Extracting prog: 19m26.997623366s
Minimizing prog: 1h13m31.097471953s
Simplifying prog options: 0s
Extracting C: 52.718207957s
Simplifying C: 7m57.372473329s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x20, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000140)={0x0, 0x0, 0x8c, "88481c9520c21285bb3a5bc70c2e79eee71a41e01da642f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee7cd6100cde64a27cbae192809c6eb5ea9af4a3e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b231f5b51d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x57, {0x57, 0x21, "83d37c9acc99c18b91666abf1e31c32ea0bc7f5660e755bd54735f48740d49acc48c40e254b7b65fc64cb203d2c145873d2493d72e8899a15c926d4a5aa464c60970774b1cffb967fa7e1c9d045a56087e75806694"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000580)={0x44, &(0x7f0000000100)={0x20, 0x13, 0x24, "a53b6bca6683b77cfe9c5cf07e45d09af06da11ce14ba75befe95a0fec35bcd886016149"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, 'T0!'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "c5"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "4691cb"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "bb6293"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "989f6a"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x7, "af98"}, @global=@item_012={0x1, 0x1, 0x5, '%'}]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x31, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x67, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x7a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x12, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}, {0x0, 0x0}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "ad73f8dc33adab02b093bf9dbd81b58aaaf3ed63c3c3531b9f3a1e23d7dc0c5bf55a95ed3ddffa35b026f4b0c67e"}}, {0x0, 0x0}, {0x0, 0x0}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, "441a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x21, 0x6a, {0x6a, 0x23, "096f9df7b4e6646d69a360daca742913d38a94317a3e2385d2086a6a6f7109c6478bd6da6a5461cf51bbc311744ee9e5ef14c3392370fd27fb0dc5cf9b29ab11436f9ccc9a84926885ccacfe9c27fe04c8a62a7684913281fa16fbe9294fb103973d4191c7857ffa"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x17, 0xcf, "7bcbcbc30824c1990079cb9936209e5c5c2bd23b5bab464aaec9dd5e72279bcff92c73cf5c63eb758f67b63c378c5ac9da6604faab43e79bd9e82ced5b644b024c489b620d2f7968f565497c82f1cdef392d1c19a9b9b467c7cb1b851a2b1fb4631552761690cbc934906d67c1608b1a91f12eb596219063d5a1436627428b2d3e4163cfc1b14d0644ad6ff34d0ce886ca535c483db768422b65d5767d1307721d1cfc738c60485685c216999b5129423d11bd5e39d9fe97525e909aba50389adc82b26d8f530c463da753a890b4fd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000340)={0x20, 0x81, 0x2, "33c5"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "580f"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "9bb0aa"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "1d2292"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "95148b"}})
r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0x621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x7, 0x2, 0x2, 0x20}, 0x135, &(0x7f0000000580)={0x5, 0xf, 0x135, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0xff, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "330f131061d2c55c5749fb641af3f141"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x1, 0x7, 0x31, 0x94}, @generic={0xfc, 0x10, 0x3, "243357add1832593f891c68bd587110785e6b03096b295eb5c3bd43eb01c7abd4ffc0a75c32846d176d037aabc0c1530313cae13f3016303ecbd40aa16c3a3710b12c03161b3b72f526e42c476fa1ddd9ef7d22d3576d7138f26deb6bc51b5986861f964021acf6af0aac8b8f409f69fe5cf30aeb0d012f7b4462873353cd07668fd469180ac59a9881a851999030fe87ea2beea386bc8bae8b3d7e61ae915646241e7ba5fb1c12bdb663dcdb1cb5129525cdae25a8c0afd63249ca97394eb6cc8804974935be2363b1c96de64bd1a0214bf8c27c9f06a6f554be1d8f0c8b4e93a8f85a8e3e9e6168f26c0432cd891124c67404bcb84c1f2a6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x3, 0x1, 0x9}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x19, &(0x7f0000000700)=@string={0x19, 0x3, "fbb495743ebf874fde0b870de6960d5d3f97dfe186dd4b"}}, {0x5b, &(0x7f0000000780)=@string={0x5b, 0x3, "5dacc317567885c42cab1cbb138a84cbeaca7338dba4682bec49bfc48c267c49dfa7a2d678b75c635709f38fa0d8fcede4adab7e760874624c5e9b2bda0b616481dab40d8802df694de790d3232127f6e3901f529d23219d99"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x408}}, {0x29, &(0x7f0000000840)=@string={0x29, 0x3, "aefb1bf6c16ffc0f5663d9d353caa643b4cc57ee8ce737dd4b4d9214102abaf442c8a56d39bf27"}}, {0x42, &(0x7f0000000880)=@string={0x42, 0x3, "dc05238a113d17dccd6e4b639bad51baf12fcc1c887dd4a2820959372bdc6a6aaefe92d74f78783e9a2a07c05fc8014d65c139cbe65edfbf095d88592089efa0"}}, {0xd5, &(0x7f0000000900)=@string={0xd5, 0x3, "509c4727197a29034eb584c515bb4410926e384b00015c30f5b4582ce8a060aac660d31b7442e3b794110d028ddb898e2800c9e7d0a840d84f7a05839fa32bad56fc9c6ed7d4081c603efb605b0eb358b873d171b1c89c829a1b42e9201e0e0f6b7d2ae87f3c431387a0a6258b3538c1225ec8f83457716cc121c372ac81319c2b96c023b9331c1860da9236270de4378ea7e3f60e2e335ecb45e266a93297d2b4daa918f994b9412945cc3aed6379a85d000581f056eee09be0651cfc04baf273e84bbf455208f0d6d34f19ed904b4bfd467a"}}, {0xcd, &(0x7f0000000a00)=@string={0xcd, 0x3, "91f41b5aab647a4a52362280e48b00ab18216348332597b26abe6a628ea2fd6cee7abe79c27940287698982a30e95cb9633b7a16f99d097ffcbcc4313293e2fb7377e21167fb51d7daeff62c534d14c1e857bea5c29c3deb4183b7298705aed2685f78fbf3191d014ad254d95bf91d1080241afec77646c295d8d2ffe255ab3dd2b13c2482955890c1be3e177b84e55a36e7d5c19fda0e10a2a22919259d14b082d30fef843013431e5730bc07901439f74a0d6a80cd09dfde5f42ed38a87e60c8341bee1dbbf3f8afabc6"}}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x1, "02"}, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x96, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00002900000029c51991"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_connect_ath9k-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x30, 0x73, {0x73, 0x8, "8464b77696890b34bb99b11655ac0564a98191b91e16d8c9ffeaf34909ee1030f20cea59ade06805658bbbaeab6539cf3513a11b4db7a05747a5f9e8be114eafd53557dbfc4dee45719b9792f46e83ef7768cf617e042d99316309975ee23d0254b5654dfaf36ee6a44ad11ec13a565f5d"}}, &(0x7f0000000500)={0x0, 0x3, 0x80, @string={0x80, 0x3, "91b29ddda370627f06d0a8c092d8f58004ecc455c330e86b8f25018da78fbbd6df208a7fbb33e830fe610ec0073cf8d7ea976712fa8f248318922c237799a06261352ba56307e8246fc595eb3e861586f3b44f9352ec64412e815fb2d5897428dbb812745cbefd0aff0ed696004b1268ec4777c5da2a230031909e47a2bf"}}, &(0x7f0000000440)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x1, [@generic={0x16, 0x10, 0x2, "bbfbb4c47798cc79b15b3a3f179265e31ae111"}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x3, "3b4afdc0", "a2972b19"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0xaf, 0xff, 0x80, 0x4049, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x20, 0xc, 0x13, "306f2cfa6f5d04c3514b5c9b094c43cb119829"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf9}, 0xfffffffffffffffe, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x970, 0x10, [0xf0ff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0xb, 0x2, "55f4"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xa1}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "1b02"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0xa, {0xa, 0x6, "dbab239e6da9c1de"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x34, "bc88179b49082fee6b99efbd50359192417e180fbaac5b77d4861d8c29dec025997ed988531ea1e9c08bd24a5830d7c877771e3d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000001000)=ANY=[@ANYBLOB="208103000000e7f29d01493b913e5d3c5342596e1f6aeb65da19d96062a79cfe7b7a673625590027e4c51e82fd829133827ac6e258b2cdc9563187eabd52c17a208a4f1bbd307327c38913f11338495a58a6cd144085eca889acc9fb0b"], &(0x7f0000000200)={0x20, 0x82, 0x3, "5f1e88"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "d258"}, &(0x7f0000000280)={0x20, 0x84, 0x3, "5b3ae6"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "c4ed93"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x0, 0x11, 0xb3, {0xb3, 0xe, "ec8c13d55341e10f830654e59c40104397ee5aafaa3a33798fb2716101be70cfe6d96a51b5e97a04789b12f570569da30da280a0c298eadd7d6c8f9173ad1b6c5f3702abdc81ac3cf44754979c5913f038d2d1a64b0107f9713c830a4fed7e14aee36ad7ce140e9f4b387556acf8f628f96f17eeb967f2d3823d698562f9233316feb4f86abfd6ce198a91e2b752f84a78b28daea0f903f59e3d4564408c00a1661b6ebf5c39855916d5544601336e787c"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000cc0)={0x40, 0xa, 0xc2, "8fb29eadc20e14a04ab687cf4ed47472d40b99076d77b306ac2676f13785e7464b07c7a8fcd2507c46d8ff4b36f0714d251ecaf7bc4e8c7c28f8087d66481f6a7728e90dfcb246d4173c4ae13116a82abafc173176dd3b6651d519f1926bb1c604f8e682ac9c0e7c62fbef6547ea75e74b88f84dc70fb2f47a134e31134083bf89ea84685acbe5991c6d1cb33251bcbf1e2b15e95acc60336738a90ccc3068d2c44c7212e838b1e421da838a842109e99d980cfbbee64d194a93b85057d1d7334025"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x3ff, 0x10, 0x8, 0x7, 0x3ff, 0xd, 0xff, 0x84b, 0x0, 0x6, 0x5fa, 0x200}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x3bc8f533}, &(0x7f0000000ec0)={0x20, 0x83, 0x2}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000f40)={0x20, 0x89, 0x2}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a80080090400000103"], 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 18, 30, 7, 13, 13, 13, 6, 4, 30, 40, 26, 2, 17, 6, 11, 6, 4, 26, 3, 11, 14, 10, 25, 4, 30, 30, 3, 23, 23]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x6, 0xbe, &(0x7f0000000480)={{0x12, 0x1, 0xf1b1a5666b4212f2, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x5, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x4, 0x1, 0xeb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xe, 0x4, 0x8, 0x10, "6ca2928ea188"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x2, 0x9, "92617a0eeff7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xff, 0x1, 0x8, 0x7f, "", "fdec"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x6429, 0x6, "1f79fe872487c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfb, 0x8, 0x8, {0x7, 0x25, 0x1, 0x181, 0x9, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1a, 0x4, 0x47bd6fc5a4e0481b}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x8, 0x2, {0x7, 0x25, 0x1, 0x83, 0x2, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x220, 0x1, 0x88, 0x4, 0x8, 0x6}, 0x1e, &(0x7f00000005c0)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x96, 0x2, 0x4, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x8, 0x401, 0x8}]}, 0x3, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x882}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async, rerun: 32)
r1 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02ff"], 0x0) (rerun: 32)
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x6, {0xfffe, 0x0, 0x8000}}})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, &(0x7f0000000740)={0x20, 0x5, 0xaa, {0xaa, 0xe, "0c857c2ac1105bbe409e5e3bb605a67326fa09ed4f0cbdeb808bd67dfca94342c6d7c9008800912e37021e3ee123ec65009c3f71d64d058d93e0d27dd4aa8f91e5d1e365ae677973efbbd0251d990e905285e621e219e5792f5a43ec279da4dc4bfdad7dd6ecaa02198254fff523b67e2d4aad2839af458417f7f01598769fffd991006f68ba1b6f58c1d4e00d1ce82edb1f3980b77c05c17d6e233c451d89a65a77d04db80d51c4"}}, &(0x7f0000000800)={0x0, 0x3, 0x64, @string={0x64, 0x3, "b3e8b5c2f1c741ed97ba27d10e26215b6ec2a1108ecfa1b5f5c89b65e8fef11806ddc62522a6f9397c5a4fbc96d1215d191cc02678d5a9fa419dd67455fc279201931ab306dca9d951f1c1b88f6cfddb03e802a49de037b836e812e0b458d7af42bd"}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x40, 0x18, 0x43, "322c237837e1a6849957227ea3b17f9894117763bbc45fed874ba7c0fa7ac09a5dacd6d271d2ecb055cb37ab55aa8eb6f438427699be702706e5a1ffa409eb3b90d513"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x81, 0x3, "7dbc14"}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "ca5c1d"}, &(0x7f0000000a40)={0x20, 0x83, 0x1, "1f"}, &(0x7f0000000a80)={0x20, 0x84, 0x3, "8bd66b"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "a5b0b5"}}) (async)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xec, 0xc8, 0x6d, 0x10, 0x1286, 0x1fa4, 0xf0f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0xaa, 0xff, 0x0, 0x1f, 0xb9, 0xda, 0x2}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x6e, {0x6e, 0x7, "4cd5f5d78336074519161744095e331879c1f2f4876c3778c284d1f74626d73faa82f9719ca3d80117e662e0b2bab5c7522fafe6d69c70cdc26c6ee8c581d17f0022d3d3934ac45d5701d2d27673e1b3dc8b8910145bf362e616968f80ce7c47eaabeadc36841437586e8ea9"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe, @string={0xe, 0x3, "ef1ef4ee40132629b15bf6ba"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x20, 0x9, 0xcd, "8f96163d45c61327aea75f6999042bfd628cb26ff6d2a1d5ef8195090d5c9c9a1f4aec3d53f5c878c9efeb6feb89394f8ca5bc8ae86d7917bb4197cfe44103485fc5e25478d65c8747b27118985f01524c04603245d6dcb70a4abb68a1a205968e1890a9c43364eb670fa061187a964c59f5bf11c6ee53ff7c9b77f8959ab2c940aa7ccc259f1b99cb385bc321526d7e1fd1e849cd453db9b654c216df6b5580dd8d1caa14c529f8293aace5f126db53043e95259d98c84ae87e13c34aa0d66eace523333401755e5abf697fbb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000002c0)={0x20, 0x0, 0xbc, {0xba, "e4b5c9ec8fb991c7b36706c21544274d0d06291d08fb1c048cc0aa9bc74ec087ed5bd24ddeed1609a551e2289311e214859acf1b1bbfd40002e01d281376dc948aa1954034e00e20daa1384916a366c66803bcb20047b9c2b877ee8a2f924a0314366bbfe7f94607dba6c536b8400dd4f72bf08bd742f67d38f3992a81749f755022cdba8606192d21869b3cbaac4fde10e9cad37adefff99e4bde340912feea37360172425a5003070f704e3bed0e6d9c9524c3739dd787ef1c"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x1}})
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e00)={0x2c, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x3, 0x0, 0x59, 0x3ff, 0x3}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, &(0x7f00000013c0)=ANY=[@ANYBLOB="40223a0000003a0f5d03aa88ce3434717c2dbcde1872c4a1bee0a1b6821d2b0bb3c2"], 0x0, &(0x7f00000014c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd4, 0x80, 0x5, 0x9, "4a28cbb7", "384cfe19"}}, 0x0}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000680)={0x35b, "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"})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, &(0x7f0000000200)='V', 0x1)
read$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0x0, 0x11, "cf5cf6296d363fcdacfe05fc8451bf3c6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008ac0518024000010203010902240001010000000904000001030102"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000600)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfeff, 0x0, 0x1, {0x22, 0x818}}}}, 0x0)
r3 = syz_usb_connect(0x1, 0x4a, &(0x7f0000000e40)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_control_io$printer(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x3, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x9, 0x39}}]}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x300, 0x0, 0x20, 0x7f, 0x20}, 0x24, &(0x7f0000001340)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "f9d7700591816794c1a90e71e4db918d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xd, 0xf, 0x2, 0x9}]}, 0x4, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x280a}}, {0xc3, &(0x7f0000001440)=@string={0xc3, 0x3, "74b9ff85e675547c981f3bfe98dacd7cb5fcb7835c97f11b7bbec7b795f0180f1060fa629476c59f9d40b7a06c1af1bd3088aa9c46f09b5b5061f39c19b5fac3ed3f54448d8dc0020f9d5b9ff88a1a1a4499fd125777f5d26beede7e0dd9c203b3756f3ab641080d28db3a2a5db082d998dfc957a49b0ad1c3472811526c7da4dffbfe4605337478c6370c8b8acb4dfab2a6e139c72601b8f046434caf9c7bd10559d382d744ee382c859ecb818f69046418f421ebd62e0e8ec9ef426a8484d430"}}]})
syz_usb_control_io$printer(r4, &(0x7f0000001640)={0x14, &(0x7f00000015c0)={0x20, 0x22, 0x38, {0x38, 0xe, "90278c56d72e3be7ffd4104b48d8d3518e566785266c42b3f6c7041c0bdd4b5c8a34ab1afbe2edd71883c8f681abc5c829c42b92f828"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000001940)={0x34, &(0x7f0000001680)={0x40, 0x12, 0xaa, "7cfc02a45242aa902c734fb6401e8da4194ca112620b050477664b794f187cd31e2823ae125f4eac25691548c9fdb4b95a567410802900e65ab33812c2347fdd0b54de2dc9e7ec894e1d6b08ef91e46560e9cf705e4e12bc1325d0f56b3a7314d34867f38460b83137611cebc28ecec5d97ca4b5191b24941a791d48930498fbbdb513447c4c9590acc4e65e5dc3b7cf846bf80e6a43249a54d006837a5d0f91261d81b756bdad5499c7"}, &(0x7f0000001740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0xf9, {0xf7, "467059ea52a0d7a6b92d4b0817e3d76428a79a03bac6a352d7c0d0cab604c982da5856400c79ee735fb2c77ef8a8ce7d21fced1149b4ee2e330bea51cd34c94c43f7d32f7bbda493c077e885339e154bde2e0ba892ae3fa239991b042a482b3968188b539325582647d19d15561dc79a23e3d88022b75da9a7b9399e7d8dd84f457e408901c8839b2fafd20c30bc2799c1272fee0e7ab8dc74fd7059eb909f8279672c7c68e9f378dc26886cb116ee7fd705e3017e15d7ba056ea3b85578fdd1e731240a2a16d35b52997eb45375ba1c1e359462e29017ef72b3887e335bcba36a6fc79ad3cdfd6d108c7820e9a56e824bd7a99f6343b4"}}, &(0x7f00000018c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001900)={0x20, 0x0, 0x1, 0x46}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0xe23, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xeb, 0x2f, 0xb6, 0x40, 0x7c4, 0xa006, 0x35d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe11, 0x4, 0x0, 0x0, 0x0, 0x26, [{{0x9, 0x4, 0xda, 0x8, 0x10, 0xbc, 0x7e, 0x72, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1b4bb3a4f7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfffc, 0x400, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x0, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x7846}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xc, 0x2, 0x2, 0x3, 0x10}, @obex={0x5, 0x24, 0x15, 0x5}, @country_functional={0xa, 0x24, 0x7, 0x2, 0x6dad, [0x8001, 0xc]}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0xb, 0x6}]}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x80, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0xf6, 0x81, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x7, 0x6, [@generic={0xb, 0x5, "8782deedc4664bfc26"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x3, 0xb, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8}, @generic={0x9a, 0xa, "aa5f42930b049e30e48d2856cc2fda67cefbad1fc9a18ef75fed2381d40866dd8d98b9f34f2f026dab9fae95ccf7c0192aa6368e14d60c2d8c98dae4361b6b7f00c305737a8e891886f586db48edf0b1992f069302ef9554ed6d49929364e2ce67fdda6931c26ffa585a7b348852ffb0514787a22f4c2884efec89ac8d8aa046b492612acca629a2b9393b99043be49400b259e1f439cdbb"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x6f, 0x25, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x0, 0x9, 0x5, [@generic={0x7, 0x1, "9015366392"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x8, 0x8, [@generic={0x52, 0x3, "d4542b70149c7870cc04457f5bb07962c2d429f7b8ab835c166dacc3745a6952b051aad5475891102c23bb07c69208f69fa49bd28919cc405351267aab3834f04773df42f5dcda01aea3d16f74e49273"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xaa, 0x0, 0x80}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xa1, 0x3b, 0x40}}, {{0x9, 0x5, 0xf, 0x13, 0x8, 0x6, 0x3, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x80, 0xc, 0x30, 0x7f, 0x60, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7}, @generic={0xc2, 0xa, "7704d7f258f31044203ef09796b2f0fae5ff18b319df577236779960031f02256e4e749be88dfe2b876e8d8cf3fa198f0b4c13b35c16d08db5ac60847442fb4eec1d59b217fafe794bfb4e1c5df0ebe95cf8caf7d0c1d2407faff217c4c5f5f2dcf132fe946a56e641f1212f455256ba88618775284f76acc9412f0682163aca66180dca8f0b54e9fd9c9d2d8156e570996bd255a3802ff108eb21334716babacc267773e09a2b27f4c1df4800706881369769256881cf78e2d97b9feb0d305d"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0xc, 0x1c}}]}}, {{0x9, 0x4, 0x93, 0x3, 0x4, 0x74, 0xae, 0xdf, 0x9, [@generic={0xe0, 0x22, "7e5a7767920934313fb4a66658f8825b3d024cfdef3775712a93ef74a3f79d736bf49aa1b36cbfa9a9a6685c2f20c5a3cbcda0c94ab1adf5497e005ea1bea494c5bd90642d308ecca3a8d78d660582907bc6ea9ca8f75384f02bc71e0856e969725edd6f7fc9aa256d0b801030bcfcb300d3ed4acfdd9641631ee2460e035cc336a224f76a885d205ad9d9baa46e85360f52728f235b242bc321150d2d211c84f53112e4e6aa209cf36264e987306cfdc3061de4dd349b766e96bc786333f8e8c89afaf6f79e8b3ec5d820ab6396d383911b9093e68322344ea23f9b5515"}, @generic={0x3c, 0x4, "d00e36e9efe274797b3ef5e4f6ccd15f9c6dd7e023f50b56897ccc6d7368d951e6eb1609e7ca9d8a0fea571082fbb9452cc7af0e0de38529a65f"}], [{{0x9, 0x5, 0x80, 0xc, 0x10, 0x10, 0xcd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}, @generic={0x84, 0x30, "de10862f8ef5ff8a74778ba7b27a51d3a42d7f0e2022f17b06d170b1aa6b7cfc487b38970ac512fd5491ac5206e1fc74db13a9db4861d7b17b79d4096b780880cff81ef5cee41385b22843a0a947d6beb99229cae8b4269299c09c76c4851046350fd3db406b1229bb4ac7012b8f8e42bc996d8c6f7a64525eee5554b59502e602aa"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x2, 0x4, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x250}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x8, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1000}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x5, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}, @generic={0x53, 0xb, "e65fb963f46f312efe21a40c8b4275f2f36c7364c4e25faf5e88ecf676bbcacf8f4a4b6a84445af38880414259d7a307a1eba35dc473a509fbc42d7768f2fd2b4307d81bc7d80d335f24bdb9058f63d10a"}]}}]}}, {{0x9, 0x4, 0xdd, 0x3, 0xa, 0x8d, 0xb6, 0x74, 0xff, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4, 0x6, "bc036894"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7f, 0x7, "8999"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x4, 0x3, "e38b5d691e1eb3"}]}, @uac_control={{0xa, 0x24, 0x1, 0x7fff, 0xb}}], [{{0x9, 0x5, 0x9, 0x4, 0x10, 0x7, 0x8, 0x3}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xff, 0xff, 0xc}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x3, 0x3, 0x87}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xc, 0xfa, 0x50, [@generic={0x74, 0x5, "2d8ab187eebdeff4d97063f6962add82945368b3941761a3d63a3c7507c679ff8b840c3e51466d2cb3a061051abb8e5795c075c2657b939f1d9afaf8f9f67364bec9ac30be8cc842dd156e8ef4d0057c4fffb07bcd1dc6525f9ce9d167e3a7628056cceffc9ead6633d070eec97b5cc3e811"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x101}]}}, {{0x9, 0x5, 0x6, 0xe4c35cd9f73d2dae, 0x3ff, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7f, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x4, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7}, @generic={0xa6, 0x11, "1b143007b62e4559f99e59f187a6db8674cd59ac1f5ee71398e405479ebaaddb39c76cf70bd0d405395d191351bb757e7878b2b50b508b63ffeaf2103249226450bf0ed0ffd7f911237a393b504a08c56b98d41c503be8e71032bc6c38f77a7b42b854e8e59e5f92fc0e8e21e836c652603258fe3e66ade3b12e258a3a76b6fa05d8a9e268c907e81d8ec7acd815846016134fd7a4dc138579d6bd660c013b68136c5936"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xf, 0x7f, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xfffd}, @generic={0xa4, 0x22, "9f5ea6cdebb8d98c1ee4b4211585176b3bb74b3b851f309bad2170f60d94a9eca0a8ff55279c63fd2fe1f978e20553b998df9194651f80671df34ba5df62853331c0d8478fc138c0f8b9f019a68941169c3e316bea7b9747ed1de9591f4f79d614a0b1d3a7c1b6d3761209c31664bf66494b7321db137dd5ba4d5955c3112aab4bdea75d99eecd4be22ed7cfb58cbcd99b0703d5072174bbd291b179c62af1060fe9"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x5, 0x17, [@generic={0xf1, 0xf, "00ece3e08920889cc67177a0c7675a7e876da67857cd4195c63f8a1f3bbec7c5e440eca63a86047a5eff4d3e73e4d01b92ddec75030bbae5f463303470f06a678fabfadaeda98dfa080bd2de79743204667a7642f6b95a8742785096c775112146bcb985e2b3b44cb088bcde44a5998b0ba0b61ab3e6f3e569752ffb2cbec5e011741a3af8d5c10642f2c20bf7aa9c59e058d58b53cadf13665a668ba37518fc92d0693dc4f754fb26402a899a623230a5ef8a43107a44aa1960e8a565a882ee044a88a7067522f93d4430e4effb539ba885aa9acfdb8560c113f9201627c397f2334b44678517b55405f9dbdb1dfd"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x3, 0xb4, 0x68}}]}}, {{0x9, 0x4, 0x96, 0x6e, 0x10, 0xff, 0xff, 0xff, 0xf6, [], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x420, 0xd, 0x9, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x7f, 0x7f, [@generic={0x8c, 0xf, "a813bf64caf634ba171c83c0ca9b2d45b945e77a4321e53b4a43aaa6a19990f7b0832877c40df7a0d8e24a4f1ea5a211c3a5b4aab440604b59a0419ccf3f7fb136c5305f86e8032516cdfe43f9f17d0b8429e90cf8952d8768fa552afe1c7873b03314946275c341591d9cfc0044650a92be0b85101ca463b6ffedcaf5b7cd839dd4d07a4891afe19f12"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x3, 0x4, 0x4, [@generic={0x45, 0x21, "c5550ee32459f4629919c5a1873aff614258638b476daa7c556dd30a28b40f4492134ffbe4d9860c7f8f54672adb507edbe1b27ed9f291b384a17399c6998617e2b7fa"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x6, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x8, 0x3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x10}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x10, 0x37, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}]}}, {{0x9, 0x5, 0x7, 0x2, 0x0, 0x9, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}, @generic={0xc9, 0xf, "62dde48ea40c5589aafd6fccd783245b5f2483bdfa534f11608990d8b52bfc26df6d79eb788f2b2d380a269bc74a5bb3069cbc010fa03ad682b8df7e7f0c6dd846f215dee17d00c5a63881d87a618ea16f6bbba19c059dab7fd839061c4e983a3cf84ef56d743088f5e62dffa808b1b7f6258d25cc2a94e56f61604f3a89d8128ea1275660f6a04b42d1f8b702ade2436d0fb3ecefe3616f3bdd0028a9e509b69dca21d1f7c6bfbc49310ac58544292fd3644aa3362954493b2feaecc76e9c7499a7b7dc8a18b7"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x40, 0x4, 0xe}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x93, 0x5, 0x5, [@generic={0xe8, 0x11, "196102e7a3fc4c3cc901fc63fb705c06877dd73fd02863e78448d48d32756ec5b17a8d30296c3379c4a50adb9ac49baa7af1dea778dcc18ad1b01784ae001bbee9f7574a539d8f9b361c93a88e5ef4822a7990db6fdf7e128a02942e5b56091dbf906b499c403f6298e08cc1a6a3f2997c4bc6b743a044f1cab32d98ff1aea666449aabf8781c98c2182cce9145f7418af55563e62a5cb3b02aff1061678d8bd85fe8db9ee758a81c169c4f8165049f5758ac2f10f50276e4f79ff3ff72c9670cd9c93d4463e7002e871f0eb3509252674e3c2ff06583afc4b5a28758381ffd8fe03a47d87ce"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x9, 0x5c, 0xa}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0x0, 0x2, [@generic={0x7e, 0x21, "1ccdc9fe1400214d9bb47d2d28e85db3f204d972af865129afa61a7e492043fec83c6542055a783936cf20d28672627e8efcf8f767702fa8a054c1e81d29293f93efa1d31498abcb926039bee8d62eb8c4346dab6e6b92a31c15833d5d3793d53d0ec5bdb9b7b9668a81d2eb5cb7c2991702df647407250c21c07be0"}, @generic={0xbc, 0xd, "8998464b2ba9706846dc7a01b43a7d695a0d156566e36e14dc03cc276cd86637cdee57090ec209ed5489738f64152cc24ff7acc599da67348ac081d8e85cb43433153c6cb2ea8f307311ca88ca67ee983950217bc5459c508f216a9a1c56702f4f2373ef9153c689821c47101f5bb09c6b7bafebe756475dae487efd50e95e2fb6aafbefa821b406d1268bcc415896cbfb78fc91a9a13bfb0567b98517da8821473cb8c6977557950c7a4ab03241000b4de1f43cd5e04a11b12e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3cf, 0x3, 0x5, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x800}, @generic={0xee, 0x8, "e938b16ba239855a9993feb8c5c4df9f6843e062f0a7a2cce3bfa491adcb692e7da0105d9994982e3bbf8709c2bd3d42b39cac773812104a6df590c6778fc7b91e34eca59c107ae2ac00c2b5942d79f6849013938a60d7003403c1b6a793b77142eeb52d185479304d9e093d3e06f903429ced3d03543a9bab99ed0441a3c160c5a4346b2f5077ab5386b52c8e2a25ef954b73dfb0c59637daade79b109ad7ead601ab6ed7d6cd7dcdbe6c6a76f00142a64f6e74cc5c40310e56d6143a86e8b320a3c0341511afed262b0d697a394723cbceaa1ba14939d1975552bf830f70143cdd7398aa9af320a8d2cc04"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0xff, 0xd, 0x10}}]}}]}}]}}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x401c5820, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x14, 0x5f, 0x40, 0x45e, 0x84bd, 0x89be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x3, 0x3, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80044520, &(0x7f0000000000)=""/85)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5, 0x10, 0x38, 0x10, 0x5fc9, 0x63, 0xa1e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4b, 0xd7, 0xdb}}]}}]}}, 0x0) (async)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000640)=""/129) (async)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/225) (async)
syz_usb_connect(0x0, 0xffffff62, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x8c, 0x46, 0xbf, 0x8, 0x1bc7, 0x1200, 0xe52e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x0, 0x9d, 0x5c, 0xb6}}]}}]}}, 0x0) (async)
syz_usb_connect(0x5, 0xc7, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x92, 0x83, 0xa, 0x20, 0xfce, 0xe030, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x2, 0x0, 0xa, 0x0, 0xc, [{{0x9, 0x4, 0x40, 0x1, 0x4, 0xef, 0xd6, 0x98, 0x7, [], [{{0x9, 0x5, 0x9, 0x52112095893d34a3, 0x8, 0xff, 0x1, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5284}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x4, 0x6, [@generic={0x14, 0x23, "dcaa6b20aca9485d772165e3442ccd7ae206"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0xb9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x80, 0x1}}]}}, {{0x9, 0x4, 0x21, 0x0, 0x0, 0x13, 0x72, 0x1, 0x2, [@generic={0x33, 0x30, "3cbdb00100b5289fe52570aefdff6d8ec486b05a5f025228ba4a0e9a92ea1e55756842251a8c11fccd24c8c68961dde45a"}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x7}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x5, 0x4, "ad"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x7, 0x2, "4585"}]}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0x9, 0xd, 0x40, 0x65}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "6f073b6989b1f2f884190f2df3351767"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "100f65bc78f3043c25a4e5ca4d246318"}]}, 0x5, [{0xad, &(0x7f0000000140)=@string={0xad, 0x3, "85a266dd5aeead27583a268c5ed44d156bf9554bf998786036f90e11639e063f20f1a225cb4687e53ef68a67183fba5492f6a3bb3cb0565ac0e4a9830d3446d831a6ee8b5bb8939b9d77380ffb75fd67f981c7f97b3450032fa8492046e6d87395627cc28813dc637d834b089740e462f19b4f7f3d0d447f598d7df3e8935f2f30d34f0ca79ab4f97a1da24d0801cc67c5e8407d015c832be7f30969874fb2250324dba9249ebedd8bda37"}}, {0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f0b0d4f0500dfff00000000af0917e1ea5f1aac0fae17f553e3b512f87eef63d5995786cd0a88c40ac5b2bc8015d76d876036497c218a0fcc2f38504f2fc7b5214e162f26be1e23134c858b0acc7e68b000d266fb5d557dfeb5c54dd8283b4982f72ddc829359ebad641bdf754e1fe773d16ec4daf3"]}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "94361b49972c3de5ee6dff0dc19a381a7f6b8de564856e7efa5412f06ad22250268979418260865ded719bbcbe690588f7d4cfa1d04da52edd4bf3b779fce012db4326dfb7f6c3a100016d4349078fcae4d9e784ed8709300cc605b6c429c0d61902f441f5f0829bdc523e3118e9459403150c60cd509da904aefead96630a70d9213c0f414f40f7dc4f6245fe867c048f716d85b773f068f5"}}, {0xae, &(0x7f0000000380)=@string={0xae, 0x3, "9918dc00de25961079b2a626ab7d60243548bb19ae633e2bffa8b3ef7efcbc3823fae49ec0d466da75a005183eb3d82690dd54473fca5ee61c6d033fc8e5dea6734f06c2ddd953ea0fca677e426cdfeca325ebbe91615c6fede98f5f3a424d7b31652fc6976c761a30a1ee00e5d73bca54521fbed84b592d5871997ad9ad1864928814b8638a160c64253d36fd355bde767e96ab4fbc0710e7bb184137a20d3c41d06337f34734f32d920236"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}]})
executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0xfffffffffffffda6, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x79, 0x73, 0xbc, 0x40, 0x110a, 0x1130, 0x123a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x80, 0x1a, 0x1b, 0x0, [], [{{0x9, 0x5, 0xf, 0x3e, 0x20}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa0, 0x85, 0x54, 0x20, 0x856, 0xac29, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x5f, 0x8e, 0xcd}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x9, 0x4, "950267c7"}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x82, 0x1, "0f"}, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000340)={0x40, 0x2, 0x2, {0x2, 0x2}}, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "1c5a5fa0"}]}}, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x6, &(0x7f0000000400)="b9425b44651dd2323696")
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x0, 0x63, &(0x7f00000000c0)=""/99)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "6eb14940"}]}}, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e102000000000000109022d0001000060020904001005030059000921050036012205000905810300000c0007090573"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d240600000308000000001b000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80a80)
ioctl$EVIOCSKEYCODE_V2(r0, 0xc0189436, 0xfffffffffffffffd)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0)
executing program 2:
syz_usb_connect(0x0, 0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ad6c86202f070022bf3f010203010902340001000000000904000003b4afd7000905000000000000000705e37e1b82e609050b02"], 0x0)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x4e, {0x4e, 0x5, "a490c4f89788d68ca118c24faffb7e8972181559b772bf217c1811b3d41e5521f92fa189147192e91abf44fa0dc059ea42fd57ddf9894f134185c93a06c064410b586c1a94d6fa7b00ffaabb"}}, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000016038308c5109a8146e40109022d0001000000000904000003030000000905be3b000000"], 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB='3f\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x69, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x7, 0x9b}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x84, 0x7, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x64, 0x5, 0x80, 0x40, 0x1}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "c62626cbf1336c0e38ddb24cd77986f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x5, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "db48510d23df7437cfcdba3079d437cc"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_control_io(r4, &(0x7f00000007c0)={0x2c, &(0x7f0000000300)={0x0, 0x34, 0xd0, {0xd0, 0x3, "3a115341ca2a42deb34133733200ce5150b71dec6e41dc00f6f3d830ffb764524d4b7e92ae012c72f66f0a58a6d2f9d8fb93def118a96f992000cb6ba172e5e367011483fefb80dd85c0bda090913164cc67e286359582fffab3c5073535a0a5890fda8c3ebd9d98079ea84b622f576a20c5617a410678f6639ca92daecd43250c0f13bc8158235d3dd63a9c5728f96a5a8da326cef67d5284e365cba44e64ff4a288932861b2c2af26b280096a25e040db4674aaf829e255debf04ef6fb455ec4e49b38c06022afa229002ff09b"}}, &(0x7f0000000440)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "e9a172fcf3bc127376029f1b3f2d90939bfad8945f30233fd9c032ef087094dcddc4199b18a520092c964d7849a4f44cee5a828165719e1b0cd22f2b713705da52a7490d9bae5bdae0c9c80126469ca62e1278c6b34bb07a7066f992f6d4ee0c723d1d53010889917cf353755635b53a885cf614b58ce96b09090f272ade77327a868f93ee3b752940b87b613080bb25d5db6286c20bf558d6ed6ef35da3d0819fd05cc621f2520ddc203b8fceb316c4648995a743a4c54adeabd5475f5107c69f8f"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x2, 0x3, 0x0, "70f92205", "1fe1fb5c"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa6, 0x0, 0x0, 0x5, 0xe, 0x100, 0x9}}}, &(0x7f0000001c80)={0x84, &(0x7f0000000800)={0x40, 0x12}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1}, 0xfffffffffffffffe, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0xa0, 0x40}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xeb6}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0xb, 0x2, "22da"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'ls'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x27}})
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_ep_read(r1, 0x9, 0x1000, &(0x7f0000000c80)=""/4096)
syz_usb_control_io$uac1(r2, &(0x7f0000002340)={0x14, &(0x7f00000021c0)={0x20, 0x22, 0x57, {0x57, 0x11, "ff41133921bb1fdb434e6186d53214523288af6c711fb24baa0a9c5cf4d12c830cafe349ef527f426c018074beb3199bb48c273201d92e55a4f4e6f24ccd0d8822d5508c7911c1353dd978621964f2e27332cec4a0"}}, &(0x7f0000002240)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "3dd002c3d0bf38c5497aeb6721aba9fe6f5bdf71db2125064f35b2b97e1bbefd998e8d4fb2b0241e134facd1252ebece2d72d5226270d804e3b0bf68544a378969278e900ef8d1b37a3da4b6ae612b287ca10167dedf8177280ae6255fdc0726f8fb3eb68008b43209200f57308e344312efcd9f2a9477aa204e32a0203781b8e49efe70232037670411423be04554511923a10f41d3873b790a5b36cecf945144838fd07f400d4c40d83641e01736301fd7f1aefdd570ccfc1f178d6a4d0a97dcb1a71dc84407c629fd6170f7f96f24a9a38165196d202814b66c9d0e30f2e63b"}}}, &(0x7f0000002580)={0x44, &(0x7f0000002380)=ANY=[@ANYBLOB="40302800000003c8472ea607443f00009e70e93f355cea35c17518613ea71eb85287c186bcfefa71233e77c674bc"], &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002440)={0x20, 0x81, 0x3, "bdf8f3"}, &(0x7f0000002480)={0x20, 0x82, 0x2, '`;'}, &(0x7f00000024c0)={0x20, 0x83, 0x2, "25fa"}, &(0x7f0000002500)={0x20, 0x84, 0x1, "de"}, &(0x7f0000002540)={0x20, 0x85, 0x3, "409c24"}})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001ec0)={0x24, &(0x7f0000001d40)={0x40, 0x24, 0x46, {0x46, 0x31, "462f6fe95b4086ccb1e79ea89317b8637db5e426578e52c141a9216230a0fccfbd91fdabb4af1a138b629208dc0ef82fc8447030ec5091b8af61658bc59a0f350e2d2ec2"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x53, @string={0x53, 0x3, "5a4c8df51c635332b1219503e04b6e55fd2ca4f32e97ba0ddad0b9811052c69043d66d8d0fba570c4845812423dafdf99bf8624b97ba050f3399ea6f203b6c409ae9346a5685c1b5a7d7232dd0f5f47526"}}, &(0x7f0000001e40)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000001e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x4d, 0x1, {0x22, 0xe0d}}}}, &(0x7f0000002180)={0x2c, &(0x7f0000001f00)={0x0, 0x7, 0xbd, "08f4dc0d991fa13ec3745277214e39c24c1519712e19664c7da122be2af1bb50cc7521c9e5d74cbaa5599c38af5334a64f5defd131f04978e01b362581d032812083dd6716846047b2651da2094fb22442ad134d8eccbb0cde6bae2d2f548d502148952fb593a04df4fed747237a9e07247048409c1b64d222adbcb1af7a3afb77bb972694df12552efd7183566e7a1dd6fa61987f226958a2255f2809f78371d3a811267fcb7550f4b9ad5fe8addabda0217aa7073bf622b6fefcd193"}, &(0x7f0000002000)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000002040)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002080)={0x20, 0x1, 0xb3, "82ec302ed5475a7015bd8e841c437581cdf69ce4468ddb95081e54a63e6abbbfaffd3f7b6158bc6a30101562637c4a370474e2852da4039ef7b36fe825132a6d51e371153aeaa8f927106f87e6aa00a2df2eed4ab2f5e661565257ae58d5c95890a3a98870c5c9d0eeef858d4abbdfaa071edfa521161c6d5a5f9ac99116167035c1a3fb1b1367e14be2dd1713f4d92c818910234891ba02b4fefe7956c7284e31fa0256518fb8579de1440ca5fee57d51b252"}, &(0x7f0000002140)={0x20, 0x3, 0x1, 0xf}})
syz_open_dev$hidraw(&(0x7f0000000040), 0x1e, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000400)={0x20, 0x17, 0x5, "d1d51b222a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect(0x6, 0x11c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x1e, 0xda, 0xce, 0xff, 0x12d1, 0x7c34, 0xc133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0xb2, 0x9, 0x0, 0xff, 0x5, 0x34, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x1002}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "628150a0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa7dc, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x7fff, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0xac8}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x9, 0x4, 0x49, 0xfffd, 0xf2}, @mdlm_detail={0xa7, 0x24, 0x13, 0x70, "797357de65ba0b87c62a22f7ca1164451e258663a453fbbc779af7e560ada9fdbbebcba2f8f29afb3a463c0fd58495bb9b1593a47676598ee828edd723702a7da7d59bf246516b16ea5421a2db8d606b71b2a75623dcd4ba02b848d73a6d5271662beebf99798745bfed590820796939c84772c2200f5def5a981fb73d0a0b4701e80583ce0c41e2f951a97f0906a4024f9417a4044f6f9fa12bf8c20ce1a0368deae4"}, @mdlm={0x15, 0x24, 0x12, 0x1}]}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001ec0)={0x24, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810308"], 0x0)
ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000500))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) (async)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000002500)={0x2c, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000002500)={0x2c, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000001c0)=""/200)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x6, 0x100, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x74, 0xf0, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x4, 0x40}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x6, 0x1, 0x80}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x800, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x2, "4abd8b", "53dc"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x100, 0x3, 0x6, "5440a633"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8000, 0x456, 0x6, "83e06f805e2e6ca5"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xbb, 0x3, 0x5, 0xa, "66d8", "eb95"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xfffb, 0x6, "0f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf, 0x7, 0x2e, {0x7, 0x25, 0x1, 0x82, 0x1, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x0, 0x5, "a773399ed189181a1c"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x6, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7, 0x7, "2fe87c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xf5, 0x3, {0x7, 0x25, 0x1, 0x80, 0xf, 0xff6f}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0x8, 0x6, 0x40, 0xf7}, 0xc0, &(0x7f0000000140)={0x5, 0xf, 0xc0, 0x5, [@generic={0x98, 0x10, 0x1, "6ded4fb6926fc81a9d205caf3b04506370fe1a00d82bee2e7bb2db199a4cb58de1ac62c00e6afd613716d91ed96f2d3e660f91042c7fc8cc1768b2a3ddeadea3b885d7ef40e62a8d90665706e551ee25d3fdb48df26ed913b8d0319661e3a1e67176f7956027b8f568c124d7e18091b1a15ab5069d5564bfc0a2658756c9183dcbec0bffb625166b06196687b9ae864462ff84acff"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xf0, 0x37, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0xff, 0x7c84}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x3, 0x5}]}, 0x3, [{0xb3, &(0x7f0000000200)=@string={0xb3, 0x3, "fa3785b6cea0d0d80d36dfaa05e75755aca3a18c28b7b0a44d2312f620c856c770a1c82d829835956b2b97043c5cbbf6489e379e99e3efd79f4d54fe55a9c6d5bdc7a799ba548b17ac4c60d8a1c89021f04d08b8c63532449f22133d7158a5b99802095547dd7d92729260b2dbdc5f4d5b0c370f770e9472215cacc05d083be4b6219b55c0f35bb372be8ea4186612e3f49f7f7dec6eb5b42d912a500e87d794c7305a755de2a5b7444032d5458532a6f0"}}, {0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "0f220022d3eeccaab30f3e34bcbb433b38c62ff998196c35a880"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x201d}}]})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x5, 0x1, {0x22, 0x4f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000000000)="d3054967d96d02d5df6341feb91747", 0xf)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 4:
syz_usb_connect(0x0, 0x8a4, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0x71, 0xc4, 0x4c, 0x20, 0x16d0, 0x870, 0x8841, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x892, 0x2, 0x1, 0x1, 0xb0, 0xb, [{{0x9, 0x4, 0xb3, 0x6, 0xc, 0x5d, 0x31, 0x8a, 0x4, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f756e28ddb"}, {0x5, 0x24, 0x0, 0x9880}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x18f5, 0x50}, {0x6, 0x24, 0x1a, 0x5816}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x2, 0x3, 0x0, 0x40, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x4, 0xc, 0xf, 0x81, 0x68}]}], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa, 0x0, 0x3, [@generic={0xe4, 0xc, "e360e1f75dc5f07226b8c3534fbcaaf1da89d76286ba5cf9522e4b75110682244e361081aaefa95df0c25d71a758bba8830a35809b863ab7454dcc60475ffa4a16d7eb404b35d6dcf6a21f006388c94d59d8d0276e60afc60a74071e933367247b7222ebc64c0450518e07c4086d52a84458dac18a5e4871b34184150364c051845830c58ad77813787e5994fdcd27df16a2b1a909fe020fff8a4105e21c1cee2fcca95ebf103a51fa3d7fb7482b71baa790cfbb73b5c16a5e3c8aa023aa6ebe7e90efbee973523b9f954d97d41bf55d3cc9712805860926cd875ec32c6d66d920b5"}, @generic={0x7c, 0x21, "ffe46ccf63c877c401f8c023883ffd50b158266f8494d692f5fed5515503516cba5294677ba6cedd5517fb949d91cf5884ad9c62961f7713e52ce0ba3c735fb8e1c892b10b25ddd4f41acd9465ebaf4dcd866755daa49c2d065ac97ef7537e111beceb439786fdfef69336ed3d9d4e47d9d10afb9360ce8621bd"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0x7c, 0x82, [@generic={0xba, 0x18, "6c8f5d5d037bdc03cb74aac248dfa4ee096bdf8d0c51017707b7f080ef2f8f197d2f5cf055c0bc21047819f9dc406b56136843d7def8487c4e70f92c9bc1727bc95075248a531b8eff11b2694aed57b1ac4db8c25c23bc2769b03c70b920524258db826e40380454c65bb9a8131678b32ffa888270a5dd2cb79c96e6231ba5859a92c2946efba3a6db9d47a1013380950ab1e87a339f3cf126a69ffa795719757d3380ba06258136919696c9d17ae7dff554582760635611"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x6, 0x7, [@generic={0xa0, 0x31, "8967dd663babf2fde5f2d5331f769e48e4aeb1109519e613b5612b5e34d9bdaeb1acd2b68eb3637e89279351fd3ab933db61ae540ae4c7d4e1fd6a8c387eaf94c927ffc093858c0a1cb1d27487c0df0706d404cd3e16b6024541d9f2e31dff1c6646e7de828981318d161aca8d1bd98961af7585919b46483c2424f17d266d2002792cba6047c78c5aaa2f37b14100414fd4aae0cd52eb9a76ae054fdfea"}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0xc7, 0x2}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x80, 0x5, 0xb, [@generic={0x47, 0x22, "98de407d79d331160ad536214bff586eebf10f49c1fae456970cc2bdf11d3466fa3855e664d4c2f42ef17cb62918c0aabc7cee48390eccc582dcbaea16de53480b859638f9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x7, 0x1, 0x7f, [@generic={0x3c, 0x22, "5f8af1b97aace910a5bf32be996bbbe0b1b8a627fcb43db1b798c02aa5cf468e329476585a9d86bdcf44e19242eaf6c1c50ec1ac599642ce1128"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x40, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x5, 0x2, 0x5, [@generic={0x28, 0xa, "93d626b59412d32282b3df9ef2ededb0327fe88cee0c439851518a4645f1776b6b19d471ce52"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xff, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfffc}]}}, {{0x9, 0x5, 0x2, 0x10, 0x78f, 0x0, 0x0, 0x80, [@generic={0xc4, 0x22, "a916e797c5d2c0baecf4bd20e6f830ed07f62392843acb6ba5dc1498f40df1d46108d32ebcb7111c96c8d34d568153ddf2109530d788f9e969ae649d3a5f529115857efd57eec6f498daf7928c1312cf664d3d48e8058b01053a771c2fec3f18b24f9ea918535ab5c8417cd029239f7a613979729761c4d63c34ba14aeeaa00b2b143d9375c95ba1789b0b2ee48ff902104bcd1c16968dfef5c8a92224856ef03f9d30df470474b08d89cc048c114272078d28535395dc9a18fd543fc0414fcd0777"}, @generic={0x6b, 0x21, "e0f2cc203a2784dd01c96cd6468a8c23a6bf440853643d91e6eee61198fa3626c2c006b65be44fcef5fda137cac686617b5a7c4b9da25d0848f8ce093196a7bfa7525e4f74659e899d79e473e18ce81f5cbcd8f4420aac582494efb7df60d2a7afdf9e885fdf4606fa"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x42, 0xfc, 0x7, [@generic={0x3, 0xc, "f0"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xfb, 0x5, 0x6, [@generic={0x86, 0xf, "2646d2dff54c56db07f53375984f27adbcd6862c089ba057e8b03044aac0db091c24a65d31e4e14dd15a44343a88d29750cc986652f1c49b43449cf9519e7b647e320efa1da75b27630b64f9ffcd26a4874f93e3a32e2c28ae16cdc0758c18d2e0b9d16da76c6aefd6af6e97dc1669ecb1bb74bf7d1202b4404b9fc95850c1c4b9b7c304"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xeb5}]}}]}}, {{0x9, 0x4, 0xb0, 0x8a, 0x6, 0xbc, 0x23, 0x53, 0x5, [], [{{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x0, 0xa, 0x3}}, {{0x9, 0x5, 0x0, 0xc2e91238f6cfdf7f, 0x3ff, 0xff, 0xa, 0x6, [@generic={0xfd, 0xf, "204a358e56ae4dcace8ad37fe5f64673ed07c372c1f2e317b8ae93f83bf556b5f5fe14b5ee7d9dd77d7eb096caed1bb5cd928535feb3bec2407d0dde4bea242395075abb0a6d747639bbc71efe508152876fef97723c2e0d9e8ba6efbaaa1bbafb1fd57e73eaba923e7e6baa040342456159881482b37b260b7bbd2ce3d2c00ecbcc759dbc939e3678aaa6ce0620e1ed1274d83516f7803f21f159e10434ed92bf665ac1f30cb0422cbe1e040ee3fbf3b4cbf3e37f735a38cb6ec6b4e9ead37a9251fa76898f6ef74789dc54d2e068bc852052fe11e05466fdfa370d101fec2d39b8d523c759c176ddb775ac12b206eaf3907e5af7ec6e0558a0a6"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x1d7, 0xf1, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0x80, 0x4, 0x38, 0x2, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf}, @generic={0xda, 0x2, "f4e7e9a4f62f890d822e53e8d3f46413283a371abae20b9545dfe5f2984c9389c05fb581af58aca5222a2cb1bbf3d596e8d73c5bafa83c546889fe9ca56e2b9ba6702df47408a0061db57d9709cc2d45e30e1e3ce170a894ae309a5884ea46d3b6077bf5d5c7755605a76cd49a459586b9a29e71d63787908ca50498a6cb8ee2bed16fe46407a6c13dc353a78dba1b1ef35ed734af5610085a9534211127a6cab40565d669cf46d9decc5f6deecf11b64fafc94d88ce53750698375310b754867122e9136ecf3911a7699be9c13f7141529a29e281cb4e45"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x0, 0x8, 0x3, [@generic={0x68, 0x11, "6faff8f668f1354f2e0f4395cce512b142d93a0334777a1ce757b5f1c98a900c9fd3f818f91b82f542872f5844500dfee4421a9f1bf9aff727bedd664a31c919e75cd6add0b6be56af456a3a7bd3d33402a0e8b38df52f84afa7f02fac81dae2606ac9dbf811"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x52, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x1, 0x23}}]}}]}}]}}, 0x0) (async)
syz_usb_connect(0x1, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb8, 0x34, 0x9b, 0x8, 0x864, 0x4102, 0xc69f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0xe5, 0x4, 0x3, 0xd1, 0xab, 0x49, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0x91, 0x1, 0x4, 0xff, 0x1, 0x3d, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
executing program 3:
r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x8001, 0x208000)
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0xc, 0xc, {0xc, 0x21, "f5b3da68079828088b91"}}, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x0, 0xe, 0x5, {0x5, 0x0, "e2c19f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xdf, 0x57, 0x63, 0x20, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x2d, 0x35}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x40)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000100))
executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x102, &(0x7f0000000000)=ANY=[@ANYBLOB="120100025dd4c540944c8823b5c6010203010902f00001000000000904b200000103a9000824"], 0x0)
r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9c, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0xc3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xc, 0x3, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf9, 0x6, 0x3}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0xfa, 0x11, 0x40, 0x2a}, 0x7a, &(0x7f0000000100)={0x5, 0xf, 0x7a, 0x3, [@generic={0x68, 0x10, 0xa, "0cd5835fe7de5ffbca22c7448bb6aabd82ab61f66cc6f03987efcdbaa542149cf0a63ffa886226fa99d949ef2fe143f5d2b34fda3ad901106d4cb6d6b4e247cf3fb104a4101ffc9c5dfcedac5dd002ccdf4b614a1d91807261cad6380d4d827d89c5b091ae"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x9, 0x4}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}, {0x63, &(0x7f0000000200)=@string={0x63, 0x3, "029d65a5c40037f3685e550f87a5d8acd36c0db9c0dff5ea909e9dbd6fe897c5bf9e484f0166abd07bbc2546faee6b650ec4d8a72e7f697a035b0b75061162b62610c55f26dedf518308abdc122a5ec9a64230d5828f8d2cbdab5ac5ae9f886b90"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xfcff}}, {0x65, &(0x7f00000002c0)=@string={0x65, 0x3, "7fa751bfd315cf8adfd691deddd57663630b8b8d54b21105dff3621af48c3718304f7be11bc9dfebe8fc2930ab3bca9762305d402a1c52c06fa14f8d7b0e6db08662318f5ec7742909073aa433069038203a316d6ea7bf1ad510de33f6e44e0c484c54"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}, {0x30, &(0x7f00000003c0)=@string={0x30, 0x3, "2f61fe84ca934e184024da9bd9f59bc492b95e9425bdd1e4f913a2137e94f784809a2428694524df26744f38f328"}}]})
syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x20, 0x7, 0x46, {0x46, 0x4, "7bf2e86295fe37cd74cc9b9b9edd63e31315c7df5ac4ac424b44f250c6dda68d140270a67d9225b69edb69260ae96327f5f805ecb991a5ffb27a76ffe2b16e56de358375"}}, &(0x7f0000000500)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "1b1be3694f40fff7fe0cff69bf083687fc00f48ec536f755a9fdb1df20c579c945d13e88514a0b045e4763e76eaa2fec6a3424e831f9eb7f546744c019f1c57b64fd3d69733065e2c9f60abc2cb211d0104c08bb02c200a55392ebda37493fab0c5139fe932a9f284707f0ce8f9e7ad1db01fa3b7005b705cf0064c25850e03c2607443f0a806d5e20073e7e53f57412dafe238b08d6dfba656cad6f5f97d3f4676059e932773f53c04c28cc7a64207b83703de550f89a33a730c2bb4c2a5a15579c6f3335b3bb6c04b899f443debbe68b4fdd0d5fe5d4486477ebf2e8aaeb9b5e76d5a90b"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x12, 0x57, "43a54fd0a29de81ff2ef57f74ac3b3b16a6840077ede830d2f499e0c72284010067307edfe6fe096d1bf08085737eea7d0704aea7df2431563c0a3f96da749ae4b41e45cbf1215c1fe89f8340956cb4a85a7f1ddd5fea9"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x48, {0x46, "51619ab8ceeb6cdfaa326fc28269526426a7ba651720d089ea27b062f6352ab59bb902d46f92dcebcf8e3253a05532e6eaca43ae404c0a6cd1430ed66db0ca9e4a24913fc296"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x54, 0x30, 0x5, 0x10, 0xdb0, 0x6869, 0x73b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xb5, 0xe5, 0x49}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00045d0000005d0d53246afd681698c1d81f2ec86324d071200cd9bb170ea891fcd6d915094b9bfab2566b37e99d52dd23fba11b8ce3715e27cab8e792cf61671e2fd4077b19a87caea6bcb1888be4d76047acb0303e894811e8287e610f0ea709c7ab"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x40, 0xa, 0xffffffffffffff43, "b986ce5c169423656d72cc94e8d7619bd02f666a58e9a10f73709efa5134908e66c69a643bad8aa1148cffdddb5c8fc4a1de4784a7d759a1ff969fdccac3a9b9b2da509616d32d5cd4fc1c608c334f144ad83ea6b7cdd71d2287289092bf6795b42c7068a4c41be1bb237669f3949257cdc5c91c214a416ebc8429050db4620876b293493944c98a9911f0a64d143a64cbf5967a367733ae68501c1093cf12be03f853f48acdc1830e427eb722a367"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000080)={0x20, 0x0, 0x2e, {0x2c, "e853f66f6353d40c900e02bbeb9483f9c9c6fde24de510434174755f5ecfe63d8c0300042c7441bbd30bccb5"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0xb}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000f80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x81, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="cd010000000000407f1e242c000000000001090224000100000000090400000203000000092100000001220500090581030000000000636dd8dd890f88b27e7477bcd0ad63ee4ac35a7fa3f356298bdf94669fd420f73517ded878bb903575ba0923d31d19dde5134419a71d2e3c45f3806f8c33087ef0b99112a5c7c42dc447033115e47a1441acf806362d30fd24bcb0f81b0a3d03e587fb982e4246cff253cd025b78de77c82afb2a6e9f2237b400000000000000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x20, 0x1, 0xa7, {0xa7, 0x6, "466ca31db2d32cb98cb283a7d81993cf7a8542687c976d127a644a81b6b5fe084e565175c28916b7aafa3aafe848725c789c36a531b58f3a5e5851e45a153eb53f205e4fc1da0eb82ed97c82993be48e8c5dafd34b7113ec12ecc84b21ca5b3c65767c0f564ebd9b0120a3914445610f1d2c265cb7f1e27cba79c16ee0398519d89f453b75358d39721438e9568bf3f8df385fbdbe2b3c53173fab003fd2cb387aa3e9d217"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, '?'}, @main=@item_4={0x3, 0x0, 0x8, "4144f38f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1725, 0x9, 0x1, {0x22, 0x448}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0xc8, "1940fafd1ca78f8438a110bec7cbcc7fc9ae3aaeede7a48fc45de4426fcfe8b157614e4f4f18efc7d56b8a23c5924c7ad45ea0c4419658e895716785f57bdc93aa121266aea4f24907a13206d67b7ca85c6584ba62eeb923cb06328bd9796661e8d1852ca2fdf6d9aef98a547bd7a49196224b5de00c0d01a1308e572cd17fe6a4abc81af499895df3a07bac105be0cd02896b251a3733516abdedc4da2a3560e075a9c761c5d9a0b559d8c44eb3428ba04fdceb5ba3441209cb8b3e4e105c31cb595832f6f774ca"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000004c0)={0x20, 0x1, 0x63, "6333aa332d81f0c7fb610fbe2db6a477b13bba38a11564ac845c53ff1134836e2e4f76fa7d1bc8e6f52bcf52f77f2e0913ebfbead0995db34b99b0873124267f3da2560c6d16d3e70bc37104947ef94a57888aa9897301fd96d1768ffc481e25f40568"}, &(0x7f0000000540)={0x20, 0x3, 0x1}})
syz_open_dev$evdev(&(0x7f0000000240), 0x82, 0xb0600)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04b30878094002030109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002202000400"], 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00870d060000000602c335c5"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x94, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x2f, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0x26, 0x0, 0x10, 0x3}, 0x142, &(0x7f0000000100)={0x5, 0xf, 0x142, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "172f474a21cefb0972ccad3fc8208b18"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c8eadad64ebe80c72b4ca6b5f0386d5f"}, @generic={0x11, 0x10, 0xb, "84795150a99bb36cc8c284bafbc1"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x5, 0x400}, @generic={0xfd, 0x10, 0x1, "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"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140a}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "6cd14f564c5725ba07ae2491a2bfbf4929cff078cbd2fe5b958a576a7dc2e2a0f86494a5b978331fb0e4ffe18fce02756fcde1fef7b91dc5623f2f93ab2d1d96881c4e12f78b70d7f3adffb9750ad1ef55808dfb399b8ff79309860e57e7ae8b6860bbca5d06dc6efa81d746ced1edd12621939cef2628e828d9368611d7e255bf90bd052d292f002d73bb385c586cd17951bd857672084aecb1cf0f20bca6c0ea8a35a92736a491332ebd936fd843d18eb0c5c06560d3"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2009}}, {0xd6, &(0x7f0000000480)=@string={0xd6, 0x3, "b6ef07d1e0de65946d692d355af864331e007c8a7b965e82351260f74d3d45d327208c840fa435341906de774e09c162fa8244e9a515ffff713aaf72300ca232b0a00dc4bbbbb189ad431f0ed613837160bd9f5cfe02f79c18302e50c3325678ace533f31ee98aa424b36055744ad48f0eec26859b4a13a9b0e2a220b6e6e48810d845a333fcb19f82281def02c0bc758a0325cdee6b1760c01520441ffcb14e022dfd81f7e33d85995b838dbce613d7adced84e4f4b3572ea05195bf6c9a18046f67ae9803fdf8b84e10637b1f26e586273671f"}}]})
executing program 1:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0xac, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x1, 0xa, 0x80, 0xdc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f062e47583"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2e, 0x8, 0x32e, 0x8}, {0x6, 0x24, 0x1a, 0x7ff, 0x15}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x0, 0xffff, [0x6, 0x9, 0xfff9, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x10, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x30, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xfb, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x3, 0x60, 0x0, 0x40, 0xfb}, 0x40, &(0x7f0000000340)={0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x8a, 0xab}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0x4, 0xc, 0xb6, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xf00, 0x2, [0xc0, 0xff0030, 0xff00, 0x30, 0x0]}]}, 0x3, [{0xe6, &(0x7f0000000380)=@string={0xe6, 0x3, "91218fc37fa0cbf91fcedf6c9925abe4b33e1e551c4730633eae9f64661d98f8510d2b0c1959eb28c8cb37f1b8100f72e8b35024fd87005c1dc612e1f9c18dd7d7fdf84925b14c50dc2eed5a241ca5d62ac838b0f69af6e50dc67db684c4be5aa25e8d6027c16b2236cb9b089730b778216c2ce3958ccae685814544a2ef0728e5401d91009560355255039f54cd8bb1380954aafd0550de8af0d4ca7744826fe178e9b2a066fbaeb12548e8bfc80a24ed80eb19bb8baab4576fadb4590850b9232a4accd04ac9594c70435d912868bc1fe0324c112c6a34b82c56865eff37794657a215"}}, {0x91, &(0x7f0000000480)=@string={0x91, 0x3, "15ac5d409805c014acfd09043173aad7f1758de8742b481ed79acc2d108d275a07e70720d80075430194aacb30e44f9940129ccad4e65b0db55b79156f4c75fe7f2502d3af55045c3fbaa892867be0cc95a0f3ece22a6abb3fe765cb693dcc2d29729dc447fb778936af71c01b5aefb5deb6ae9874ac68b6a3bfb2c42eab099ab8699727d7bc38a5d71a66bcd42c2b"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x240a}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201de007e3af708b8071db2ae970102030209021200000000c0000904"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x25, "396a9f99b23960d3f387fa766d2d7b7676521566cdbcbbe6ada6f2a978098a0793ffffffff"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x81, 0xdd, 0x22, 0x10, 0x54c, 0x2e, 0x500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x4, 0xc9}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc1, 0x13, 0xa3, 0x20, 0x112a, 0x1, 0xd811, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x53, 0x0, 0x2, 0x5, 0x8d, 0x9d, 0x0, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x5, 0x6b, &(0x7f0000000000)="6804d507868d6900a88fcc3a14c4069faad7009677386fc2b0535be6e545b536e62c1cc04a1b92c3b169d8d35cb820bb5ef76e53034bf01fd84ff5f81780eabcdf80f06be097987c62a4fbee31cc755bbbdc6dd96f6744e795245c7d3ddc4955a57a235a6fdc2df1515d54")
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xde}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x8ade946416f95ea5, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff030000000905820208"], 0x0)
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x800)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000180)='0', 0xfe64)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x9)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/43)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x44, &(0x7f0000003680)={{0x12, 0x1, 0x0, 0x46, 0x35, 0x3a, 0x20, 0x1630, 0x42, 0x1ca5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x40, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0x50, 0x2b}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\tZ'], 0x0}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x4, 0xac, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x1, 0x80, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'k'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1934, 0x7, 0xd, 0x9}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x6, [0xfff8, 0x4, 0x81, 0xa2, 0x7, 0x8d80]}, @country_functional={0xc, 0x24, 0x7, 0x40, 0x9, [0x4, 0x10, 0x13]}, @country_functional={0xc, 0x24, 0x7, 0x6, 0xffc0, [0x86, 0xf41, 0x2]}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x4, 0x10, 0xfa, 0x7, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4f, 0xb, 0x54}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x5, 0x1a}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0xe8, 0xfc}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xf, 0x3, 0x3, 0x0, 0x1f}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "39ab209b80a80b984227017821aecdec"}]}, 0x2, [{0xb5, &(0x7f00000002c0)=@string={0xb5, 0x3, "3cc35baf8963ceb0687755577a6d7cdb66df59740476ce1e4195f628e3fa4a61952d5ae8ae1a23531ad04b8ed96a5ced87287f214cc783ae1031fcd9c2ee5b908933bc8b5f414d921928c459f3e65de1619cc7f70f47664d19e73ab3a4780b17bcaec28f7afc790a99dfe5ecb8ac1e16a649ebd88fadff9e4e55463e474a405bfb26ce6384d2f587ff3a4ec48c359b8c7f9291a7c16cc49a5534ff145213c4857c492a052601af350b9b21dfab5f44a4457cc7"}}, {0xe7, &(0x7f0000000440)=@string={0xe7, 0x3, "b9a25d3c6443a195225337e92c5767c87a3ff6bc562906c80dabd1942579b41219b2f22a4f1835319aff8d59085b13c59eaceb1d828778caae2257853211c4fe3f676b64462539574fd4b824424ab677bc4f22c0f6e89429a27ad35a473f54f7b55da65fda01f34469a21a33967a19a0661171915c8773998c9d67d3fd50b87feec32255492a8595158e0f6de9c8f007b871f752d73c5eddbb038d107547461e9675dea6921c72488d926659105f542d3222a6c527dbfee0c0b339cdf882d3b4e77d78c519b8f33df1edf33c03de451c1f3de617cdcf4a0507b1c78e7c987579fa7129b3c0"}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000380)={0x14, &(0x7f0000000540)={0x20, 0xc, 0x8a, {0x8a, 0xb, "cfd93f465bb41f0fa3edbbb0a8e5ad9e7655df8a4d0f24671177a1cb81457a3d3ab6f0fc6a21c8b521b4d1459af6491f1d11da05a2f9dbd89b80b8b266ed4db0a3ab933e9bec7d4c56e0d5042ddd45905aaa767f79f435dd9973af01d0a00574e4ee78fd07762cb14488c835e3a74299a35a7525e3ef8bfa393b4352d9a3341e81c5cc49f3188eec"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000600)={0x40, 0xc, 0x8a, "9456516647635b0069c6053e20265294ea4111b5855e1c0f95d92c197f5e3d99d815f7870dcb362100984eae6cebda5d862d726fc719cfa921266076ed0d227b13a526cfb8c8069e8415e1c51a6d1489cb62f42c5139bfdabb2bda8e3a6e53eebee60793233583a7a7c9eda7d0504bb94db85013bf10bba38577928c8702d5d5b1981a3ccda19d6191cb"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x9, 0x40, 0x8, 0x6, 0x5, 0xfbff, 0x7f, 0x3, 0x6, 0x6, 0x7}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000900)={0x20, 0x89, 0x2}})
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x9, "f5ca1eae"}]}}, 0x0}, 0x0)
syz_usb_disconnect(r2)
syz_usb_ep_write(r3, 0x2, 0xda, &(0x7f0000001080)="d8949fba566624b8136cecb19bbb562a56516d4f330e61f2be61e7bdf3ae6e74ccb223d1dfbfcc8e1d8f08b022b1f4b5e5f65e774e1d61b7ef30fcd701be8c6e4d5a72855451df7b8e9f83501d4a081b3e5e1dacd9482edbe6e40aa3cbf15934018ee4eb2cdc78161ebaec557678e21b470347f1648a7c538f34e9f2d779d974f49264d1dc8c7453a12f3a130808323f5fbb780197c76296669bb63a52169805057a3460680f78da12e9d7316915682e2a126e608e54ef1da6afdbaff7d68f8ae18085bf19233511d2429cf8fd312b6b3bd43a152579789bd2f6")
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x620, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/1574], &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0x80, 0x5c, 0x8, 0x9}, 0x38, &(0x7f0000000240)={0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x2, 0xff27}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x3f4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a6291e944e0e555afcc296fef007d511"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x80, 0x3, 0x8, 0x3}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x440a}}, {0xa2, &(0x7f0000000480)=@string={0xa2, 0x3, "551a0e2f6ba510e207433f0963ea5fbc7267a8844bc1ca2d666397b6a976a6cf620db3bc031d65ad7082502fa0974e12615744f5a8bad54894bd6d8aa79e9fee70fd3a7d25340b09a0e4e786472b02694ddd5021c8d7d4727043b5a73190afc401f116ba136faf1a108b69a7c9dab6c2e1795bdc13dd1cc700151f888a69bded4a6eeec09095393fd03b660d9a5f5193b9d705acec238b8ef879e049b3fba1df"}}]})
syz_usb_control_io$printer(r5, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x40, 0x9, 0x69, {0x69, 0x22, "fdddfc069f920e4bacc83103f6a992f0829cf0bd17e6e224c9d5c62cce45be2f0eea08093bad83d78bc446ec32bfd07e8ada02a9af3be6fc62b80f88554e888d24c52cf537420941c1515c4b523014465638b2f9629a74443db98b54e56370ad408fa471d1cef4"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000001040)={0x34, &(0x7f0000000dc0)={0x60, 0xa, 0xe0, "ca02d3d51c48f0dd94512e4fb9f65facb1c15bda8daf4268f7dd228e11ac6a5f61e8dda19fc012fbe219dfaf368c21049df8ff1d360dea34cacb4f30529160d855ef65d01277b1912d556b69a1eed13e0898fbfac163d887db22f643289e0ed0a466091e795f7812a47068b9deff03a294d6952b274490692e7ac8845c7b47b73154ada42c34c9dd2a391294a76ee8b248942f5e5e30e172effde1645d4ffd7a42809e54ce7fef598a58c2d833d9950f6a06cbc374d552c5adf61c81620bbf9e13f99bb6df858118ea493fe4443824d3f7ae4564502ca15430b4f8866ae67e22"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000f00)={0x20, 0x0, 0xa5, {0xa3, "ff1102b19ad54d83e7efb4243a254017568b5153fdeeca23698dc96c63c752b2b52510c03eafa2381f073d03d5ab8040267a92f7f08d9ed2e8ffbbcbc966c7788ecd8eed84a703520545033f6ca8f3ca88e9baca4a9c7181ea7441f5ffb49e1394580dca7d83fa02c0cdedb97b03451534b053d0425621451283c19531999c494eca9b142719435f98eb9c6a222cdd54c45dad699e97884510600a77495e6d5e7145c3"}}, &(0x7f0000000fc0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000001000)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221e00000083ddf0f85ea70c0000000700000000c00800000000000000000000000000656ec8fa6cd6973c4386fccda83ff5bd63a5930cfec7a9599799346e00002d5e6cc32412e04f8b4928949eeaeb400a1ab1a527c6c92eecc0e988a4470065e7be8e51b3eb77a56296c57e8ae6538faf191ac6a1adc9419f5bc96d913d1d7426dbb83645443b1867e05b176fd72471e035c08d5fc62c98d13f529e29f036902f2a98edf3715182665d5bc91c2cd0cef7d9361117f94b9438a965d0f19bd6fe8e3a1526ec98de6a"], 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x8, {0x8, 0x21, "392cdaab4a4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a80080090400000103"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x30, 0x73, {0x73, 0x8, "8464b77696890b34bb99b11655ac0564a98191b91e16d8c9ffeaf34909ee1030f20cea59ade06805658bbbaeab6539cf3513a11b4db7a05747a5f9e8be114eafd53557dbfc4dee45719b9792f46e83ef7768cf617e042d99316309975ee23d0254b5654dfaf36ee6a44ad11ec13a565f5d"}}, &(0x7f0000000500)={0x0, 0x3, 0x80, @string={0x80, 0x3, "91b29ddda370627f06d0a8c092d8f58004ecc455c330e86b8f25018da78fbbd6df208a7fbb33e830fe610ec0073cf8d7ea976712fa8f248318922c237799a06261352ba56307e8246fc595eb3e861586f3b44f9352ec64412e815fb2d5897428dbb812745cbefd0aff0ed696004b1268ec4777c5da2a230031909e47a2bf"}}, &(0x7f0000000440)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x1, [@generic={0x16, 0x10, 0x2, "bbfbb4c47798cc79b15b3a3f179265e31ae111"}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x3, "3b4afdc0", "a2972b19"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0xaf, 0xff, 0x80, 0x4049, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x20, 0xc, 0x13, "306f2cfa6f5d04c3514b5c9b094c43cb119829"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf9}, 0xfffffffffffffffe, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x970, 0x10, [0xf0ff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0xb, 0x2, "55f4"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xa1}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "1b02"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0xa, {0xa, 0x6, "dbab239e6da9c1de"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x34, "bc88179b49082fee6b99efbd50359192417e180fbaac5b77d4861d8c29dec025997ed988531ea1e9c08bd24a5830d7c877771e3d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000001000)=ANY=[@ANYBLOB="208103000000e7f29d01493b913e5d3c5342596e1f6aeb65da19d96062a79cfe7b7a673625590027e4c51e82fd829133827ac6e258b2cdc9563187eabd52c17a208a4f1bbd307327c38913f11338495a58a6cd144085eca889acc9fb0b"], &(0x7f0000000200)={0x20, 0x82, 0x3, "5f1e88"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "d258"}, &(0x7f0000000280)={0x20, 0x84, 0x3, "5b3ae6"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "c4ed93"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x0, 0x11, 0xb3, {0xb3, 0xe, "ec8c13d55341e10f830654e59c40104397ee5aafaa3a33798fb2716101be70cfe6d96a51b5e97a04789b12f570569da30da280a0c298eadd7d6c8f9173ad1b6c5f3702abdc81ac3cf44754979c5913f038d2d1a64b0107f9713c830a4fed7e14aee36ad7ce140e9f4b387556acf8f628f96f17eeb967f2d3823d698562f9233316feb4f86abfd6ce198a91e2b752f84a78b28daea0f903f59e3d4564408c00a1661b6ebf5c39855916d5544601336e787c"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000cc0)={0x40, 0xa, 0xc2, "8fb29eadc20e14a04ab687cf4ed47472d40b99076d77b306ac2676f13785e7464b07c7a8fcd2507c46d8ff4b36f0714d251ecaf7bc4e8c7c28f8087d66481f6a7728e90dfcb246d4173c4ae13116a82abafc173176dd3b6651d519f1926bb1c604f8e682ac9c0e7c62fbef6547ea75e74b88f84dc70fb2f47a134e31134083bf89ea84685acbe5991c6d1cb33251bcbf1e2b15e95acc60336738a90ccc3068d2c44c7212e838b1e421da838a842109e99d980cfbbee64d194a93b85057d1d7334025"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x3ff, 0x10, 0x8, 0x7, 0x3ff, 0xd, 0xff, 0x84b, 0x0, 0x6, 0x5fa, 0x200}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x3bc8f533}, &(0x7f0000000ec0)={0x20, 0x83, 0x2}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000f40)={0x20, 0x89, 0x2}})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x96, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00002900000029c51991"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x67, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x7a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x12, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}, {0x0, 0x0}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "ad73f8dc33adab02b093bf9dbd81b58aaaf3ed63c3c3531b9f3a1e23d7dc0c5bf55a95ed3ddffa35b026f4b0c67e"}}, {0x0, 0x0}, {0x0, 0x0}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, "441a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x21, 0x6a, {0x6a, 0x23, "096f9df7b4e6646d69a360daca742913d38a94317a3e2385d2086a6a6f7109c6478bd6da6a5461cf51bbc311744ee9e5ef14c3392370fd27fb0dc5cf9b29ab11436f9ccc9a84926885ccacfe9c27fe04c8a62a7684913281fa16fbe9294fb103973d4191c7857ffa"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x17, 0xcf, "7bcbcbc30824c1990079cb9936209e5c5c2bd23b5bab464aaec9dd5e72279bcff92c73cf5c63eb758f67b63c378c5ac9da6604faab43e79bd9e82ced5b644b024c489b620d2f7968f565497c82f1cdef392d1c19a9b9b467c7cb1b851a2b1fb4631552761690cbc934906d67c1608b1a91f12eb596219063d5a1436627428b2d3e4163cfc1b14d0644ad6ff34d0ce886ca535c483db768422b65d5767d1307721d1cfc738c60485685c216999b5129423d11bd5e39d9fe97525e909aba50389adc82b26d8f530c463da753a890b4fd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000340)={0x20, 0x81, 0x2, "33c5"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "580f"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "9bb0aa"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "1d2292"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "95148b"}})
r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0x621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x7, 0x2, 0x2, 0x20}, 0x135, &(0x7f0000000580)={0x5, 0xf, 0x135, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0xff, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "330f131061d2c55c5749fb641af3f141"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x1, 0x7, 0x31, 0x94}, @generic={0xfc, 0x10, 0x3, "243357add1832593f891c68bd587110785e6b03096b295eb5c3bd43eb01c7abd4ffc0a75c32846d176d037aabc0c1530313cae13f3016303ecbd40aa16c3a3710b12c03161b3b72f526e42c476fa1ddd9ef7d22d3576d7138f26deb6bc51b5986861f964021acf6af0aac8b8f409f69fe5cf30aeb0d012f7b4462873353cd07668fd469180ac59a9881a851999030fe87ea2beea386bc8bae8b3d7e61ae915646241e7ba5fb1c12bdb663dcdb1cb5129525cdae25a8c0afd63249ca97394eb6cc8804974935be2363b1c96de64bd1a0214bf8c27c9f06a6f554be1d8f0c8b4e93a8f85a8e3e9e6168f26c0432cd891124c67404bcb84c1f2a6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x3, 0x1, 0x9}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x19, &(0x7f0000000700)=@string={0x19, 0x3, "fbb495743ebf874fde0b870de6960d5d3f97dfe186dd4b"}}, {0x5b, &(0x7f0000000780)=@string={0x5b, 0x3, "5dacc317567885c42cab1cbb138a84cbeaca7338dba4682bec49bfc48c267c49dfa7a2d678b75c635709f38fa0d8fcede4adab7e760874624c5e9b2bda0b616481dab40d8802df694de790d3232127f6e3901f529d23219d99"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x408}}, {0x29, &(0x7f0000000840)=@string={0x29, 0x3, "aefb1bf6c16ffc0f5663d9d353caa643b4cc57ee8ce737dd4b4d9214102abaf442c8a56d39bf27"}}, {0x42, &(0x7f0000000880)=@string={0x42, 0x3, "dc05238a113d17dccd6e4b639bad51baf12fcc1c887dd4a2820959372bdc6a6aaefe92d74f78783e9a2a07c05fc8014d65c139cbe65edfbf095d88592089efa0"}}, {0xd5, &(0x7f0000000900)=@string={0xd5, 0x3, "509c4727197a29034eb584c515bb4410926e384b00015c30f5b4582ce8a060aac660d31b7442e3b794110d028ddb898e2800c9e7d0a840d84f7a05839fa32bad56fc9c6ed7d4081c603efb605b0eb358b873d171b1c89c829a1b42e9201e0e0f6b7d2ae87f3c431387a0a6258b3538c1225ec8f83457716cc121c372ac81319c2b96c023b9331c1860da9236270de4378ea7e3f60e2e335ecb45e266a93297d2b4daa918f994b9412945cc3aed6379a85d000581f056eee09be0651cfc04baf273e84bbf455208f0d6d34f19ed904b4bfd467a"}}, {0xcd, &(0x7f0000000a00)=@string={0xcd, 0x3, "91f41b5aab647a4a52362280e48b00ab18216348332597b26abe6a628ea2fd6cee7abe79c27940287698982a30e95cb9633b7a16f99d097ffcbcc4313293e2fb7377e21167fb51d7daeff62c534d14c1e857bea5c29c3deb4183b7298705aed2685f78fbf3191d014ad254d95bf91d1080241afec77646c295d8d2ffe255ab3dd2b13c2482955890c1be3e177b84e55a36e7d5c19fda0e10a2a22919259d14b082d30fef843013431e5730bc07901439f74a0d6a80cd09dfde5f42ed38a87e60c8341bee1dbbf3f8afabc6"}}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x1, "02"}, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x20, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000140)={0x0, 0x0, 0x8c, "88481c9520c21285bb3a5bc70c2e79eee71a41e01da642f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee7cd6100cde64a27cbae192809c6eb5ea9af4a3e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b231f5b51d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x57, {0x57, 0x21, "83d37c9acc99c18b91666abf1e31c32ea0bc7f5660e755bd54735f48740d49acc48c40e254b7b65fc64cb203d2c145873d2493d72e8899a15c926d4a5aa464c60970774b1cffb967fa7e1c9d045a56087e75806694"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000580)={0x44, &(0x7f0000000100)={0x20, 0x13, 0x24, "a53b6bca6683b77cfe9c5cf07e45d09af06da11ce14ba75befe95a0fec35bcd886016149"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, 'T0!'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "c5"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "4691cb"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "bb6293"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "989f6a"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x7, "af98"}, @global=@item_012={0x1, 0x1, 0x5, '%'}]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x31, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x20, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000140)={0x0, 0x0, 0x8c, "88481c9520c21285bb3a5bc70c2e79eee71a41e01da642f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee7cd6100cde64a27cbae192809c6eb5ea9af4a3e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b231f5b51d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x57, {0x57, 0x21, "83d37c9acc99c18b91666abf1e31c32ea0bc7f5660e755bd54735f48740d49acc48c40e254b7b65fc64cb203d2c145873d2493d72e8899a15c926d4a5aa464c60970774b1cffb967fa7e1c9d045a56087e75806694"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000580)={0x44, &(0x7f0000000100)={0x20, 0x13, 0x24, "a53b6bca6683b77cfe9c5cf07e45d09af06da11ce14ba75befe95a0fec35bcd886016149"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, 'T0!'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "c5"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "4691cb"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "bb6293"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "989f6a"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x7, "af98"}, @global=@item_012={0x1, 0x1, 0x5, '%'}]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x31, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x67, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x7a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x12, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}, {0x0, 0x0}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "ad73f8dc33adab02b093bf9dbd81b58aaaf3ed63c3c3531b9f3a1e23d7dc0c5bf55a95ed3ddffa35b026f4b0c67e"}}, {0x0, 0x0}, {0x0, 0x0}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, "441a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x21, 0x6a, {0x6a, 0x23, "096f9df7b4e6646d69a360daca742913d38a94317a3e2385d2086a6a6f7109c6478bd6da6a5461cf51bbc311744ee9e5ef14c3392370fd27fb0dc5cf9b29ab11436f9ccc9a84926885ccacfe9c27fe04c8a62a7684913281fa16fbe9294fb103973d4191c7857ffa"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x17, 0xcf, "7bcbcbc30824c1990079cb9936209e5c5c2bd23b5bab464aaec9dd5e72279bcff92c73cf5c63eb758f67b63c378c5ac9da6604faab43e79bd9e82ced5b644b024c489b620d2f7968f565497c82f1cdef392d1c19a9b9b467c7cb1b851a2b1fb4631552761690cbc934906d67c1608b1a91f12eb596219063d5a1436627428b2d3e4163cfc1b14d0644ad6ff34d0ce886ca535c483db768422b65d5767d1307721d1cfc738c60485685c216999b5129423d11bd5e39d9fe97525e909aba50389adc82b26d8f530c463da753a890b4fd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000340)={0x20, 0x81, 0x2, "33c5"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "580f"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "9bb0aa"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "1d2292"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "95148b"}})
r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0x621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x7, 0x2, 0x2, 0x20}, 0x135, &(0x7f0000000580)={0x5, 0xf, 0x135, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0xff, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "330f131061d2c55c5749fb641af3f141"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x1, 0x7, 0x31, 0x94}, @generic={0xfc, 0x10, 0x3, "243357add1832593f891c68bd587110785e6b03096b295eb5c3bd43eb01c7abd4ffc0a75c32846d176d037aabc0c1530313cae13f3016303ecbd40aa16c3a3710b12c03161b3b72f526e42c476fa1ddd9ef7d22d3576d7138f26deb6bc51b5986861f964021acf6af0aac8b8f409f69fe5cf30aeb0d012f7b4462873353cd07668fd469180ac59a9881a851999030fe87ea2beea386bc8bae8b3d7e61ae915646241e7ba5fb1c12bdb663dcdb1cb5129525cdae25a8c0afd63249ca97394eb6cc8804974935be2363b1c96de64bd1a0214bf8c27c9f06a6f554be1d8f0c8b4e93a8f85a8e3e9e6168f26c0432cd891124c67404bcb84c1f2a6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x3, 0x1, 0x9}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x19, &(0x7f0000000700)=@string={0x19, 0x3, "fbb495743ebf874fde0b870de6960d5d3f97dfe186dd4b"}}, {0x5b, &(0x7f0000000780)=@string={0x5b, 0x3, "5dacc317567885c42cab1cbb138a84cbeaca7338dba4682bec49bfc48c267c49dfa7a2d678b75c635709f38fa0d8fcede4adab7e760874624c5e9b2bda0b616481dab40d8802df694de790d3232127f6e3901f529d23219d99"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x408}}, {0x29, &(0x7f0000000840)=@string={0x29, 0x3, "aefb1bf6c16ffc0f5663d9d353caa643b4cc57ee8ce737dd4b4d9214102abaf442c8a56d39bf27"}}, {0x42, &(0x7f0000000880)=@string={0x42, 0x3, "dc05238a113d17dccd6e4b639bad51baf12fcc1c887dd4a2820959372bdc6a6aaefe92d74f78783e9a2a07c05fc8014d65c139cbe65edfbf095d88592089efa0"}}, {0xd5, &(0x7f0000000900)=@string={0xd5, 0x3, "509c4727197a29034eb584c515bb4410926e384b00015c30f5b4582ce8a060aac660d31b7442e3b794110d028ddb898e2800c9e7d0a840d84f7a05839fa32bad56fc9c6ed7d4081c603efb605b0eb358b873d171b1c89c829a1b42e9201e0e0f6b7d2ae87f3c431387a0a6258b3538c1225ec8f83457716cc121c372ac81319c2b96c023b9331c1860da9236270de4378ea7e3f60e2e335ecb45e266a93297d2b4daa918f994b9412945cc3aed6379a85d000581f056eee09be0651cfc04baf273e84bbf455208f0d6d34f19ed904b4bfd467a"}}, {0xcd, &(0x7f0000000a00)=@string={0xcd, 0x3, "91f41b5aab647a4a52362280e48b00ab18216348332597b26abe6a628ea2fd6cee7abe79c27940287698982a30e95cb9633b7a16f99d097ffcbcc4313293e2fb7377e21167fb51d7daeff62c534d14c1e857bea5c29c3deb4183b7298705aed2685f78fbf3191d014ad254d95bf91d1080241afec77646c295d8d2ffe255ab3dd2b13c2482955890c1be3e177b84e55a36e7d5c19fda0e10a2a22919259d14b082d30fef843013431e5730bc07901439f74a0d6a80cd09dfde5f42ed38a87e60c8341bee1dbbf3f8afabc6"}}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x1, "02"}, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x96, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00002900000029c51991"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_connect_ath9k-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x30, 0x73, {0x73, 0x8, "8464b77696890b34bb99b11655ac0564a98191b91e16d8c9ffeaf34909ee1030f20cea59ade06805658bbbaeab6539cf3513a11b4db7a05747a5f9e8be114eafd53557dbfc4dee45719b9792f46e83ef7768cf617e042d99316309975ee23d0254b5654dfaf36ee6a44ad11ec13a565f5d"}}, &(0x7f0000000500)={0x0, 0x3, 0x80, @string={0x80, 0x3, "91b29ddda370627f06d0a8c092d8f58004ecc455c330e86b8f25018da78fbbd6df208a7fbb33e830fe610ec0073cf8d7ea976712fa8f248318922c237799a06261352ba56307e8246fc595eb3e861586f3b44f9352ec64412e815fb2d5897428dbb812745cbefd0aff0ed696004b1268ec4777c5da2a230031909e47a2bf"}}, &(0x7f0000000440)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x1, [@generic={0x16, 0x10, 0x2, "bbfbb4c47798cc79b15b3a3f179265e31ae111"}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x3, "3b4afdc0", "a2972b19"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0xaf, 0xff, 0x80, 0x4049, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x20, 0xc, 0x13, "306f2cfa6f5d04c3514b5c9b094c43cb119829"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf9}, 0xfffffffffffffffe, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x970, 0x10, [0xf0ff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0xb, 0x2, "55f4"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xa1}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "1b02"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0xa, {0xa, 0x6, "dbab239e6da9c1de"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x34, "bc88179b49082fee6b99efbd50359192417e180fbaac5b77d4861d8c29dec025997ed988531ea1e9c08bd24a5830d7c877771e3d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000001000)=ANY=[@ANYBLOB="208103000000e7f29d01493b913e5d3c5342596e1f6aeb65da19d96062a79cfe7b7a673625590027e4c51e82fd829133827ac6e258b2cdc9563187eabd52c17a208a4f1bbd307327c38913f11338495a58a6cd144085eca889acc9fb0b"], &(0x7f0000000200)={0x20, 0x82, 0x3, "5f1e88"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "d258"}, &(0x7f0000000280)={0x20, 0x84, 0x3, "5b3ae6"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "c4ed93"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x0, 0x11, 0xb3, {0xb3, 0xe, "ec8c13d55341e10f830654e59c40104397ee5aafaa3a33798fb2716101be70cfe6d96a51b5e97a04789b12f570569da30da280a0c298eadd7d6c8f9173ad1b6c5f3702abdc81ac3cf44754979c5913f038d2d1a64b0107f9713c830a4fed7e14aee36ad7ce140e9f4b387556acf8f628f96f17eeb967f2d3823d698562f9233316feb4f86abfd6ce198a91e2b752f84a78b28daea0f903f59e3d4564408c00a1661b6ebf5c39855916d5544601336e787c"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000cc0)={0x40, 0xa, 0xc2, "8fb29eadc20e14a04ab687cf4ed47472d40b99076d77b306ac2676f13785e7464b07c7a8fcd2507c46d8ff4b36f0714d251ecaf7bc4e8c7c28f8087d66481f6a7728e90dfcb246d4173c4ae13116a82abafc173176dd3b6651d519f1926bb1c604f8e682ac9c0e7c62fbef6547ea75e74b88f84dc70fb2f47a134e31134083bf89ea84685acbe5991c6d1cb33251bcbf1e2b15e95acc60336738a90ccc3068d2c44c7212e838b1e421da838a842109e99d980cfbbee64d194a93b85057d1d7334025"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x3ff, 0x10, 0x8, 0x7, 0x3ff, 0xd, 0xff, 0x84b, 0x0, 0x6, 0x5fa, 0x200}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x3bc8f533}, &(0x7f0000000ec0)={0x20, 0x83, 0x2}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000f40)={0x20, 0x89, 0x2}})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a80080090400000103"], 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0xa, "d0702880e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid-write$hidraw
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xc, 0x9e, {0x9e, 0x22, "1cc1801c1f4d858b106145257d61c3dd2e5cc9e40c3e0af0b2444af06bb90b3204945e8c830dff242c2b268a752304a0594af88819a1b0ee0b6b49bc04d98066383523ff9938fefa506aba82fcf865d59a8e34c1aa4e788efe0e0f4098abf75975e7d3f2be080353bc1bfd8f5338329f23fd93cced25e134ba50213a23e57724672bbefa6763af0e57eac9fb9770c1dc1aec1cc70192f8e4d325905c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "48ee35e6"}, @global=@item_4={0x3, 0x1, 0x4, "3c4f1bd4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7f, 0x1, {0x22, 0x9c7}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0xd7, "e261e513a4c5455e168847fb78a00d83d3cd597c21f53e106294b6899e073d25d8a842f6dbcd77a958a541f6a8330cb5dcd4fab00acc133eb6b6fde8fceacb3a9d4259f66b54a0ad9bae63a173531cf7326d01ab3c74c6a788709b36a44707fe6b022340332ed8143565ca8290bab83dece717dee621a936e045ef2fd57637658b3ef57d54e21fb3bee44f19cd19ada18aeee010a8ab0b4f54ba9f6e0533d39b342c00dc3507711e0ffab8b5d970b7b3451fb02595c4db64c912829852f453b85e14b154a77f7c9786a63d649920a316edbb3588de7316"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "38c733db35b8efb08eb99802508823294c1be2f2efff41ebc275b60b5133cf242a876b115a2d535a9e0cbae9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}})

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "4715a9a511b1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x9, 0x40}, [@mbim={0xc, 0x24, 0x1b, 0x801, 0xc67a, 0x8c, 0x5, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0xff}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xb, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xf3, 0x10, 0xf8, 0x10, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1d0e033fab6270950d67565cd3f2a91c4b8f565c0b6e805baa480ef0cf7e1f3794b7d9e45058a716b2e95d99083e2f096de74956fa2be254da47774797c3d80047056a07ca9f71bdb36af5c91d552b3c0f2a3fc2d3cd5ff6b0b3efbd320406dfd1569f9b311b8c90f34723d977c238a3be138a5c033678419d4770d1e359366a9d272e8e9cfb92b97e2f7eb3797b1a61e6268d60c33a9e8d7d"}}, {0x56, &(0x7f0000000cc0)=@string={0x56, 0x3, "2349986147baa945c8d23d71d38305828b9d962a5cd88d5497cbff8a8ab4aac4a73b537c7d458a07ea70e53712e55fc0beff3c85bbe4eae565379c8d0e5a54fe54a230e775ab6a7ac0b1be162ca31fff0d7160ff"}}]})

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-ioctl$EVIOCGMASK
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b01, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)
syz_usb_disconnect(r2)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011000000000202a22010000000000000109022400ff000000000904000001030000000921000000012205000905810310"], 0x0)

program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001a8c0d7086d04500893f1010203010902190001ac403a9909049a04000101fa080724010d040210"], 0x0)

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0x6a, {0x6a, 0x8, "cdc6379ddcccff42c0248e2d2f34789d95aa0986cf7d99e2ece67230dae9b482a38281a149abf1770c55388b8e6aa9fe78e207c0abc42444b3d1c42ac50a15d95bccc999405303d51c2e8666c4613ed10cfeaf29e6691ce882fb3912baafaa3cf8f817d5f50c895f"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "44abd8e146d641c106d1cb830c7fc415614624de0edfb5a3fc1211dfc07c2c3003dbb37402d2d8d9dd8e17308acd4504c6d3a8cf9e470d372c8c72a1a4d3c1863e7b840fd919f817de177e2307d853d9d17578b4e2c140c2ab52821cd6c4bf56848d268f58013820da42e0e1332bfcfff33be6ed8b3e344a8ad54abdf02c1042338601d49cad80247825482d271fe89d4ce2ed04eb0a49a15b714820e9cec769d4c8207d02c6de4637"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "d6"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x17, 0xf4, "ec6a4fbf52fa6fde0a925bd70bb5f0d4de7efce788b5873d67da2915ef067139956303b689023af1579cd3f7a96a4c77b5cbdfcfeaaa1e134173225a122864bf7f99e9bf86fd478274116791c4a42fa9f2819f6214bddc60b028310e54af25e45bdd4cb7061df2991f2d036480c5631abd1f59b95d9159518561dcd9e7b0a55744649eb55ac6e154d2a68a97d208f00f53e1a1b45b6557fd86b9ec040279b31d2875be1fded98078ef3690d353a392c981594e72aeec43e695b13068b158f9ad762c2b762b78cd8d9bd0eff0ed8f578580d764d4e9b2a35a93d37a66785695259e2202737207f2205ebc6de4271d75f22cae1bf1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x1, 0xac, "21a121c7bf4aca2658940d7bbf8a00fac8d8c9ec78ec7f414a3c90da8861227f6829fe322edfe77e4d7b94dbe294dce6bd4aaefe159b50a4bbd430568d8e27ac9884ea7216168f51e179edc6fe51a5e86eafe4b09f5d9362cad75ede542e799779eab2e8ea107f9e6adac7698f33be928d47def96aeab110e345dbc561e1fd67981234566497419c5514e1a933f8d9a088339fbee3ead71565170db7e2fcb13ffb699c8489f95b91d8c400f1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in usbhid_raw_request
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: WARNING: ODEBUG bug in release_nodes
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d01030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m25.355085988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING: ODEBUG bug in release_nodes
simplifying C reproducer
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING: ODEBUG bug in release_nodes
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program did not crash
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING: ODEBUG bug in release_nodes
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING: ODEBUG bug in release_nodes
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING: ODEBUG bug in release_nodes
testing compiled C program (duration=2m25.355085988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in corsair_void_status_work_handler
reproducing took 1h41m48.185792125s
repro crashed as (corrupted=false):
hid-corsair-void 0003:1B1C:1B25.0003: failed to request firmware (reason: -71)
==================================================================
BUG: KASAN: slab-use-after-free in corsair_void_status_work_handler+0xaa/0xb0 drivers/hid/hid-corsair-void.c:515
Read of size 8 at addr ffff8881187e6828 by task kworker/1:1/36

CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: events corsair_void_status_work_handler
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 corsair_void_status_work_handler+0xaa/0xb0 drivers/hid/hid-corsair-void.c:515
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Allocated by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4294 [inline]
 __kmalloc_node_track_caller_noprof+0x20b/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 corsair_void_probe+0x57/0xd70 drivers/hid/hid-corsair-void.c:637
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 hid_add_device+0x374/0xa60 drivers/hid/hid-core.c:2896
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd09/0x1a20 drivers/usb/core/hub.c:2652
 hub_port_connect drivers/usb/core/hub.c:5523 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5663 [inline]
 port_event drivers/usb/core/hub.c:5823 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5905
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2962:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 release_nodes+0x11e/0x240 drivers/base/devres.c:506
 devres_release_group+0x1be/0x2a0 drivers/base/devres.c:689
 hid_device_remove+0x107/0x260 drivers/hid/hid-core.c:2774
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2305
 hub_port_connect drivers/usb/core/hub.c:5363 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5663 [inline]
 port_event drivers/usb/core/hub.c:5823 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5905
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1789
 expire_timers kernel/time/timer.c:1835 [inline]
 __run_timers+0x56a/0x930 kernel/time/timer.c:2414
 __run_timer_base kernel/time/timer.c:2426 [inline]
 __run_timer_base kernel/time/timer.c:2418 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2435
 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2445
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1789
 expire_timers kernel/time/timer.c:1835 [inline]
 __run_timers+0x56a/0x930 kernel/time/timer.c:2414
 __run_timer_base kernel/time/timer.c:2426 [inline]
 __run_timer_base kernel/time/timer.c:2418 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2435
 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2445
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

The buggy address belongs to the object at ffff8881187e6800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 40 bytes inside of
 freed 1024-byte region [ffff8881187e6800, ffff8881187e6c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1187e0
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000461f801 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2941, tgid 2941 (sshd), ts 41778561862, free_ts 36310136499
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4739
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x154/0x4d0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4f00 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x1680 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 2938 tgid 2938 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 anon_vma_chain_alloc mm/rmap.c:142 [inline]
 __anon_vma_prepare+0xae/0x5e0 mm/rmap.c:195
 __vmf_anon_prepare+0x11c/0x240 mm/memory.c:3389
 vmf_anon_prepare mm/internal.h:372 [inline]
 do_anonymous_page mm/memory.c:4875 [inline]
 do_pte_missing mm/memory.c:4045 [inline]
 handle_pte_fault mm/memory.c:5889 [inline]
 __handle_mm_fault+0x16a5/0x3450 mm/memory.c:6032
 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6201
 do_user_addr_fault+0x613/0x12c0 arch/x86/mm/fault.c:1337
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

Memory state around the buggy address:
 ffff8881187e6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881187e6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881187e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                  ^
 ffff8881187e6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881187e6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
hid-corsair-void 0003:1B1C:1B25.0003: failed to request firmware (reason: -71)
==================================================================
BUG: KASAN: slab-use-after-free in corsair_void_status_work_handler+0xaa/0xb0 drivers/hid/hid-corsair-void.c:515
Read of size 8 at addr ffff8881187e6828 by task kworker/1:1/36

CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: events corsair_void_status_work_handler
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 corsair_void_status_work_handler+0xaa/0xb0 drivers/hid/hid-corsair-void.c:515
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Allocated by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4294 [inline]
 __kmalloc_node_track_caller_noprof+0x20b/0x4c0 mm/slub.c:4313
 alloc_dr drivers/base/devres.c:119 [inline]
 devm_kmalloc+0xa5/0x260 drivers/base/devres.c:843
 devm_kzalloc include/linux/device.h:328 [inline]
 corsair_void_probe+0x57/0xd70 drivers/hid/hid-corsair-void.c:637
 __hid_device_probe drivers/hid/hid-core.c:2713 [inline]
 hid_device_probe+0x349/0x700 drivers/hid/hid-core.c:2750
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 hid_add_device+0x374/0xa60 drivers/hid/hid-core.c:2896
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:250
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:462
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd09/0x1a20 drivers/usb/core/hub.c:2652
 hub_port_connect drivers/usb/core/hub.c:5523 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5663 [inline]
 port_event drivers/usb/core/hub.c:5823 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5905
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2962:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 release_nodes+0x11e/0x240 drivers/base/devres.c:506
 devres_release_group+0x1be/0x2a0 drivers/base/devres.c:689
 hid_device_remove+0x107/0x260 drivers/hid/hid-core.c:2774
 device_remove+0xc8/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 hid_remove_device drivers/hid/hid-core.c:2953 [inline]
 hid_destroy_device+0x19c/0x240 drivers/hid/hid-core.c:2975
 usbhid_disconnect+0xa0/0xe0 drivers/hid/usbhid/hid-core.c:1458
 usb_unbind_interface+0x1e2/0x960 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 device_remove+0x122/0x170 drivers/base/dd.c:561
 __device_release_driver drivers/base/dd.c:1273 [inline]
 device_release_driver_internal+0x44a/0x610 drivers/base/dd.c:1296
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3854
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2305
 hub_port_connect drivers/usb/core/hub.c:5363 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5663 [inline]
 port_event drivers/usb/core/hub.c:5823 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5905
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1789
 expire_timers kernel/time/timer.c:1835 [inline]
 __run_timers+0x56a/0x930 kernel/time/timer.c:2414
 __run_timer_base kernel/time/timer.c:2426 [inline]
 __run_timer_base kernel/time/timer.c:2418 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2435
 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2445
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0x9b/0xb0 mm/kasan/generic.c:548
 insert_work+0x36/0x230 kernel/workqueue.c:2183
 __queue_work+0x97e/0x1080 kernel/workqueue.c:2339
 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1789
 expire_timers kernel/time/timer.c:1835 [inline]
 __run_timers+0x56a/0x930 kernel/time/timer.c:2414
 __run_timer_base kernel/time/timer.c:2426 [inline]
 __run_timer_base kernel/time/timer.c:2418 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2435
 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2445
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

The buggy address belongs to the object at ffff8881187e6800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 40 bytes inside of
 freed 1024-byte region [ffff8881187e6800, ffff8881187e6c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1187e0
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000461f801 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2941, tgid 2941 (sshd), ts 41778561862, free_ts 36310136499
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4739
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x154/0x4d0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 load_elf_phdrs+0x103/0x210 fs/binfmt_elf.c:532
 load_elf_binary+0x1f8/0x4f00 fs/binfmt_elf.c:861
 search_binary_handler fs/exec.c:1775 [inline]
 exec_binprm fs/exec.c:1807 [inline]
 bprm_execve fs/exec.c:1859 [inline]
 bprm_execve+0x8dd/0x1680 fs/exec.c:1835
 do_execveat_common.isra.0+0x4a2/0x610 fs/exec.c:1966
 do_execve fs/exec.c:2040 [inline]
 __do_sys_execve fs/exec.c:2116 [inline]
 __se_sys_execve fs/exec.c:2111 [inline]
 __x64_sys_execve+0x8c/0xb0 fs/exec.c:2111
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 2938 tgid 2938 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 anon_vma_chain_alloc mm/rmap.c:142 [inline]
 __anon_vma_prepare+0xae/0x5e0 mm/rmap.c:195
 __vmf_anon_prepare+0x11c/0x240 mm/memory.c:3389
 vmf_anon_prepare mm/internal.h:372 [inline]
 do_anonymous_page mm/memory.c:4875 [inline]
 do_pte_missing mm/memory.c:4045 [inline]
 handle_pte_fault mm/memory.c:5889 [inline]
 __handle_mm_fault+0x16a5/0x3450 mm/memory.c:6032
 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6201
 do_user_addr_fault+0x613/0x12c0 arch/x86/mm/fault.c:1337
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

Memory state around the buggy address:
 ffff8881187e6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881187e6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff8881187e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                  ^
 ffff8881187e6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881187e6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================