Extracting prog: 17m24.403637009s
Minimizing prog: 1h27m37.83276299s
Simplifying prog options: 4m18.191026167s
Extracting C: 2m31.249492657s
Simplifying C: 0s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_connect-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "6dae0065"}, @global=@item_012={0x2, 0x1, 0x5, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async)
syz_usb_ep_read(r0, 0x75, 0x41, &(0x7f0000000640)=""/65) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xbc, 0xce, 0x4f, 0x40, 0x1286, 0x1fa4, 0x5964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0x37, 0x55, 0xfc, 0x7}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xe19}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xa8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x5, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0x5, 0x3, 0x10, 0x58}, 0x17a, &(0x7f00000000c0)={0x5, 0xf, 0x17a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a6492e7a1b885b992813fb2e20bcef76"}, @generic={0xd1, 0x10, 0x3, "92d6153d6df97adb97db53511d5db8b49703ff405e228bb72d9e7c2a5c9c8d07fec7cf0c044eacc9069dcff9941c226ebe6529075ff20f7aaad96c6ce361d8f8b6ced414434e601d916ec999f2a1dfd221754e2c9be4616eb5ff0ebfd3696c5073e5d71d22ea8c0cac9b125417c605fd35da923f101efea74ca3c287c0325962b8425a7827893325907776aae6da64742dda9e436a42dace8e08f4762a653bd05b7f42520af9d92b87f3676e3f1e5cfbd1266852596809cce7dac74569d00282fa66287d0712efebee5e252c985d"}, @generic={0x8d, 0x10, 0xe985cda640ffc685, "abbc0b05b8ff9ea3dfe461f66bc2b7d3ee9980054dd2aaadabf14df951ea1627dcceaac84d67f264ebc930fbc80b9191be6bc9c7bb795933dcca4dfbe66232232f8d0094df4de1fffca2ac5c31bf39c7a7cc8b237a0afcc4be3b2378195783e57e99834418dfccbdf4a6ffb51cef7059eb1997e358d1cfa5a1df788efd6e83034e1a2cbe4873b9fecef1"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0xff, &(0x7f00000002c0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x804}}, {0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "7b9e1af15a0db9b645f08e9d12620d2d017ae78a56aa0ad7fe31695f1e67ac07ab30e29ef84943bf95c0d83843879dbbefb81b1cbbb88bd3a995205bd8f8afbcf7c2921d92d37ba79bf4ef5856ee695596db6afb29d0a84a3b52527ee67381e476824480d4595cecb66a8bedb6f2551fceff167c1325f429c5e9158000ba95ade3056218077b56171c62b7bdf9844b3981dac20ac8119fc90eca478f96af113705637b29b08e8e8f69aae5acae17c17918ff1db91a7a62e44b2c1a892b593ae3c9e906939fd438"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x424}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$printer-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_open_dev$char_usb-read$char_usb-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x4, 0x147, &(0x7f0000000040)=ANY=[@ANYBLOB="1701f8d7332c1dc071de4ae9a76fe43e8e0a7001550ff961f1e4db4c4243815ea4", @ANYRES16=0x0], 0x0)
r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3e, &(0x7f0000000400)=ANY=[])
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x14)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff090582020000000100090503", @ANYBLOB="eaa199"], 0x0)
syz_usb_connect$uac3(0x2, 0xa0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="c71594f90d3bf24ebe9c1cf4d7e0dc5c271d122082af36ac00bf37789e1009b860e24144da0c99a33c89383406a4589d456df5bfdb2a60de525de46add501ac7603785bb4f4beeffd0e77a2dbf19e673e007cf419cc7c5508727ecdbf4a6037de35679b8ad042540f28e461cd98d183eea7ae86055205d329a466baa17eca06e55b531f5eeeb4a58df206fc1f88573fa5365d37770488e56dab1ee40406aeeea42bd29ec", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hiddev-ioctl$HIDIOCGCOLLECTIONINDEX-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-write$char_usb-read$char_usb-syz_usb_control_io$uac3-syz_usb_connect$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-syz_usb_connect-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_connect$printer-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-ioctl$HIDIOCGREPORT
detailed listing:
executing program 0:
r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=<r2=>r0], 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f21106686"], 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="16ee8ac793a3334dc9a02b300300e57c841ed389550d7599ccfa03d8e2be000000000000000000", 0x27) (async)
read$char_usb(0xffffffffffffffff, &(0x7f0000000740)=""/125, 0xffffffffffffffbd) (async)
syz_usb_control_io$uac3(r3, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r4 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x88, &(0x7f0000000680)="d9e40ab258882d330c49e6b47d897bffd8499d0dae63215e391bdd576f6fc2544fa6a665ab001fc3c3afb9ef400dea2f436bd99b34b75a304634f73c6f15409e7ed37c2da87a8297f0633aa98791839a2292b9c59486c784f6da55156bbb2ebae0505881d7ff7248ceed0e0a8b63e6699380634651b27d5fffff00"/136)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201002000000040d1180094000902240001000001000904000006030002000921000000012218000905810300"/54], 0x0) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000005", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r6, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x20, {0x20, 0x24, "4833781720093afb9a2c303957e0aa19e97bb455290d2edd31fb055ef4d3"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000200)={0x2c, &(0x7f00000007c0)=ANY=[@ANYRES16=r5], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f00000003c0)={0x40, 0x5, 0x5, "ae5e14c78e"}}) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\"\x00\x00\x00p#'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000f0000c5eb590024c8c8c5c8a9e40da8eb767e0a00cc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) (async)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc576c"], 0x0)
syz_usb_disconnect(r7) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) (async)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000180)={0x3, 0xfffffffc, 0x5b})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 17, 29, 2, 4, 7, 18, 11, 30, 9, 30, 22, 12, 16, 30, 23, 30, 28, 23, 10, 27, 4, 20, 5, 29, 8, 22, 9, 11, 6]
detailed listing:
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd4}})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0xa, 0xfffffffffffffff6, 0x3}, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000140)={{0x12, 0x1, 0x6c1225079af23d82, 0x0, 0x0, 0x0, 0x20, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x3, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa3bc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x40, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7, 0x1, "9a5eec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x55, 0x237}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x7ef, 0x8, 0xf9, 0x12, {0x7, 0x25, 0x1, 0xc}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3f, 0x5b, 0xa3, 0x20, 0xbfd, 0x111, 0xc080, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x1, 0x80, 0x35, "", [{{0x9, 0x4, 0x77, 0xff, 0x1, 0x78, 0x7c, 0x42, 0x7a, [], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x10, 0x66, 0x9}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x8, 0x10, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x2, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xb, 0x26, 0x10}, [@processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x0, 0x3, 0x1, 0x2, 0x1, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x4f7, 0x7, 0x2, 0x6, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x3, 0x9, {0x8, 0x25, 0x1, 0x81, 0x30, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0x49, 0x33, {0x8, 0x25, 0x1, 0x0, 0x6, 0xc9}}}}}}}}]}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000740)={0x14, &(0x7f0000000540)={0x20, 0x9, 0x9a, {0x9a, 0x30, "26179744ea021b038da933581c9b05f3b46866d4416c6c14d62211edc2a84b4d0e50464573aa7496ea2fee4590d4ab2f9d5370e290ac82202c16b6dbb57d64ac799d9dba3775eb81f367c23fe07871a61238bb3db8e7b5e0d7bccc2a277a96d21e6784412a96a9534dd0ea1c3259d1131bede705283096e23061f2c4588ecb29fff3f690b3a16d98c7c89dc7e161e5e915ff76dfb2526313"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f00000007c0)={0x40, 0x9, 0xe3, "f941470dd4c8a8b43522ae95bd4d54913d1c14196882d64f07959203797df3aea325eae1100b6c392667ae55ee9ad6f48724c980c3a4a0f2270f6f4392b3c45990688ac92f0c5add1fa73439e8363e7e2a4f3dac4f64c03278ac6c6faac6669252932f24db15d002c6616d8035c215cc8796236f2bf44ad24506a67aefe74b7343e4e735e7ed97eb2e1cf002385fe1c5b88fb7d04f50df738246edd94b64f41d72debfb536b08d304107b24b211d04d0885fe7ca33fbdd6c620ac7bab7dbf7e3c8b26fde230969b03d3020b69055906f50e33371d144c53cbb48bc3c53e2e1d4c7e964"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f0000000440)={{0x12, 0x1, 0x11, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x8, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x1b, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "24a35e8ca8b2"}, {0x5, 0x24, 0x0, 0xff80}, {0xd, 0x24, 0xf, 0x1, 0xb0ef, 0x1, 0xfff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7, 0xfff9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x5c, 0xa9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf5, 0x7, 0x0, 0x8, 0x2}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5, [{0x6b, &(0x7f00000001c0)=@string={0x6b, 0x3, "95b0271111d3fc4dc432e96c9b5f9ea36951e9be647a4bbdbd27b1d37ea504b354160922a33c2b2b87153d5b39e254fa0b1b906bec10cb9a6cb9e046925a1d2bd0e2857a1fe181c0f2b5aa01b2c587817632d678d25ec5dba92885d1a2f3e8189c510e1b20e520619a"}}, {0x23, &(0x7f0000000240)=@string={0x23, 0x3, "f8f3118cc65b9f891ff9b17bc4a206d184804999127466d6cb399d8cea9921a77f"}}, {0x52, &(0x7f0000000280)=@string={0x52, 0x3, "8e06663d3e89c29a4d9729d04f45b93adf23005aa8096276a92066fadbab975382343cf07eedd05d98d81ff4df504b30bfe606ef7bddc3e7e3a23824063c6c4a62ff17f2af8cb685f0e9095ce0c552df"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "7a761451d78c8238e186a80a18e86d2fc7acb74289e2e6ffe149e2ed2d98baeeba17ef6222f72baf56810f93963781b4ba954f785d7b53ee5fdfe0e18d9824c1394a5b3791a13d4e0cc34cae871012fe65bbf478987531c20423c1bd9a6a8641435f13b8adc756dcc03ea2d4e3f30f5a07"}}]})
r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_disconnect(r4)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x19, 0x2, "c302"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xbe8}, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x143080)
syz_usb_connect$uac1(0x3, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x8, 0x50, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x790, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x5, 0x5, 0xe}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x2], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x60, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x13, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0xfe, 0x8, {0x7, 0x25, 0x1, 0x8, 0x4, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x85, &(0x7f0000000180)={{0x12, 0x1, 0x601, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0xc, 0x80, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xf, 0x9f2a}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1b, 0x2, 0x8f, {0xa, 0x25, 0x25, 0x1, 0xb0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x3, 0x80, {0xa, 0x25, 0x25, 0x3, 0x1, 0x10}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1ff, 0x10000000, 0xa02})
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x21, 0x2, {0x2, 0xa}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x10, 0x53, "1fab23b26cbb547e821ad9d90ed1032f89eb0ea581cc22bee80345386996b1bb78d99a1c791b2575819c1347d3312d5a30b06eed9f12ff5c48e20ea80d8984e7d5cd6fce71cb10147a8328883fa85f587839ec"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000240)={0x20, 0x81, 0x3, "d86a3c"}, &(0x7f0000000280)={0x20, 0x82, 0x1, 'v'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "ad"}, &(0x7f0000000300)={0x20, 0x84, 0x3, '>Q('}, &(0x7f0000000340)={0x20, 0x85, 0x3, "711584"}})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES8=r0], 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x1a2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x58, {0x58, 0x23, "6069ec1408cc82542284b4e748c86fc417f749a428c4dd9e1fb4eba53879905f0198a80d287f1b34ff7af45aaa222191dad32c14adbcdf3774db40eb57ed6d78847f86a03009c7b58a16befb419582119f438ed010f0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f00000000c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "bfc89da7becd20ac0ec441c923daf996"}, @ssp_cap={0x10, 0x10, 0xa, 0x11, 0x1, 0x21d, 0xf, 0x200, [0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "3bebf50a4db60aa711873c22683eb150"}, @ptm_cap={0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0xfb, 0x2, "6bf57b9d", "8bda0c2f"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x18, 0x4, 0x0, 0x6, 0x8000}}}, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x0, 0x16, 0x16, "9262f768de45638ac46149d05ed178d72e03ede09685"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000400)={0x40, 0xb, 0x2, '#9'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "57a8"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0xb4}, &(0x7f0000000600)={0x40, 0x21, 0x1}})
executing program 3:
r0 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="cf9635665b6e8c850376d7ebb0b1098661420478a9946c7272732e6513ac0e645271271b4dc75ac0309e3046f79842238f73f224f39c60db4f3a593c367905a4c30752c35f3a7113ddd0c2ae17dc6b1de31a95cf1ebceac62d091a380e1527ff6afb1ecc9d976eea6c8396e6bdf5fbb9bcc78e08ae581f57e733924e3271dc188c9888a141124df0f74b7159a9a74646db520414cc5856d6ce6c9e6460dcdcf68fa672140643e31ffaa84a3e234b187d102650f9db469e3b1cc7828d971be6d1d6269c2f83c972bdb1165e964cda77664f2d6872cb839b8ede54d9687c"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="a337651c6a6eaa5febffd33903bdc0bae81976524eeb540cc83ad41205530a5f967b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xe0, 0x7f, "", [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x2, 0x91, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x3, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000401111222200010000000109023a00010100800009040000040806620007050102000200032401070581020002000324020705820200020003240307050202000200032404"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x40, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x1b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x7, 0x9, 0x13}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0xb, 0x2d, {0x8, 0x25, 0x1, 0x1, 0xc, 0x6, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x2, 0x7, {0x8, 0x25, 0x1, 0x83, 0x3, 0x6e}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000401111222200010000000109023a00010100800009040000040806620007050102000200032401070581020002000324020705820200020003240307050202000200032404"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x40, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x1b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x7, 0x9, 0x13}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0xb, 0x2d, {0x8, 0x25, 0x1, 0x1, 0xc, 0x6, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x2, 0x7, {0x8, 0x25, 0x1, 0x83, 0x3, 0x6e}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x183d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c555201816139109"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0xea, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x582, 0x15b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x9, 0x10, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x23, 0x30, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x301, 0x3, 0x2, 0x2, 0x8, 0x1000, 0xb, 0x8001}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x81, 0xad, 'B'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0x9, 0x7, {0xa, 0x25, 0x25, 0x5776, 0x9, 0x7c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7, 0x4b, "9cc715"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x4, "cce3be6c19b178169f"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xb}, @as_header={0x17, 0x24, 0x1, 0x3, 0x8, 0x401, 0x2, 0x0, 0x1, 0x4, 0x6}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5, 0xff, "48c2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x62, 0x8, 0x9, 0xf}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0xff, 0x6, {0xa, 0x25, 0x25, 0xd, 0x2, 0x5}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x7, 0x4, 0xe0, 0xff}, 0x21, &(0x7f00000008c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0xffff, 0xf00, 0x1, [0xffffc0, 0xff00, 0x30, 0x3f0f]}]}, 0x4, [{0x8b, &(0x7f0000000900)=@string={0x8b, 0x3, "7a31ba19a442aaaed31df00ec55bd1c052868397bfb5e8220c1c99fc92b835f4cad9a64d1670f6a39182ed795ea68f49c04264caca26c1382ca3fd4a988e479db65c76f197df97f50175ec40677b2fa7d8dab8158dac107905fd795961602cb21532c4112cae5b60decbe33d2d38486bb94e9e22e28212ed48d01eae98cc0eadfd8de8f8beeb3a8cc0"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x446}}, {0x59, &(0x7f0000000a00)=@string={0x59, 0x3, "8d69a3c17879fe5e35b909b4701b06c3ad649c7baa44ab7a5d9f6d9f6a493deccf2acd156cabbadb21e98a6c0445f1be05587da242bc3cfd358b070ab60c1b0e192fbcb0d05ee8d4c79f3652c6eaaf22141a369ed758ae"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x83e}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0x2e, {0x2e, 0x21, "71720b9f86c21917ebfc07c8b7c35ec51e960d6cb809638aaccfeddd2ec3c387b87f24412b2a3c27d6318f72"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000100)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x7, 0x98, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0xf, 0x6, 0x98, 0x101, 0xf8}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x3, 0x4, "3f71c48b", "7ffb8a41"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x38, 0x2, 0x9, 0xfffd, 0x6}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0x11, 0xf5, "3817ab8dcc86941affb4276d2dc6e29aa6349b51f655eed22c292ce413843e8ec4d598e84e54b5683294a0b0a008aff849034e22cf7e43a704c36319fe608334ba842ca1f1309b7f86b779259618278f9b6cc3a4ee378b39036c6b7fb82cf1411c9fd24cbfd22c93be617e26a39c9e33d24a54808795df0ea117c1d2f0a723fb676e58219b701bc1f668c19245d7d5ed64596e3e810b6b87a0d3897708dec773d97318b85d234aa603bbd3d4c569b0c824df9a9b243dca4ace1a1e3bdc9221c17a44c03d513928c18ccbf652483ee52485ab212428dd45b77b9cb5408452c1b89379d909edac43b76ea0c8f633c6b6da98a2606d53"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000000480)={0x40, 0xb, 0x2, "8eab"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="d532c1112373"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "998b"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000600)={0x40, 0x1c, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}})
executing program 1:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="002206"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hidraw(&(0x7f0000000180), 0xb, 0x400102)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0xac502)
syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f240a06010904"], 0x0)
syz_usb_ep_read(r1, 0x0, 0x1000, &(0x7f0000000480)=""/4096)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80800)
syz_usb_connect$uac1(0x2, 0xcd, &(0x7f0000001480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x105a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x2, 0x90, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x5, 0x2, 0xdc, 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x94, "b0d1"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x1, 0x3, [0x8, 0x9, 0x4], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x51}]}, {{0x9, 0x5, 0x1, 0x9, 0x210, 0x3, 0x5, 0xf6, {0x7, 0x25, 0x1, 0x0, 0x10, 0xb03}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x4, 0x9, "2577b75d"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x2, 0x1, '<', "7e2991"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x80, "3b53fa6237c20318"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x2, 0x5, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc8, 0x1, 0x3, {0x7, 0x25, 0x1, 0x0, 0x1, 0xff01}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x310, 0x2, 0x7, 0xfa, 0x40, 0x14}, 0xfffffffffffffd38, &(0x7f00000015c0)={0x5, 0xf, 0xe4, 0x3, [@generic={0xd2, 0x10, 0xa, "b64b5431221ca1b21e000ee98693ea57084dc0475085ff542ed0aeb2a4c676235cb08b1572e0689d57751495443a417f812010231bc50f420b2a6c687856b6d31c686d6a8f494f8367f5742e6b33971dd1dddf0488127d688893ffecc4f83661109eec9d46508af58a27dbf8dc49f51456eebf466de716acf0d8f81a3c98da9189a2d7907565f2bfb9ef50a4f189e20a3786018aa0534578e7a364defc693caf88fde0b097ec52418e76d6c070c62ad02b709286d87f40166c3e9913a76fba3727c7f5946232513b7e7c17cf0e18c6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x5, 0x2, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x6e, &(0x7f0000001700)=@string={0x6e, 0x3, "be36b7cc2df366bddc4dee3463f014a3c8975fbecb6b5d26d5cdd8b9cdb873432236772dbdad03e7e10b668263c03006be4d5631264c84c18a0e4106961e45bf7fbbd86f0c437c3fc58ee9d5d018842a2eb1bdcdef6bb85a5448ff990d7b642884340f662aba85fcac5a45fc"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x3c01}}]})
r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000318ca9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35fe7909050701ff0306030409052303fe073902c309050710200006050109050a7698030504730705e97b"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="400f1800"], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000100)=""/30)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xc5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x7, 0xdd, 0x1, {0x22, 0xff}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8b, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4b, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x5, 0x1, 0x6, 0x10, 0x5}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x6, 0x7}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "8035257dd91a8cdb69297f8cc8b9b422eb4d29ebb96f86adfd92d5d04dc561ad87d07fa112b7cdd41eb284414c6cd347d899dd801f60335449"}}, {0x3a, &(0x7f0000000240)=@string={0x3a, 0x3, "abc2965f36de9daef328fae001ffe299912997eccc3ecc64e0e775bd1da35143f9780cd5c7a7ab466cdf7ff3aa9e018dda28ca07b4b66aeb"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac3(0x2, 0xda, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x7, 0x0, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x38, 0x8}, [@mixer_unit={0x8, 0x24, 0x5, 0x2, 0x5, "4af1e7"}, @mixer_unit={0xb, 0x24, 0x5, 0x2, 0x7, "acdd1244f557"}, @cluster_info_segment={0x6, 0x20, 0x5, 0xbb, 0x4}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x1, [0x2, 0x7, 0x2, 0xff]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf0, 0x4, 0xbf, 0x1002, 0x0, 0x2, 0x2, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x2, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xd5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x80, 0xc, {0xa, 0x25, 0x25, 0x1b, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x6, 0x6, {0xa, 0x25, 0x25, 0xf824, 0x8, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x5, 0x5, 0x8, 0x8, 0x8}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x1, 0x7}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc01}}, {0x55, &(0x7f00000004c0)=@string={0x55, 0x3, "d3f1c7855a18be1b6b5842f08f66d187d985f6435f1542e493ca1806b845a95fa0ed9dc05784440683a0575aa9a303fcbbeb282bc26867ee482f1b486671818e6566ce6b17826974e2cc352e955700ea2bca59"}}, {0xd7, &(0x7f0000000540)=@string={0xd7, 0x3, "fd6177131cf247d25fa2b03b3cedecc978845c69ffb5225c39db88316cbe4df269296a329ca1df2762c38dde4f073849ac2349d69f3c4e720fa546f80f2e1b7a7f6cd36eb81b60ccc6c6c94dfd19c5d918173cc266ebed2ecacb0c913ef3230ed689171ac66399d3f206427c3ddddf9ca8e36d024dd84ff531b34e778548c93d277537dcfe2b809b317d4a4cb1e41ca85219a1c864a271982cb978880d4d0012975c7bfdce3455382090649be750a178f7ea689493c94ef92cc89b0b6c2173ec38e31b946ee80d980249330d413547745f01a6fb64"}}, {0xb7, &(0x7f0000000640)=@string={0xb7, 0x3, "63b8f264fb63302218c795afc377ad7f5cb29764f280ed4ca0724d30fa1020d920908bfda4543a8e1f59397e0308fb3181e456297fb8955edda8ecaeaa0a2cbfcc8f4ea0707904ea1969041ec1e7d5939f319cb803165f8d2bbee1719465f3963cb864651d231471218e67e9497e0661697f8134bcf65774b96e39da215282f039490317db431f4ac9a76b37c591f3e6ae726831a98bcdd7f56eeb25d012d81f84e9756eaef026655f2276fd7620d0df4017bafca0"}}, {0xcb, &(0x7f0000000700)=@string={0xcb, 0x3, "392a42eaf04782e5ea397a9d30f517b09fa540d45099537bfef29f465de27e6cb60018ae7cbd780ff318b07c44ce7b0f1756524a9aef3682d557a1553e28ccce4e55f30fa4648d5602805018226cc07320627853b5ca8e88d9b9b94dfe40793cbca91e05b1c437b0beb101396d60a79f61815377bd71f3cbe816e615626fa5e6614ac8e5d590d5b77728b53ec19d2828f5aea4f3546accad6a50a624b57f878a70c4aec1c5e4917fc75d5e206b04a8bd460647e215f358fc0b247be88798f73e57bdfd404a69322bc2"}}, {0x37, &(0x7f0000000800)=@string={0x37, 0x3, "f4b9ebcd8b2b21f3b124a07586f104a4bba4a633a7205922cbce6ee0df267e9bf4f742270a8c05f8759cac63397da7f79d49ae35c1"}}]})
syz_usb_control_io$uac3(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000940)={0x40, 0x3, 0x3c, {0x3c, 0x24, "b7b60e4c32e7523f76490d537306902e031b645f0c3ce5c355336c96867d64b2826fc4bb8c30f69019edb1e811642fa13fcca284f95a9f6a9266"}}, &(0x7f0000000a80)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "73abd6e2d7a3b3646dc07485613b8405e9ece2830710e707ba5f969cf5398bdd743ed1559b4ba501a3b2654a0f34f44ba170e9398ed654385a019b53c07bd033d67ed7d908c5b95dfcb3219ecf235a027aa2a1cd84a0ce4b0954d8984e202087266f444143162c50de0db8a51a0b77015802ef14e98808c9d02215b75177d5c0053c7cea1781ec5ab75d48d161d77b35364db37eb4ee15f76a088fd50dab5168082fb66a000a98e33cde281fb523989ff2f98eb15411c856a0bc69bed8"}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x40, 0x31, 0x18, "8eca33802f139824a7f0574f4ac3965fc012b4beaacc2222"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1}, &(0x7f0000000c80)={0x20, 0x81, 0x2, "a1f3"}, &(0x7f0000000cc0)={0x20, 0x82, 0x1, "e6"}, &(0x7f0000000d00)={0x20, 0x83, 0x1, '_'}, &(0x7f0000000d40)={0x20, 0x84, 0x3, "1e0cba"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "c2064d"}})
executing program 4:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3bd)
read$char_usb(r0, &(0x7f0000000000)=""/249, 0xf9)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0xee67, 0x20e080)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/18) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffcee6, 0x82840)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000001c0)=[0x8, 0x93]) (async)
r3 = syz_usb_connect(0x2, 0x616, &(0x7f0000000200)={{0x12, 0x1, 0x100, 0xd0, 0x4, 0xd2, 0x8, 0x421, 0x94, 0x9f2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x604, 0x2, 0xa, 0xfd, 0x30, 0x5, "", [{{0x9, 0x4, 0xd1, 0x6, 0xf, 0x2, 0x2, 0xff, 0x2, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x6, 0x5, "288722d7b1"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9aae"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x401, 0x6}, {0x6, 0x24, 0x1a, 0x7, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xfff, 0x80, 0x2, 0x2, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x7f, 0xe}]}], [{{0x9, 0x5, 0x7, 0x4, 0x40, 0x8, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x7}, @generic={0xf3, 0x22, "ee133894c440b53de25df6c78272a87e7b448b81d0719b3c3358ca4af741b2e80c49b8b7a267ce9d126eb9e201cace8cd84de3adc9e2c331874d6570f4696a5a71602e65fac9dac3484984105d2a6130b6f0e990a6bca6d9252ad307825f96f8153535229ec6f62e1bc8f8704cc03049ef33efb34d86f7c322bb5f2c70c7b43d3cb1334a621a3ba6dbe76c36f78738d5ef0371ba50fbfed1c09dcab3e486cb03de04650dcd0a986b8957cdc18f27fed7b469a29b7eac5b449de73467175519090f5fb7a077dca3080931487898975a57aacebe495e1d58ea61b031e244dd1924e05dff56c62f9954e1631d33b54660b067"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x3, 0x4, 0x9, [@generic={0xa, 0x6, "2494fac85350c535"}, @generic={0xca, 0x22, "a598e6c2d76b796918298435f25b012137b86ac41352fcf3ade3a640fa3ed26e0eaf755675ee01f0e590b1b0652f191abb3ce98362a20bff9f4d11c2cd67cdc2d94922db56cd10d2c30078ad9b7bd204cbe6ba98041084a60962df1042d91526e8dddc6a85592fe1e970d3b16db6165c84c7e21a60352bdff6268e6ee8a7664dec1484f5dc1ba8f4a3724ecfc765c08e94efe24a9f11b7a95c3e8a107ddc09f89cea79892322295e09bf2a22c5cd169a3cb27ae8384be68179e29b285ae1e69e1fae17c57f59a0be"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x57, 0x8, 0x2}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xd6, 0x5, 0x4, [@generic={0xcf, 0xd, "51402cabfc4c1469cfe9de2b995f44d5fa630d88a3367b18a0c49ec4de5a7179cbe159698e7148cc8d0758e89d33758655342118081376e885f65433756c9984cd07bef28671d7eeb85e2686de08ab0f63b8ebca234a54cb45119b1c11255e8a2a63e54588095756455ed2380c0993eea920af232a54396a6305fd875e558b1efd139881046a8c877a436c90577f93ad9b44824e9a25befd67d4f91778b5785956cfa581dd08b1b88a2ccc9b37991d7fd8634a0d844453dfcc7a1a1aa044feaa134029ea7ee062773328935745"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x3}]}}, {{0x9, 0x5, 0x1a, 0x1, 0x400, 0x1, 0x1, 0x81}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x6, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x7f, 0x9, 0x4, [@generic={0x5f, 0x33, "6fe4e5d61b1a24ac2c9412562b6f45773082e72acce606ded70253451024230d983e8b67499dca53589278355bfe33f57464380af96f6a1eea559b3f9893ba8bfa8478049720a1329219874b1d135bf30c3fb1f69223a6323ba8ae9026"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0x2, 0x9, [@generic={0xc3, 0x21, "bd924ab2bc9eb50037ea24f1e51ae62d8a668d3d7d8e3bd9cbe8106792632f6d7b25284d7f7ce4da80dcce3df6e6702d2582e352eda6dd3cfd136fc11674969316b878b5eccfdbe71884b3b30ab52def03e875a769d971ae52ebdcac27b4289fc4cb00fdb4d3e601c722c9f3d964786692da5d122bcd9cc9cf3a091049c7dac34637fd552da3a9217d94c9c887dc81a3668f39965d1351dd5b114c6eedc9dd2be1001eb0635502fbf0da379b2344bfb71fc098ae8dd63f81053bfb7afacac3f79f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x40, 0x0, 0x32, [@generic={0x1f, 0x22, "a0890b88dd7429a5de48a2d5c8e78b05c894bf8e2c55a67462a41a59dd"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xf, 0xd8, 0x34, [@generic={0x3f, 0x21, "a42b44b0db16a5c4dcc6842452e8920bb9c36f3fab8a59c7960fa83bd71b1b28b98a24b5bfd4502b9aab49822c1edb0c57227c658394f769d5fb83772a"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x8, 0x97, 0x50}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0xdf, 0x3, 0x3, [@generic={0x2, 0x2}, @generic={0xda, 0x23, "d168d4ffa50ddf0e5dd231f420326487710e390ef319be6786116a9d0916539c453306765b64d35721e6e1a1f8dba8b17a7e0e8bb469a54f45bd2cc7217c0d2129429d6bc4ff1b8f39d852202bbba1da12e8d295f8175d49a7b46061089ffefd98d11005536fce50025c5d16cffce8eac32f513bcf072819aac5961b6af556c7ab3931ddf696105f9708a00b521943125f2cb37a1b2156d36f18067ff0e38f241fb29cf7f6f7800a25ecfad30eed99ef5f691cef7c1839f1fc16abb0e28be75352119ed1277f2db410af3d2cc7992a449fb8411db27ea42e"}]}}]}}, {{0x9, 0x4, 0xaf, 0xc, 0x1, 0x5c, 0x74, 0xb1, 0xff, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x81, 0x1}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0xe, 0x6, 0x3, 0x20, 0x6}, 0x5, &(0x7f0000000880)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x480a}}, {0x23, &(0x7f00000009c0)=@string={0x23, 0x3, "5705c239cab396baf91d698fe6c0c849731f049f3bbed05a3faaab74c7e524d6d8"}}, {0x43, &(0x7f0000000a00)=@string={0x43, 0x3, "a9d0c0bae955c5c6bcc9329501398a5265a76232f9fbf233dc5482685e879f8dbf5f15f0c0b937d3c398d6a88be3e8a423a48fb16dc5548409fcf5f348230e8676"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1001}}]})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000b80)={0xe3, "43fc6b3008cbb5731af24bbd7c2d31c3fae022be4fb9c7b3bcd9d8cc2d77c9a5c0a6192e08ffe1b7f5981891c73922682d113332e0a55b0ad3c3e7510f83a07fc84074b3c40c147fd88f08526562e3859563c7594609e9b846d29b9811f8829985830ca763cc38af2d9b836236309074f554bb5f3c55ab7f0a6a7f31958317a4f9f420270f5f55dc56425f1538d7ea508a65e4d0969de48adb2b82f000f5f9d63d8cde6c264d286e6356fd47bafaeb9b313c6d6a1fe0864ac99b639bcf44d4487d9c3b507f477f2dc9de401a2434d148188283edc178dfdf8bd0929acb20a65991ee05"})
write$char_usb(r0, &(0x7f0000000c80)="26950e5065c199266ae38c794a8092a7294cb46f165f4f162c60a1a1e2a0d32c597e23d9d90ccac7116cc1c533355d1da8e1acde1c37f52e68c046a3a068fdebe013c19cb7272453f5f9b5c5e23108f0315612e4464a242ff7500ced5fab", 0x5e) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000d00), 0x4, 0x40040)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000d40)=""/46) (async)
syz_usb_control_io$uac3(r3, &(0x7f0000000e80)={0x14, &(0x7f0000000d80)={0x0, 0x21, 0x7d, {0x7d, 0xb, "7f2bc2b2ccc4dc5373e4e44f7c85a1803519c9f8f3f83d46247a7a9fd3c7e79bd09d9e608dbc1f51169dabc13c7a6ef40d1cccc9e193647e53a41bfa272281332c0d079b0b853866397051466629c9354d7455211b67f710c32b7e45af307519294edabb4ea15733d8fdf460785b936a1978968d41925bf7442f59"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x20, 0x13, 0xec, "c2d39add920709ad018b3861ac57867181b186ed6c31e041b8546aff1f9a510d4ff81165bd82f5dd09b4e4da35abc99f474c6dc62c0268d165481ab1b1eeb42d3e55f9e0cb87ea04656d127877f479e66433922f367b23e19ee259d357af8fe5ea8dc0a3556f1134bf45a92cd4351aa71cbd97cdfed7cdfa33915ef5927120e72736cc365e00252049758e7dbc000cbc1fb483cd0536aa6d313364f8a796a6d798e83844d235fd07799028742cadcb13acef287e3057b3f52981c967d76031b871a4ef83dbea406d2f41947c307bbdd467068a937e871bc6a48e33ab51eb86e20e037fe4616d556aa7a65602"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000001040)={0x20, 0x81, 0x3, "053fab"}, &(0x7f0000001080)={0x20, 0x82, 0x1, "ad"}, &(0x7f00000010c0)={0x20, 0x83, 0x1, "cf"}, &(0x7f0000001100)={0x20, 0x84, 0x1, "a1"}, &(0x7f0000001140)={0x20, 0x85, 0x3, "d851c5"}})
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000001200)) (async)
ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000001240)=[0x0, 0x8]) (async)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc537, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x716, 0xd, 0x1, {0x22, 0xd01}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3, 0xff}}}}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x310, 0x7, 0x8, 0x3, 0x40, 0x81}, 0xc3, &(0x7f0000001300)={0x5, 0xf, 0xc3, 0x1, [@generic={0xbe, 0x10, 0xb, "5e3221eb33952bb4b3a49c56f36c087d6a7587f93a88746dc1e14fe2a55e5a6623ec6343eec068713d9c7fbac4bb5fcf62638674703795180d0f6d779554c3dfa4682c36462054bb03ff8a5785122739c07c21c63ca029c740e5d41be6c4e676e0029fa03e5cc779570f63f0b2bc7c4df7f1b169339bd1e5b4e40514221ecc47e085ac92d232bcd0dc329e7b33125ad249cd66b2cb900b44b211296afe88d416d1079816a12534c6f9e2ec3286d5212d2014242aba38e953cdc0ce"}]}, 0x9, [{0xb3, &(0x7f0000001400)=@string={0xb3, 0x3, "8c87b551a2784969761cdac61ca226019227f82b8e71d9b70082ce66ad8fc5848803da095bacba17af8096c1a34be304798efe19930a50beafe78014669f9c95f4e03fa43195c7c3f1af2ab6249ef6bc91c37fe0c6074c9cdadb688c526c2d9eb3eb1576f7888129e095d2afaa9405d3541fc83c95560f48d685b8fe97f05cd6dcf3aee99de5612bb9fe95f6c5ac76d5cde9f59e1e81867375a37ada61fc68a7efbeb6436c1be69ba8ec5eae644b013c85"}}, {0xb6, &(0x7f00000014c0)=@string={0xb6, 0x3, "4d5b6613e2d5132ad1b79f98086ce7298daf107f32b4808f07660f2fc26154ce82ebe1714979a39d897fbae9eb749ac12dee4eb23e1f004fad68978aa63cc34a6b2cf63531533f62f966f3ba7e6945f5892a883f7516b496578841fbfe33524207a08209e9db3472f143420ecf62f36cc02f8621779b73d295d262c87cb748e30df6c348e9850d82a8b3c434a74d1b537a264739dd3ea39c226f666b4d0d24fbc49730f19fc97454cbd59b0ba002054fc9787161"}}, {0x72, &(0x7f0000001580)=@string={0x72, 0x3, "c36544cfcdb728d3cf2d7103a36ecd6fb1779a5b22fd6f1b69074696e88af825f76d54500d96b9ba52bea2245c1f880aa9f6b91d8bcad2342a10cb97e7e2de67dd2ee9f83eb8dadcc8eb8a92bd09cb6feda0c97f93b40185eadb20d89d34e28d343d13084001ff369d1d871487786034"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x200a}}, {0x4f, &(0x7f0000001680)=@string={0x4f, 0x3, "a181258b9d610213c269990205772faf0738c903043da17b8fe6e7edcf8c59eb185dee193b2baa6d309c6194e2fb77dd35d3cd30ef231e393efe3cfc3606bbbfa9f4d9606e381ed259f0200070"}}, {0xab, &(0x7f0000001700)=@string={0xab, 0x3, "69a2eb0eddf0e2f5cebea73ba2bcd7efefe0376f203af4e12a907f28afaef61bbdef866d643bb40bb7bb6c9b555efd94362e74de06cafa3fc76bfe2c5618c63f4d2b7a723f824fc332a7ee52d2e94076b4ee2c4d2dca51885afd87278e1ad8adf882a35e7dab01e85849fa15459c6d769ae392166f0f067957e9530f7c1ac9445ff0c73a03bd5ebd393d520e9ec30d680515e9c44a5c6f931f708e90b96928ecfca525622bf09bb37e"}}, {0x87, &(0x7f00000017c0)=@string={0x87, 0x3, "5a88e594643c844725f013585809844dc357c592a683fdaaff2118fe4e06b3b540da855a4b5299088f71bbfb18a143f88320c9d643c9dabaec6351e224ea61870df73422ff720e00ab8878df99bf8675a8946973219c266d849710204f1df23b2712b52cec573bd42514490e21a0a19677565935d6c09aa9796af7de27d6b0f0aaf44e1032"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x42f}}]}) (async)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000001980)) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000001a40)={0x14, &(0x7f00000019c0)={0x20, 0xd, 0x30, {0x30, 0xa, "d041a77375042ec6fe99aa96f48526ba1d7d67f6ae9ca1b2cd9dc6eae1a70d799f335c8fe070c4e9bfbce3d3e25f"}}, &(0x7f0000001a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7860}}}, &(0x7f0000001c80)={0x44, &(0x7f0000001a80)={0x0, 0xe, 0x32, "5fdfb5e992c00f9d633d982dbb7713af6798669412bcd7f536bfe7b336bc967d6c834ce83492de21c9bdf4547ec06e395cd1"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001b40)={0x20, 0x81, 0x1, "d5"}, &(0x7f0000001b80)={0x20, 0x82, 0x3, "01eac9"}, &(0x7f0000001bc0)={0x20, 0x83, 0x3, "ce83da"}, &(0x7f0000001c00)={0x20, 0x84, 0x4, "8439a2e4"}, &(0x7f0000001c40)={0x20, 0x85, 0x3, "27f7ce"}}) (async)
r6 = syz_open_dev$hiddev(&(0x7f0000001d00), 0xffffffffffffffff, 0x80)
ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000001d40)={0x1, 0x0, 0x7ff, 0x101, 0xd, 0x6})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2d0, &(0x7f0000001d80)={[{0x67, 0x4e00, "7e0b724bc6e1316a3249e6e2a5ec784bf89af7f07bcc54dc870ec9fa4062e167562ebf452649588c104316408ae2a2aaba545c1e68f225e776dd3ced7e3a268920382fe8eb13fb9a21acc48d89571d58f562084ffaddab008c1258b74fb2cf7fdafd0303d1f7ce"}, {0xd4, 0x4e00, "b7fb9df1dd8bb7d2eb0909b3a8d905a4565ba6c6d6a86d0e6aa62b05b2dab0f896ad5db77040aaa66ecf3030678002bc84d558fea62dac0848d89e80970ffd6d0932862e016a02abc0db1eb87a5ab47cb3173e26b61818744cfa3c224143897fbc60c68ad2cdaf0aef1ce71c4b340dd5f94c600c0396623c76081ab9de7210dabd3cb25d3b3b1a2e96bd22c43c26c1ddf79a24b0425272d55d6132de795ec51df5ba4d0188268bff8e2bc168b81d587ce776d239e0c09e5f41a818911d63cc32e0439fbbda0b5bd24d0ce61cd73903815f5448ce"}, {0xc9, 0x4e00, "e747a23f897c478a92b46d07d6228dc711fbfb746d7cebccdbde1843d315f25ae8913ea332e7ff75c9e94fe3995ec328d4aea0fc9dad67ec53878fd47804e78c275884b8a6cf9d8a81131df68f0255b71932f729620ed89539490aaec5f7c0a1700b0717daf2f17ddf6b47865a5d2cf8d0b284f2415208bfce77689c9265e3ebfcc2ba5e3e5c50a7162c8f637fd78d4b2bd54b4231fc09f47a46153acd49d6bb0241e811e6a5109fb3cd4333a8324878bfca4c66e6bf8f5f7f9c3a88122cc4337d1b1960017b1e30f4"}, {0xb7, 0x4e00, "e1cdf5a4c68c14b9771e29a3a056943dfc9071b171fda998a3c34035b3914a92a1e0600daa7bab615a42931dd75732a274a420e9a55136d027e785d0bdfd7ba69d889a95e5af68e1c0327299cf16d9e0d26a9028f5461d6e473b4ead55fe25c4fbe8c08e3d5282892f1fff3bdcfcd8b24a23fc402b7e026de622e606f4fd979dd05f5ba792477cb5a32199f485005e4f0b75c928dfd75261df15750a72b6e60e97371d141996d2145711b89df10af2c3ffd60d2dabd2ce"}]}) (async)
syz_usb_control_io$hid(r5, &(0x7f0000002240)={0x24, &(0x7f0000002080)={0x40, 0x24, 0xf5, {0xf5, 0x23, "ec11f372f13d8a8061711119424d25135c37a29b314f5ff48007a2eae67ecf8dcd88cfc1b61397c6de3ef737187bd5d3aca85cf608840ebd3bd90ef69a5f6d2d1f12f50386623f607bedc680bf0e7542888b96f3ade4f76fe7f2b37b1421052db1146f55d2e05b03d3e7f4f3eb23ac929af516ca4ecaec07bb0cca139eabd15fed0c942ed4f2b6b4f4d4492fb0f46c06d2e69b9635c8802c9d942aa2c13c62070fdc1b5105fd079bfdcc0f5402fa200a765cebe69ef8248fd9eabb3f1f682387396d66262d02913adad3c6cf5b0042e650cf29e1ac2a77fdabd575473e112d67da59d55d5e9935015973ca53362b2674f1235a"}}, &(0x7f0000002180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1428}}, &(0x7f00000021c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x1, 0x1, 0x9, "a7"}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_012={0x2, 0x0, 0xa, "3593"}, @local=@item_4={0x3, 0x2, 0x8, "cf399287"}, @global=@item_4={0x3, 0x1, 0x7, "c24c5d1e"}, @main=@item_012={0x1, 0x0, 0x9, "0f"}, @global=@item_4={0x3, 0x1, 0xe, "caec9d81"}]}}, &(0x7f0000002200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x89, 0x1, {0x22, 0xf8e}}}}, &(0x7f0000002500)={0x2c, &(0x7f0000002280)={0x40, 0x0, 0xcb, "70e5a7fd5164877cf74273fcd7feef6d35de14ba39b151c071eea358d2cdf4f6dad3b71d851cfa738033ddd3f8bbaaeeb1b9383a601a40d1b656f7d757491a011e0956400b15ca11a13b68ca7f3405944679ee2a3f8da4f8599ec4b403c759ed3a3d1f230c8ef3b946b2084594a9e5c10c88357115b875d8e1605ee5eb8e30d354909330f5128ef7d67ecb76cca1c09aa4a925d5f742a3940b260919fe5e8dbd1d5e59d123763bb2d21735bc7b555daf1cc9be6f59887235314d8f29ce0efe6323c95e40f866a73e00d6de"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002400)={0x20, 0x1, 0x98, "84ebddbedc1e3f180b304e0c99ad5395195cf3171624607144de01493348df67ceb0cc512a6c1e47aa6f6c3ae82e8f87dfe6dfa1240d381ae6283089e7583560eeb15bee8b7a038e3b0cc5cea90723a1cdf27740c6c1e01a866551129ce7493e6c3a99e0c2cf499a83182547f44914c36d0aecaca179caf58a102826a6abffda2267055faad6c6d1a981fd075bdeaaf6613ac180131b5be7"}, &(0x7f00000024c0)={0x20, 0x3, 0x1, 0xe}}) (async)
syz_usb_control_io$uac2(r3, &(0x7f00000025c0)={0x14, &(0x7f0000002540)={0x0, 0x23, 0x6, {0x6, 0x21, "76e4ff1f"}}, &(0x7f0000002580)={0x0, 0x3, 0x27, @string={0x27, 0x3, "774c42e9feabd211002fcd9f012e4027638dc8b2c4e843d24af47d624528cf3029fd1bc8f1"}}}, &(0x7f0000002800)={0x44, &(0x7f0000002600)={0x40, 0x11, 0x9, "8ded84849cd86237b7"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000026c0)={0x20, 0x81, 0x2, "b061"}, &(0x7f0000002700)={0x20, 0x82, 0x1, "e3"}, &(0x7f0000002740)={0x20, 0x83, 0x2, "56a8"}, &(0x7f0000002780)={0x20, 0x84, 0x1, "d4"}, &(0x7f00000027c0)={0x20, 0x85, 0x3, "8cb44c"}}) (async)
syz_open_dev$hidraw(&(0x7f0000002880), 0x9718, 0x2a4200) (async)
r7 = syz_usb_connect$cdc_ncm(0x5, 0x148, &(0x7f00000028c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x136, 0x2, 0x1, 0xf, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "550e64aa0c"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x71, 0x1}, {0x6, 0x24, 0x1a, 0x8000, 0x33}, [@mdlm_detail={0xd5, 0x24, 0x13, 0x1, "d24af383d3b37c962ad781f9ca3195768919fbac51d730789afd518dd4c5f9a0f3f42a2be6b5ec010867ded8e737a9f73014c4d2e3ddd57a94ff96e04e95810b1424d14bab61411417ccce74c6aef68fbc579d0ca8d54534999b48a552b4bb8758efb2f17176deba8827ccabbfe3ceeb234f283bea63688087048a67b08b41630460d65152d08d2720db8a4a48c5ab51cb25d53dc2e0ca7eedd370ea6439b502179b63c8ae873ec0d75ecc715fc0bfa217a8bd2987e82e74c86f7270ebc9e776eb9d36807a83f1b6fb52e5f47edfa0c980"}]}, {{0x9, 0x5, 0x81, 0x3, 0x440, 0x80, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x7ff, 0x6, 0x3, 0x3}}}}}}}]}}, &(0x7f0000002b00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x10, 0x0, 0x8, 0x20, 0x8}, 0x10, &(0x7f0000002a80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x80, 0x7, 0x6}]}, 0x1, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x439}}]})
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000002b40)=0x33) (async)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000002c00)={0x14, &(0x7f0000002b80)={0x20, 0x22, 0x38, {0x38, 0x23, "22360d11dd4d5490cf4f818f9bc6888bb6aa7e1c8a0ab695690ce3fe6d34ae534ffd3471753fb1c2a5a7adc77f013e1e7d2ef1a3ead9"}}, &(0x7f0000002bc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002e80)={0x44, &(0x7f0000002c40)={0x40, 0xd, 0x66, "5dba6691df11ca597063104037df3855f034f8b707895d9f8e403672c39e74838f803f93a5d19275e941ff7a46553784a578afbfc8e3d8027fbdcf39246b381b42e64f478e07e1ab4b480b5ad71d93c7be8fbd8e3db4475cc9bc175615e644ea483d713bbf16"}, &(0x7f0000002cc0)={0x0, 0xa, 0x1}, &(0x7f0000002d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002d40)={0x20, 0x80, 0x1c, {0x1, 0xc4e, 0x4, 0x2, 0xa, 0x7f, 0x9, 0x10001, 0x5, 0x2, 0x8, 0x1d5}}, &(0x7f0000002d80)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000002dc0)={0x20, 0x83, 0x2}, &(0x7f0000002e00)={0x20, 0x87, 0x2}, &(0x7f0000002e40)={0x20, 0x89, 0x2}}) (async)
ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) (async)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000002f00)=""/104) (async)
ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000002f80)={0x2, 0xffff, 0x2, 0x7, 0xe, 0xfff}) (async)
ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000002fc0)={0x2, 0x39b481fab3b01fb5, 0x3})
executing program 3:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a24020103040750"], 0x0)
syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="050fe805"]})
syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcb, 0xe0, 0xdc, 0x10, 0x2ef5, 0x8, 0x3244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x60}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001380)={0x34, &(0x7f0000000000)={0x20, 0xf, 0x10, "a704a400d6019037b5f4074b326e0000"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xc8, 0xc0, 0x9, 0x40, 0xeb1, 0x7007, 0x209, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x5, 0x9, 0x50, 0x1, "", [{{0x9, 0x4, 0xaa, 0x5, 0x0, 0xff, 0x0, 0xff, 0x10}}, {{0x9, 0x4, 0x49, 0x10, 0x1, 0xfe, 0x4c, 0x3b, 0x4, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0x6, 0x94, [@generic={0x7, 0x5, "8446f664d9"}]}}]}}]}}]}}, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffb)
read$char_usb(r5, &(0x7f0000000000)=""/42, 0x2a)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
executing program 2:
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xbf, 0xe1, 0xdc, 0x40, 0x2c7c, 0x30a, 0xcfd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x31, 0xe8, 0x1, 0xff, 0x6d, 0x83, 0x3, [], [{{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x22, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa0000008097")
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d015a000000000000100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x20, 0x15, 0x3, "81e8d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=@string={0x2}}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES32=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d80)={0x0, 0x0, 0xf, "13c823cb91228757fad8f37e15b5be"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="4f6044d7a690240d6d040e0af761010203010902120001090200dc090439d30003000009"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000")
syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x81, &(0x7f0000000180)={0x5, 0xf, 0x81, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xf4, 0x2, 0x2}, @generic={0x72, 0x10, 0xb, "928403304e81c9f22a200451239defc8ac034ae58f267828f1d26afa65ad9c891489a4d8cf2331d35c0fb8ddff60d8ca9ece95cdf09bb92d0f90c6c4857cc14c7f81a643091ee896ae1fc03e0a19ebc8fe61d992bdf95fe2e93f035c98c9003b4b44673475f8996dcca7d0ec734302"}]}})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000d00)={0x14, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff3a, &(0x7f0000000140)="04000000")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_connect$uac1(0x2, 0xdf, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x3, 0x30, 0x9a, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x30}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x2, 0x2, "1532"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0x5, 0x1, 0x66c045c14cceb57e], 0x80}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0xff, "789c"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x7, "cb82254e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1c00, 0xfad6, 0x5, 0x2d}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x7fff, 0x9, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x81, 0x92, "7b45da1fb7c0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x44cc, 0x5a, 0xb8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0xd, 0x0, "2051d426dd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xbe, 0x9, 0x0, {0x7, 0x25, 0x1, 0x6884674642237d0c, 0x4b, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ef, 0x3a, 0x74, 0x8, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x150, 0x94, 0xcb, 0xf1, 0x40, 0x7}, 0x12a, &(0x7f0000000200)={0x5, 0xf, 0x12a, 0x5, [@generic={0xec, 0x10, 0x3, "4132362ede1a66fd11f957c67d5d036383f6eacc8af09a3934ca415f51e1b261d599a0c4f004a366c746e9b8706ab93c11cc2db8c2f00b6e50571cfbaf14d50fc6b39d09f0b8aa7c6ad915b2151d52bbca33aa3e54543a0d5bb6302128a63d2ca878857740d43e9430fb3b4c02d0eb44c0b5e193353d9e040eb1ed550302b869f4df9916d1b1af4fae2a546be65482769fac22e13dee0f3e474e9449fad4fa2f5c1416b1ee18e1b13ac00e4a951c84ca9b07f2aa9643382f1114f044b9df50beb69dc6c84faa9a97c3431b5970880badac3ae03c276bd0884b456c321dc33853c1f20e0588b45ea39b"}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x0, 0xf00, 0xff, [0xdf80]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0xc, 0x5, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8dae13cae7db190aaee1240e375debe"}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x413}}, {0xf9, &(0x7f0000000380)=@string={0xf9, 0x3, "2f02f1b90fe9a21c892cca4b2067bca3c131fbb33bfbbcb3ecfedd3064cbf8d4fb336f9fa26014cbe0db945647c0967d93b444426fe7c27cea2023cc61e2156a97c49e0bbb2e9452ad7a41abcdd2f66be6f0aaa7f6512d37f3c70483d854fc7aa85906986885dd8d0bf1c24771184ea2ad1582b3492f6b61d134dc4242b677d9724cbaadb0f351f111dd8c18c2b6558e0ae6eb393dd78fa100327dff1257fd322836733519e488c8ff2b2d1491c341ff48c664fd11f2153ab6b8cedfeb60d731e0c191826dfdf514ae18fe082462b44c28077b26a244f3862547331572ab9ad567a3a5be20e8b0b306d388372c72be4f0246f5afed16b8"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x405}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "f9d5a832d8fcd499593cc65be3bb6b91d88b5ad4daa6c0eff41035d8d7265cfd43c7e1f3bdadbf5b4e344d5f7b0da90bfa233dac50cc765c456e6cfad6b3cf4e7f78edae3c16b7f87bd9fc830bbca7c46d1691326f689141aa3ce719d4c6572bb0608989866bd6f8d6b6712d58fe32124ee6327e578f3c5b9fed9bdcffa32523b52fd62b6d5971107c2bd68cb04bd3a2a9cec362e269d2c2184d270d4b7112d481f32ce86dd3da304392ef5610dc82e6ec10fbe133336296ef7130eb33c90bf6739fdd4d19800b3e03"}}, {0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x83, &(0x7f0000000700)=@string={0x83, 0x3, "cf49afeab5e88146c9c2f7f0e624e13478e2649888ff6b76a90556dd28888fe93dbde7773d71436bec4266b7f915c3aae82e86e42b3c50ddb38081bf04aad841e5771c6f8c1e8d41ccff9766828c2ac598280adcc8a7b47b5d51cfc737f6acf8804573657cbc4ebb0cfca22cb67567d3bf528996fc037f62f1aa2a3997b5d6aff9"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000840)={0x40, 0x5, 0xd6, {0xd6, 0x10, "d851dadb0fe7896cc2a37bca19933c1ac0e019f3fdceb8e7769bfd77aa5f2bc5ee9d9713c093b03e1de184e429e1d8e353d453af5f50f66ed96118a89f0c7e883f976bc046d18e5154fff5e4cf5d121e0602cbc4f559719525483fea03ca846fb2d3ed69ab9bc312793d8823b40494bd7fe93ca220fa311358d3790ecb9290f2a5965b4c375aa04d9283f47769b1aa7bbbd1ab90c1a7810333c2fd1fe99de626bf8c1c61e87b1aad81c9e74a8cb57849b68ffff827ad9032d85f4a99019a0611bb381fd27d2e7c99644330936c1de25cda3ef651"}}, &(0x7f0000000940)={0x0, 0x3, 0xca, @string={0xca, 0x3, "ef9abe45ba477a0d91a45298d248f3bee468e77015c8a83991b18b6c380044fb3ae889e92557bdb5aa454fa0698c8f03c7717f0d2d21d276c6920e644830e9ce8f688e9ac24613bb966f426e450437d251d24f37d1210ec20e85965de880a19b9c1b3d0ed7eebdaa4dbdefeb89ce6ddab09d53663889fc8873e66455a25e59f5f8bc8add223cff794c3f3e2ea982ad178f49931ba57c75b6f91d24d47b4caac0ab971a7c1e6abad41891941db4d70f2044cac11f3d41f4effd4bea304cc8866eb0fc27d9262e22c0"}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x20, 0xc, 0x31, "1c3bbc99fb5c860e597b360158c829195f3518ff3ee9ad0f2fd6fb9a573a80267b3a899e9cb75a7d99f24269990dbbf4ad"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x81, 0x3, "f2633c"}, &(0x7f0000000b80)={0x20, 0x82, 0x1, '#'}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "28eb1b"}, &(0x7f0000000c00)={0x20, 0x84, 0x1, "ad"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "4210fa"}})
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000f00)={0x14, &(0x7f0000000dc0)={0x60, 0x11, 0xe1, {0xe1, 0x0, "f5ca3294440f2919d30e20053e71c567287d7b0ce7eda8d1077929104035bb5502638a993d305aa3d449457a2480ef123f2943451ffd5d624e624ff54bdf0f21fd71c2d51e193cfcdf923f3c0de690f9481506f4f2476a6b124e0cdeb884ba6a8b4490c0fc5402be8e27c8f1e41323b17038ec69cd9dc6808c5bbd91bcbf9d1d856395cc84ec4434248bd9e7669c3681e429099680dae2ce0eaa02a6f74920d2b9bf250cccbed7de1f54a25fe4de2387a975a922cd111820d0e4ebd412fbcb2c7637e002bf666f689d4527e71510dc20023cf63fef9e803d7e7f9e00049883"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000001240)={0x44, &(0x7f0000000f40)={0x0, 0x10, 0xfe, "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"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001100)={0x20, 0x81, 0x1, '9'}, &(0x7f0000001140)={0x20, 0x82, 0x2, 'eL'}, &(0x7f0000001180)={0x20, 0x83, 0x2, "0aaf"}, &(0x7f00000011c0)={0x20, 0x84, 0x4, "e62aa4f7"}, &(0x7f0000001200)={0x20, 0x85, 0x3, "7db69d"}})
syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220600000006"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)=ANY=[@ANYBLOB="004e010000004d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000102f17000540000102030109022d0001010220020300008dbdd7dc00ee09210500090122ce0009058103000281808009050203100005d54a", @ANYRESHEX=r0], &(0x7f0000000c40)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x8, 0x0, 0x3, 0xdf, 0xdf}, 0x100, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1, 0x5, 0x5}, {0x9, 0x5, 0xb, 0x2, 0x200, 0xb, 0x2, 0x5}, {0x9, 0x5, 0x4, 0x3, 0x200, 0xff, 0xc, 0x9}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r1, &(0x7f0000000480)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="20106b0000006b11de5702ff9e5b301b4e452ba31fa8afa8acf8876b123b20d2170c39618bdd4e9f1d9db5320bf0036b34850f2d9e23169649b504059edc2b4d0f58ee057c210067189d62f6131b784e0eb584311c4637e519f2a1f74d116cd23dabb83517bb00"/116], &(0x7f0000000200)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8eef5c817b2f0b8451efa0b4e27f16258ceb4e46f8829b2cf40d6ef6fe6168588390caa0d5433f"}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000004c0)={0x20, 0xe, 0x72, "0fc52ee978a65beb07a1151f805e3e152b89f35be831ed691f1c15e50202b2f1f3eec6d077926ec357cf3b540a456fe85f27186238db71a47aaed820df1aa0069322c11d7ad34098f04b5a692072ab178637c1beca4cc95b1aca21336aa8bdb56b44828a3594ffa1453cfc93935b09f1468d"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000980)={0x21, 0x0, 0x1, "95"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x55, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x3}, @ramp={0x6, 0x1, {0x1c33, 0xb, 0x4, 0x5}}})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1000000000000000, 0x822f41)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0})
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0xfffffff7)
write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f)
r3 = syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000200000010ef0ec472000000000001090224000100005000090400050203000300092100000901221800090581031000001587635b6fa60883e64c2e437bf148d3c3a448b71c5eec42dd8c9919d6ad38a627caa1f75de0756bbe75a3325179bb13ea5292d83f1eb01ad39b706c1b537dbe7af8c167ea6cc0fbd15a9016b7a03728cbeffd4c9b5928da25d2ae8bb0b44c0ac3d5ea50b88427900969004a778bfcf4924d33461fc96c95a3350474512c34ef0fb7b524db01d464c7cc5a38d58287453124e12cc34ee0e4e4fa5aee061b4f3c8bfdb035ec38c14c82e5487817f33e284f2df211e21c7439f3ae319211d543fc4281beefd353416e93416789b36ca1e9235c88f921cd6f45856d83386baf43f3355760cff71c39c66e1421a23f85e46f2d7003e3910d0e16bcf3c1578aae4cecea3127ada8ff45154c8584e8ef762fbd59ae06dcd06fde86f395ea66cb7c395dd80db9ba77e04dedfa03bc5518bdcb8b3b647de2e788473834cc503169450087"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0)
syz_open_dev$evdev(&(0x7f0000000e00), 0x4, 0x20a01)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f5150102ef00090212000100000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x2, 0xd, {0xd, 0x9, "74a731ad3e9f2e802b47f6"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x21, 0x7, {0x7, 0xe, "d1e645c8ca"}}, &(0x7f0000000100)={0x0, 0x3, 0xb, @string={0xb, 0x3, "64872354019eb9c7ab"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0x3, 0xab, "963d3afa09aca9c2bfde6f86755fb4b5321b85109513ebb4a8021e605ae1db8bfd92094be13528fe4ed7122c79bdcb22471cfc5669d0fded51a1e641ca66b21c442e465d27356fe4f36bebb70e19f11abc19a4802261dcf6eef24d606d150fa43e6b7b60c21b36cdda2360a0ba8aa530f3f807318af64790e029d4eaf26bfd15f3c305c5d1fd8b6cff676b4e90d3e18f385b17f7eda2b605b0385076a3bdb48a28637065929f513ad25cff"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x421}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "ef4a14ddb1b1b976964d25ac832e470c16ae621138a60679aeeb849cf47263ae5cfc6fa4146622d8c666c93ba96660"}})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x60, 0x21, 0x2, {0x2, 0x16}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f00000004c0)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x4, 0x2, "60dd5514", "a48149ff"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x5, 0x4, 0xc, 0x2, 0x9}}}, &(0x7f0000000d40)={0x84, &(0x7f00000006c0)={0x40, 0xe, 0xd7, "310fd09d3cc02de665cff601708eac125624f11b0e513d19e605dab302c476c539174b6bdd5dee813b56563bcee6b31163a893865e9a19c27b5feb2faedb5caca835b6c2d7db71405748898c7d7480903c7a125daf8269bd3690c7a9447ac2432978ec6f04798afa09499d3fed286d1e08411fe53de5de128e97d48185b399d17055d88c92736c960db3f3b3c5b07f32129fd1312d340709140c5abe67b4e8c5e1d7be320c8b12f513f681e3923bff11fc46e6ff7eeaa89cb33596d00aa2a40785f0d1ba14b55185d1c68942e97f75333ebcdda1c50107"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x8, 0x10, [0xff00]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "66c8"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "e48e"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x94}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x7b}})
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x0, 0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
executing program 1:
r0 = syz_open_dev$hiddev(&(0x7f0000000140), 0x1, 0x101000)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000180)={0x3, 0x100, 0xbc, 0x3, 0x2, 0xfffff9d0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xb6, 0x19, 0xe9, 0x10, 0xaf0, 0x8300, 0xe43c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0xc0, 0x8, "", [{{0x9, 0x4, 0x75, 0x84, 0x0, 0xff, 0x3, 0x2}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100035d1db64000080000a3850102030109021b00017206f0b909043607016ad6cb0309050e0210000c0281"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x143080)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
r5 = syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_connect(0x2, 0x5e, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030105a0090904000000010100000a2401f7ff0702010209200303000303030b052405060709040100001ae800000904010101010200000924020182040910ca0c24020109040706f7e042390905010900045585d193e5fdd49c050009040200000102000009"], 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xfd, 0x0, 0x0)
syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, 0x0, 0x0)
r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0)
syz_usb_connect$uac1(0x2, 0x85, &(0x7f00000026c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x6, 0x20, 0xa0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x6, 0xa5, 0x7fff, 0x10, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd8, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x36db2cf4a2c02089, 0x80, 0x2, 0x1, {0x7, 0x25, 0x1, 0x8, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xd, 0x1, {0x7, 0x25, 0x1, 0x8, 0xa, 0x3}}}}}}}}]}}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r8)
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40081601020001000000010902350001010080320904000005ffffff00070581024000000705020240000007058302"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0xd, 0x7a, {0x7a, 0xc, "9a15f1ff8ddf17d10bc0070e5ae196f4daa4b1ca5c74fe9663ce227da4d6114bbb9820a97ccf4f310671c262d0fede4b42908f725455c71582795e8e9cdad19d2479603c077c3e1b5eaa3a103eb3d85ebfb978608454dde239b6c5809095c50444c589ca82860205cb5a336e95ce8332ec3d476e8e9dad0e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f0000000740)=ANY=[@ANYBLOB="000f460000007eef7fdad3cf502b8af8050f46000503100b0a10030003008004e9ea5c6a0553a22ae6afd592896805000c100a82e001000000ff0104141004bf747680ec72cc1b89532ea18f96582a3e141004021012915a1fac"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x80, "554e47ec", "e3af490e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x6, 0xf9, 0x3, 0x1ff, 0x3}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x10, "bce34f59fd8df661902e89c252230287"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x7, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x10, 0x2, [0x0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1}, 0x0, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="89e4140b0ef0"}, &(0x7f0000000540)={0x40, 0x19, 0x2, "bfce"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x8}})
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x9, 0xa, 0x7f, 0x8, "0025cec1fd0b384b5950f1c31ff1a962311a7a0296c5d8c9e79cee06f9c71f57"})
executing program 3:
syz_open_dev$evdev(0x0, 0x5, 0x169700) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0xdf, 0x36, 0x7a, 0x8, 0x2040, 0x9950, 0x525d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xe4, 0x40, 0xab, "", [{{0x9, 0x4, 0xc9, 0x9, 0x0, 0xcd, 0xce, 0x3a}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x501000)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/61) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002500)={0x14, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x4, 0x0, 0x0, 0x0) (async, rerun: 64)
r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="208e0200000002cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async)
syz_usb_control_io$printer(r4, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r4, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async)
r5 = syz_usb_connect$uac1(0x1, 0x83, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES64=r2], &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x38})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x22, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa0000008097") (async, rerun: 64)
syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYBLOB="040e463b3fd401bc77c8eafd2d6e28885cadc6bdcc757144671b556d924fa77e0c700d2763c4b64e1c1aa6306be4595dd61111d4697cc4df5a77d0ae6979cd864caf9e95e5450494fe444e1668b39776521ecfdc9de0e42ef7ab45657e5f26410ffab6eae18b31d52777549281e1fceadcf0ca6cea50ceb926cf9276de9eeb4f8c6359131cd6ba27d8d0760b22c3802f723557cc1c72449c17fa44fe229bda6ef7ceb01a76bb30940a", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x20, 0x15, 0x3, "81e8d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000004d00)={0x44, &(0x7f0000004b00)={0x40, 0xb, 0x5, "a947960cb5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_open_dev$hiddev(0x0, 0xc, 0x1) (rerun: 32)
executing program 4:
syz_usb_connect$midi(0x5, 0x30, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x1, 0x4}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
r4 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0x5, 0x6, "b60dec8f1745"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x8d, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2"}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000080)="0041c3")
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000005979e08d21001000000000000010902120001000000000904"], 0x0)
r1 = syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0xc, 0xf1, {0xf1, 0x6, "a8429631d9fd74fa81b94cc53313f2a5553e0e7f1d1e710b48cee290c628adaaffd10ab2a4761abc4001ba788f717b12a1a5d98ad561d7deae4eadd66325be28e6f20b60f6686a7e5708ece6a9008439b2145b9115bb775a0df915a3de55c22c916ee6c9d1e3a47e2045e70d4be714f89215be4ef0844c0a659276a36f1dff1de22821b1a36e93e39ecbf0895cc77d760935c52bd01fea6577fdf1852af2eaf6132e34d3608435e3634ed25db5b21b05ef1b6cb94afdae48abd89073a253362e0c7af9d7642321349149e114f47b4f2c3031a0cebe1caac62ab1b0e59be8f2091ffa9b4062f761302ae6d792d1dc71"}}, &(0x7f0000000180)={0x0, 0x3, 0x16, @string={0x16, 0x3, "20ced3c763487a033ef72e23a5660e5f547f8318"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xc, 0xdb, "2bab25086170a8d47aa8fd31f55614e3695f012896d9725620d88d84ee44db603d92b18292f2f11ad422ef7075c290b64deaa0436fff20433cda2f51566cb8f588735ef0af9757bf83548a1ee796c012374cb9a1228b5056f7a3c38f9740a746537df886949b62ac3750a7dcde0e2550afe39e3f0da4ae5e2195a9e761f9646be8abf72f3bea2ef22dba741ff4d051bf3219be46b8564a4b1775a3ef082982c8cbf5edbb2d71fd7d48b8dd38d43a2d0493e767b5fc67f5dde6246eee95da027b061040975018fc4262158a2b076c25f580473a0e9f0ca88c0ef08e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0xffffffae}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x81}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "0b49ab674fb12afa3d5e9d06e4b2844116690f5d65f4617f9b638b452349bfa7d1b058bb11762a0b1c482db4d921b2"}})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000005979e08d21001000000000000010902120001000000000904"], 0x0) (async)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0xc, 0xf1, {0xf1, 0x6, "a8429631d9fd74fa81b94cc53313f2a5553e0e7f1d1e710b48cee290c628adaaffd10ab2a4761abc4001ba788f717b12a1a5d98ad561d7deae4eadd66325be28e6f20b60f6686a7e5708ece6a9008439b2145b9115bb775a0df915a3de55c22c916ee6c9d1e3a47e2045e70d4be714f89215be4ef0844c0a659276a36f1dff1de22821b1a36e93e39ecbf0895cc77d760935c52bd01fea6577fdf1852af2eaf6132e34d3608435e3634ed25db5b21b05ef1b6cb94afdae48abd89073a253362e0c7af9d7642321349149e114f47b4f2c3031a0cebe1caac62ab1b0e59be8f2091ffa9b4062f761302ae6d792d1dc71"}}, &(0x7f0000000180)={0x0, 0x3, 0x16, @string={0x16, 0x3, "20ced3c763487a033ef72e23a5660e5f547f8318"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xc, 0xdb, "2bab25086170a8d47aa8fd31f55614e3695f012896d9725620d88d84ee44db603d92b18292f2f11ad422ef7075c290b64deaa0436fff20433cda2f51566cb8f588735ef0af9757bf83548a1ee796c012374cb9a1228b5056f7a3c38f9740a746537df886949b62ac3750a7dcde0e2550afe39e3f0da4ae5e2195a9e761f9646be8abf72f3bea2ef22dba741ff4d051bf3219be46b8564a4b1775a3ef082982c8cbf5edbb2d71fd7d48b8dd38d43a2d0493e767b5fc67f5dde6246eee95da027b061040975018fc4262158a2b076c25f580473a0e9f0ca88c0ef08e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0xffffffae}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x81}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "0b49ab674fb12afa3d5e9d06e4b2844116690f5d65f4617f9b638b452349bfa7d1b058bb11762a0b1c482db4d921b2"}}) (async)
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xeb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40, 0x0, 0x5, "373208bbcf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000c00)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r1, 0xa, 0x37, &(0x7f0000000040)="07aea5fd62528d5ed1aebb185197f22b320236a939ce584e88f87ca7e19368beed62f7ffe837f1946a9965f640cd27f5df4b82a0624201")
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000004c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0xf1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "82a7"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0xfd85}, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "a0c7"}, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x4}, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x31, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b00"], 0x0)
syz_usb_connect(0x2, 0xffffffcd, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x113000)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d1800", @ANYBLOB="87e295"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001800)={0x84, &(0x7f00000013c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x150a, 0x1203, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x43, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xe1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
executing program 3:
syz_usb_connect(0x4, 0xa4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x20e, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1fc, 0x2, 0x1, 0x7, 0x50, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e34aa304e706"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x3, 0x9e}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x10, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x67b37dde4e7c0443, 0x0, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x2}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xe2, 0xe6, 0x2, 0x10}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@generic={0x0, 0x10, 0xc, "43203b01f23da4fdc9bf557a28ffedc29f808cfaa22ddf12de6a03b5919740b6d92d9d3fef52d2dafc13278d05fcb8e4fa186b235608aec2b21103c41acb6b6f60d30e6d49ec6e37eb75b44669d9627c44319c2fc5c4459c7c04314049d25c49668273697019eb14902da4fda6a11105cf79d6226455eb86206338b36836b13f3a57377b56d00e21ab779278a282bf7e411ccd1baa070aab7b171d271961d74cfc660abce05bc209bc93ac7530daeffa14951e092a10"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0xfffffeab, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]})
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x608, 0x10, 0x4f, 0x4}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$uac3(0x1, 0x91, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x6, 0x0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x20, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x48, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfb, 0x2, 0xc1, 0x5, "", 'n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x2, 0xb0, {0xa, 0x25, 0x25, 0x1ff, 0xf, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xde, 0xff, 0x2, {0xa, 0x25, 0x25, 0x1ff, 0x6, 0x2}}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a0001010000000904000017020200000524060000052400c4000d240f01000000000600009e2006240704070009058102400000000009059b8310000000000905030240"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) (async)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x7, 0x18, 0x1, 0x2, "c0c8534d53c0a83722fe9c5f1e997af2a3528d7eb4f9bab6eb1ff9233c3cd70a"}) (async)
syz_usb_connect(0x1, 0x0, 0x0, 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0xc0501)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000004c0)={0x17, 0x0, &(0x7f0000000480)}) (async)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) (async)
write$char_usb(r4, &(0x7f0000000680)="9ed6b32cc31ae2f6fbff3392b52412fd0703542c138591ee8c1abe125f2e88bd2c2c43966833649812cf19da7299bd3eb2595bb49806e5ac9d6d855aff38659faf7538a18b5a2151f8556ff953a6b415239aeb2315a0260a833ff2c9f4b9b61e5fd41bedfe9418fe0fe7e197acbc2c621c", 0x71)
executing program 4:
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a42500010203010902bd0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402df032402"], 0x0) (async, rerun: 32)
r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) (rerun: 32)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103) (async, rerun: 32)
r1 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (rerun: 32)
syz_usb_control_io$printer(r1, &(0x7f0000000180)={0xffffffffffffff0b, &(0x7f00000000c0)={0x40, 0x3, 0x56, {0x56, 0x21, "836e145d5003cd8c66c866461993b533378a4cc27ee61ac5943376cb47fcb04f674bdd2a361e188fbc6d31d2359f6ce47a920c941ddfed1761191044bc4df7ec2eeff5cd7cac91f1ed1f0fd2468f6f06a93a3b1d"}}, &(0x7f0000000340)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "8cf4ee8fe76187ed59f5a8720e412b91c245e181a4db52782fe930146bab90bf1a467263d891c24f23a4988009f0e08812b2ab8271bc6a63dad581ad2cb67c689ae2219ccf58c6627f7521dd02277f1d6eaba28023c54a7d1fdb903cb3c145b9f72d453859cb08651478f81657b027382c69aca770dbaa113535a69cf176423b9d559c13f8bdde140f2ca7398aedd234e6d6b626bc4bd30d44d7f7faab7b2a5217fd973be58729e7db10a4da4ea3e3b89c1a7d0891ec5d8765d4b01d52860bf64f47045232645049224fe4ce4056afe2364ed9725ce3057f6a038cf404bb62e2af20327e18c41eca860e4bb0f2b0"}}}, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0x40, 0xc, 0xe9, "c140dbeea8458832fb4e1fa066c6469d5301bcc943b999a09f361e260a4af1ec0f672e259990ab022ad07f6616388da5a777f2c4c24f0ce32f9b4d7b62f0afba57221fdea59f264c9cca62d7863e40ceca363bb2f17e9a45a42baa4ccd54094db957197a365d18f5b109c3530de73ba21821ab99f3fa8cfb610c9d358a3acc76e3e0b99aa9a8cc904cc09bdff0aaecb9d8853f0b5a181229688580c938d2140e7f61ba9bbe9fb1b39de45a4386bfd0208d80da97eeea0d164ecc02afff3ba42096c682cf1615e8eb545b041f9496a0ae6b1b2404f9e3db8ef5b87bb83e9538e579b5f88a1fe912d900"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x102, {0x100, "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"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x4}})
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=<r2=>r0], 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f21106686"], 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="16ee8ac793a3334dc9a02b300300e57c841ed389550d7599ccfa03d8e2be000000000000000000", 0x27) (async)
read$char_usb(0xffffffffffffffff, &(0x7f0000000740)=""/125, 0xffffffffffffffbd) (async)
syz_usb_control_io$uac3(r3, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r4 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x88, &(0x7f0000000680)="d9e40ab258882d330c49e6b47d897bffd8499d0dae63215e391bdd576f6fc2544fa6a665ab001fc3c3afb9ef400dea2f436bd99b34b75a304634f73c6f15409e7ed37c2da87a8297f0633aa98791839a2292b9c59486c784f6da55156bbb2ebae0505881d7ff7248ceed0e0a8b63e6699380634651b27d5fffff00"/136)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201002000000040d1180094000902240001000001000904000006030002000921000000012218000905810300"/54], 0x0) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000005", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r6, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x20, {0x20, 0x24, "4833781720093afb9a2c303957e0aa19e97bb455290d2edd31fb055ef4d3"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000200)={0x2c, &(0x7f00000007c0)=ANY=[@ANYRES16=r5], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f00000003c0)={0x40, 0x5, 0x5, "ae5e14c78e"}}) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\"\x00\x00\x00p#'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000f0000c5eb590024c8c8c5c8a9e40da8eb767e0a00cc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) (async)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc576c"], 0x0)
syz_usb_disconnect(r7) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) (async)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000180)={0x3, 0xfffffffc, 0x5b})
executing program 4:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00hl'])
syz_usb_connect$cdc_ecm(0x6, 0x79, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x7, 0x80, 0xc5, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xfd, {{0x9, 0x24, 0x6, 0x0, 0x0, "8f66be3e"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffbff, 0x3ff, 0x8, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9, 0x6, 0x3, 0x0, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x5b, 0x3, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0xd, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x2, 0x9, 0xff, 0x6}, 0xc3, &(0x7f0000000280)={0x5, 0xf, 0xc3, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xa, 0xf7, 0xb19d, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x27, 0x7, 0x5, 0x8001, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa708a0fbb4294625, 0xf8, 0x4, 0xbee1}, @generic={0x94, 0x10, 0x1, "a9d742382243f91702ca7e163e533512494768e5850a593608c72cd050408465740a460c0ca1ffcc95a4a812af8a033167d664feb36628dcd2416ca93979d1f29ebf90c0a5668f4ee1bf6a96feb06c0b55adaae88481bd67d9c82f23f6931b98536764af10cb68f1e5df504d315a03ffb070a1da48a8966571b256cffd627a49d1c9dcdba319cfd6eef345ea08a4f21602"}]}, 0x7, [{0x28, &(0x7f0000000380)=@string={0x28, 0x3, "3631788b7da3344af3700c36a4939c47b5dbe689ebb08eb063f1975105a09f127e24bec79ef0"}}, {0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "c2ff13bf4480ae266974"}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "340fa3ede18563c892a62caf51949b402a8a9364fca19c72e2e831c99a99505a253a70e9b98860c5a3f695c4019d9270d135b229707a286d3a1c690d6ab61b58d17013a8de8904deb58f8be04a8eb11420da15f13c00b38a5c3b23484d99404e70e6b1cde98d2322c1340fd0ed75aa8df348382b704cf23f48f7c1762f47a8ecb9062bb29f12c1f23d1e8bc8c1c7872b97e1b4a7b2cabe1a71ef7833afe22b13f960fb386cb11a0840616d98298dc82ab03cef2d2aa4008a350a6c4b66c5af0f5e54c8cb13ed80ee681c"}}, {0xa0, &(0x7f0000000500)=@string={0xa0, 0x3, "0ee2ee4fe4f30d5b206e0e032033d5f0e1021acc5f029e2b19597c303a335501cfbd2aef96cfc9b8151cd61834f6f88928f9f89865e5ef6be405f2a95af14ce424e6c83424ec566e29c09dacf4a63e8a0ab250a220e515b2ab74a05f54d5fdd892a6d7883d35d94c93fe2ec26f710893831e32a187494f0d07e58b03ae6cb8c86a391184993e28713a2914aca74d59116c74f2be15811f30614ffd66f690"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x430}}, {0x6d, &(0x7f0000000600)=@string={0x6d, 0x3, "a98b1997bb2d6f705837fce678a3123174e048cc85dff07f2ff2296eacb6158b70545ddffed410cf947c66bf01e9d285464140b8b81557365a066d9c373947bfb05210f79b5bf59e8faff05656077642f7df44e61c58636ea01efa2f5b61cf4058ff1ba1de9c629cb8ca73"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x425}}]})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000740)={0x14, &(0x7f0000000080)={0x40, 0x5, 0x35, {0x35, 0x0, "9872972c353b6b6becd37aaf40ca5304d49cb135bbde5f2af0fb4d4c084f771bab8a61bf2387e7b43d41e13f99af964157e33e"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000780)={0x40, 0x6, 0xb5, "0b5b9d1e386a183573451e4661cbc9fd34715aad6b993b35fc79ddff661ea1f004e055c4fd3be9993bf60857bbb71e92134a80c70090e01fd7e736550aae5ec67a933f4f1b344d9d41a60a616c61a1114d4dddedb282a137c2f0429b07f8b094ca1bfb34a86dafe831a9a96ea3bfb5732fc1698a8d51f963c81c0bd4562a5b5b08f3bf23fe6d46e8e8e6c7da61a24846bf39b855732ec4451d74cbd199421c540c5ee4c8dd6966c8fa7d6d72269b60755813c7c6b4"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c80)={0x21, 0x0, 0x1, '='}})
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="c71594f90d3bf24ebe9c1cf4d7e0dc5c271d122082af36ac00bf37789e1009b860e24144da0c99a33c89383406a4589d456df5bfdb2a60de525de46add501ac7603785bb4f4beeffd0e77a2dbf19e673e007cf419cc7c5508727ecdbf4a6037de35679b8ad042540f28e461cd98d183eea7ae86055205d329a466baa17eca06e55b531f5eeeb4a58df206fc1f88573fa5365d37770488e56dab1ee40406aeeea42bd29ec", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x4, 0x147, &(0x7f0000000040)=ANY=[@ANYBLOB="1701f8d7332c1dc071de4ae9a76fe43e8e0a7001550ff961f1e4db4c4243815ea4", @ANYRES16=0x0], 0x0)
r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3e, &(0x7f0000000400)=ANY=[])
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x14)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff090582020000000100090503", @ANYBLOB="eaa199"], 0x0)
syz_usb_connect$uac3(0x2, 0xa0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "6dae0065"}, @global=@item_012={0x2, 0x1, 0x5, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async)
syz_usb_ep_read(r0, 0x75, 0x41, &(0x7f0000000640)=""/65) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xbc, 0xce, 0x4f, 0x40, 0x1286, 0x1fa4, 0x5964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0x37, 0x55, 0xfc, 0x7}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xe19}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xa8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x5, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0x5, 0x3, 0x10, 0x58}, 0x17a, &(0x7f00000000c0)={0x5, 0xf, 0x17a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a6492e7a1b885b992813fb2e20bcef76"}, @generic={0xd1, 0x10, 0x3, "92d6153d6df97adb97db53511d5db8b49703ff405e228bb72d9e7c2a5c9c8d07fec7cf0c044eacc9069dcff9941c226ebe6529075ff20f7aaad96c6ce361d8f8b6ced414434e601d916ec999f2a1dfd221754e2c9be4616eb5ff0ebfd3696c5073e5d71d22ea8c0cac9b125417c605fd35da923f101efea74ca3c287c0325962b8425a7827893325907776aae6da64742dda9e436a42dace8e08f4762a653bd05b7f42520af9d92b87f3676e3f1e5cfbd1266852596809cce7dac74569d00282fa66287d0712efebee5e252c985d"}, @generic={0x8d, 0x10, 0xe985cda640ffc685, "abbc0b05b8ff9ea3dfe461f66bc2b7d3ee9980054dd2aaadabf14df951ea1627dcceaac84d67f264ebc930fbc80b9191be6bc9c7bb795933dcca4dfbe66232232f8d0094df4de1fffca2ac5c31bf39c7a7cc8b237a0afcc4be3b2378195783e57e99834418dfccbdf4a6ffb51cef7059eb1997e358d1cfa5a1df788efd6e83034e1a2cbe4873b9fecef1"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0xff, &(0x7f00000002c0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x804}}, {0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "7b9e1af15a0db9b645f08e9d12620d2d017ae78a56aa0ad7fe31695f1e67ac07ab30e29ef84943bf95c0d83843879dbbefb81b1cbbb88bd3a995205bd8f8afbcf7c2921d92d37ba79bf4ef5856ee695596db6afb29d0a84a3b52527ee67381e476824480d4595cecb66a8bedb6f2551fceff167c1325f429c5e9158000ba95ade3056218077b56171c62b7bdf9844b3981dac20ac8119fc90eca478f96af113705637b29b08e8e8f69aae5acae17c17918ff1db91a7a62e44b2c1a892b593ae3c9e906939fd438"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x424}}]})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_connect-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "6dae0065"}, @global=@item_012={0x2, 0x1, 0x5, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async)
syz_usb_ep_read(r0, 0x75, 0x41, &(0x7f0000000640)=""/65) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xbc, 0xce, 0x4f, 0x40, 0x1286, 0x1fa4, 0x5964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0x37, 0x55, 0xfc, 0x7}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xe19}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xa8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x5, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0x5, 0x3, 0x10, 0x58}, 0x17a, &(0x7f00000000c0)={0x5, 0xf, 0x17a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a6492e7a1b885b992813fb2e20bcef76"}, @generic={0xd1, 0x10, 0x3, "92d6153d6df97adb97db53511d5db8b49703ff405e228bb72d9e7c2a5c9c8d07fec7cf0c044eacc9069dcff9941c226ebe6529075ff20f7aaad96c6ce361d8f8b6ced414434e601d916ec999f2a1dfd221754e2c9be4616eb5ff0ebfd3696c5073e5d71d22ea8c0cac9b125417c605fd35da923f101efea74ca3c287c0325962b8425a7827893325907776aae6da64742dda9e436a42dace8e08f4762a653bd05b7f42520af9d92b87f3676e3f1e5cfbd1266852596809cce7dac74569d00282fa66287d0712efebee5e252c985d"}, @generic={0x8d, 0x10, 0xe985cda640ffc685, "abbc0b05b8ff9ea3dfe461f66bc2b7d3ee9980054dd2aaadabf14df951ea1627dcceaac84d67f264ebc930fbc80b9191be6bc9c7bb795933dcca4dfbe66232232f8d0094df4de1fffca2ac5c31bf39c7a7cc8b237a0afcc4be3b2378195783e57e99834418dfccbdf4a6ffb51cef7059eb1997e358d1cfa5a1df788efd6e83034e1a2cbe4873b9fecef1"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0xff, &(0x7f00000002c0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x804}}, {0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "7b9e1af15a0db9b645f08e9d12620d2d017ae78a56aa0ad7fe31695f1e67ac07ab30e29ef84943bf95c0d83843879dbbefb81b1cbbb88bd3a995205bd8f8afbcf7c2921d92d37ba79bf4ef5856ee695596db6afb29d0a84a3b52527ee67381e476824480d4595cecb66a8bedb6f2551fceff167c1325f429c5e9158000ba95ade3056218077b56171c62b7bdf9844b3981dac20ac8119fc90eca478f96af113705637b29b08e8e8f69aae5acae17c17918ff1db91a7a62e44b2c1a892b593ae3c9e906939fd438"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x424}}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$printer-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_open_dev$char_usb-read$char_usb-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x4, 0x147, &(0x7f0000000040)=ANY=[@ANYBLOB="1701f8d7332c1dc071de4ae9a76fe43e8e0a7001550ff961f1e4db4c4243815ea4", @ANYRES16=0x0], 0x0)
r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3e, &(0x7f0000000400)=ANY=[])
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x14)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff090582020000000100090503", @ANYBLOB="eaa199"], 0x0)
syz_usb_connect$uac3(0x2, 0xa0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="c71594f90d3bf24ebe9c1cf4d7e0dc5c271d122082af36ac00bf37789e1009b860e24144da0c99a33c89383406a4589d456df5bfdb2a60de525de46add501ac7603785bb4f4beeffd0e77a2dbf19e673e007cf419cc7c5508727ecdbf4a6037de35679b8ad042540f28e461cd98d183eea7ae86055205d329a466baa17eca06e55b531f5eeeb4a58df206fc1f88573fa5365d37770488e56dab1ee40406aeeea42bd29ec", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 22 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_disconnect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (rerun: 64)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r1, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4") (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000100)) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x79, &(0x7f0000000100)="7e406deeb1b1394c9f14acbab87aba1079cf70570c0a518adde340abfd009e52604b7c733c2fd84da791330ac117e5b3e862f31e8cdb0dd5dbc3a3661c878d4614615e5efdd066b09994cb1329e0fd9dbf2a6f973f97142effeb5051b07537809e9035449a7255854b72cca82c22df95ca413d01dc5599bfe4")

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
reproducing took 2h11m25.572896446s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888116597071 by task kworker/0:3/3054

CPU: 0 UID: 0 PID: 3054 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 347:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 347:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888116597000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888116597000, ffff888116597800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116590
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (kworker/1:5), ts 181253812514
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 usb_create_ep_devs+0x4d/0x2b0 drivers/usb/core/endpoint.c:149
 create_intf_ep_devs.isra.0+0x161/0x200 drivers/usb/core/message.c:1312
 usb_set_configuration+0xdb9/0x1c60 drivers/usb/core/message.c:2274
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
page last free pid 3080 tgid 3080 ts 97599771423 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 alloc_filename fs/namei.c:147 [inline]
 do_getname+0x35/0x390 fs/namei.c:187
 class_filename_flags_constructor include/linux/fs.h:2586 [inline]
 do_sys_openat2+0xc7/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1423 [inline]
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1434
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888116596f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888116596f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888116597000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888116597080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888116597100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888116597071 by task kworker/0:3/3054

CPU: 0 UID: 0 PID: 3054 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 347:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 347:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888116597000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888116597000, ffff888116597800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116590
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (kworker/1:5), ts 181253812514
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 usb_create_ep_devs+0x4d/0x2b0 drivers/usb/core/endpoint.c:149
 create_intf_ep_devs.isra.0+0x161/0x200 drivers/usb/core/message.c:1312
 usb_set_configuration+0xdb9/0x1c60 drivers/usb/core/message.c:2274
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
page last free pid 3080 tgid 3080 ts 97599771423 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 alloc_filename fs/namei.c:147 [inline]
 do_getname+0x35/0x390 fs/namei.c:187
 class_filename_flags_constructor include/linux/fs.h:2586 [inline]
 do_sys_openat2+0xc7/0x1e0 fs/open.c:1416
 do_sys_open fs/open.c:1423 [inline]
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1434
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888116596f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888116596f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888116597000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888116597080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888116597100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================