Extracting prog: 17m56.216173958s
Minimizing prog: 58m7.477542369s
Simplifying prog options: 4m7.831721013s
Extracting C: 2m42.991357151s
Simplifying C: 0s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$uac2-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_write-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_connect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201de007e3af708b8071db2ae970102030209021200000000c0000904"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x24, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00f5ff009100000000005400"/22], 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_ep_read(r2, 0xd, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$lan78xx-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_connect$uac2
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xf04260d11922b0cf, 0x3c, 0x5, 0x4, {0x7, 0x25, 0x1, 0x4, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x6f8}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003740)={0x20, 0x81, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0x90, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x630, 0x8, 0x2, 0xf5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x3, 0x2e5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x18, 0xb, 0xff, {0x8, 0x25, 0x1, 0x1, 0x33}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x16, &(0x7f0000000240)=@string={0x16, 0x3, "bfa2ed2c798915af0aa4c8362c2e44434d002cca"}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hidraw-ioctl$HIDIOCSUSAGE-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect_ath9k-syz_usb_ep_write$ath9k_ep1-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSFF-write$char_usb-syz_usb_control_io$uac3-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b7"], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000121ab40da0b21c83a390102030109022400010804100109044c1002ffffff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000000)={0x1, 0x200, 0x101, 0x10, 0x2, 0xc000})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240006720610060904f0e8cf34ba8e5968506a02b51c800309050102ff03ff1003080000000000000081"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x140, &(0x7f0000000840)={[{0xe, 0x4e00, "c43f504be96af2eeeb7a6ecaf47f"}, {0x1f, 0x4e00, "3c5fb24c72a51ab032256f9f32c8396df84fde473d4192eed1fbc26b8ddf0b"}, {0x2b, 0x4e00, "c4fc90529db9f008e3ade125579c919bf6e8fa7eb2c32be4eb3be046dbdfc51c6287f1aa6777c9b07bf69c"}, {0xd2, 0x4e00, "a7876098753dcf6d3881933afa679dfccf9b2db446e716a4ab155b30877c254c2efa94e683d16f678ee11a2211484c848fdf4e10e64b5e267c2c684e56dff4cb282ed97d39f1eeb73ae3f94203e870e59dc62765482542484dbebd102f6f0706b37aae2b5ce373848e9219f4e8169a113b670f44857b1a555134653fa1222cbf2b0e04d74e1fb5fa17b743a0586ade46b50bce99c2442512c847801be6cfa307ee3c427121bab7529917b33145b40fc0ef70cd672e4b25981dcec63168934087a4bb0e84377df4c167b3d3dbdcf29e234e10"}]})
r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRES16=r3, @ANYRESDEC=r7], 0x0}, 0x0)
syz_usb_ep_read(r7, 0x2, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x5, "26763d2290"}, 0x0})
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x4000, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]})
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250)
syz_usb_control_io$uac3(r5, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0x11, 0xc7, {0xc7, 0x30, "4498ce9b0576af2f3cef3ff7ffc9374005f08b584b9e85dde39ce8448d14595b0a13a638b2426eb114203fd835b7fac54faa4b4ee909c38d1d6c0c476656ac0ea7f41af7a98a6bb4b45239285deb3e05bfe050c5999408d84b6267583c6c5e3fb1b859c6611f209188d0a141e13e30bdbf4de64623aefc79410076e3c3ff3f32bea3effbdaaeb2dcd845ee257593244fef48d7cba74fc29823a9b683fef186d7ecbf30f86d7c1869f4b9533266e8c3c421af2226fe74369c513562d7b3ea224372a520b43f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x9, 0x3b, "399e96c5a02a3b8085a7b7f7405313be9745343fc01cdc4238cfcfabb59a698b33a6dbaa767f9a4673b76c37251543601df803ae85021d0e3fbea5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000540)={0x20, 0x81, 0x1, "10"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "50ad02"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "abaee7"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "3e2a1a"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "5a1a05"}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(r0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 25, 3, 10, 3, 22, 9, 17, 13, 10, 22, 30, 3, 27, 25, 30, 13, 22, 14, 30, 14, 29, 8, 4, 11, 20, 30, 9, 3, 24]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @local=@item_4={0x3, 0x2, 0x7, "5ea4320e"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0x9, "02"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @local=@item_4={0x3, 0x2, 0x7, "5ea4320e"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0x9, "02"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x2, 0x100})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222a0000000501150025ff0904a1016344f6f7e4a52e880829309102c0"], 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
executing program 4:
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$evdev(0x0, 0x2, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465", @ANYBLOB="bd1f73d28e65"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465", @ANYBLOB="bd1f73d28e65"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "2502"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "2502"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x2, 0x8f, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201030c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104ff63200309050900ff03030004090502020002f7810609050303ff030840040705a6c6415a9f09058503"], 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/231)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000080)={0x53, 0xe1, 0x7, {0xff11, 0xffff}, {0x4, 0x5}, @const={0x4, {0x4, 0x6, 0x4, 0x4}}})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7) (async)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7)
executing program 1:
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000003c0)=""/66)
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x60, 0xc6, 0x7b, 0x20, 0xc72, 0x13, 0xe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xb6, 0x0, 0x0, 0xcb, 0x1, 0x8f, 0xf}}, {{0x9, 0x4, 0xe8, 0x6, 0x0, 0x2, 0xe}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xea, {0xea, 0x23, "47a03ddb82726227dad4b67cd6bcbfa5d91195d9db5db12f2cab65c57c84d1d4dbd64b5828b78eabddbb4cf15c694c08c65c9585a31cb66d1e6493724b5a572255618cb627d847b9f2dc0f9a4626cff497151bab719e5f069aa580d537cd0b3fd95b33fb69675857cae061fe2e4863f8ed78d2b4a4934cda5dd93eb21b0769fa13bf2ceb8ec899626e371a2ac59e798d65f445175e08d806f7b24fa87491758481a4ebb9a7af2f5981c0670a51b8996cfb67fd23d6b9bc2588d2a2bccb2211c414ee12dc87c46994c70d5a08903d328c6fdd214bb7fa13371c1bc13fee8fbdeb9820d7885389637c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x0, 0x80, "08ef3056d5e99ac45d56aaccc294e30f21f70c45cfe765831d5aebc9c8b5885a195ae32ab2ae1d36b8d0806275302f9b946b02c130083359b396cbf49db35a12a43bad3f6567c4f8d9d0ee805549f5a3fd86d3d405434d3a19d7ee0bd2209d905d454792c036f19702dca3d5b94a252140c5087bebca3e94a29d082f62ce0252"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0xc0, 0x5, 0x4, "4b02b647"}, &(0x7f0000000300)})
executing program 1:
r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0xfffffffffffffebd, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120110014d07df40cc0550337d4a0102030109021b0002011c70060904a507006adadb040904"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES8, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0], 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x1, 0x200, 0x101, 0x10, 0x2, 0xc000}) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000961e410b1134200557b0102030109021b0001000000000904000001cf28fc00090501004000"], 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000004010101010230000905010960002503058a2525010400000500000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87"], 0x0)
syz_usb_connect(0x0, 0x5d2, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xe, 0xc0, 0x26, 0x20, 0x45e, 0x4e1, 0x414c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c0, 0x2, 0xd9, 0x8, 0x80, 0x6, "", [{{0x9, 0x4, 0x31, 0x2, 0x10, 0xc7, 0xd4, 0xe4, 0x6, [@generic={0x68, 0x2a, "83345981d0ce0ce50b289c127992b70bd329eb0a0733907c80d1afef652a0886980d1fe7f06709f4a4e5a286f9e46cb096d653aeb3729167035db212cce1eba5bfdb75b78fd9918de49a61bb09bdd775645cf1919d7a8037b09ea1c2ecb86c46ec5c4972b269"}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x2, 0x1}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0xf, 0x0, 0x40, [@generic={0x29, 0xc, "0ee2cb3beb745cffdf06f6dff7ca8bb4a2c5c2287bc85e92fa591d8d14b539af15c3abe50f4f11"}, @generic={0x54, 0x3a, "696a7638d9e204b40c93903e6bab06f70891718c39840a4213a0008ef6c8acb2bbf11ca75787e80e6876224b3a601c4d0d8ced4b04300ddbe5c030764f06190138f2ee7a7d5358f49b513fb771977b6605a2"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x0, 0xb5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x470e}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x9, 0x76, 0xf, [@generic={0x29, 0x9, "ed1f3608db9384a4d1b2cccfe11f4fca2e1dd80c8137829d6f17c271309d02a41f3481758fb434"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x5, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}, @generic={0xe2, 0x11, "7aea3d894c557fe139ea002654265aa6edce3b67c636e89fc801fa6f7baf1a7660375803aa89b2b4934b998e7262a4587cb21bc56b3e49bd72dc8764675db68e3c5c5a2eb513b185a585507c43ffa284cf33f2692b556acc2f13a11ab1ff17c6ddb0b8a31ce8db3eaf47a7f0753baa831278e32ab8f7873e01574fd86639a8778f7e6dfdbc8e76f6b6f8a253d48b8eb5bf5af9d252dc3664ccea3e5093eaf1269fe5fb3b2d87bfbd63202eda59f0d0eb0ce94a028a4f50ba678ee3ab51b20baeb059a20d9ecad848c55f168366b6e22307c6a2c467217da1b9127bf28f9b1772"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x420, 0x5a, 0xf9, 0x8, [@generic={0x9e, 0x22, "79ca437f2c4c496ced8cc6e87da123057fc89585534a9dd87716bd1a60bf6987a4d360de914b6af26587b99036c7c825ee67bb909a0d13e54df77de4b7035dd1a38044982089ea5e888a0589d78fe1ef7b3aea71bdc6f706b31ee42e5200a6bca55d6a5f0e0482953630b659ec5ef6bd7294303844e4d24232642bbe27691ec696976e36af7df074095096ef25ca452757d65fd8f403c36dd97c5676"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x2c, 0x7, 0xe5, [@generic={0x95, 0x4, "7ad7aa5b86bd420f75a1f4066c3b77bb0f128221f3ad5cf3324c415878c8a46cc9f6945f0419372f402ea2e3528a125ff6f870a982cbf22bb4bad32d4e5973e4b0be12cdf33fc911ed834b0ccb8a7a9b4620a50e268ac56c9a2a9cef3b3d0463adf2e43340fce28133704d353339b1c4d693b245bec306d23f1daaeb6153dbb7176a0786883cd143998e937d480e2dcd991701"}, @generic={0xdc, 0xe, "9448c861dd14a907f412c298ce2fc5a218fe44dba8d937006f820157aeca96cc8974b5a67a21c54d82e8342276c486949691a99a7919c102b442c132d70ff42e568eb89c5df2017b46f8c6799d756fb8f77cec8359ae04a72644256658993ee69e6c66407ba5127104f0ce60542911169a0457b461650ec99845774e0c31fdefde2473e03d7404d1f388b3f88033f490201119aecc9c8d9caf46b2d838657644ddc0698487f06612af8907d72d09c330c8d0a753d26d4ee1bdc4c25e20a17d5407b29d47a84aace9621fd7c76294a98c7f450f0c78b1105a6a52"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x9, 0x22, 0x3c}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xbc, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xbb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x5e, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3c, 0x1}, @generic={0x8f, 0x7, "0b37c4e6be9b09e428888874e29dd1ae3e9cd22259bede8176c3efc5fa91f2e488bbcb4a831448fc3eb9cb3a338ebca0983b66e0ea59e58d946f1938d1bcd6148e4a295ef43fe5b50c7d94afa1480a16104cb776dff67fdce199c4eabb212961968b110752dafc7a701e93f4f9db2ba39b61fa175637931d04a41c61a417ae795571ae98cd9ff487f875cebfc1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x5e}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x9, 0x3, 0x84, [@generic={0x5b, 0x23, "eaa123c4f8b3248d1b0932c8088f886b49b8118aebc252734ce44a8b767044c6e9311a832dee4ebeed62c6332f894e72c3af064d9c60963155a45807f0395691e600c398cc39792980cee0f31cb7de029a3a2fa14018181b20"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x69, 0x4, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb2, 0x6, 0x1, [@generic={0x2, 0x6}]}}]}}, {{0x9, 0x4, 0x6c, 0x0, 0x0, 0x3, 0x53}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0xc, 0x1, 0x8, 0xff, 0x2}, 0x51, &(0x7f0000000a00)={0x5, 0xf, 0x51, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xa154, 0x1100f, 0x515, [0x30, 0xc0, 0xff9f, 0x0, 0xffffcf, 0xffffc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x3, 0x1f81}, @wireless={0xb, 0x10, 0x1, 0x18, 0x86, 0xfd, 0x4, 0xfffe, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x0, 0x10, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x8, 0x4, 0x3, 0x2}]}, 0x3, [{0xe5, &(0x7f0000000a80)=@string={0xe5, 0x3, "44f93ccd30313771db80f161da5fd7f5d8d5b235803b2f9d78f2bb402dbd82f8d378f3d164032376384b8da6172b79e7c89c3fcbefb513a0f2c4272acd72f77d565cb323e35ee171c9b26f4072addaa939c8f3901d28440f2ac18c15fd9611bb6570ab81ed489a67ac5014ee47e1085fba66750a6fcf133727c0883b5f6e4543e7a9ec7222381342abf12524900a041519cd37a81a494049a8b7ae532c8e44d3324e81ea4ad563a7fd765298a1590b4b3ee5dd0b8b3a4be415bbfe555136986e8e15c82fcea849a49b64b317bec1a249b5f33ccf123fda96dfd3a6b33a342d140031f9"}}, {0x34, &(0x7f0000000b80)=@string={0x34, 0x3, "d0efe25c240d1eb7c475c20501571c0eb46af06a6ecf6d4932a7619f6b02ff618de3dfef32c59f3257292b8938b119dcc548"}}, {0x41, &(0x7f0000000cc0)=@string={0x41, 0x3, "4cbfae471276e5c89c86b680ee412e895e6ee3b0b025669abe8818e9a098c8ce322bf8c20790a7f339dddf368391ab9b8f140ddf6b04e48bc9958b98471ef2"}}]})
r5 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/231)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4d8, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0xf5, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xb93}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x2, 0xfb}}]}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x300, 0x2, 0x4, 0x21, 0x40}, 0x100, &(0x7f00000010c0)={0x5, 0xf, 0x100, 0x3, [@generic={0xea, 0x10, 0x2, "bca9dc36a191a67ba7ee8e0b85bf4ae828de2a4a4fa3aac67097dc60686c8bb8aa42c9416eebcd202f07d4b40e28c83b477f133f5975e1d8b34dffbdcf5a2fcc495b443ea019f9825ee32ce4c5c2e8fa1e6b3f284b94cc1a0ecd0203a4e063e83f9bd620b1b13c763f2cbf45b6becf79e9b1a3d22398b83229244b13b7332b748ee617550eab120ff7691d3b604b3d74cbcf30136e2b5d3ec7c44f93c48c3990211b56b7ff8a90b6aa58b90dd48ba8400e095a2499ebf2c6dd601f64e562b4bdeb0a010226c389cac3426aa266f4f2c228f3319a048f6009d61c22baf2108e273592bc53752933"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x5, 0x7, 0x2}]}, 0x2, [{0x50, &(0x7f00000011c0)=@string={0x50, 0x3, "f774d1568374e0dc2aa348b43d34699afe60a17096d82aefb3161c3805c38bbf6631b98ae7f859d99ed311e3b6c2cc071f34998e5e91bc69b3a302d4f2e03e1b6318fa99e2c6a2c8a4ef74f35e16"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x400a}}]})
r1 = syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x2, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xb1, {{0x8, 0x24, 0x6, 0x0, 0x0, "1c4593"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x28de, 0x4, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x7b}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4c, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xd, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x9, 0x6, 0xff, 0x8}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x7, 0x55, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa0, 0x8, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "1dc9bc01f669962c4e121c2b58db53e7"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}]})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x40, 0x30, 0xc4, {0xc4, 0xa, "61280fda7c889b6997236e351eb3182d6b143b25e6a3d094d002782c50491214763e971fb4009ccb5cb0b2cfb82a06ab0e004d09ebf8ea70965cb8d1f459e237c8782b7806b722eb0b877a8044f012f06739a48612d5cb5e4542f1a0e92d5d137e92284f2ee38d6cf5c7a413f41c6935df8a0a9c8dc478e9deeaf86e596f2caaea363bc0a7652cb85a6e8de2fdded1743268545e844eba2e2146ef50af7b6ab1d9e8ae351cc3cc6d4573ded0bc209e099d3a50d66bb9361781991032c10e991980d7"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x31, 0xf8, "cd470ac84bb42d0c0db672da66d1c706f9accbcf5f6a91112eaf350f86f80a4009e375d34d2c90512b967019828c39929d0db5736aa0e18f73ae62c8565fba299450c3fb963ed21465dfcb4784478643bf9085c62b3ea571fb8d3496e78c703b15d65669d77dcd1af59fd5d3cbffc01e7283ab9f60b4fbdc47d2adf35dc69b4d904d549a0620be66c687b72e0e3af81d6a218b78ebd3dff9b00aa849084a0675534eb5f02f46ebbeaeb01e836839dead357b6259f71357b95805fd65cc59a4291b4604144156f279bf1a03672aec3c791e330c144a0a80c8378ee0457be1051e3faa734f16e41bc34d3a2efa26f20c37e3aed9a577055e4b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0xbd, 0x8001, 0x432, 0x7, 0x7ff, 0x9, 0x3, 0x7fff, 0x4, 0x8, 0x2, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000680)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x5e, &(0x7f0000000040)={0x0, 0x30, 0x19, {0x7, 0x22, "4753a269a4"}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001400)={0x14, &(0x7f00000012c0)={0x20, 0x21, 0xda, {0xda, 0x31, "a3894acbfc75e33813b7b2e646ce04fd00f495bf063bec54b6c18dad642b59b5432c5c9577cf3a3eefcbcbbf0cc131fa8cff8f43e49a12582abdd5fbaa3fc0d5a76f86ed714f3154f1030e7079c7b202f093171d83590d37623ca720de3573a95102ccca8d64a7b30839af7792a5490761432792ca2ae8432b881311b4e74681b868a678e7091a31b1ecb23a6b91658108885b2a4875f22ea55fef9b1e4ec92b5063b37d003c3540540785c42c36f624e73c81431e6747d284de79b413f9cd1b4289f54790d48f7a2f7a8d8ba550d78cdf7e81b73cbc07b9"}}, &(0x7f00000013c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f0000001440)={0x0, 0xd, 0x90, "e33690bc942366ea13a468b10dfa74f65faeb9b1318a8eae77042c86ea621a914c3cb133655f61e113f70e8c8468373b9e2eccdfd2c1b348d1a8de63dcd45adc5c9e05f237ccda2470107313a645471ba15dd7a7fdf5e457d4e92db7741e2afbf020033ccdcd64c87b2121e5e451bca2639f7f4e41d534c95a768f29233839da100cc1f3f3517997424834f942dbd4e7"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x9}})
syz_usb_connect(0x3, 0x532, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x64, 0xaa, 0x6c, 0x40, 0x12d1, 0x1428, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x520, 0x3, 0x2, 0x5, 0x30, 0xc, "", [{{0x9, 0x4, 0xf5, 0x8, 0x8, 0xa1, 0xd5, 0x39, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'Gn'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x0, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x8}, @country_functional={0xa, 0x24, 0x7, 0x92, 0x9, [0x60ec, 0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0x0, 0x7b, 0x8, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "418fb3078329"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff, 0x2, 0x20}, [@country_functional={0xc, 0x24, 0x7, 0x9, 0x3f01, [0xbb68, 0x6, 0x742]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x7, 0x7}, @dmm={0x7, 0x24, 0x14, 0xf, 0x1}]}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0x7, 0x6b, [@generic={0x64, 0xa, "08e744344ad66e8d57705922e5034dbfcac0c30333b75afc22b9f5e1c52b8bcb0885b868a8824f5947c53e3ba5f2c91019cfb3723814794e48d166582ae81d6200c1a975b65cf53d5d672447427ac1a94742333db2f7f3dd0dffbb77e51a9d1cd45e"}, @generic={0xb4, 0x10, "14ae2c5f6e863e16311c078892eaaa402e5c6df58369b050d73135256d486def68597f8887cf5b5863f2b3f063d857c6aa34934ce36ce6483483336a1fb2c445a3bdbd5e77a662ff16ec844c9483b41599cb37bda8b5af02a71e23c21db1da2f96ea983b721b5f7b327ec802e445d3354a27d6932e277b184dc6452830ce918c8796092cc45e2036625c65911862c6b65c255bb84543d604f8b211557a9e5becddef5a503e726ef7503a8b0881803427d430"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x6, 0x6b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x71, 0x32}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xe}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x43, 0x38, 0x7}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x1, 0x10, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xd, 0x2, 0x4, [@generic={0x6c, 0x3, "65fef8398cbd794fb7293ec26caa33dc20bd5ee511d97f344c5e408e371a131cb6533a71a6db122031c8d2c2523a212035c52345f1b59257a6f2a1b0460ca7a3a7877dfb59f53515e70c08ee1425fddc100873b5b5392c6dcc791cd637b502efadc2be66013cbc1b59c9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2d, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x0, 0x1, 0xd0, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xc, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x4, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x8}]}}]}}, {{0x9, 0x4, 0x81, 0x1, 0x1, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xc4, 0xf9, 0xc9, [@generic={0x100, 0xe, "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"}, @generic={0xbc, 0x2, "5f35e0cdd3eca7c7457ee5cbf7ea706933ef5224da616d9c59f1db5af087f6003c482b38ea0a7321d639346e3c35fecf1df0dd28658f4aafd01877e81d804627c3dd0cddfdd182b738b2fcda0c3deda0b1782acb1e3a447739f5295f01b3dcf3547dcb9b0e36084cc7155eea0f74aa5b3a238ecba902053d929d262f26e97c6b4a3c83ab88bc39b75f593f2273cd2e3172328e7d1722860fa55d726d3ac5b12baf367b600346af4a3a45bb1fcd62ecd6a1f75fea2b07e70551d8"}]}}]}}, {{0x9, 0x4, 0xf0, 0xdb, 0x2, 0xa, 0x66, 0x18, 0x0, [], [{{0x9, 0x5, 0x4, 0xc, 0x8, 0x7, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x30, 0x93a4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x2, 0x2, 0x11, [@generic={0x9b, 0x1, "ff7ba392613881b72fa309547da76b2212b005ce9bf1bfaa280a0b2109baebec51e4679fecd0779ddcce71dc8ff62996c519ad9e19a09b316a03f670ef61de5358af0f4e74d980c03268a88f46273f1c7e01d389ac243d8b4105505e69ff428e38aad490833f733765807d3685b2fda961b64ae016f099a7ba91bd04e44edd825842d6748398ab70b74babf719ee9fa97c9016f6cd0cec3f48"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x8}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0x8, 0x2, 0x2, 0xff, 0xff}, 0x1d, &(0x7f0000000cc0)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x3, 0x1, 0x1ff}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x8, 0x3, 0x6, 0x4}]}, 0x6, [{0xaa, &(0x7f0000000d00)=@string={0xaa, 0x3, "98510e6f11afd6e0405f2d10fe21b14471c97539210ddbf58daf8917d109f2bf0ccc7092c9e03c3944e0a50f8abd05b9aa3cdcc966805cad58b4ffa2a79c0165f0d14f002e81762babb8f0fc54604b51343703356f37aed7b59fa4ea928e1a65c6f4d5343dd9783d840c1fc9c90163467fed53f8be2e4c8ab9f13b7230f19ab8e94b69ea76e3518cf1af272238110adc304e9d62ccfa155c6893ac512f2e0f3071162f1a0b7563f2"}}, {0x3b, &(0x7f0000000dc0)=@string={0x3b, 0x3, "ff5deee63393a4a824205259a909b6d5e4a274c5832dbfd3ec6564c66cc0ea9914ad097886aefd9380d120ddb77e368dccd18644fafc6533f5"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x4ff}}, {0x8a, &(0x7f0000000e40)=@string={0x8a, 0x3, "12c4b5c2982219c36c11f2b4ee004957052fe758025a6257f1a70554e979e5f63dbfe2e0376b3ad481eb3007073f49b4e0a22fac04ef1a8cfb93841081ef2b6bedbbfa3c7a9a3cb4e87206480c74345db3915971d1a26f5e5e829b9366462a70fcf359ba1a6ec7101357ddcdcbfe271fa613922b99cd73f1633dbe8b2dc08569bc64c4961c2dd1ed"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x416}}, {0xbe, &(0x7f0000000f40)=@string={0xbe, 0x3, "1ffe4bcb8b8c7ae7976d7ddcbd39a9d2e9b8718a36c640aa62ab486f5dae852214c9a47712b274c242c9d6c9c12f1b1469e9f8bb35996062d9c86f1439922aac9348ce9de270a0d7c2c223ead8716674ea30b72c0f7e599571cabd3f6d23f34fd3cc75979efe747bb73f25c5304e601555b87ede622ccecec24121a0206980a31af5256936a3a0fd353e887c8f10864366e594d87eb580e4d4556ba536c82e6829fe8e87aa14070049878808063fad6d2f0985761ad0fdfec2021dad"}}]})
executing program 2:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff00000007050202000200070581020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200))
syz_usb_connect$printer(0xa, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c40000008ec00090224957c75f2b56a7251000000000904000012070103"], 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d693"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc0145b0d, &(0x7f0000000040)={0x1, 0xffffffff, 0x5, 0x1, 0x9})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2f, 0x72, 0xa, 0x10, 0x2040, 0x265, 0x450d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0xff, 0x30, 0x5, "", [{{0x9, 0x4, 0x3, 0x6, 0x0, 0xa6, 0x71, 0x37, 0x5}}, {{0x9, 0x4, 0x3, 0x7, 0x0, 0x1, 0x4a, 0x10, 0xff}}]}}]}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x4000)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000400)=""/56)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r4, &(0x7f0000000440)="5b2cddc45a52daf018b648f0653e679e923788af008a4a4273ea85550ffcf0a46a957de0965416d3d622db83bfee52a3b73c4bcc32ccff665eeaebaf936e3ce18303e2dc955ecbaa9594f4ba3bcf89a67b94309a8d12b96fac8f87d2c86965052be597fe7d7b4e0fb2360e2966306e624cf3810ea28e", 0x76)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000240))
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000110)="00000000ffff")
syz_usb_connect$cdc_ecm(0x5, 0x66, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x81, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xe, {{0xa, 0x24, 0x6, 0x0, 0x0, "de95b70372"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x1, 0x81}, [@acm={0x4, 0x24, 0x2, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x401}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x0, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x54, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x3, 0x7, 0x6, 0x40, 0xb0}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x5, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xdd227ee5a79044a7, 0x5, 0x5, 0x10}]}, 0x6, [{0x7d, &(0x7f0000000180)=@string={0x7d, 0x3, "1e3653d458958adb040ae973bdb8524525e5ef63fe76480c5ab8662725b534969a2f7991b06d08e785440774eba859c95ef9f790b0ea726e8263f115ec569e1b012a36e63d19bf564187016cb98a810ed67e7ea9092e0b1b9504305e5749db3b209a4fb23756d039abf0c90d8ce1b0ae22e039b7402e8296b5b8d5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "8ffbd91cc222d7dd40a1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2d}}]})
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db6"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x20, 0x10, 0x4, "8d4b2751"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x0, 0x12, 0x5, "aa1ba4e833"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$uac2(0xf8fa4a4ffce66028, 0xf1, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1034, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0xc, 0x20, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x4, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x54}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x1ff, 0x7, 0x3, 0x9, 0x0, 0x6}, @extension_unit={0xc, 0x24, 0x9, 0x4, 0xf, 0x7, "20f7245961"}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x4, 0x2, [0x3, 0x2, 0x1, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, [0x8, 0x6, 0xc, 0x8, 0x7]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x307, 0xc9, 0x4, 0xd4, 0x0, 0x40}, @multiply_unit={0x7, 0x24, 0xc, 0xf, 0x5, 0x5e, 0xcb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa7, 0x2, 0x4, 0x9, "f535", "bb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x6, 0x52}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x7, 0xd3, {0x8, 0x25, 0x1, 0x80, 0x30, 0x4, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x60, 0x0, 0x3, 0x4, 0x7, 0x100, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x80, 0xf, {0x8, 0x25, 0x1, 0x0, 0x0, 0xf5, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x3, 0x5, 0xf, 0x20, 0x9}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x6, 0x2, 0x6}]}, 0x4, [{0x13, &(0x7f00000002c0)=@string={0x13, 0x3, "cb0d7ee54e20b67af89dfb99eb12e7b14b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}, {0xeb, &(0x7f0000000400)=@string={0xeb, 0x3, "738592e4222cacb50d578fdb35ae580db400e55ca34a878804cd84ecf0e4b74a5d5b962381759da03d2a1f535a4b12181995af6f836525b00ec9b4203ad2464b38a9735759e752a329a4e40d331dbd0baa5df0a9d8fd8ef54ed62f30ff3fc44a82ce8bed4a55d6de38b8d2b20de10f3a5bb71d695d16e4e044a3955fbf3cb7996d32c7ae5c0642bea237436f6069feec8ed46e17f1b595cc4c9d6d1f14ee67f7a2f6ecebe05fca2ae42b700e31c0edffea5065b6dae15c5f738851922fbb03229635ee54386f50a603039224ed05a3c2df923c6ae35c95be2fae4ff173d41c3be5a1abb9c6e2b89b73"}}, {0x4a, &(0x7f0000000500)=@string={0x4a, 0x3, "fb1a0e3a3e8bff7565b03917fe0c477c71ad6411768da9632ff617bbadd5332655b7b863c514f9a49bc8e505d9e61b30e8c5e2497e066a06b16f6692f6057b5bb2d8255a759ed679"}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000000780)={0x14, &(0x7f0000000600)={0x0, 0x21, 0x46, {0x46, 0xe, "19303df9c78cb14c3c81ccb08813ee2af1ccac2b07d0c0748c689b8716ca0f55c28622ac07d83d4d53df8c54e62bed2576678057b84a03df8dc6d8b1bcd44bb19f7d5d7e"}}, &(0x7f0000000680)={0x0, 0x3, 0xec, @string={0xec, 0x3, "213ec29f026b2a5628ba473d94a8543ef89347561c7756671a843768b866bfcbaccf968a1717f98aacd9533128f6b306f485eab986af05c95cc72797256fc7161174a70546b64ccb8308624502925297cbee179931f8e27bab7b82c61cac360e919e7246829d21eb85dc303db8a2260b9621808cf073207dc6c9322906ade1dae7d9a6d800bbbf33a63764952e7d6d83fc38ca38012b425991e93f802b3108e62c217bfc23533ed7830955e75cbe9aa50912d22e69453e2ceebaf8fcc6e02da5ba8b2c80728ef2d1b4ac0607e8fdbfbfc113b1d3b5c0a338495c8860b629ce298c4df82b6052975a900a"}}}, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf, 0x90, "62a187d3b2045d1bf92275483521fafbbf69327eb979be01fdb894961b86540e53fa0cc77a5a52b3ff9ce83d2054aa6ca53e4ab537a87db1419a37bce0e0eef531427f8b601338310ebe11ee48cf6a90496cf227e7d3dc093449d923040c8975ee03c778c2ae007ee16b3a06084ec7c42e19199b96b584a4d9057d8a52a54cc80616f5eb61fda5a2115cfbd75a6d4cd2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000900)={0x20, 0x81, 0x1, 'P'}, &(0x7f0000000940)={0x20, 0x82, 0x2, '[Q'}, &(0x7f0000000980)={0x20, 0x83, 0x2, "1538"}, &(0x7f00000009c0)=ANY=[@ANYBLOB="2084e276ccd4e4941148"], &(0x7f0000000a00)={0x20, 0x85, 0x3, "6dee87"}})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x39, 0xa2, 0xaf, 0x10, 0x525, 0xa4a0, 0x2a7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xce, 0xa0, 0xc1, "", [{{0x9, 0x4, 0x15, 0x65, 0x1, 0xb9, 0xeb, 0x5f, 0x7, [], [{{0x9, 0x5, 0x6, 0x3, 0x7cf, 0x4, 0x60, 0xe}}]}}]}}]}}, 0x0)
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000209904091540000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f00a00904f2000001022000090401"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
r1 = syz_usb_connect$rtl8150(0x2, 0xfffffffffffffe0a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a051000"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xbd31, 0x40000)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0)
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "31927531314b20430d3a0d111147b07022425fa343ad6c618b4273570a934d800041432b9c9f49dac9d5431d0c91d6c0b3d47ce0aac509dedefdfc4c8b8b1fc21605a0fe813af315b3d2520e3359a4b8006600ba79ba0c3dddea501b7567d8e1fe44f5a14a5b574842dce43f708a930a236c4ae3b851a4888afa2a58b2"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$hidraw(0xffffffffffffffff, &(0x7f0000000380)="3b82300a8befa82d66416100da729464f268d71333e4d0596ff3e5cfa5dc", 0x1e)
syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100030000002035121000400001020301090290000301000002080b0101010a20020904000000010120000924010700063000b2092407030300027f950b240606030900020004000c24030304040606"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001080)={0x40}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x2, 0x17, {0x17, 0xc, "e92fca60a3f104f6ee8284f7a0983e26d3e8595388"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x17, 0xa8, "051de66e22faac7cf6c4d446c47718ada0962c9bd84abf006fb3e56581855c73223e56e93245cb47e2ac20a18f45df7ff1112bde8f862d8b6367ea61111fb5db0f4dbb93b4d1be5ff62459578d94e2ca6ecf934966918e510c5aa9ada0bb844891004cf9ba3727c0b4102dd6b5a41f08e326cd1cbdb2e585f6f69b4fc9caa156634271338ebae4ecf2bb7a39cea4a9078cb559c9e1801b13b6aa3025f7b61178f929d201bd16c9b7"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000480)={0xc0, 0x5, 0x4, "9422c767"}, &(0x7f00000004c0)={0x40, 0x5, 0x5, "60d6c1593e"}})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x7, 0xea, {0xea, 0x23, "233b5b3e2e38f080ceaeb41f2025c139d5e805c4b64b623a7a026f2e89c4da5de226806e1a9e92cfde908701afd676965982f9036dcb9efae9365568fb0e77717fab3eb40e0cd3925fec019f359762005a90988e1a17915938ab56123793d8f897f3eb3b6417f5a709518fb258f7700cb4b6f15b2717f706718781dd8fe257765afc3b97722c491d53ea053b9ac306e23178efb19061069e3a53dc938d86346680ca651be9b04f81aa20bc4b16969dba8781099eaf7b912d8e7770de0a9257689c0767556836208a758fe517819945465d791dc3cb30e5e86df735b00f8d307d9e5cc15e98e74b2a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x30, 0x5, 0x6e, "d1e4d5ec7e89f508ef4f4ac142e4840e3b926d891f64394900b9973f1c8ea75784cd58428ae88a28758d57ddf0893cc7b33e4c58f278b0daa4ca959055b01ab3a68a33747881e315a56a941f3af8d5aa2f7dc97971cd46be864ac0b51853bf97590cb5f6ab635fa95a517de20e31"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0xfffffffe}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "8f06dbe939ba2def7311db9f6c1125781686623ce4b2ecf1ef4406ff75e247b642b8aa009e121b4af7975af2381fbf"}})
r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x20, 0x9, 0xff, {0xff, 0x9, "1c4772f1cf726796b022f538678e748392e473422f51878e57a2b27aae99605ccf1ddc917e96a7e4f5007ade6f37e0db1672ec3efd67ec54ae74b46be774658c361957b66b15f1ee031e3153b2e75887d8e32365f8bab007008a32369c064f420d37cf821d08bd18a0d4560fe4b96c65f84f92cac48bbae074cdbeaff33415dbac47482eb4d485907535e618c72654887a41ef315c015358a48a031a0a3318eb0d8368687626ef1d6a383344aa7dd2d3636bd890a510809bbb88800c9ff5b7fd6b5e236d999ad0bdaa84e4da806a166b895107d26b02f80e1ed001e9f2810a2f26311a0e41496ef32cd2151174f340acc0db757c0167a38325821f77d1"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x34, &(0x7f00000005c0)={0x0, 0xe, 0x6e, "18772cc7682f3de508055137a4ffd6160906b0215ce4213ae3def6f4aa1acf16cf80e645adc2a9002fec2b527998a23a68c6c4846a21ee0df51dd24cd076ca805bb1b7b5485ab900a9f32b60909ef6af79a38abb72bc9111b2d70bb99e739827e8129ba9789ed660fa9b03dca53a"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xe81}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "1338cdbab4710ab03c12a2b77c893af1dd946c3e41676325909ce82733fd067ca0371edfbd771ff554b779114325c4"}})
r2 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x40, 0x4, 0xd8, {0xd8, 0x22, "e842277a32c884d874c44d9950e151663a22d0739894fb173d316aa6c59a36ed9de30d3c1fa86bc11cfa602e6f801230dbf8244f48cffef20e36c9993d851670bdf05bf8ccd12b2e32ba580b5e0b7aa226438093b472087cca4a414798aa0dbc05d6d8b72fd7fedef22b78f92aa717cd20975a152098f72c6b330b87fefda20e189f0a7abe334d0cf883b72f783af6357d45ef9b7dbb1572c5ac4e67463f3d4901da7b1319eef1c5820989936dacb317b7e2f33269206c9cca92891f3607af373941f268c6a3da48b6a533c86b6a453bba1f1c748e2d"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)={0x0, 0xf, 0xb7, "f414cb8c589842b2df2759625ba517e4ff90bcba64085ba3a5b5b4915ae1f94e2ba128caa1b56cdf05ad60ae767301ab4728b972e08762e7d6de58f3a434f0ce3b9cc8ca3233d1bd5b8e9121fa29d5d88783b13642eb1528e917f45031c280fc3d5cfbb44bc75fdfb01c2e0edd461f6fdf7b3481db0de245aa6803b22c4427c1f8f9541b48633fdc51063b1cf27e16f769583f6259e4fdd625e892b91f6e0d3671e32ce3e21edcf1f795fe24d80363db796afddd3ae4f7"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000ac0)={0xc0, 0x5, 0x6, "2e4b3e1eadc7"}, &(0x7f0000000b00)={0x40, 0x5, 0x2, ' 4'}})
r3 = syz_open_dev$evdev(&(0x7f0000000b80), 0x4, 0x206002)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000bc0)=""/4096)
r4 = syz_open_dev$evdev(&(0x7f0000001bc0), 0xc, 0x18c02)
ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000001c00)=""/200)
r5 = syz_usb_connect$midi(0x3, 0x10e, &(0x7f0000001d00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x1, 0x1, 0x2, 0xc0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x1b, 0x24, 0x3, 0x0, 0x81, 0xa, [{0x8, 0x3}, {0xa, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0xa1}, {0x7, 0xf7}, {0xa9, 0x7}, {0x6, 0x80}, {0x7, 0x10}, {0x3, 0x1}], 0x8}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x2, 0x6, [{0x5, 0x9}, {0x5, 0xf7}, {0x2, 0x8}, {0x9c, 0x5}, {0x9}, {0x3, 0xe}], 0x1}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x5, 0x7, [{0x7, 0x3}, {0x8, 0x1}, {0x4, 0x5}, {0x9, 0x7}, {0x0, 0xfb}, {0x2, 0x7}, {0x8d, 0xd4}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x74, 0xc}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x9, 0x1, [{0xe, 0x7f}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @ms_header={0x7, 0x24, 0x1, 0xa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x5}], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0xd, 0xc, {0xa, 0x25, 0x1, 0x6, "e3e2b722adf0"}}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4f, 0xfa, 0x9, {0xa, 0x25, 0x1, 0x6, "f34ed43f1e7a"}}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xbb, 0x0, 0x47, {0x7, 0x25, 0x1, 0x3, "affefd"}}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x80, 0x9, 0xee, {0xd, 0x25, 0x1, 0x9, "c3f390b3ae824309a7"}}}, {{0x9, 0x5, 0x7, 0x2, 0x177, 0x5, 0x0, 0x40, {0xb, 0x25, 0x1, 0x7, "e9c1abad49df74"}}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xc, 0xe, 0x5, {0x4}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x0, 0x4, {0x9, 0x25, 0x1, 0x5, "6522640f31"}}}]}}}}}]}}, &(0x7f0000002140)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x250, 0x80, 0x6, 0x3, 0x40, 0x6}, 0xb, &(0x7f0000001e80)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0xc0c}}, {0xbc, &(0x7f0000001f80)=@string={0xbc, 0x3, "ad6776bcaeebeaf97bd9083c84424bc2daca43813554343ae6481f7ef42793a19fb13ecfe1d98eeb1d04a8e8973337f821e2373f4016b8c2c331f73e1243d6d3f9b6ce058f0645d1fce7a4b2302b789e1ac2c4f9eadc843e2834b1a02f875291bf14a82886166f034793e02697da5030de803a27855a658348dbe51f6306530d6fadfdeb1a4dc5ee8167cd48d0c28c0a2c1566ee8154037ac26e2420c4e04c9f91ffdd2355d25fa87b101b0d107c22a8e44b4cfda83a93722943"}}, {0xc2, &(0x7f0000002040)=@string={0xc2, 0x3, "66c26f43d80fda9dc979c5438e8234f554e8c7336a6f92ad64bfc07c2b82c9c7bb9496d76e602e6fbf385e0468f4bb0f72d8d415699d59aea0240c2b11b418b71c408f9c518aaa42d9a624ffb94052f92fb9fbc23f26a21f38d1793a1a2f2c373d71beadfba4e3451a10db444e221d84faa856c3bee4438b5efeab63159b0f17166fd6cde9a728090696034f72a592c1518f81e26ace9366dca437ba870a68fb648e55c393452c08b4266669ee0ede854fa0531f40ba310d438abbd1dd46fcd6"}}]})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000002240)={0x14, &(0x7f00000021c0)={0x40, 0xe, 0x23, {0x23, 0x5, "70c471748086db89020988581f184943962943d06e60d36745d7b3dbadb5d20ee8"}}, &(0x7f0000002200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002400)={0x1c, &(0x7f0000002280)={0x0, 0x1b, 0xcf, "273f86565a0ec6925ab71fece49a7968a627ba81002d248aa8c293bdd33d114562a72d8eb4f3366a92081c1901ff64920c539f2c0553bb12555b4a56fe71abf389a1a6745e3eeb5c9a4b8fa1723aa3ca77f86ec48eff70a8c5d1fa16ff083ead4bb9ac450616cca0fdd8147946aaf05ef6a4665ed895c8fa6337a73fe83b5ed8f53727d26eb9053d9156b88ce2b6ad743eca562ad62fd2d6f9e77a66eefd45e45d16a27f2501df230019481c2a4833a369107ef5f7e45e164b338911690fac202afba61079a929c735c7237cfd5b15"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x53}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x9}})
syz_usb_control_io$lan78xx(r0, &(0x7f0000002540)={0x14, &(0x7f0000002440)={0x20, 0x10, 0xe, {0xe, 0x22, "ca610ff0bf5a90bf2bf7edf8"}}, &(0x7f0000002480)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "4c6e353ee7dcd051fe1f32eacb91826f74b414afbb9aaf53be992d86735913ff0a47e07a213b39e3591f56decad673ff3f3413cc9c8f434481c80a4a4505ee759694222ff913d0c4b53976bd96fb5d257255cb2df9f46133b6ce4c40bf295824d7df08f441ba4e5e0da7a107c81f1dda2c363e5686b59d52d602120e5b829e67321a840d7a81e50d3a17194731568b6a7b44633375f15e5cf0c7a36a01939c94dcce7adc2d9477"}}}, &(0x7f0000002780)={0x34, &(0x7f0000002580)={0x5f75e307b488efd6, 0x16, 0x93, "43a5a71bd6ab493f79289564cdb147be743d90a86c5f1ec6bdbcf7a0fa8c9395c92e002134159d810a9b5db34b105a489f3d587cd9e136d851dc1092e69b2eba6bfe6043d573a58a56b543f097d57fe040653845a143b0bc35ae51b4a3c70d4ce03f5b4d95c373a0b8c655938cf8cdd42cf9ff30d8968e088e5adb9feab2e5f4954c302356a55e10efc114fc5b6aa5292043ec"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002680)={0x0, 0x8, 0x1}, &(0x7f00000026c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000002700)={0x40, 0xa0, 0x4, 0xedf1}, &(0x7f0000002740)={0xc0, 0xa2, 0x2f, "19de8eda9c5cf607c1bf577daf7fa19cb214f760a46f4fcf957c125444be3e5a7088b402e4e256b23a61d65a7a8775"}})
r6 = syz_usb_connect(0x6, 0x68a, &(0x7f00000027c0)={{0x12, 0x1, 0x310, 0xc6, 0xed, 0x75, 0xff, 0x2019, 0x1201, 0x80e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x678, 0x2, 0x1, 0xc, 0x40, 0x4, "", [{{0x9, 0x4, 0xad, 0xda, 0x7, 0xaf, 0x7f, 0x5d, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "5455ed"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x0, 0x3}, [@country_functional={0x12, 0x24, 0x7, 0x40, 0x5d3, [0x3ff, 0x8, 0x8, 0x6, 0x6, 0x80]}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x81, [0xe70d]}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x7f, 0x0, [0x0, 0x27a, 0x7fff, 0xd, 0xff80, 0xfff7]}, @dmm={0x7, 0x24, 0x14, 0x4, 0x9}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x7f, 0x7a, 0x6, [@generic={0xd9, 0x23, "343da8ca77824fbb19b507cc92448ae8361be1d073a77f3c87b56aec4596e12f418baa5d199316d3dd7adf2a5a18fcd15a3d270e48b0482876675d464d22f9e79a34061d5f9b87441b952dea9c525f40b56da7964cbf696bd20669539ce66f577ef69756c5bae717f97dd60f11deedaaa30054c0b857de9eaf7ada966c96f0fafa3ca70f872b685ae622887101c703717e71cc008d70aef79007b1b4d80b3ed0fe4459af7b5bc2da13d3f2bca458d571903c46922454f395aa19b3dd4c9acabcf6a45a49bb0686816341a3af2ca605fa3be4f7b668118e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0xe0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xfe, 0x8, 0x6, [@generic={0xd, 0x24, "693f930565ea8ee148f527"}, @generic={0xac, 0x24, "32bf9e69b58984865d220a64faebaafed1e1e4bb1c8671da2b35cbd6205816d9915c437b9027486bb6930e565eeefafedf430bf312d99df5346d23a4797a87cbee9998852e9bd8fbaf35f6ae5d2edec9dc42ef15d24a17c60082fb6575bb930c8c5ba65b4f1e14274d1a206764a520831629bbf79b116a26c00298fcf62dc4ec85dd8e04a7e0ff1a07b523482da0a0bdf9c8d590b6ec9a04e766c9f51e4dad7d41aca1849d0341b09ef0"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x5, 0x4, 0x0, [@generic={0x23, 0x22, "a4910c01d0415b3529d1de25c376b7cef68731ae792bb9459a85856aa4bb4e8802"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xb, 0x1, 0x1, [@generic={0x5, 0x6, "ba1628"}, @generic={0x92, 0x6, "01b114806ac07d9b29febaae83f5ac4d26dc71cbe05eee8805795e634d8707b6d69a76af69cc89a1d5421b28a09286b7ba4d5802aa18f4b08200f61623bd7ea6f785a54627228f110ebae44bcd1ee197ecb9d6293977f7f8ba8fd381cfe367dfd1cf7827ec6ac6a266f29061bd17c853e30d2641c394ef6cf25283ff6ec86d7a27cc4f1a978f356b80b1e7d6abf7eef5"}]}}, {{0x9, 0x5, 0xb, 0x1a, 0x40, 0x5c, 0x6, 0x6, [@generic={0xb3, 0x30, "b8c963a102d95f75dbfc6f3d841a2a44b4768b2ab11577f43197f62e6c8ff70b2a02f79dc5582057beaee65e662ad17a269611093921e366a1ae39b4376ce66ef16f1b8b4d811f152e7b15535a6beacb6abe59ba3f6fe14d328ac14982a93a078653392d227892a18476280cdeab977f940f8098f501ef029268857df2882003fb8a15dd3ac5cdcbce576bf85ed87b03e8c5cee1bb42ce6bd914db5b191e08cb4d33356476caa906962c5d87a408b59878"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x0, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x65, 0x0, 0xa, 0xd3, 0xc5, 0xfc, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x3cd}}], [{{0x9, 0x5, 0xf, 0x2, 0x1b7, 0x3, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x3, 0x1, 0x7e, [@generic={0xbb, 0x7, "aa522e17052de61bdd60ce72c67405f8017e6648111c941060437b3724f59a331b972c88575499758f266d842dcf0c9b1effe271f1b30b6d504e4cbd4fed98b3c299e345063a3d481d871abe3823a4c88d5b1e05b2347cd8b1ebc06a00414b8f187157d952f085bfc3828ad105cb8a40471cf2c4d30ca9eaf9e19cccd8a801ee84b097a1fecbf8c117febbd24d24e06a5157b26d11d8a762093a7a4bd28b8e68dd29cc44c6cd63e76a9d89a0b3f386508b90c115175119fa0b"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x6, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xf2, 0xe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0xd8, 0x16, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xc, 0x5, 0xb2, [@generic={0x6f, 0x7, "4aa37f422c625e1ac793003626bb0d32532a9c97662c1ee9920c954f282949d753f08f0dfa537db0b687fc98f0485b2fa9b29dbee77e5a21680687257f0b18ba1bfb86d0f5f3fab1705ff964f476a182bf30790d65bd02e91e43e29b6045da7eab7c405127567f57de718ae01b"}, @generic={0x63, 0x23, "b9d5dd0d1c589a56545e42e961c1526d5570ef10e5a2ba41289804a3fe52bd19b23afa76e76d272553a2fc63138b22542031bdc33fbc36d4f32e04557e19644996d18460230d7a0173da8a65d37a2bd750fa70a9e31f82ddfc1139b3049cc32a85"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x1, 0x8, 0xa, [@generic={0x6d, 0x4, "b6144123ad4332d1f85177fd5b8e1fb76721fc91355ec0898e7a5483c17a9720c43639ba0892ee0740dc35b727a13d4d5de7ec3073506a429e2b86a34c31cc5cf70a2323afc4248cd8b488f06c06bcf1d0373e89c9e1b7d3b6e4fc604641ba4a13314743313a36a76e6cef"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5, 0x8, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x30c30c00158124d9, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3f7, 0x55, 0x4, 0x5, [@generic={0xa, 0xe, "309201116ba6b0e6"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x36, 0xf, 0xff, [@generic={0x1f, 0xd, "364bcb100c8ab33f9a371198ececba146ba290ede18f98999c214ab5f5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6018}]}}]}}]}}]}}, &(0x7f0000003000)={0xa, &(0x7f0000002e80)={0xa, 0x6, 0x201, 0x2, 0x9, 0xa3, 0xff, 0x3}, 0xea, &(0x7f0000002ec0)={0x5, 0xf, 0xea, 0x1, [@generic={0xe5, 0x10, 0xb, "1dca18dd8fc3174f8be3d82176311bda4fc7895ed0b84342b5079a1261a7800ef5d827fa753a15c89699712102ec2c1f1dec36075638af1bf9e65fcf81b69ec11945e231ab7835c5d225d3866258dbf65287dd5c5668b7319d70ad7d14f3ef804473da8b08a5675b4868e0863acb60b60f143eae59acc1fb0f29a59b4e2cc777660c88b77fbb1cbf27d4d86a0ed3e8735f16d6206a9eedf7a295564effe5fd8ed909f9750801e4ffb8b795195075e282be3e758faf0bef556922fe6f9c758d4528fb4815d42834ec3e5c9e524d051007264824ea5031c4015d66af23cd2ced723c59"}]}, 0x1, [{0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x421}}]})
syz_usb_control_io$uac2(r6, &(0x7f0000003140)={0x14, &(0x7f0000003040)={0x0, 0x4, 0xad, {0xad, 0x7, "d880da45622c2109a2aae7c20961b4a3b00a50c08664dd53a658e346d8c922039d57b0ec236c3dceca3a056f6be3f255f7fa4dd7f35f5f1bc625fbde62fa63f5682b250fdce442790ebcdf281c21b6d72f06c04068a2d1199916a7d87c078d6fe6b7aa9b0d31882e4cc9452d30beb67dd74d6c61cb0f4ea0b9722789630d83ec7191f1e2c4c6975f5ea35aaa218ae8b760899fe712f5a3405f6a865dc98548782f5ce7e18db65b276459f1"}}, &(0x7f0000003100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe52}}}, &(0x7f0000003440)={0x44, &(0x7f0000003180)={0x0, 0x1, 0xdd, "c9be6ba9befad849f16bb80422a919b3210f2b2b675f459cb1f4305df597da73cd3bd438a873a462c57e353f9fb22cd0f9bb767cd80a67c99643754819dc2a698d7607d0025ed5affa9913e6f3ae65e5968cd2504119231fcc97b28d5cf6e9f113072f4ad15247741e43d8356749a56c827a6a3bbd592f3c5f8caecd5f1ccf8e8ae10efe138e9be9d36ab1bc086a9f2b5e57c65d33bbaea85c2df6635fdfaee618d384ead4bbe7fe050d87e23858c9de7fce7b56a3374916f488f020fc7ea4ee5ebe11ffb1fd9fb6965375a307eab7391727600158d8d5ebd79f4b30ee"}, &(0x7f0000003280)={0x0, 0xa, 0x1, 0x3c}, &(0x7f00000032c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000003300)={0x20, 0x81, 0x3, "d520fd"}, &(0x7f0000003340)={0x20, 0x82, 0x1, '!'}, &(0x7f0000003380)={0x20, 0x83, 0x3, "7cde55"}, &(0x7f00000033c0)={0x20, 0x84, 0x1, '-'}, &(0x7f0000003400)={0x20, 0x85, 0x3, "bc51ca"}})
syz_open_dev$evdev(&(0x7f00000034c0), 0x200, 0x242802)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
write$char_usb(r7, &(0x7f0000003500)="46db3e35ba4e9a17d58598df6b184cc7df1abb30cb4b74aad72e8652439200b2eba694f89866037451919910f30c19b71e00796ca36807b91faba3f02b27aa74f6443f0901f70290220f0defd67ef45068d0443a1f1c3145d096731270ab1baa7b1ede2b3a8661068ca306c086637d059605f6f128a385220475786bd5", 0x7d)
syz_usb_control_io$printer(r5, &(0x7f00000036c0)={0x14, &(0x7f0000003580)={0x20, 0x7, 0x25, {0x25, 0x21, "5b95be6f965ade19bdf9579003d27171ec93b01b53bd5d3f878523460fbc43e080c2fa"}}, &(0x7f00000035c0)={0x0, 0x3, 0xed, @string={0xed, 0x3, "c4d31fa0304cfa1b481aaac41797f1ee7047628bcb588d50a3f4dedddcb3b717c89eeca32b75f6a61cde63d7af28512a700f689738e668a2daa1fbbd3fcc4516cc7a12b252f72c1de25c2f461a4613e932cbf7f4f186fad5946d905ca9831bf016854ac47a2aa49565158f33a8fb5c4521c216d1fb58de02b56882ee8ea8cd7fe7f3f33921df48cbcc3755ea42a358f8a32f6dc0181469c198d3985827cc01e882c670a04799f5cb2bdfe47c67c1d591b1364e6f1f455ea62e9d3e3163b67055900cc54fc8437018a466ddaae0b57bf9d23e96927f34e5fb5dfbc0a04a06538071b1226cae84dc13dfc647"}}}, &(0x7f0000003940)={0x34, &(0x7f0000003700)={0x0, 0x15, 0xe9, "147b326b44585a0a0e1acaa342e58d49dc793adeeb58924e76446895110fd10bcbc0963bdf4c2f58613dc8f844e6f66981e4c66af02ef0ffedfb044ae27ebc2a93c508f82cb2a9ee9caccc9de56febc4594c4144acd4a29b0f0cb4cd1f3e4466444b96256969f8d0b721e385950950bf5b5c5fc319f5a6ba1b7ac2ddfc9a733f6f0ba30f85cc2b44a11339d88d3d545455e1d98ea7d8b2bda17bc2c8f42f75b543e2776ed53f7e6ea27a66ae80961e6c77c33f18c8c79d82a16c920d9fa35a6536bff9c1887c57ca46088548d2f7bf364e246fd02773918631f2314b29374f09ced6075feff0167ea0"}, &(0x7f0000003800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003840)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000003880)={0x20, 0x0, 0x36, {0x34, "8ccbb521e475395aeb241da38597f3ecef4a2086a672214b9adeb071db5d51fb37bd50c6475a06b5b2068aa218b054292d036604"}}, &(0x7f00000038c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000003900)={0x20, 0x0, 0x1, 0xd}})
syz_usb_control_io$uac3(r6, &(0x7f0000003ac0)={0x14, &(0x7f0000003980)={0x20, 0x22, 0xdc, {0xdc, 0x9, "487fb2d6effd58efac1ea8692ca66e591a0880f443cb5c07d01639e9097edb3c8595b0cc849c10ae332989e72d9c0e13768bb8e24ae6907168f9dbfd4aee985dcd809534c37d877bdcb22f3912942227f05a21ea641099a7e0ab515fbccf89f661a1a136726028753c43ee267a15fade302e4e1161fccc102872b5328d0d321c3fe34a9329c69ee688fe3b7aaec4f6f2eeb81a66caa7113afc17618d3a4b712e00031f5dd696b5fd37d04ab6c5307b78b17e6a59e23cf68197e100c9f1a11bc1b5cedad30613314df14f24e4a484010b33417ea1ad193fa7d6f4"}}, &(0x7f0000003a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000003d40)={0x44, &(0x7f0000003b00)={0x20, 0xf, 0x5c, "2778d17f7bb31a211fdf02d5cc583eaa3a44c13f874451004253b0bc67a0dabce50ac8fc3292acf246a6e04d44739bce6b8734f118e0e744b5ca14171cd1c4082dc16408f31a20f36912627903a57cb7cf45eadb53e7b506910ff690"}, &(0x7f0000003b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003bc0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000003c00)={0x20, 0x81, 0x1, "fc"}, &(0x7f0000003c40)={0x20, 0x82, 0x1, 'f'}, &(0x7f0000003c80)={0x20, 0x83, 0x1, "a3"}, &(0x7f0000003cc0)={0x20, 0x84, 0x4, "ca9a72ee"}, &(0x7f0000003d00)={0x20, 0x85, 0x3, "4594ad"}})
syz_usb_control_io$hid(r5, &(0x7f0000004000)={0x24, &(0x7f0000003dc0)={0x40, 0x21, 0x92, {0x92, 0x7, "c55390cf8f9e859ac76ad808466ad92f2c8d17d01cc3e0033f818d0051fd647dcdefb62e89709441781becfa4fcf04213a3b6500b19bdd4a3226a5190e997a1fe90e5b33c9f3d232a7d304d2a04a8ad10e4335f3dbeec91df1745f4fd74b95891c310893fad0f8461b30b374b34386a06028547c0b031f7952f03196298fe2c62db7724bdd31612d43fe2bb71cc718c2"}}, &(0x7f0000003e80)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "ad6bef5d23f0f8988a9af63bc2a43a047c9123108c8e55d029385ccdbe87f345d543a2ee2afdba8eb36012c9158e83e1333e103b571880295ff64309b4cb9901b7f06f54b93f885779947d0009f9357f44eb440f971e0efe4378d7942dc14a91eaeb49b0081fefbd4d27a2e9c02fe339f67ec23640d20dbcb8db29a3fe6524f2b78edfbbb2cfe8a1ed4b84808c49e65a132481a575f4ed29c739a76bf469cc2967a0c38f8a7de9c660f776d66dc97332cedac095c5506bb8f421785a63bc1f2abbe28a4c0e9dace4db47a1329b7d816409eecc3c4f4af605d48266d4d2f6380f738176b17513ef6b35"}}, &(0x7f0000003f80)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x9, "25f645c8"}, @main=@item_4={0x3, 0x0, 0xc, "65a2ace4"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "56ac885e"}]}}, &(0x7f0000003fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2ed}}}}, &(0x7f0000004240)={0x2c, &(0x7f0000004040)={0x0, 0xf, 0xdd, "3aa563ca58e1349e9bdfeaf73c2249259189effbfa717a4efc640b2324c6bc4991746444bec34a9660bd0918c5e072063692f88796d3ac0aee90c667d865d998a10f58ef513fdaca80feebba114157e11927c79691c4fa598b53db78ad41ad08b46a743830514d0972ef1c17638932d7d27f3b19774140e75fc79998b759a8706dba5bcb0e62237470e5cf25fa8d6b2f68e6cceb334cbeaf55aaf52516e316bd0a742f496b9a44450d2d4eca509cf4695150558b007fa8a4b4fa919d7062bf6f5715a30729cc907517eb14f93f05de42966a40464625ea1f1b0c75b0b7"}, &(0x7f0000004140)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000004180)={0x0, 0x8, 0x1, 0x90}, &(0x7f00000041c0)={0x20, 0x1, 0x12, "a58ffdb2407b2fedcbb0939b684aadf10414"}, &(0x7f0000004200)={0x20, 0x3, 0x1, 0x2}})
r8 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0xa17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x8dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3af, 0xd8, 0x5, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x99, 0x3, 0x4}}]}}}]}}]}}, &(0x7f00000045c0)={0xa, &(0x7f00000042c0)={0xa, 0x6, 0x110, 0x6, 0xf9, 0xc, 0xff, 0x40}, 0x2a, &(0x7f0000004300)={0x5, 0xf, 0x2a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x3, 0xf}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x9, 0x60d}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x44, 0x9, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x6, 0xfffb}]}, 0x9, [{0x4, &(0x7f0000004340)=@lang_id={0x4, 0x3, 0x2809}}, {0x20, &(0x7f0000004380)=@string={0x20, 0x3, "cdae0f66efc17169dab534eb7db4b669ef5b9a97fe9e94e6ae97d9f22fe6"}}, {0x4, &(0x7f00000043c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000004400)=@lang_id={0x4, 0x3, 0x42d}}, {0x7d, &(0x7f0000004440)=@string={0x7d, 0x3, "d20df8c4b49226846032d7141dd704aae1784fd40231e1bd4d4bb7e9f93230b846f5f6579a4b1b9867033ca7ee43d1101219bdf777a71f610d48df6b47ccca8913d9a0226137e389995e6f20a276f60a7e8fa06a8a0906bbbf85ccb7c431c97dd02058e3ca06ccea5136ad4dd6bd009810471001dc3b6830a73071"}}, {0x4, &(0x7f00000044c0)=@lang_id={0x4, 0x3, 0x412}}, {0xd, &(0x7f0000004500)=@string={0xd, 0x3, "f1d12762e587dc01492420"}}, {0x4, &(0x7f0000004540)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000004580)=@lang_id={0x4, 0x3, 0x2009}}]})
syz_usb_control_io$uac3(r5, &(0x7f0000004780)={0x14, &(0x7f0000004680)={0x40, 0x2, 0x90, {0x90, 0x22, "76f53ab99958fa5177ce0f16e15988353a9bbdcfc6c0deb6823a85ae2979d6ea28b235c0fc3938c48f5c6eeb40c32dd15e9f7f44329dbe2fe657bb0c2d3366e842d7b3aba45d1950848a3e199fa4afd8fbcbbb3be34bb4db3d9eebd6da63ec11e7483c4db7c0ca239020d2d8d01eef33158c18eef278f57094ff6640ee08e12543ca068d27681f7a00bff678ba99"}}, &(0x7f0000004740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000004a80)={0x44, &(0x7f00000047c0)={0x40, 0x30, 0xc3, "0972f5476fac858b0dc1fd4439402433e05fb71ea2de1eef689994019d5a4b3ac52bc44157e0ba64b00f00ba87eccca9da293f08b177a704633618806ecbb9ec264d71af48d3659be8c9d59bbe4ccb417916530399473a02b98849dc212966eca1ed29cdac7c46c4e9e9fa5c23bc2714b495bcad7bc07a47518134f68d8bcc2c31bf832da3a0c18514fdc14c7a7c8fa22e113b37dc5d7368243f64b0a9f7ca695e712d8bf6fcd0b13a040d5869e1da6460d0738672589cf69cb42c8a4b36f4afadd354"}, &(0x7f00000048c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000004900)={0x0, 0x8, 0x1, 0x84}, &(0x7f0000004940)={0x20, 0x81, 0x3, '?/9'}, &(0x7f0000004980)={0x20, 0x82, 0x1, "0e"}, &(0x7f00000049c0)={0x20, 0x83, 0x1, "a6"}, &(0x7f0000004a00)={0x20, 0x84, 0x1, "99"}, &(0x7f0000004a40)={0x20, 0x85, 0x3, "c8d3db"}})
syz_open_dev$evdev(&(0x7f0000004b00), 0x668, 0x2000)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000004b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r9, &(0x7f0000004c80)={0x14, &(0x7f0000004b80)={0x60, 0x0, 0x12, {0x12, 0x23, "32ed03df2a13ae8b8dfd9587a11042b0"}}, &(0x7f0000004bc0)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "d2dc6c56a84ea152827d95bf4936abe7644e06ed0abff72af7e66684b23439ce89b7aef490196b9d1d4ef7b2859f0db34c6c6b1879e41a7e6a8c155051f6facd30d2b9f96d2f0d9f8b2ff88c6af7df2e269d9783f0a347583f6fd048c4da24c333adf7f3b0f94712033ad5b5d79e829c54b2242bd750e95912f6d365300eda244026362033bccf171c1eefb70440602b70fcf562eef98d0ff4a2"}}}, &(0x7f0000004e00)={0x2c, &(0x7f0000004cc0)={0x0, 0xf, 0x38, "874856d75d5d9f04a6ec10489a311047b5aa3436f6a07135718dae755e081bf4fb8a5feddb0d0bbd1eec90ce9b5ee825a320ab68c68027bb"}, &(0x7f0000004d00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004d40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004d80)={0xc0, 0x5, 0x5, "983cfaf368"}, &(0x7f0000004dc0)={0x40, 0x5, 0x1, '\v'}})
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000004e40)=""/16)
syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000004e80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
read$char_usb(r7, &(0x7f0000004ec0)=""/117, 0x75)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201de007e3af708b8071db2ae970102030209021200000000c0000904"], 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="4015c1000000396a9f99b23960d3f387fa766d2d7b767652ada6f2a978098a0793ffffbd6e5266ff7fa7b9c98b753bd6ae67eb3d8db282db338a13228516429774ceb8f73865109d92dc147469bbd5a0e65e8af2ffbad368eb5b64ccd3ea44fc8be1fcffffff00"], 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000b5b30a40450ca86035b501e402010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x8be, 0x1e18, 0xce1, 0x625, 0x9, 0x3, 0x0, 0x375d, 0xf6b8, 0xd10, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) (async)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000e40)={0x0, 0x0, 0x4, "047e461d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92")
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202000200070583"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xf4, 0xb1, 0x6a, 0x20, 0xfc5, 0x1227, 0xf304, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf7, 0x50, 0x18, "", [{{0x9, 0x4, 0xaa, 0x4, 0x0, 0x99, 0x46, 0xe5, 0x6}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e780cc08c0070515c5b80102030109023400010000800009040000038e4ee2000905000000041a06010905010300021007c109050c04400003030f07059acb"], 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x35, {0x9, 0x21, 0x9, 0xc, 0x1, {0x22, 0x99f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xa, 0x5, 0xf, 0x0, 0x5}, 0xfe, &(0x7f00000000c0)={0x5, 0xf, 0xfe, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x55, 0x3, 0xcc9, 0x1e000, 0x4, [0xff3f30, 0xff0030, 0x7fbfc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x1, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0xc, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x7, 0x9}, @generic={0xb8, 0x10, 0xb, "86986492756c3ccf7e1b7e082f572000b7ebface433c055c862cf9a7613b17c349839c068da3f0df0469255d798d61da9bc5efb0ea795d86866edba6b628e580b1ff38dd8b03a5826d52d837fc45c2e1037c0be53c36c24e427249e1d962af3af2de86aa2c5066425194989576019217f67818290bb5bab6dc7e5ca77aad0ccde08299c33f6a8f7eebfa20f310ab23fa3cce57cc2e4c67ae371fabb6b71ebdab9dbc3160187af21ca114bb0149243f904a0a49b53d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "5281ebe95213da8543de4adc1b763ee9"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}]})
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x2000)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xac, &(0x7f0000000040)="ac1aa1d40323008f69b32b8f91c9c2acabdbf4f0ad6497f75150f1b59fe359f3c3bd6a309b9866b60f2c82c8d32cc337a9b01f07838f81b2c847c3a1cd678aea919f1115a51904d63208ef6d4e997e31d0c3daf1b4de2fda3f290a5f7433fd22cab5dc14958f8ae0be547f203be0c63d5f8e0ac996d92d99c989f749b2ff695125786a4b4933a096537583ab05ddbba3b2a03f2e5d3123daec9b04e89084c01d2f5a1db5d4e81983c491352b"}) (async)
r1 = syz_usb_connect(0x1, 0x4b4, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xd8, 0x8a, 0x28, 0x10, 0x10c4, 0x8998, 0x5818, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a2, 0x1, 0x5, 0x7, 0x70, 0x10, "", [{{0x9, 0x4, 0xa1, 0x81, 0x10, 0x91, 0xd3, 0x2f, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x30}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x6, 0x9, 0x6, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x404, 0x3, 0x3, 0x10}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x5, 0x5, [0x8, 0x9, 0xb, 0x3, 0x4]}]}], [{{0x9, 0x5, 0xb, 0x3, 0x200, 0x2, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xf8}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0xd, 0x6, 0x10, [@generic={0xe, 0x0, "eb2f9b7dd8f9757687e4da42"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x9}]}}, {{0x9, 0x5, 0x49ddc4b4ce8cc888, 0xc, 0x600, 0x1, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4a, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0x4, 0x0, [@generic={0xdd, 0x2, "92a385f9470efd4590938c9e7027c341de8d9328741e5747f0efbd0d287086b01e22ad42cda42a643ec1a15fe59382b70ffd14f419b7965324779607d88521dd198ab216604d9471ee67a69c0270e50cbebf0a2b58ed309a2a90d95940417a9af700388d542a28ef80f85337948386073e238d661733d9f9639aa36ab28470a525ae081e0ff0f3f65ef44000b688d0b0e0ef96805ab43778ce1d6e4debf933eab8fdcb89c7a46c6d0ac2587987d05df1388ecabf72519a0ed27367c5da36c4097fda70e01a4bd0508291f9bbe3ec96391fe4e2fb7b2536d4a9cf43"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x6, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x5, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xaa9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x20, 0x8, 0x32, [@generic={0x72, 0xf, "317ced90fabed905e8bbccf33a1987ad9cba1fc7ce051e4f5f96da9b8ef2e8c60c0351998e8ef604acaf29286f7fdacccfbfead85b47a5c3bb713720915e36acfd50d9e931afec43f6df04cf7aa8729a4fc6c37bf556c05a3758b5f0758f1bc0024736e6032dd19f1adb835bd4ef2184"}, @generic={0x100, 0xe, "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"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x101}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x80, 0x0, 0x2, [@generic={0x6, 0x30, "fb26ed2b"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x62, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x0, 0xc, 0x2, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x87, 0x9}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x8, 0x7, 0xb, [@generic={0xb, 0x30, "e44ce29db84d60e00a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4c4}]}}, {{0x9, 0x5, 0x6, 0x8, 0x65c04ce61e152a04, 0x9b, 0x2, 0x8, [@generic={0x100, 0x7, "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"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x2, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x33, 0xfff8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xff01}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x48, 0x6, 0xfc, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x1, 0x5, 0xcd, 0x20, 0x8}, 0x3c, &(0x7f0000000640)={0x5, 0xf, 0x3c, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x8, 0x7, 0x2b49, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x3, 0x200}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0xff, 0x6, 0x0, 0x30}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "19874e3ed39d8ea5ed4d19d77c37b2a6"}]}, 0x2, [{0x5c, &(0x7f0000000680)=@string={0x5c, 0x3, "33403474adf04b3923c69f110f56d7c440c32582987a64993ac99c6793f057d7c213575064646afabe67ccb5d0db126cd859f0078cf14d95ad6105b2d89b0df7e0d635c2414144b41af18bab4023a108c84a2e2e6a6fb6de1dda"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40d}}]})
syz_usb_control_io$sierra_net(r1, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x0, 0x11, 0x51, {0x51, 0x22, "532c398a940ecc6fe759c8fe9c76a3de6f4c1cee65ab5a720bb14099ef25d9ea686ca0d254b52e9869655a44e5d76fe62e3fcb115c2bbcb24e4c5bc8785868ee3ac26b8829744bdc2839ca12d51636"}}, &(0x7f0000000800)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "ba9e1fcdf83578a7a5e6cab7d536e6fe2318a4cfa92bf6e147bd9a4f4c6ce4a522a479d2c9453ff51968e5bbc77c5de8c16aa9472a4d255eb8"}}}, &(0x7f0000000d80)={0x1c, &(0x7f00000008c0)={0x20, 0x17, 0x4, "be09c194"}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d40)={0x21, 0x0, 0x2, "bd09"}})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000dc0)={0x11, 0x1c, 0x8, 0x7ff, "d635993b3153c5dd10ba18f02d032a17057d5b90cd69fbda9db602ae1aa2d318"}) (async)
syz_usb_control_io$uac2(r1, &(0x7f0000000f80)={0x14, &(0x7f0000000e00)={0x20, 0x6, 0x94, {0x94, 0xe, "32a6ed45a54c5374ac7afffd5ac36f5e0409801e68ab4cbe8a4222848c169027a4435c2a88783627dd119b313219fca69e82f653279291565ea562e0f2a9e28be0a75546df52113da4bb87c37e1ecf16c365fdb9d31eb248bd2cf6f5aa80d78c5c6aacb84332be38dcb133e62e61f98b92eb14f912e9b211451b9bac32b692377241926154b3a28591af00e2c07f6e70fed2"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "423ee6987d9ccefb581696ec91b3082baa4fd0d007d5af9663a35fc7a2bf3ad4d04f0a279bf1d048dc93c0b88f35b65e236502872c0dd529a79db3e9b97e4e9a89c1080a51c3509c5dbc8f1f901c6811e9112be621ef4c2efe765463a2d81368c37e0008599082152b402fc496553fc90463f84f3cd95d91252a"}}}, &(0x7f0000001200)={0x44, &(0x7f0000000fc0)={0x20, 0x10, 0x77, "038032d5f4207b2f785e59839c4d84e98604b7c2f3c8b1f2ae90a6e6cb16776266297cb4d405ba34c4c81a16ea0683537c788bda786221da854642e272e46953c5a03ebc084d646242f4a6e75034afe2929559b18a249038340b8f5b571e01ddfaa078332d26ad12954b35caa8576045ac9a60f73f5deb"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000010c0)={0x20, 0x81, 0x3, "dca71b"}, &(0x7f0000001100)={0x20, 0x82, 0x1, "c1"}, &(0x7f0000001140)={0x20, 0x83, 0x3, "7f3474"}, &(0x7f0000001180)={0x20, 0x84, 0x2, "da6f"}, &(0x7f00000011c0)={0x20, 0x85, 0x3, 'mxv'}})
r2 = syz_usb_connect$uac1(0x5, 0xa8, &(0x7f0000001280)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xb3, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x50f, 0x6, 0x3, 0x2, 0xd7, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc, 0x4, 0x2f, 0x7, 'cB', "34d7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0xc9, 0x2, {0x7, 0x25, 0x1, 0xc, 0xc, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xaa, 0x1, 0x8, 0x0, "753edeac3337079a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x2, 0x7, "d69c4ea03227"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4f, 0x6, {0x7, 0x25, 0x1, 0x0, 0xa, 0x32}}}}}}}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x310, 0x8, 0x1, 0x3, 0x40, 0x1}, 0x57, &(0x7f0000001380)={0x5, 0xf, 0x57, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x0, 0x3, 0x3, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0xf6, 0xf00f, 0x3, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x8, 0x3, 0xed8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fc6060f6f680119b98a4b1327a4c09bf"}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10, 0xff0f, 0x4, [0x7f7e80, 0xffc000, 0x30]}]}}) (async)
r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000001440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xe6, "", [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x6d, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x3, 0xf7}}]}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x201, 0x8, 0x6, 0x81, 0xff, 0x6}, 0xea, &(0x7f00000014c0)={0x5, 0xf, 0xea, 0x3, [@generic={0xca, 0x10, 0xb, "5919b35ca5a796942df595603bc0076567921c4205a324f40537b5321e00eaa9c8e5d77be723896ac906f82213ebf65b84dab398aec2206ef53fad1d59c8759cfdfae024c6310a8f9b543f97777baa08c547271c1152a2497501f7e43f6ef0e55439ff8e640f40065d75f4edcf4a27c111681734a1602e6ac9488dd771107dc8a0ef6570d8527e7202870430a45c00a7874bc71628e0a827c9a782aeeff5826e7a9d46bda255757d1d843778054407de1c66e39ddb8030e5b25023b8a66d65f1f292280c397046"}, @ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x10000, 0xf00, 0x1000, [0xff00ff, 0x0, 0xc0]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x2c01}}]})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001640)={0x4, 0x10, 0x2, 0x7, "6d71e8305b23c3afa2434b6f020e1d5c3efbf1252cec26b51b0b1e4982b72d17"}) (async)
syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x1, 0x40, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "356471f6efd1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x99, 0x7804, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x8, 0xe}}}}}}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x250, 0xf, 0x68, 0x4, 0x40, 0x12}, 0xbb, &(0x7f0000001740)={0x5, 0xf, 0xbb, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x10000, 0x0, 0x3, [0x0, 0xc0c0, 0xffcf, 0x3f00, 0x3fc0, 0xffc000]}, @ptm_cap={0x3}, @generic={0x7b, 0x10, 0xb, "4e6b8bd0eaf52212d1c1910c36241cb21c592fdf2d56ce6ab9c6c8015393073f5a4006d71f0511ba95929e2be5fa40cbd1dc018d33449bdae1ee025683d520490227a0abfe852de8c8e7943a0d329fb93221d39cca0dba94c591d7716608673a9ef878c15c138900552f84723315cd292ca9c1bcfb3c40d0"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5ee54a4de58193b613fa4b82f21dbd33"}]}, 0x6, [{0xad, &(0x7f0000001800)=@string={0xad, 0x3, "f606f89167e1d4bb856466d87a97b94a319dad4078b2d1dafbf427a3d1bf0ed5049f340dbc722c72da481406ee773259f8de137ba1b97be8da162375a1ebeda918e06f4c5b72c69b62c5b84325f20fbe83077f9cd92b9499b82949d7653f90813607afe29aed99e98ea5cde69e5c526e4a781bf629aad456460a4e2611cb0fc44a6fb73e33793d9147df61be9c7b4e2f65ebc7f7c1ba27807f2ef4754c2521a2bc3fd2c19b6e49d2139d29"}}, {0x45, &(0x7f00000018c0)=@string={0x45, 0x3, "3dac05a20a1e1ee4e8cacd6eaa03b2ce514b55df1781a18d30f8fe68864493badf5ed45c1c6481834ebd4b1a93a3207ffa5a7d121f3e05e18ee2b51de00b77b257fdc8"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x1007}}, {0xb7, &(0x7f0000001980)=@string={0xb7, 0x3, "53b13728a903937d2ac71070161adb0177a3df779e639bfa54218a33b66523260985ff00f3b5aa45f2239494381bfe1e996e992c09e3b4f0b1402b6392ba642342d14412826ea517f4005b4ac17198829b36ff54d3d20292c0b3fcf63871e009400f90434e4cbb6303d01aee9517f3a81b237bd37d942b98ff16a7c8a4d6f66009941e8fafcdfb5ce322d8ac36cde24bd8b3b0ecce7bb21bff270981e7114982096d164e800d2acc1d5a431e9f4c7d15a2d88848ff"}}, {0x4f, &(0x7f0000001a40)=@string={0x4f, 0x3, "ca6b62728ae223abd4dc65c6f854307ba63736583e95f9d4e1230de7ec4da6be3f4c512e47b39b612498249c5e70f889c2a9fe52f2b2a8313990ed1b3e053946ac5fbfb6ab1350138d38eccab9"}}, {0x7e, &(0x7f0000001ac0)=@string={0x7e, 0x3, "15d9ad1c0e819a000f3d3ea1afca804292e9b6a60f3238a40875d40102bc5c292c2f277f39938554307727dd5ac04dc13efad8fa5ada3f36a7f2055eacf4848948dd074aa4d588570dcef09834b234beafef2d3501913df7e63bb4d64d451862ceb309995471ac3e83c6ff8c3dfec4419166d7017e20c2b0e1390658"}}]}) (async)
r4 = syz_usb_connect(0x2, 0x407, &(0x7f0000001bc0)={{0x12, 0x1, 0x0, 0xa1, 0x1e, 0xd7, 0x10, 0x1b3d, 0x18c, 0xd141, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f5, 0x1, 0x0, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0xe, 0x6, 0xd, 0xae, 0x7f, 0xab, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x4, 0x6, 0xff}}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x40, 0x1, 0x4}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x8, 0xff, 0xfa, [@generic={0xfb, 0x2, "71b8bfdd5feb60ccefdf27bfe02edfc37eaa182e4a60ee910c0124da56855179a744bfd247ff34ed036750b62dbee8a203de1e0550acb2d708990a5c08b9f4e3bd8b65655bfbdcfe315ba04b1b5f45234ad88bf1a5d9e008db5b813508f8d878cec8f1da121e53729ff32e0bf2b0d292fd5d90857170184ccc949629b798363df17633b68ffafd15f5a0b1687c78a108fa6dba5a5305f44667f33bbbae2cb3592632a5164468d1d1c3e3a6bc3c8e80c51aa4e9ada83112ac5dcc563244a4df2c396d4861d9716ffdd3bdceec54ef8424bdc24093fd020a301114145c6051e86f85b25470b303fa4fcdf9bab274df349657049b601aecddae70"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0xe, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x9}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x4, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1e, 0x2, 0xfd, [@generic={0xbc, 0x3, "65825522c391499d2eac60b8e99af05be443ec2ca2a71208f3451527da3c3f6ab51410558ae333fa3a53c257817bea2bc8f4c28e96d2ae3d1f039bfbcbbb701adbe5a1082445453213288046957a1089ee962a693b028d13c33eaa3492b6adb14078913a273378184b64c18c5c90a9f6f3cc15d90aa8d50ec40b3a0b47180326ccbdaf3cb4c9a1f791d966be6cef46ae1b7866e51b37f554533c0e37025687b0c9f971169c00e4854a97ff19c2714ac7e0ea441663a92d2d3c58"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4e, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xa6, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @generic={0x23, 0x365a94ed5bde557, "048396d6e4cdcd511fe706ed5b4315c05624c08a47735cf4122f814a6a18f1db41"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x5, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd9, 0x7}, @generic={0x57, 0x7, "edf044a853a9f27595c9906d0aa11e917bb69729feffec48b94b897bfa7798463dc2c2c18c73098baa18c76bd04e75c4bae0ee03b5228b37a48e5ba85d3a09a3d0f59f8a0c295612db4c49249b06d77d2e253c9aee"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xce, 0x1, 0x8, [@generic={0xc7, 0x21, "896a072cc774db17dac1fe6f7732107560e21011ce8ac8f50167cacb208ffd89e2619e495571e5380b920a80ef1997376334e2c390addcb0ed6d139ed3022aef6a33d40c89f14cb2596a61a0c5b7fea4ffdc4340181814af2a9467c65815deaa5b5b6700e1613502cfcb2ec0b4de7b0b7d89ec0f63c4c4cd5b37d2b4b24fd331b9fcfc2da30e89dbdee4b4c57e888b5b85e7f65577392549033b53ee9e4967c0287b6d4a945f187f03b96766503348cdaf0a00e7a3104f23cf8a88feed3cfd695795e3a889"}, @generic={0x2e, 0x1f202681669b21b, "947dfee754ec3ec162ac4bf57f898bbac7c95048fc509d7867c89d2b9cee23d26fe376f916787d0db1753e35"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x1df, 0xf9, 0xfe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x6e}]}}]}}]}}]}}, &(0x7f0000002140)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x201, 0x2, 0x3, 0x6, 0x10, 0xfe}, 0x1e, &(0x7f0000002040)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x1, 0x1, 0x6, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x3, 0x6, 0x4, 0xc}]}, 0x3, [{0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x446}}, {0x9, &(0x7f00000020c0)=@string={0x9, 0x3, "ae36bef3b25490"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0xc0a}}]})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002180)=0x4) (async)
syz_usb_control_io$hid(r4, &(0x7f0000002380)={0x24, &(0x7f00000021c0)={0x40, 0x1b, 0x56, {0x56, 0x11, "8a3607881981575fdea820e3dba42176ee4e35eb13d6e2f35950e6db53ecfbf4c172ba271e409fc02eff98638c1e6a52a64b2db7a41df86e2d06552791e5989ed2b098c518f44250b5f9565dd36b4fb0053ba01e"}}, &(0x7f0000002240)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "dcb8133578498e348cc3e1944b9ee7294288eb22c2212588e6bd5c7739a2a9b97b5ab8dc0e16f6d0c0ec07c80b2210116b187689234a352bc96d5e1c4ad2d54c8f6c6377da22e874ef6a247e71707cc810bad3422dbb2adde81221793dc305084bb1b8ac5b37a8c24589d009ec4dee50761f482bbfaa0315185563e11dbf14aae2733d87751c1c63f132515b59689498c1a2884923a06b25045ab53a31623693a570fcb68596"}}, &(0x7f0000002300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, 'VF6Q'}, @main=@item_4={0x3, 0x0, 0x8, "564d1ba5"}]}}, &(0x7f0000002340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xaa4}}}}, &(0x7f00000025c0)={0x2c, &(0x7f00000023c0)={0x20, 0xe, 0x51, "e05fdcbce3ba6fe959549240cade107d4f3d0962a55048eeced25338e49a1aa6d542af6b909923161e7dcdf82a162b519d501d15201cd5938e628d93d382267e22a07eeb96078ee1cee620b0604222d6a7"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000024c0)={0x20, 0x1, 0x99, "7b3dc8a2192c94f08171be69a983cc3b7aa5d94639d03ea9f3c5f52380f53ed399e356e8181f455ee4f958d6af6237455d2f5ad586ae900202e8980e9f708f9c0eb19e5ac694c348322217974b561eef198a63601a3ad5163961375bc14fc704f40033e76f6a9653031179e19708a1f670cd5e667b89b5ecd5913097b90323628c042a03442e3b206b17b79c9cf658e81faa2a306a73769f80"}, &(0x7f0000002580)={0x20, 0x3, 0x1, 0x7}})
syz_open_dev$evdev(&(0x7f0000002600), 0x3, 0x6000) (async)
syz_usb_control_io$hid(r1, &(0x7f0000002740)={0x24, &(0x7f0000002640)={0x40, 0x11, 0x7, {0x7, 0x1d, "c1517afd07"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f00000026c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x1, '@'}, @main=@item_4={0x3, 0x0, 0x9, "8fde6697"}, @main=@item_4={0x3, 0x0, 0x5, "030006e6"}, @global=@item_4={0x3, 0x1, 0x6, "82d1863b"}]}}, &(0x7f0000002700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x40, 0x1, {0x22, 0x8ce}}}}, &(0x7f00000028c0)={0x2c, &(0x7f0000002780)={0x0, 0x30, 0x37, "216c4650a6469a98cb0d0aa91f0b88052631fcd4858f0221657df5ece4dbc28167f4ac4cd509a5fa94aad1b423d20a9b4622bc5ec4577c"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002840)={0x20, 0x1, 0xa, "85f5c2df1fe730226c8e"}, &(0x7f0000002880)={0x20, 0x3, 0x1, 0x1}}) (async, rerun: 64)
syz_usb_control_io$uac1(r2, &(0x7f0000002a40)={0x14, &(0x7f0000002900)={0x20, 0xa, 0x8b, {0x8b, 0x6, "18b213fb4c76dee4202531cdd4c23ce0a08018c13220712734ab0f752d9ece152f90b387628228ac5a810032324539f3012f267dea6b3fdd0ae14928c9cb37e3b60967435086a45a9a5cd6b923fbe9e7fcee8b01cb8e9a182ca86eeee4e78771eed6affd44a343d4918a7856cad843b6521d12cb6beb2ff5a12199fdd7d9308d080f85505a2382cbd2"}}, &(0x7f00000029c0)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "ca74479a83fee0ab88f7cffc44b2006487e14fea8c52aefefb58933556c23e0442eed415011980839323e69f6fb1163d26413be61c14b299bf8acd52a962a5a47e9d0ad47d09b661b125"}}}, &(0x7f0000002d00)={0x44, &(0x7f0000002a80)={0x40, 0xc, 0xa8, "156e8ed07f8f77cd301e2ca676c2dca6b5c119202322646e8320d3f5e0826972de2932357ae42e14303f1896871ca94e4f8758c5b72dd3c4458f9b461b0acdad07b2a2bfeeae33d8baa2f81973beefa8ce99df49f777591b51ef63246ca29c1d6abc40ab597affc355437ed1acfb28e8034493f8c2c09b3f7d0534170c6c396ff6a1e640ed80c586a8267a7ddbb306ce4cf46e87a81733544c51a8dcadfce0da95e18fb6f29c9604"}, &(0x7f0000002b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002bc0)={0x20, 0x81, 0x3, "7afc4c"}, &(0x7f0000002c00)={0x20, 0x82, 0x2, "7cb8"}, &(0x7f0000002c40)={0x20, 0x83, 0x1, "86"}, &(0x7f0000002c80)={0x20, 0x84, 0x1, 'g'}, &(0x7f0000002cc0)={0x20, 0x85, 0x3, "4062c3"}}) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000002e00)={0x14, &(0x7f0000002d80)={0x40, 0x21, 0x15, {0x15, 0x1, "f0d823671a15278c9b0083197bd35aab8c7f4d"}}, &(0x7f0000002dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002f00)={0x1c, &(0x7f0000002e40)={0x0, 0x17, 0xe, "227837ef8a187cf3611a002b06c4"}, &(0x7f0000002e80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002ec0)={0x0, 0x8, 0x1, 0x2}}) (async)
syz_usb_control_io$uac1(r4, &(0x7f0000002fc0)={0x14, &(0x7f0000002f40)={0x40, 0x23, 0x17, {0x17, 0x30, "5cd7af9ae72d681194a16fdd1d53a2c991c2a71fd0"}}, &(0x7f0000002f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000003240)={0x44, &(0x7f0000003000)={0x0, 0xaadaef904d72f326, 0x70, "e6b6aab8c74764184375d51269b63ea8035b30e4a7479ec7e864b92990955d7b5ea6b530cd9e5ae11ed6914f63ae6355be550b31621588f6f94eef88da4a788d4053d7022be64b1a72ec70001b66623b5f19860623f2e2f2678de1f04d2d75e634ddc4d1db4746df7ec20ff49c47c284"}, &(0x7f0000003080)={0x0, 0xa, 0x1, 0x64}, &(0x7f00000030c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003100)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000003140)={0x20, 0x82, 0x3, "d5bafc"}, &(0x7f0000003180)={0x20, 0x83, 0x3, "b4fc84"}, &(0x7f00000031c0)={0x20, 0x84, 0x2, '.\a'}, &(0x7f0000003200)={0x20, 0x85, 0x3, "ab5ac7"}}) (async)
syz_usb_control_io$printer(r3, &(0x7f0000003380)={0x14, &(0x7f00000032c0)={0x40, 0x23, 0x76, {0x76, 0x11, "804e4ce8b6ae8db2c91cbfe1352f01458647912f185675b614230d17b3b43cdf9cc12290574d91bbf29348f85dcff46595fa1442a9e0b9cfc3feb766b21f5629a132c1309910511eec01bd93acc9e80f77f750c37994cff5e564105edc962d2139268e4b78efba417de67dc09ae34d8ef697261f"}}, &(0x7f0000003340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000003600)={0x34, &(0x7f00000033c0)={0x0, 0x17, 0xe1, "823c69064ed8c9ca200ae422d5434667e2f69c68f164bf7a9f4850075a1e45eb00dfbba5b931c6822e0bf62786604fa18b8dab7b1b4ce9310b4b3ee7c5bfb08fba22f0e8ff56ba42f6d0d1fa758b9243e2797283afd8eae959216b9b8b54c048d6b978e83fb219c78a5514c73bd63f65418aa4a72c56219a55bf1a9c9a0afcac475615f3506cd7fa3d5dafa6ee1f8409e7750f078f48b29ad0112e741cd6d07c20479b5422c16a61ed138c9a45f87163b8478e93cb11d8a24f112279616a518e58df0c8286b5fbf1a67a30553a68899b6a9bdf62d894d7cfac0d832a07c97e92b4"}, &(0x7f00000034c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000003500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003540)={0x20, 0x0, 0x2b, {0x29, "0bd8397837f5c3e6f1122882f75db7cd2abeeb81b8149fdd511d709d4685e41022a26f59740a9b0cae"}}, &(0x7f0000003580)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000035c0)={0x20, 0x0, 0x1, 0x3}}) (async)
r5 = syz_open_dev$hiddev(&(0x7f0000003640), 0xb762, 0x402003)
ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000003680)=0x2) (async, rerun: 32)
syz_usb_control_io$uac3(r4, &(0x7f0000003780)={0x14, &(0x7f00000036c0)={0x20, 0x21, 0xf, {0xf, 0xc, "3cba6d487c541cc68d93b770d8"}}, &(0x7f0000003700)={0x0, 0x3, 0x49, @string={0x49, 0x3, "9b9e995fa9ff98f30adbeed1df5cda7f4464b38f1acea92e197c0a447bc1f9708a0dcc42c8168578a40aaf8d48f07169c3ca4945a0bffebb7f9e9edbe9ae52565545a6c8abd6ab"}}}, &(0x7f00000039c0)={0x44, &(0x7f00000037c0)={0x40, 0x15, 0x22, "e8f53c65865ac09808961d55f49fb2435e3e34a7d7e8d39091b9861c16a7d007d6c4"}, &(0x7f0000003800)={0x0, 0xa, 0x1, 0xbf}, &(0x7f0000003840)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000003880)={0x20, 0x81, 0x2, "249e"}, &(0x7f00000038c0)={0x20, 0x82, 0x1, "10"}, &(0x7f0000003900)={0x20, 0x83, 0x1, "98"}, &(0x7f0000003940)={0x20, 0x84, 0x1, '6'}, &(0x7f0000003980)={0x20, 0x85, 0x3, "1204ff"}}) (async, rerun: 32)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000003a40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x58, 0x40, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x1, 0x4, 0x1, {0x9, 0x21, 0x8, 0xc7, 0x1, {0x22, 0xdba}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x64, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000003b40)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x250, 0x4, 0x6, 0x19, 0xff, 0x7}, 0x2d, &(0x7f0000003ac0)={0x5, 0xf, 0x2d, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x2, 0xf00f, 0xf, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x2, 0x9, 0x1, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x5, 0x4}]}, 0x1, [{0x32, &(0x7f0000003b00)=@string={0x32, 0x3, "952e064134ba05a45d8bbf5d06361ec201981bdfdea9937e05c2337f4ea81e95778875eaea60f4b1f3fd56d8c4826dcc"}}]})
syz_usb_connect$cdc_ecm(0x3, 0x130, &(0x7f0000003b80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11e, 0x1, 0x1, 0x5, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x400, 0x5}, [@mdlm_detail={0xd4, 0x24, 0x13, 0x9, "b2bd4434c057b9ae9575dfbf2633c88f101be3cae80efadf23e6139ab8fa38aabd1dfa679faf0a5188b05d4c28dd4120a80107bb1357d529cf063a20f72d7fd366cb4412f13c4faa849e98530487f2b954846b5d6a64f3f68d8977f4fb735dab0891c040d1b121221295ce2c6485bfa4a96b2f04a9808a7236accfaf899a710dc0611046fdc7487265806962dd8c301b51168d533569d29ff1a46bd9cfd1d7587baba901ff9bcc5ad79b17dac192189cf7e702c27ddf9ef0be8f6537b9942932a098abb5e656552f5e70a9edc3a9c40d"}, @mbim_extended={0x8, 0x24, 0x1c, 0x565, 0x9, 0x5}, @dmm={0x7, 0x24, 0x14, 0xcc9, 0x7fff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xc, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000003ec0)={0xa, &(0x7f0000003cc0)={0xa, 0x6, 0x110, 0x8, 0x6, 0x5, 0x8, 0x5}, 0x24, &(0x7f0000003d00)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8a, 0x1, 0x2, 0xff, 0x69}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "6a127c948a0054223f52a88d94d2b1c3"}]}, 0x4, [{0x51, &(0x7f0000003d40)=@string={0x51, 0x3, "7fb24d64d1e53a22264435c2032889812417847a5863c73eca6683d1853fdfe6a50998c41644be27fde5569b182b203f979ff0bac76527157d59028c7dc8a4246110fbf336899dbb33e32d54840891"}}, {0x5d, &(0x7f0000003dc0)=@string={0x5d, 0x3, "2591a2d44b155c966419764e4a4e692113ce7d36df462c4ca03f421eaed4820ad06ef15913fb1df9062a299eae05671bbdb95ae8a64f1a1c7b2afbad66367a36aadd9dcdae30a92d0a622110d6c4b2b9a22878b6620a97b4e3f706"}}, {0x4, &(0x7f0000003e40)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x3401}}]})
ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000003f40)={0x1, 0x3, 0x7}) (async)
r6 = syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000003f80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x1, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x12}, [@selector_unit={0x8, 0x24, 0x5, 0x4, 0xb, "f566d9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x8, 0x7b, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x400, 0xe, "17cd7b54db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0x8, 0x6, 0xfff7}}}}}}}}]}}, &(0x7f0000004140)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x201, 0x9, 0x80, 0x2, 0x8, 0x1}, 0x1b, &(0x7f0000004080)={0x5, 0xf, 0x1b, 0x1, [@generic={0x16, 0x10, 0x3, "0725c6cfcc2e6484a018ac69d5ac4fb22adf5f"}]}, 0x2, [{0x4, &(0x7f00000040c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000004100)=@lang_id={0x4, 0x3, 0xf4ff}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000004240)={0x14, &(0x7f0000004180)={0x20, 0xd, 0x43, {0x43, 0x2, "27fb99334fef7caecc3193ac8315bf58ea5515a75d40e6af277eb7eddd793b7271aa671dab5a6f31be082e81eae5dbc1e57e56961d75daec5de7f866477fc0b98b"}}, &(0x7f0000004200)={0x0, 0x3, 0x11, @string={0x11, 0x3, "33809c0a160706edb52cfe64d04f8a"}}}, &(0x7f00000044c0)={0x44, &(0x7f0000004280)={0x40, 0x31, 0x66, "87e05a58bb56716480d51b73bcf786878a9987b48a7180598b8ad5db32c4d394711d74a2061f650d01f6b3205d733f81fff6c71e98f74dfe49114bb1b1e13ff464dd8fed4af76cd3bd394266fc2cb9d8e8a07bb0bcf599c4e03d8649e390848eab722ade9a7f"}, &(0x7f0000004300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000004380)={0x20, 0x81, 0x2, "6ea6"}, &(0x7f00000043c0)={0x20, 0x82, 0x3, "73a61a"}, &(0x7f0000004400)={0x20, 0x83, 0x2, '}P'}, &(0x7f0000004440)={0x20, 0x84, 0x1, 'r'}, &(0x7f0000004480)={0x20, 0x85, 0x3, "2f2a04"}}) (async)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000004540)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x98b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x2, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0xa, 0x5}}]}}}]}}]}}, &(0x7f0000004900)={0xa, &(0x7f0000004580)={0xa, 0x6, 0x250, 0x6, 0x2, 0x9, 0x50}, 0x1d, &(0x7f00000045c0)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6e, 0x93, 0xb7, 0x4, 0xb1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x4, 0x4}]}, 0x8, [{0x4, &(0x7f0000004600)=@lang_id={0x4, 0x3, 0x4ff}}, {0xc7, &(0x7f0000004640)=@string={0xc7, 0x3, "30ff1e3172e44a9836fa39874ab49aab02cc80cbe8a61eb2d4b3eff8d24edcf77bbbd88c4aff0da083793fc8907e3b455dd51b2bdbbfc5d905b96fa749ba7e33878911dc702a12282727a648e23406b7e8a07a48e08aaaf26d6cf184cd5d67fc0078e323669823617fd7d2a434d27e1e0aea5e68d7a01f726f64eec10f5ccddb2b9912fd4ef32da8b0200decf1ca787afb6a7331454ae0061fa92f7b0eada6ecd886adbfb2aaca34df218b850a6445304ca73f47d4c4d1216d4f5fa346b1d3b81e3e4911ce"}}, {0x19, &(0x7f0000004740)=@string={0x19, 0x3, "f0edee626bd76291acfe2b8d633a26ffe30d395cb1c52c"}}, {0x4, &(0x7f0000004780)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000047c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x64, &(0x7f0000004800)=@string={0x64, 0x3, "e6d82f43a845bcc651541fddeb4e58e1e4e5505b1cc3386a74140f9107af787af78a052f1e8cfe3327f3603354165bbec21a8fc9e4a4fcb74473877ec007d6153b72506b13103ab79cfbaea914882cc9c8379849666828f3e8e34e63fa8a71620661"}}, {0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000048c0)=@lang_id={0x4, 0x3, 0x449}}]}) (async, rerun: 32)
syz_usb_control_io$hid(r1, &(0x7f0000004a80)={0x24, &(0x7f0000004980)={0x20, 0x22, 0x31, {0x31, 0xe, "c9720a8c6b6a97b9aa108d2d784102598e1704f795e0a01be6b23ad1b9dc8c72d6137723178124da193f5f0eb0c8ef"}}, &(0x7f00000049c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000004a00)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0xb, "ac3e1a1a"}, @global=@item_012={0x2, 0x1, 0xb, "51e5"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_4={0x3, 0x1, 0x5, "84df7fb4"}, @local=@item_4={0x3, 0x2, 0x1, "8ed0fa9a"}, @global=@item_4={0x3, 0x1, 0xb, "3172f4a9"}, @global=@item_012={0x2, 0x1, 0x3, "ad5b"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f0000004a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe9a, 0xf, 0x1, {0x22, 0x861}}}}, &(0x7f0000004d00)={0x2c, &(0x7f0000004ac0)={0x40, 0x17, 0x7b, "cdc9d11bb4a9623d6a9ed6e34d4b03d2ce49377d24e2077bed4f557af034e45d74c41bd94210d11ffcfd0e150d6eee2b898f947846549dacd5d4955d0cbcbc61d7723d991aa3e47ecf40f5f7bde72acfbbaab805438a58ba5b443dafb705b76862869573786fe993e6e7e84b130d4b8c80a6bd1146f8da62f86024"}, &(0x7f0000004b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004bc0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000004c00)={0x20, 0x1, 0x7e, "4dbd917fe0b2fe80cf656258a778e62ca476702b5d240445c11599d79224e31113f4dccb8b5da0c06e81c13a5fae33bacd69a91dffdaea28a8a767d3dbe4be34d69d7da086601f749c1c4a03379953fe79b49dd4154575662c03d27e7d46d2c6172e62b1db9d49ec7824157900a5b6b2cd55b10b64fe6fb1036c927c5f08"}, &(0x7f0000004cc0)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 32)
syz_usb_control_io$rtl8150(r4, &(0x7f0000004ec0)={0x14, &(0x7f0000004d40)={0x0, 0x1f, 0x43, {0x43, 0x21, "d40a8a71121ea6151e66a5811999a864e19ce0fdc7f59061d217209a8dcd63fe48e03514b47c767dee01e5f61c0971579a9371f83fec59cb8de4312abd2dbcdfd8"}}, &(0x7f0000004dc0)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "af0e97bcef8607c715bcd375700bb8478004e7bdd275064e370ee083c99f1158f0e67fb2deb9c54b1d993baded04646ee97bb7c88f9bfe6b2527040a65e56aa10ce1c2213e40dc5434fc0b198ac02ca47d2040165b0f02c1e6c6e18cadae68ee812f25240c1d3ed16343119199959c26f3b7effc9db360e42387fd9f97b74616de94b7890e7cb986dc128cac872e9172d9908b1975d1cdf54158916463ef2d8eb8dd562bb31795f140ba0b0acb732da26eed12ab0e19c2cfc39a4e8f3829ef8297d6e625a39419024bfba996e9f1c0b2ab42f2236be78532be8bc65a22c4f6d3933a9ca0e1f1b54276c53bb27e0cf7"}}}, &(0x7f0000005080)={0x2c, &(0x7f0000004f00)={0x0, 0x8, 0x6d, "e3c77230213d2802a84c04003e8dfed40f95e3d7a59d39214b83ff4e1bb369a9490568c5033d66bf30100f20f21b8db0c3be97ce3f1bb63a5c97bf09d6755396f12bb41c73a1e31a4f240e77da0ebbebf14e307eae576d43c7fb51224d0f5e0479af2fd281488005a824156785"}, &(0x7f0000004f80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004fc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000005000)={0xc0, 0x5, 0x3, "a02a0b"}, &(0x7f0000005040)})
executing program 0:
syz_open_dev$hidraw(0x0, 0x1, 0x4000)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0xda, 0x5d, 0x20, 0xeb1a, 0xe361, 0x68c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9e, 0x0, 0x9, "", [{{0x9, 0x4, 0x78, 0x3, 0x0, 0x91, 0xfb, 0x80, 0x9}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x49, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x1e, 0xbe, 0x5e, 0x8, 0x499, 0x1051, 0xe2e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x7f, 0xc, 0x60, 0x3, "", [{{0x9, 0x4, 0x1d, 0x7, 0x2, 0x8b, 0xb5, 0x62, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x3a7, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x5, 0x2, 0x9}]}], [{{0x9, 0x5, 0xc9586b58950f55e6, 0x3, 0x20, 0xf, 0x9, 0x7f}}, {{0x9, 0x5, 0xe, 0x16, 0x200, 0x50, 0x2, 0x7}}]}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x6200)
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0xba, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a800030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c24020203020250800009010f24060502020700"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f00000000c0)=ANY=[@ANYRESOCT])
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0xc020660b, 0x0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/109)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef3e95405c0a1fbd1a53010203120902120001000000000904"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0xc0, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x8, 0x20, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x3, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x30, 0x7, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x9, 0x4, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x6, 0x4}}}}}}}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0x5a, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff19}}]}}, 0x0) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) (async)
r2 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0)
ioctl$EVIOCGBITSW(r2, 0x5460, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7f, 0x40, 0x8, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x3, 0x9, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x30, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x3, 0x4, {0x8, 0x25, 0x1, 0xc2, 0x3f, 0xcc, 0x9}}}}}}}}]}}, 0x0) (async)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
executing program 0:
syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x200000)
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000540)=""/236)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x64, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x3, 0xf0, 0xb7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8a, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x5, 0x7, 0x2, [{0x4, 0x2}, {0x96}], 0x80}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x2, 0x3, [{0x1, 0x9}, {0x6, 0x45}, {0x8, 0xf}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x401, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5, 0x6}], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x7f, 0x5e, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x8, 0x81, 0xf, 0xff, 0xe0}, 0x32, &(0x7f0000000480)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f218439fca11198f8a9e052834014c53"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1a, 0x5, 0x6, 0x1}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xc2c, 0xf00f, 0x8001}]}, 0x3, [{0x55, &(0x7f0000000700)=@string={0x55, 0x3, "2796193b300764b837b63122397eed1adc1e85389e3fd3c393e9732d6765bb26c3164de2911f86b669a259d5c50c6b0fe3147cd066c46bc477fdba9ce72fa8614cea2ee719b5bc198034a6a208ac55fc47a018"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], &(0x7f0000000300)={0x0, 0x0, 0x131, &(0x7f00000005c0)={0x5, 0xf, 0x131, 0x4, [@generic={0x103, 0x10, 0xb, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0x30, 0x2f}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b1a1d31e4dcab9ee264aff1f43975b1f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x3, 0x9, 0x1}]}, 0x9, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1421}}]})
executing program 3:
syz_usb_connect_ath9k(0x3, 0x48, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e472, [{{0x9, 0x2, 0xffffffffffffff63}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_usb_connect(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000000280)='L', 0x1)
write$char_usb(r2, &(0x7f00000002c0)="324ce6", 0x3)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000880)={0x275, "9826d64f56c135dd5eaab725d795c471016351ab53d848f4111490837ee0ffdd28535f025d55b9a425a05a03e02e803ee9e7d88b5b41af46114a67d4282a5519cfce93bba8fce1ad98ecc9b11621e2500a8108ef79dc46992726e8939ed58bdd510272efe522af8049a9ad485eac912978d465128df43947058b4dccef7d26ca82d70081951d9e7d16bc10506fd6f1e2bf0ca5f5938aad4338c164bcd6e16f23667f7f4c951dc60fdb468b48f069f900861ba244b5af614e0c5e0627bb520eca0e234a0a88d530f1d91f900b52f3e06c650c650d4d3057de44ad4cb963b963625721d65a1b764b06d43cf77261ee7bd63f6570dad67c43c67c6a152967c2a863faf38e3f6f138239abb7dcc4e499570101724863262c7df4a2e68eb479e7a7e8be51a7cb5f80e248a50e2316ce867f61c3d082a89e78688cd0fc75f3384fb3ab0f2090c40ad516d9f6321a5d4ca09b9efc64091c2151fedb9ed7a45f0f3b93b384e72a25903e5721d4d8cfa965483fefb9d899e8b0cf8a0e19b71f2c47f328a686495c29ecfd88be23c52097e1dc1bbc96fb34cf19a2eef6ec603bad8ac953ffe00786059ab762eb8c70a7722ee5cc2be833f2d54cd5f9f845a9c036a3dcc8803861566b7202d3aa85e9b49b397648bd33ed037c0f871bc038f19be13c47cc45ed076fccc393bca4a05ed43aa5ac85db3da28ad159e4920ec7cbb5ebdc8b84f87475d79acceb90398b1de96609e7d583f8f90c110cb9d25fd486ea42247e572f2121d75c9b6bdf896c412abf697797851565969bb955acef24e8ea97bbdf6cbb8be0529d604a5e6db8be03a92901991048b0e82510e741cf371bcbc113341733c4d3b460de562e5c8555fd7cf5d3ac9416d6927dfd"})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x191, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008f5100002400001020301090269000301650002080b0001013b20021904000000010120000924010b000809000409040100000102200009040101010102200009050109ff0303ff0808250182050002000904020000015c7926bac438cd079fa159ce32c8fb0220000904020101010220000905"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUSAGE(r4, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92})
write$char_usb(r4, &(0x7f0000000840)='3', 0x1)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0xc7, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x2, 0x75, 0x1, {0x22, 0x853}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12a37c050000004e240000d662f90e83e80500000000cb7900010902240001000000000000000000060084000921000040011e1800340209f9ff03801587"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x9, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
r2 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000002ac0)={0x14, 0x0, &(0x7f0000002a40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x20, 0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a530415002505750895017e020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 2:
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb48, 0x1005, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/1)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}})
r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000040580438010000000000010902240001000080010904000002030002000963567f000122eb00090581030100000000"], 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000040580438010000000000010902240001000080010904000002030002000963567f000122eb00090581030100000000"], 0x0)
syz_usb_connect$printer(0xce648357ddfb9663, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb1, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x7, 0x8, 0x10, 0x8}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x94, &(0x7f0000000200)=@string={0x94, 0x3, "8fe87df70edf27ef239703d5e609e20dfae513d407165e1c488ae37d3087209871783c1020c1a636745af51bd95208fd13d2bfd5835483dc4401842a1afa9116aae8c53a7e1cdea9476d3cb8c7e27e3fa5c6e935bff9fe2c7ecee4811ea5992191938e7e90bd4cfdaa8853890a14ed77e875ae7aac2953418b17db9f3f8aa7e521585a919cf4d09d5cd2af785212feeae273"}}]}) (async)
syz_usb_connect$printer(0xce648357ddfb9663, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb1, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x7, 0x8, 0x10, 0x8}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x94, &(0x7f0000000200)=@string={0x94, 0x3, "8fe87df70edf27ef239703d5e609e20dfae513d407165e1c488ae37d3087209871783c1020c1a636745af51bd95208fd13d2bfd5835483dc4401842a1afa9116aae8c53a7e1cdea9476d3cb8c7e27e3fa5c6e935bff9fe2c7ecee4811ea5992191938e7e90bd4cfdaa8853890a14ed77e875ae7aac2953418b17db9f3f8aa7e521585a919cf4d09d5cd2af785212feeae273"}}]})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b06, 0x0)
syz_open_dev$evdev(0x0, 0x5, 0x147403)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e15495e8d18ecc553aaf536f86d48add5317a5437000"/37], &(0x7f0000000980)={0x40, 0x7, 0x2, 0x73}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e15495e8d18ecc553aaf536f86d48add5317a5437000"/37], &(0x7f0000000980)={0x40, 0x7, 0x2, 0x73}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r1, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331")
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000040), 0xffffffff, 0x191981)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000)
executing program 4:
r0 = syz_usb_connect$hid(0x5, 0xb, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x306, 0xff3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x3, 0x0, 0x0, 0x2, {0x9, 0x21, 0x2000, 0x10, 0x1, {0x22, 0x588}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x8, 0x48, {0x48, 0x2, "bfe3f693f11f334e79fb48ca22198e44caa9efc93ff901c8a4dac73dd18ad2ae57b2e93767e3c73214ec6b070099e3596457a70e3e4b4aeb3d72923a72b34445d30a94025034"}}, &(0x7f0000000140)={0x0, 0x3, 0x29, @string={0x29, 0x3, "13943afd7b28dbd284cf3faac57c6d1519ff7f9f8706290a849578a6005ee03e90afb3e6b4845c"}}, &(0x7f0000000180)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x8, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0xd, 0x327}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x190029ef8c6a2412, 0xb, 0x8, 0x8, 0x40}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x7, 0xce, "ce0bdddb", "b48e64ae"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x80, 0x40, 0x3c, 0x5, 0x0, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x60, 0x1, 0xca, "67818ec60a5ebff77c495414ed1e860fd997414ef2888c1855f9e0f802d71dfb6f45d98e82b36c6b982a55f25ae996e1ea1a78da396b399f2f83fb5db055e44917b7a933efc5c0717fc5a3ed1c33c309b0e2f5b2174f6d42395699e1042ec484919902c77c603d9f28ad76b5cbbe5ca0976382b4833662d9be771fbc6a33986c234d2725f575c965f87b86471674cfe4b5692899068ef81b932a3af8cf04fadb7f3d29eef655d407d71b368bbda3aeb8c339e3251de8d7c716f8de80289c4c69b3c46d1256fc9b017fff"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1e0, 0x4, [0xf000]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xf}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "2ede"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @random="8e472f4aca2b"}, &(0x7f0000000600)={0x40, 0x19, 0x2, "856a"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x6e65}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x81}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0x6, 0x3, "cb49ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"})
executing program 4:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(r0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b7"], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000121ab40da0b21c83a390102030109022400010804100109044c1002ffffff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000000)={0x1, 0x200, 0x101, 0x10, 0x2, 0xc000})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240006720610060904f0e8cf34ba8e5968506a02b51c800309050102ff03ff1003080000000000000081"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x140, &(0x7f0000000840)={[{0xe, 0x4e00, "c43f504be96af2eeeb7a6ecaf47f"}, {0x1f, 0x4e00, "3c5fb24c72a51ab032256f9f32c8396df84fde473d4192eed1fbc26b8ddf0b"}, {0x2b, 0x4e00, "c4fc90529db9f008e3ade125579c919bf6e8fa7eb2c32be4eb3be046dbdfc51c6287f1aa6777c9b07bf69c"}, {0xd2, 0x4e00, "a7876098753dcf6d3881933afa679dfccf9b2db446e716a4ab155b30877c254c2efa94e683d16f678ee11a2211484c848fdf4e10e64b5e267c2c684e56dff4cb282ed97d39f1eeb73ae3f94203e870e59dc62765482542484dbebd102f6f0706b37aae2b5ce373848e9219f4e8169a113b670f44857b1a555134653fa1222cbf2b0e04d74e1fb5fa17b743a0586ade46b50bce99c2442512c847801be6cfa307ee3c427121bab7529917b33145b40fc0ef70cd672e4b25981dcec63168934087a4bb0e84377df4c167b3d3dbdcf29e234e10"}]})
r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRES16=r3, @ANYRESDEC=r7], 0x0}, 0x0)
syz_usb_ep_read(r7, 0x2, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x5, "26763d2290"}, 0x0})
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x4000, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]})
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250)
syz_usb_control_io$uac3(r5, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0x11, 0xc7, {0xc7, 0x30, "4498ce9b0576af2f3cef3ff7ffc9374005f08b584b9e85dde39ce8448d14595b0a13a638b2426eb114203fd835b7fac54faa4b4ee909c38d1d6c0c476656ac0ea7f41af7a98a6bb4b45239285deb3e05bfe050c5999408d84b6267583c6c5e3fb1b859c6611f209188d0a141e13e30bdbf4de64623aefc79410076e3c3ff3f32bea3effbdaaeb2dcd845ee257593244fef48d7cba74fc29823a9b683fef186d7ecbf30f86d7c1869f4b9533266e8c3c421af2226fe74369c513562d7b3ea224372a520b43f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x9, 0x3b, "399e96c5a02a3b8085a7b7f7405313be9745343fc01cdc4238cfcfabb59a698b33a6dbaa767f9a4673b76c37251543601df803ae85021d0e3fbea5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000540)={0x20, 0x81, 0x1, "10"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "50ad02"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "abaee7"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "3e2a1a"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "5a1a05"}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xf04260d11922b0cf, 0x3c, 0x5, 0x4, {0x7, 0x25, 0x1, 0x4, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x6f8}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003740)={0x20, 0x81, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0x90, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x630, 0x8, 0x2, 0xf5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x3, 0x2e5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x18, 0xb, 0xff, {0x8, 0x25, 0x1, 0x1, 0x33}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x16, &(0x7f0000000240)=@string={0x16, 0x3, "bfa2ed2c798915af0aa4c8362c2e44434d002cca"}}]})
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201de007e3af708b8071db2ae970102030209021200000000c0000904"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x24, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00f5ff009100000000005400"/22], 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_ep_read(r2, 0xd, 0x0, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$uac2-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_write-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_connect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201de007e3af708b8071db2ae970102030209021200000000c0000904"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x24, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae")
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00f5ff009100000000005400"/22], 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_ep_read(r2, 0xd, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$lan78xx-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_connect$uac2
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xf04260d11922b0cf, 0x3c, 0x5, 0x4, {0x7, 0x25, 0x1, 0x4, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x6f8}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003740)={0x20, 0x81, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0x90, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x630, 0x8, 0x2, 0xf5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x3, 0x2e5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x18, 0xb, 0xff, {0x8, 0x25, 0x1, 0x1, 0x33}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x16, &(0x7f0000000240)=@string={0x16, 0x3, "bfa2ed2c798915af0aa4c8362c2e44434d002cca"}}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hidraw-ioctl$HIDIOCSUSAGE-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect_ath9k-syz_usb_ep_write$ath9k_ep1-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSFF-write$char_usb-syz_usb_control_io$uac3-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b7"], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000121ab40da0b21c83a390102030109022400010804100109044c1002ffffff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000000)={0x1, 0x200, 0x101, 0x10, 0x2, 0xc000})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240006720610060904f0e8cf34ba8e5968506a02b51c800309050102ff03ff1003080000000000000081"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x140, &(0x7f0000000840)={[{0xe, 0x4e00, "c43f504be96af2eeeb7a6ecaf47f"}, {0x1f, 0x4e00, "3c5fb24c72a51ab032256f9f32c8396df84fde473d4192eed1fbc26b8ddf0b"}, {0x2b, 0x4e00, "c4fc90529db9f008e3ade125579c919bf6e8fa7eb2c32be4eb3be046dbdfc51c6287f1aa6777c9b07bf69c"}, {0xd2, 0x4e00, "a7876098753dcf6d3881933afa679dfccf9b2db446e716a4ab155b30877c254c2efa94e683d16f678ee11a2211484c848fdf4e10e64b5e267c2c684e56dff4cb282ed97d39f1eeb73ae3f94203e870e59dc62765482542484dbebd102f6f0706b37aae2b5ce373848e9219f4e8169a113b670f44857b1a555134653fa1222cbf2b0e04d74e1fb5fa17b743a0586ade46b50bce99c2442512c847801be6cfa307ee3c427121bab7529917b33145b40fc0ef70cd672e4b25981dcec63168934087a4bb0e84377df4c167b3d3dbdcf29e234e10"}]})
r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRES16=r3, @ANYRESDEC=r7], 0x0}, 0x0)
syz_usb_ep_read(r7, 0x2, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x5, "26763d2290"}, 0x0})
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x4000, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]})
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250)
syz_usb_control_io$uac3(r5, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0x11, 0xc7, {0xc7, 0x30, "4498ce9b0576af2f3cef3ff7ffc9374005f08b584b9e85dde39ce8448d14595b0a13a638b2426eb114203fd835b7fac54faa4b4ee909c38d1d6c0c476656ac0ea7f41af7a98a6bb4b45239285deb3e05bfe050c5999408d84b6267583c6c5e3fb1b859c6611f209188d0a141e13e30bdbf4de64623aefc79410076e3c3ff3f32bea3effbdaaeb2dcd845ee257593244fef48d7cba74fc29823a9b683fef186d7ecbf30f86d7c1869f4b9533266e8c3c421af2226fe74369c513562d7b3ea224372a520b43f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x9, 0x3b, "399e96c5a02a3b8085a7b7f7405313be9745343fc01cdc4238cfcfabb59a698b33a6dbaa767f9a4673b76c37251543601df803ae85021d0e3fbea5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000540)={0x20, 0x81, 0x1, "10"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "50ad02"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "abaee7"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "3e2a1a"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "5a1a05"}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(r0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(r0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r1, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)
syz_usb_ep_write(r1, 0x82, 0x1, &(0x7f0000002000)="03")

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r1, 0x1, 0x1f, &(0x7f0000001000)) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)={[{0x80, 0x4e00, "61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae5d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360bf44ef39627cc342d94"}]}) (rerun: 32)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
reproducing took 1h43m25.606360646s
repro crashed as (corrupted=false):
usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff8881140d9071 by task kworker/0:2/2995

CPU: 0 UID: 0 PID: 2995 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 32:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 32:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8881140d9000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff8881140d9000, ffff8881140d9800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881140db000 pfn:0x1140d8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000240(workingset|head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
raw: ffff8881140db000 0000000000080003 00000000f5000000 0000000000000000
head: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
head: ffff8881140db000 0000000000080003 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2995, tgid 2995 (kworker/0:2), ts 107680734858
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 usb_create_ep_devs+0x4d/0x2b0 drivers/usb/core/endpoint.c:149
 usb_new_device.part.0+0x15e5/0x1686 drivers/usb/core/hub.c:2738
 usb_new_device drivers/usb/core/hub.c:5833 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x51a/0xe9d drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 4953 tgid 4953 ts 88950874824 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 vm_area_dup+0x25/0x7e0 mm/vma_init.c:128
 __split_vma+0x19c/0x1db0 mm/vma.c:560
 vms_gather_munmap_vmas+0x1d2/0x1670 mm/vma.c:1507
 __mmap_setup mm/vma.c:2538 [inline]
 __mmap_region+0x4c9/0x3150 mm/vma.c:2861
 mmap_region+0x3db/0x6d0 mm/vma.c:2964
 do_mmap+0x12b6/0x1c10 mm/mmap.c:573
 vm_mmap_pgoff+0x1f0/0x390 mm/util.c:581
 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff8881140d8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881140d8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881140d9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff8881140d9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881140d9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff8881140d9071 by task kworker/0:2/2995

CPU: 0 UID: 0 PID: 2995 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 32:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 32:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8881140d9000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff8881140d9000, ffff8881140d9800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881140db000 pfn:0x1140d8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000240(workingset|head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
raw: ffff8881140db000 0000000000080003 00000000f5000000 0000000000000000
head: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
head: ffff8881140db000 0000000000080003 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2995, tgid 2995 (kworker/0:2), ts 107680734858
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 usb_create_ep_devs+0x4d/0x2b0 drivers/usb/core/endpoint.c:149
 usb_new_device.part.0+0x15e5/0x1686 drivers/usb/core/hub.c:2738
 usb_new_device drivers/usb/core/hub.c:5833 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x51a/0xe9d drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 4953 tgid 4953 ts 88950874824 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 vm_area_dup+0x25/0x7e0 mm/vma_init.c:128
 __split_vma+0x19c/0x1db0 mm/vma.c:560
 vms_gather_munmap_vmas+0x1d2/0x1670 mm/vma.c:1507
 __mmap_setup mm/vma.c:2538 [inline]
 __mmap_region+0x4c9/0x3150 mm/vma.c:2861
 mmap_region+0x3db/0x6d0 mm/vma.c:2964
 do_mmap+0x12b6/0x1c10 mm/mmap.c:573
 vm_mmap_pgoff+0x1f0/0x390 mm/util.c:581
 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff8881140d8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881140d8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881140d9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff8881140d9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881140d9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================