Extracting prog: 2h25m16.969160016s
Minimizing prog: 1h14m44.05512828s
Simplifying prog options: 0s
Extracting C: 1m5.844515489s
Simplifying C: 9m13.569305241s


extracting reproducer from 5 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 5 programs with base timeout 30s
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 20, 7, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "18a9412b62231f8ca9864c223618eaf0c96c7c1bb458797c08138a09829b9ccb0af264804ad92c835cb1763535f8b5325f70dd4fdca3625dc720ecfa4fe4c2b13ee552f4b31d3dd7681560d75daf0fb2cf49ef1fb3469a0315cf6c310c19d1e24c503e98301f086fb12636e099b061f76e61d48b250e232c6182b3b2a618eec858a524c533e0dacd445ef2d583e65ba6bf2ea588b3a66864168f6a78b8242a485edf68a4b4335f67d8bfeb4e6172a2ec43ab70199084785f335e003066af02db86bd1b6d2e018c3bd09a68353311b31efb582682e790fac7d3ded33713eca911d960d859cd6ec69899dff6e49c9567532396ba106e05860d342b32f4f4b9f8ee"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 5 programs with base timeout 1m40s
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 20, 7, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Write in steam_input_register
bisect: bisecting 5 programs
bisect: split chunks (needed=false): <5>
bisect: split chunk #0 of len 5 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7, 12]
detailed listing:
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 20, 7]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})

program did not crash
bisect: split chunks (needed=true): <2>, <2>, <1>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 20, 7, 12]
detailed listing:
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 20, 7, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 7, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0xd9, 0xfa, 0x40, 0x10b8, 0x1faa, 0xe906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x56, 0x6c, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b032094710000000109022400010000000009040000224fc25200090503fe"], 0x0)
syz_usb_connect(0x2, 0x88d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x89, 0x39, 0x95, 0xff, 0x19d2, 0x1144, 0x25cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87b, 0x2, 0x6, 0x81, 0xa0, 0x2, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x3, 0x1, [@generic={0xf4, 0x22, "728eb05f9b8c5e0d09956b76b5aca8fca47481ba01c311c43d98e5127c5f57f7831a57d493615e22ee21e16a35b718989edad9c1b744540d3c6ffbd6b579f7d53c6cd6a73a2a4e8fcce573583e2786573f24530404ff2e04a28557fbb4257f9b3e3a3faaf269e2bbac1b96476c226e0f073e52178919c2b1711978f8cc911d2b6b109dbc58366b9bde04fde8eb99f23f35fb6beb754d32e5d3ea926ea6028a534f0232a025f41245c901d6122704bdb2f018af3c63fad3d6ca350db709d6221b69de23541ba1fedcc148c98fa6f25d27e6dc7a859b4622ba4b1971f2731f491fe63068f1843cc7bab0812d590dc85cbaf513"}, @generic={0xc4, 0xd, "bf10b61ed0ac04fa941d421266c04feca876fab9a86e9ddaf4a9f2057777105a1e8adf08f07768dee7edeef98d0007d29132bff7deea640d853baca0f157f2068f7ca28b91caecd9ccd9cf93a2c442264888f53b5ef10c88605b88f93847646d7fc5ec2d75d63075d0392f637baa8e78d2913671c48d56b580a88a9d3ea0b9189e1100d2efc45c44285ab960114afc6ec0b063d018cf7fc8ba4028d248b878bd2459c7cca147a9b7a2c0d7b3534678267ea5757258a3a08f080c31bfb9688bd06a30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x96, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x447f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0x6, 0x0, 0x7, [@generic={0xe1, 0x21, "e8fce7e60742ddcfe43571942a1a4ab130d2fd4027b943738a4ef18e6948a7ad891409e9bf2dc29a83d3c8186b8d9f3505e09f0e6d4eb9f74476295ba5553c5570f56a7761159eeb1563814d23e16bfdbba7bf05b8f6ccd02132cbf40d96dedf3afb75137a65832118d7526606def631ef253ad839aa2940659c644c348fbe3ce04042500ade77724326c339a0218ac385fe22eebcd1378ceafe85ac3b135a5195613391c313578046ee7b3cd346a1b5528c27c695413fe0a040ca721423b2f82f606cbe97be96b805ef5209d8857f9af54f38949f3509744c7910330619e7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xb000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x78, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xfc, 0x2d, 0x2, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x6, 0xf, 0x2d, 0xa2, 0xdb, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "192512d2570a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x2f}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xc}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x6, 0x0, "85"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xf, 0x0, 0x5, [@generic={0x3c, 0x36, "cf532bb69b4b6559e580e70aaf38f1a680e6cf35fea78219fb9ed8dbdaf49c0442d5a199f83e0f8197ef2b9185a24d09a0a3a5d9be6c6181c95f"}, @generic={0x80, 0x21, "0c288cee0b16c9e5265555136c3536a7fe736e8ba40fdeae9714a272c4b0f3bbc15d893e3a23c51fb390437b6a9c277e80de7e12afdaa268728c8ed6e1c08d43a2f6878fced0a0a3144346d04e540a71b6e95e638523eb8fde19933632d7576c2feed0705ce5454967ea0a053a394f7802b708d61900cd59fad05a6a788b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1d, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x87, [@generic={0x6, 0x22, "8c4015b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5c, 0x5, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc7, 0x3800}, @generic={0xcb, 0x21, "f7ecfb3f32778c54a1546edad08b19424a4a53ea6f2335b2ab10730769d390bc589a66fff29600d4504f69069cd1969f4559159be67d0a9d6eddf840b3814da9032b668e3c9fc553af637017cb974596bf004ff182ce22bc642175d91f1ab5574e4dce983468a6a846409f6b05a766dc43afc773109507d2dbcb60e3f0f8d12d7162de2fe737aff5527286aeb19fd8f9fc5a3822deb233517ab9de651e6b184a4819bae84f3baa0bbb44434b275c24c575a439ef08f85f91a47ede8633d250fc71597972986ed8b5d1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x10, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdb25}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x4, 0x9, [@generic={0xad, 0x10, "6123ddee9d94ddeb4ad5da3b6aec18004e013a77d0507b888c42e5242f8e26780a9c30d50e6f0ca9bcaa2214fe1c7e824cf1303f5083cf7fd6eac1a895b58753679ec6c2cf6cf4fb06c3030295717156b4ea5a50d2df327865e8a4b292453024a64f58a9d9ee17fffae85bfdd0c193c893dbe686d0c2ab4a29345cc2508947475a71f1d7b90d672547c8b665593ed1b8d2e81f67b77657446fbc53ac6122c65c00fd46a75ebb8c0d79361d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x10}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4b, 0x4}, @generic={0xe7, 0x2, "cf0959c4b19713c00feb0f4e46b5228e0e4c02774bc86d1ff62e95202e25da0f4db3f912ae7e3a230b44e5dd4b232125264d5aec9adcaa40a348010337afe499881fbacf298004051c28da162736d1554da7160137da9b043992c6c453f3173f9412180ccf29f1f9e8cfb436724bc7add7cdec8ff714df957ddc3e982371e1579b9a6fa7466ac1bb7c779a973af237c0f63dade378856bac401f4423ee8837f004094ca1fecdd6e2708eb7d50d94b15e7068bc4289f38618b1d2efdb562012f5088a6eeed05df61520904f201c3a3b746616b2e59e78b64063bc91b941878e507774d0384f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3a, 0x7, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0xfc, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x2f, 0x4, [@generic={0x11, 0x7, "46b960fa8ea4ef649d74ddff4e4758"}, @generic={0x35, 0x22, "c0651b770a8513992eecac17b4da89e370f4bf9309403e55ec1271a58183cfd7088a9facdfdc882c73f6127f5947225f9338f0"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x6, 0x8, 0x7}, 0x33, &(0x7f0000000c00)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x7fffffe, 0xf00, 0x2, [0xff0000, 0x3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f9c74ce6dade2ab83f965e1e25ea0f"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x440a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "6a0700fc8826988c1260979f48a7c4d1532a36017ad978825e5cf42ffbcf576a6b7d607afe46c6323e963a4a4fe9b2f979c7773ad19f8fa0bdfb33c766d7e71dfb8fa4b52f009ca3f14fb87afb0d88615131515e8d6f5075f88bb75f814e85b7d9ec2704a8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Write in steam_input_register
bisect: the chunk can be dropped
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunks (needed=true): <1>, <1>, <1>, <1, final>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 4 programs left: 

executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})


bisect: trying to concatenate
bisect: concatenate 4 entries
minimizing program #0 before concatenation
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 5, 20, 12]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
minimized 12 calls -> 11 calls
minimizing program #1 before concatenation
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 4, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 4, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 4, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 4, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 4, 20, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
minimized 5 calls -> 5 calls
minimizing program #2 before concatenation
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 19, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 18, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x31, 0x5, "c15e9e77d1"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r1, 0x0, 0x51)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r2, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 17, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 12]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Write in steam_input_register
minimized 20 calls -> 16 calls
minimizing program #3 before concatenation
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 11]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 10]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 9]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 8]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 7]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 6]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x60, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x98, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x34e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 5]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 4]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 3]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 2]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 1]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 16, 0]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, 0x0, 0x51)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r1, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
executing program 0:

program crashed: KASAN: slab-use-after-free Write in steam_input_register
minimized 12 calls -> 0 calls
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
bisect: concatenation succeeded
found reproducer with 32 syscalls
minimizing guilty program
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in kernfs_get
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r7)

program crashed: KASAN: slab-use-after-free Read in input_dev_uevent
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in input_dev_uevent
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev-ioctl$EVIOCGMASK
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r6, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)
syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev-write$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r5, 0x0, 0x51)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in input_dev_uevent
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_usb_connect-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x5b, 0xe, 0x8c, 0x10, 0x17ef, 0x720c, 0x5190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x9c, 0xcb}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0xa746}]}, 0x3, [{0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "3446d7eeaa0b49a5299825047657befadda7ec866a668248637508471c10ca76ed6f1666a1112062d32b612c7ee86f231f3cd4e42210385f0f60eea3e0883152201109b9089c97143403672a30846ab91cefd9685b1794e1b122235b836ce99e5cb3214611ab17fc2c533989e78aa68aa752e59b17d84ce869be44ed60cfcf2f24235c3b63910cf76993d5f6d70187af4d2a78ca2f05e9d070ac325d0b9fce88bbc1eb026b62a7300589fcbde66cf4b57926d582cb80f88c8630f5102752fd"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "49a1f3e52286fb8a471773ef20a803b16d6cde77df0a2235a7044d77fb7a"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xffffffffffffffff, 0x200080)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$hid-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_close
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x1f, 0x6a, &(0x7f00000000c0)="7612ca8447971708b62f3b49e93b5ef96240ca3dd28379322938fc07e3573e095dc5fff9362be472f8dfc97822562b9272f4283bb99b1ade6fd14866d31b38c2d5867bc2c166a44960c02772a4496eaa7bb6048385038cf19a0ef3a76471e03e6328dcebfba6fd128811"}) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$evdev-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101003)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: WARNING: ODEBUG bug in release_nodes
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_usb_connect$hid-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGLED-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/193)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$evdev-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: WARNING: ODEBUG bug in release_nodes
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$uac1-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: WARNING in kernfs_get
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x0, 0x14, 0x7, "d7315855b4a151"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0xea6ce7d4ea28091, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in steam_input_open
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)

program did not crash
testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: KASAN: slab-use-after-free Write in steam_input_register
simplifying C reproducer
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program did not crash
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: WARNING: ODEBUG bug in release_nodes
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: KASAN: slab-use-after-free Write in steam_input_register
testing compiled C program (duration=2m31.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hidraw
program crashed: KASAN: slab-use-after-free Read in steam_input_open
reproducing took 3h50m20.438149066s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in steam_input_open+0x14d/0x160 drivers/hid/hid-steam.c:604
Read of size 8 at addr ffff88810df35930 by task udevd/2958

CPU: 0 UID: 0 PID: 2958 Comm: udevd Not tainted 6.14.0-rc3-syzkaller-00036-g0a86e49acfbb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 steam_input_open+0x14d/0x160 drivers/hid/hid-steam.c:604
 input_open_device+0x230/0x390 drivers/input/input.c:600
 evdev_open_device drivers/input/evdev.c:391 [inline]
 evdev_open+0x52d/0x690 drivers/input/evdev.c:478
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f48428969a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffcc9566fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48428969a4
RDX: 0000000000080000 RSI: 00005564b5753fd0 RDI: 00000000ffffff9c
RBP: 00005564b5753fd0 R08: 00005564b5708ed8 R09: 00007f4842971b10
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 00007ffcc95671a8 R14: 0000000000000000 R15: 00005564ab4c5ed5
 </TASK>

Allocated by task 2986:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4294 [inline]
 __kmalloc_node_track_caller_noprof+0x20b/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 steam_probe+0x132/0x1060 drivers/hid/hid-steam.c:1241
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 hid_add_device+0x374/0xa60 drivers/hid/hid-core.c:2896
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd09/0x1a20 drivers/usb/core/hub.c:2663
 hub_port_connect drivers/usb/core/hub.c:5533 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2986:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 release_nodes+0x11e/0x240 drivers/base/devres.c:506
 devres_release_group+0x1be/0x2a0 drivers/base/devres.c:689
 hid_device_remove+0x107/0x260 drivers/hid/hid-core.c:2774
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2316
 hub_port_connect drivers/usb/core/hub.c:5373 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 queue_work_on+0x11a/0x140 kernel/workqueue.c:2390
 hid_hw_close+0xaf/0xe0 drivers/hid/hid-core.c:2415
 drop_ref+0x2c8/0x390 drivers/hid/hidraw.c:346
 hidraw_disconnect+0x4b/0x60 drivers/hid/hidraw.c:642
 hid_disconnect+0x13e/0x1b0 drivers/hid/hid-core.c:2325
 hid_hw_stop+0x16/0x80 drivers/hid/hid-core.c:2370
 steam_remove+0x1af/0x220 drivers/hid/hid-steam.c:1326
 hid_device_remove+0xce/0x260 drivers/hid/hid-core.c:2769
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 steam_remove+0xf0/0x220 drivers/hid/hid-steam.c:1334
 hid_device_remove+0xce/0x260 drivers/hid/hid-core.c:2769
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2316
 hub_port_connect drivers/usb/core/hub.c:5373 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 queue_work_on+0x11a/0x140 kernel/workqueue.c:2390
 queue_work include/linux/workqueue.h:662 [inline]
 schedule_work include/linux/workqueue.h:723 [inline]
 steam_client_ll_open+0xab/0xf0 drivers/hid/hid-steam.c:1146
 hid_hw_open+0xe2/0x170 drivers/hid/hid-core.c:2392
 hidraw_open+0x274/0x7e0 drivers/hid/hidraw.c:308
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88810df35800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 304 bytes inside of
 freed 1024-byte region [ffff88810df35800, ffff88810df35c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10df30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000437cc01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2964, tgid 2964 (kworker/0:4), ts 65532168704, free_ts 64378220826
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4739
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_node_track_caller_noprof+0x157/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 steam_probe+0x132/0x1060 drivers/hid/hid-steam.c:1241
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
page last free pid 2959 tgid 2959 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 skb_clone+0x190/0x3f0 net/core/skbuff.c:2084
 do_one_broadcast net/netlink/af_netlink.c:1453 [inline]
 netlink_broadcast_filtered+0xb11/0xef0 net/netlink/af_netlink.c:1531
 netlink_broadcast+0x39/0x50 net/netlink/af_netlink.c:1555
 uevent_net_broadcast_untagged lib/kobject_uevent.c:331 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xc69/0x1870 lib/kobject_uevent.c:608
 device_add+0x10e0/0x1a70 drivers/base/core.c:3646
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800

Memory state around the buggy address:
 ffff88810df35800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88810df35880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88810df35900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88810df35980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88810df35a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in steam_input_open+0x14d/0x160 drivers/hid/hid-steam.c:604
Read of size 8 at addr ffff88810df35930 by task udevd/2958

CPU: 0 UID: 0 PID: 2958 Comm: udevd Not tainted 6.14.0-rc3-syzkaller-00036-g0a86e49acfbb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 steam_input_open+0x14d/0x160 drivers/hid/hid-steam.c:604
 input_open_device+0x230/0x390 drivers/input/input.c:600
 evdev_open_device drivers/input/evdev.c:391 [inline]
 evdev_open+0x52d/0x690 drivers/input/evdev.c:478
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f48428969a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffcc9566fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48428969a4
RDX: 0000000000080000 RSI: 00005564b5753fd0 RDI: 00000000ffffff9c
RBP: 00005564b5753fd0 R08: 00005564b5708ed8 R09: 00007f4842971b10
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 00007ffcc95671a8 R14: 0000000000000000 R15: 00005564ab4c5ed5
 </TASK>

Allocated by task 2986:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4294 [inline]
 __kmalloc_node_track_caller_noprof+0x20b/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 steam_probe+0x132/0x1060 drivers/hid/hid-steam.c:1241
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 hid_add_device+0x374/0xa60 drivers/hid/hid-core.c:2896
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd09/0x1a20 drivers/usb/core/hub.c:2663
 hub_port_connect drivers/usb/core/hub.c:5533 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2986:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 release_nodes+0x11e/0x240 drivers/base/devres.c:506
 devres_release_group+0x1be/0x2a0 drivers/base/devres.c:689
 hid_device_remove+0x107/0x260 drivers/hid/hid-core.c:2774
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2316
 hub_port_connect drivers/usb/core/hub.c:5373 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 queue_work_on+0x11a/0x140 kernel/workqueue.c:2390
 hid_hw_close+0xaf/0xe0 drivers/hid/hid-core.c:2415
 drop_ref+0x2c8/0x390 drivers/hid/hidraw.c:346
 hidraw_disconnect+0x4b/0x60 drivers/hid/hidraw.c:642
 hid_disconnect+0x13e/0x1b0 drivers/hid/hid-core.c:2325
 hid_hw_stop+0x16/0x80 drivers/hid/hid-core.c:2370
 steam_remove+0x1af/0x220 drivers/hid/hid-steam.c:1326
 hid_device_remove+0xce/0x260 drivers/hid/hid-core.c:2769
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 steam_remove+0xf0/0x220 drivers/hid/hid-steam.c:1334
 hid_device_remove+0xce/0x260 drivers/hid/hid-core.c:2769
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2316
 hub_port_connect drivers/usb/core/hub.c:5373 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5673 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5915
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 queue_work_on+0x11a/0x140 kernel/workqueue.c:2390
 queue_work include/linux/workqueue.h:662 [inline]
 schedule_work include/linux/workqueue.h:723 [inline]
 steam_client_ll_open+0xab/0xf0 drivers/hid/hid-steam.c:1146
 hid_hw_open+0xe2/0x170 drivers/hid/hid-core.c:2392
 hidraw_open+0x274/0x7e0 drivers/hid/hidraw.c:308
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88810df35800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 304 bytes inside of
 freed 1024-byte region [ffff88810df35800, ffff88810df35c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10df30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000437cc01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2964, tgid 2964 (kworker/0:4), ts 65532168704, free_ts 64378220826
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4739
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_node_track_caller_noprof+0x157/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 steam_probe+0x132/0x1060 drivers/hid/hid-steam.c:1241
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
page last free pid 2959 tgid 2959 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 skb_clone+0x190/0x3f0 net/core/skbuff.c:2084
 do_one_broadcast net/netlink/af_netlink.c:1453 [inline]
 netlink_broadcast_filtered+0xb11/0xef0 net/netlink/af_netlink.c:1531
 netlink_broadcast+0x39/0x50 net/netlink/af_netlink.c:1555
 uevent_net_broadcast_untagged lib/kobject_uevent.c:331 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xc69/0x1870 lib/kobject_uevent.c:608
 device_add+0x10e0/0x1a70 drivers/base/core.c:3646
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800

Memory state around the buggy address:
 ffff88810df35800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88810df35880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88810df35900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88810df35980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88810df35a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================