc0 drivers/hid/hid-multitouch.c:695
 mt_find_report_data drivers/hid/hid-multitouch.c:745 [inline]
 mt_event+0x1bf/0x270 drivers/hid/hid-multitouch.c:1570
 hid_process_event+0x37d/0x5a0 drivers/hid/hid-core.c:1572
 hid_process_report drivers/hid/hid-core.c:1730 [inline]
 hid_report_raw_event+0xb14/0x14c0 drivers/hid/hid-core.c:2109
 __hid_input_report.constprop.0+0x349/0x470 drivers/hid/hid-core.c:2180
 hid_ctrl+0x4a4/0x560 drivers/hid/usbhid/hid-core.c:486
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b
RSP: 0018:ffffc9000180f9f0 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780
RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008
 __mod_timer+0x409/0xca0 kernel/time/timer.c:1139
 add_timer+0x62/0x90 kernel/time/timer.c:1249
 schedule_timeout+0x122/0x280 kernel/time/sleep_timeout.c:98
 usbhid_wait_io+0x24e/0x420 drivers/hid/usbhid/hid-core.c:648
 usbhid_init_reports+0x1a7/0x390 drivers/hid/usbhid/hid-core.c:787
 hiddev_ioctl+0xddb/0x15b0 drivers/hid/usbhid/hiddev.c:794
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a7de159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc08a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc08aa66090 RCX: 00007fc08a7de159
RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004
RBP: 00007fc08a87503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08aa66128 R14: 00007fc08aa66090 R15: 00007ffe22118998
 </TASK>
----------------
Code disassembly (best guess):
   0:	f5                   	cmc
   1:	53                   	push   %rbx
   2:	48 8b 74 24 10       	mov    0x10(%rsp),%rsi
   7:	48 89 fb             	mov    %rdi,%rbx
   a:	48 83 c7 18          	add    $0x18,%rdi
   e:	e8 56 f7 05 fa       	call   0xfa05f769
  13:	48 89 df             	mov    %rbx,%rdi
  16:	e8 de 4d 06 fa       	call   0xfa064df9
  1b:	f7 c5 00 02 00 00    	test   $0x200,%ebp
  21:	75 23                	jne    0x46
  23:	9c                   	pushf
  24:	58                   	pop    %rax
  25:	f6 c4 02             	test   $0x2,%ah
  28:	75 37                	jne    0x61
* 2a:	bf 01 00 00 00       	mov    $0x1,%edi <-- trapping instruction
  2f:	e8 65 a3 f8 f9       	call   0xf9f8a399
  34:	65 48 83 3d d4 ee 98 	cmpq   $0x0,%gs:0x598eed4(%rip)        # 0x598ef11
  3b:	05 00
  3d:	74 16                	je     0x55
  3f:	5b                   	pop    %rbx

final repro crashed as (corrupted=false):
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.3.17/3986 [HC0[0]:SC1[1]:HE0:SE0] takes:
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: might_alloc include/linux/sched/mm.h:316 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4636 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: slab_alloc_node mm/slub.c:4974 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: __do_kmalloc_node mm/slub.c:5413 [inline]
ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xcc/0x820 mm/slub.c:5545
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire kernel/locking/lockdep.c:5942 [inline]
  lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
  __fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
  fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
  might_alloc include/linux/sched/mm.h:316 [inline]
  xa_alloc include/linux/xarray.h:876 [inline]
  mem_cgroup_alloc mm/memcontrol.c:4160 [inline]
  mem_cgroup_css_alloc+0x7e/0x1ce0 mm/memcontrol.c:4225
  cgroup_init_subsys+0x223/0x700 kernel/cgroup/cgroup.c:6431
  cgroup_init+0x569/0xe50 kernel/cgroup/cgroup.c:6558
  start_kernel+0x470/0x490 init/main.c:1176
  x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
  x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
  common_startup_64+0x13e/0x158
irq event stamp: 323
hardirqs last  enabled at (322): [<ffffffff878ad162>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last  enabled at (322): [<ffffffff878ad162>] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:221
hardirqs last disabled at (323): [<ffffffff878acd32>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline]
hardirqs last disabled at (323): [<ffffffff878acd32>] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:181
softirqs last  enabled at (308): [<ffffffff8177a2a8>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last  enabled at (308): [<ffffffff8177a2a8>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last  enabled at (308): [<ffffffff8177a2a8>] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
softirqs last disabled at (319): [<ffffffff8177a2a8>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last disabled at (319): [<ffffffff8177a2a8>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last disabled at (319): [<ffffffff8177a2a8>] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(fs_reclaim);
  <Interrupt>
    lock(fs_reclaim);

 *** DEADLOCK ***

locks held by syz.3.17/3986: 1, on CPU#0:
 #0: ffff888122aaac70 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x165/0x15b0 drivers/hid/usbhid/hiddev.c:610

stack backtrace:
CPU: 0 UID: 0 PID: 3986 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_usage_bug.part.0+0x258/0x340 kernel/locking/lockdep.c:4086
 print_usage_bug kernel/locking/lockdep.c:4054 [inline]
 valid_state kernel/locking/lockdep.c:4100 [inline]
 mark_lock_irq kernel/locking/lockdep.c:4311 [inline]
 mark_lock+0x956/0x1020 kernel/locking/lockdep.c:4797
 mark_usage kernel/locking/lockdep.c:4686 [inline]
 __lock_acquire+0x7f1/0x1f40 kernel/locking/lockdep.c:5242
 lock_acquire kernel/locking/lockdep.c:5942 [inline]
 lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
 fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
 might_alloc include/linux/sched/mm.h:316 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0xcc/0x820 mm/slub.c:5545
 alloc_dr drivers/base/devres.c:141 [inline]
 devm_kmalloc+0xa5/0x2b0 drivers/base/devres.c:951
 devm_kzalloc include/linux/device/devres.h:50 [inline]
 mt_allocate_report_data+0x59/0xcc0 drivers/hid/hid-multitouch.c:695
 mt_find_report_data drivers/hid/hid-multitouch.c:745 [inline]
 mt_event+0x1bf/0x270 drivers/hid/hid-multitouch.c:1570
 hid_process_event+0x37d/0x5a0 drivers/hid/hid-core.c:1572
 hid_process_report drivers/hid/hid-core.c:1730 [inline]
 hid_report_raw_event+0xb14/0x14c0 drivers/hid/hid-core.c:2109
 __hid_input_report.constprop.0+0x349/0x470 drivers/hid/hid-core.c:2180
 hid_ctrl+0x4a4/0x560 drivers/hid/usbhid/hid-core.c:486
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b
RSP: 0018:ffffc9000180f9f0 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780
RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008
 __mod_timer+0x409/0xca0 kernel/time/timer.c:1139
 add_timer+0x62/0x90 kernel/time/timer.c:1249
 schedule_timeout+0x122/0x280 kernel/time/sleep_timeout.c:98
 usbhid_wait_io+0x24e/0x420 drivers/hid/usbhid/hid-core.c:648
 usbhid_init_reports+0x1a7/0x390 drivers/hid/usbhid/hid-core.c:787
 hiddev_ioctl+0xddb/0x15b0 drivers/hid/usbhid/hiddev.c:794
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a7de159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc08a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc08aa66090 RCX: 00007fc08a7de159
RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004
RBP: 00007fc08a87503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08aa66128 R14: 00007fc08aa66090 R15: 00007ffe22118998
 </TASK>
------------[ cut here ]------------
do not call blocking ops when !TASK_RUNNING; state=2 set at [<ffffffff818d66ad>] prepare_to_wait_event+0x8d/0x720 kernel/sched/wait.c:318
WARNING: kernel/sched/core.c:9179 at __might_sleep+0x94/0xc0 kernel/sched/core.c:9179, CPU#0: syz.3.17/3986
Modules linked in:
CPU: 0 UID: 0 PID: 3986 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__might_sleep+0x97/0xc0 kernel/sched/core.c:9179
Code: 8b 94 24 c0 17 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c d9 92 09 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 20 9c 00 eb 9f 89 74 24 04 e8 22 21 9c
RSP: 0018:ffffc90000007828 EFLAGS: 00010082
RAX: dffffc0000000000 RBX: ffffffff8931ad45 RCX: ffffffff818d66ad
RDX: ffffffff818d66ad RSI: 0000000000000002 RDI: ffffffff8b16a1e0
RBP: 0000000000000142 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88810c2b5ac0
R13: 0000000000000dc0 R14: 00000000ffffffff R15: 00000000ffffffff
FS:  00007fc08a61e6c0(0000) GS:ffff8882683e4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc08a61dff8 CR3: 000000011970a000 CR4: 00000000003506f0
Call Trace:
 <IRQ>
 might_alloc include/linux/sched/mm.h:322 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x473/0x820 mm/slub.c:5545
 alloc_dr drivers/base/devres.c:141 [inline]
 devm_kmalloc+0xa5/0x2b0 drivers/base/devres.c:951
 devm_kzalloc include/linux/device/devres.h:50 [inline]
 mt_allocate_report_data+0x59/0xcc0 drivers/hid/hid-multitouch.c:695
 mt_find_report_data drivers/hid/hid-multitouch.c:745 [inline]
 mt_event+0x1bf/0x270 drivers/hid/hid-multitouch.c:1570
 hid_process_event+0x37d/0x5a0 drivers/hid/hid-core.c:1572
 hid_process_report drivers/hid/hid-core.c:1730 [inline]
 hid_report_raw_event+0xb14/0x14c0 drivers/hid/hid-core.c:2109
 __hid_input_report.constprop.0+0x349/0x470 drivers/hid/hid-core.c:2180
 hid_ctrl+0x4a4/0x560 drivers/hid/usbhid/hid-core.c:486
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b
RSP: 0018:ffffc9000180f9f0 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780
RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008
 __mod_timer+0x409/0xca0 kernel/time/timer.c:1139
 add_timer+0x62/0x90 kernel/time/timer.c:1249
 schedule_timeout+0x122/0x280 kernel/time/sleep_timeout.c:98
 usbhid_wait_io+0x24e/0x420 drivers/hid/usbhid/hid-core.c:648
 usbhid_init_reports+0x1a7/0x390 drivers/hid/usbhid/hid-core.c:787
 hiddev_ioctl+0xddb/0x15b0 drivers/hid/usbhid/hiddev.c:794
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a7de159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc08a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc08aa66090 RCX: 00007fc08a7de159
RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004
RBP: 00007fc08a87503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08aa66128 R14: 00007fc08aa66090 R15: 00007ffe22118998
 </TASK>
----------------
Code disassembly (best guess):
   0:	f5                   	cmc
   1:	53                   	push   %rbx
   2:	48 8b 74 24 10       	mov    0x10(%rsp),%rsi
   7:	48 89 fb             	mov    %rdi,%rbx
   a:	48 83 c7 18          	add    $0x18,%rdi
   e:	e8 56 f7 05 fa       	call   0xfa05f769
  13:	48 89 df             	mov    %rbx,%rdi
  16:	e8 de 4d 06 fa       	call   0xfa064df9
  1b:	f7 c5 00 02 00 00    	test   $0x200,%ebp
  21:	75 23                	jne    0x46
  23:	9c                   	pushf
  24:	58                   	pop    %rax
  25:	f6 c4 02             	test   $0x2,%ah
  28:	75 37                	jne    0x61
* 2a:	bf 01 00 00 00       	mov    $0x1,%edi <-- trapping instruction
  2f:	e8 65 a3 f8 f9       	call   0xf9f8a399
  34:	65 48 83 3d d4 ee 98 	cmpq   $0x0,%gs:0x598eed4(%rip)        # 0x598ef11
  3b:	05 00
  3d:	74 16                	je     0x55
  3f:	5b                   	pop    %rbx