Extracting prog: 33m34.820422193s Minimizing prog: 45m7.062517114s Simplifying prog options: 0s Extracting C: 1m47.10276981s Simplifying C: 8m52.978801553s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGCOLLECTIONINDEX-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000000000001d"], 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x40, 0x64, 0x72, 0x8, 0x1164, 0x1edc, 0x32e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x42, 0xa0, 0x9, "", [{{0x9, 0x4, 0xd3, 0xc0, 0x1, 0xa5, 0x8c, 0x83, 0x5, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x40, 0x81}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002380)={0x14, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000003bc0)={0x44, &(0x7f0000003980)=ANY=[@ANYBLOB="200b19000000208c0bc6e162ec9082bf327d29ce09d757c4f963b08068c950"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x268305d, 0x503dc9bbf29b3de3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e040040d7cc000000015002120001000000000c04"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-read$hiddev-syz_usb_control_io$printer-syz_usb_control_io$rtl8150-syz_usb_connect$uac2-syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$char_usb-ioctl$HIDIOCGUSAGE-syz_usb_control_io$uac2-syz_usb_disconnect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) read$hiddev(0xffffffffffffffff, &(0x7f0000000d80)=""/81, 0x51) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac2(0x5, 0xd8, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x9320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x10, 0x40, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x39, 0x1}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x0, "e4"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3}, @selector_unit={0xb, 0x24, 0xb, 0x8, 0x6, "07c17f50180e"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, [0x8, 0x3]}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x2, "0812d1b8b1"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xa, "54f8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x9, 0x7}, @as_header={0x10, 0x24, 0x1, 0x22, 0x6, 0x2, 0x4, 0x7, 0x800, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x0, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe, 0x1, 0x0, 0x6, "4abff4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x6, 0x8, {0x8, 0x25, 0x1, 0x80, 0x33, 0x6, 0x5}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x2, 0x2, 0x81, 0x10, 0xd}, 0xc5, &(0x7f00000005c0)={0x5, 0xf, 0xc5, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0xf, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xb9, 0x1, 0xa, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0xa320, 0xf, 0x6, [0xff0f, 0x30, 0xc0, 0x30, 0x3f00, 0xffff3f]}, @generic={0x7d, 0x10, 0x3, "f9748150bc5f4811cfb0e968566a3a24650305c6b4f3312c3df18d9c1259a16d29b60d5dc75fdad5c94063ffaac19a74dfaddff6a66209c32594ac012e8c259c6d200830155614cd376ebbeda4a741e9b8335aaebb20ac195204c330d71b67ecd1f8d9d8d6c6121bb612f7409e99c055cf0c33429de0b47943ae"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0x4, 0x5}]}, 0x3, [{0xed, &(0x7f00000006c0)=@string={0xed, 0x3, "c8fd60c770144327863ea5a1f0896dba2dfe0e06bfcb3a737c9e9a4083cca1c6b7843cfb5004a9cb546bdcf529740a065036202b3a88db2ce6f2daf8e7d19f7bfa70691a67a9abdef0182284e98951b227e7f832154215bb3c0208c3c5b592f177ed8efd27b2ace9f5a1c2cc75a0c5c53267433e26205a40a269d94b5e7195ae8f9217756514471c2af83837eb9b447a8e6eec233e19ba1373f04be1d282ee57bc4534d4319baff122fd698aa9d6cc972031f22f68e936d853a96e32d9f8897d8d8be1addc7d8c2138e8d8b27b2b7181293aa233bc1448ee2f773c7c978fc11590fab4b675b03696219db3"}}, {0x3f, &(0x7f00000007c0)=@string={0x3f, 0x3, "c7ccea30aad3cf3ec21d826c96ffa9065effb040173c0a2b80069bf9aa9da50cea7abd44639b23856e95b244b13acb3b0f09eae3318af483d091afa9f5"}}, {0xba, &(0x7f0000000800)=@string={0xba, 0x3, "6b6d02edaf9a872a159daf2dcfc8c4e4a4d5f2bc9df7c4ad718776b79fec0e35f0f57554e7fb575aedcaacd14d64dcc06c39b179c3aec87907ef9830cd5fd02c996cc6f723b1c7e98a3ba2fa470ffb549970f36e5db40b5303bb25f3b29c2eda0d2a025e49948e6be69c265e04b7cc4cbd1ecbd30af36f421cfe79c4a7edc4310dd84e1c558c28bc015773e211e7f844841aa6748025497eea2359589a2f63c3a1f38ee6749071be4e76d9654f8e8413ee53f0b091837423"}}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000e00)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40025b0c, &(0x7f0000000f00)={0x3ffffd, 0x0, 0xffffffff, 0x800, 0x9, 0x5}) syz_usb_control_io$uac2(r2, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x40, 0x2978438a180d9402, 0xd6, {0xd6, 0x23, "473160e99d94e063390b39dae925528f54f02883a4504847b7e39ac6f72bd899589fbdda74c073d74cb51d3b72e997894cc53bf2d965fc65d9f6177327d5374ad45ed96a7b8070211834525615e4669c51037b804cd0c11a2565e8e669d48ed4ae2d625f0057d63350bde5682b23de99936c9c5bba1f0abf7b3f7145fe214517a1301cfd6e2688b0d66716fbcc7d1b546631cc6e52164c8ab99c2ef739e0f146ddb30dc45217284a76446908f5727e8408200fe85569f433b650e1151fafab4525c23e793ade3b1e9bd575ce02751e5ec324e983"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x20, 0x5, 0x8e, "56b869f4fbbcad9bb686adc50093081381db762fc94c96e8130fd989226a9a0da2be44d82f5c0c343dc3d1db36b535b5125668732310c279fbfe87ca210d21ddd32965c018531964c0710b1be84cf5eaad798072328460190ec5c85dcbb4eff6f6198f6cc8aabdf7d5fdbccde125434c5b52c3082194d701e908e7032486abd0725b3da1f311e9da29cd59cb076b"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "c928f5"}, &(0x7f0000000c00)={0x20, 0x82, 0x2, "c8cf"}, &(0x7f0000000c40)={0x20, 0x83, 0x2, "8394"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "b3c4"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "93b803"}}) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-ioctl$HIDIOCGRDESCSIZE-syz_usb_control_io$uac1-syz_usb_control_io$uac2-syz_usb_connect-syz_usb_connect$uac2-syz_usb_disconnect-syz_usb_connect$sierra_net-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_disconnect-syz_open_dev$char_usb-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0030904000000010100000a240102000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020000010200000904020101010200000905820900020303100725010c08ff03ccd78237b5865d60275ce62374850e2feb966167b53b6dcb746ea33259cbb33802da6ac2478dd6cd383111860b0cd8"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x82, 0x602) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x5, 0x87, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x20, 0xe, 0x1, 0x6}, {0x9, 0x5, 0x6, 0x2, 0x20, 0x6, 0x9, 0xf8}, {0x9, 0x5, 0xa, 0x3, 0x200, 0x4, 0x8, 0x2}}}}}}]}}, 0x0) r4 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000180)=ANY=[]) syz_usb_disconnect(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x20, 0x10, 0x2, ' bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 14, 24, 10, 30, 7, 30, 5, 7, 30, 32, 12, 16, 9, 30, 30, 27, 23, 10, 6] detailed listing: executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904"], 0x0) syz_usb_connect$rtl8150(0x3, 0xfffffffffffffc42, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0714, [{{0x9, 0x2, 0x29}}]}}, 0x0) syz_usb_connect(0x3, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102b2cbb320dc050100"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0xb3, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002001009240302010100010009"], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000ac0)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000b40)=ANY=[@ANYBLOB="000304000000040b0a44"]}, &(0x7f0000000b80)={0x34, &(0x7f0000000bc0)={0x0, 0x16, 0xbc, "764312bb2110a973641b04ffc2e4c3d067b5aad70cfee97e9901ec7b0a33e127979bb346ef83928e7a21bf95c2b8d23f1de05c53a1826cf651d95241b023ec8047802b69db52e57337c4bfab0233cc7dab206c95e5d523663cf28af0e19636b6b08ef8af66453cc1939977c3181d14616c80c63027870d7637460f8b03f755547a590eaaa1d8349346a6f1997cc43a8fb961462e0f61c16e2609ec4e7f672ea4d6546099f1816cd9e9b625ee3ad39e417db36bd3dda339cdbc9105e3"}, 0x0, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000d00)={0x20, 0x0, 0x2}, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x1, 0xc6}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000980)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000800)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20313600000092fd16a2cb4fdca0537e8aca06ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="66d4f7ff0000004043552205000080715cb67e0000000109022400010000000009040000010300000009210000000122f6000905810300000000006f04aafeafa8aa85a5d83927745b63930f7aa8ab45385c805620805e44730b673d5ae91b"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x0, 0x5, 0x47, {0x47, 0x0, "225a834416d49ee077fdf082da0d298c9e4ac813861e7c3c1e291e3c9748ed4313ace7882d0291098b5ed64e88b1470ed3fb1fcec2faf37c79eede36e0d497e197fa3da338"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000440)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0x9, "ff732e20"}, @global=@item_4={0x3, 0x1, 0x6, "c93e3522"}, @main=@item_4={0x3, 0x0, 0x8, "411fef6b"}, @global=@item_012={0x2, 0x1, 0x8, "ea08"}, @global=@item_012={0x1, 0x1, 0x1, "99"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5a, 0x1, {0x22, 0xa1}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="400ee600000005a1e4b8300b36b106a4a6501266f439d2f9969629df2229d11d03e514c10a775844cb965ba6d179ef1a4594163ac40fdc57d34be096979149d969b1b3961ca370da6216fb0d950e9d3abde889bdd805b71c758bc3ab0f44bbd52d3010584d8410b70458049bd9d9300dba13fd63d3ad27d60c1248c331c3cdc283205589bab867b9df8df2c36fb37c19f98cb0d3fe02800f21e0e3f5071feddf3de04596bd99dba2321c3fd2fdae892a03d8b08b000006242eb4c742a95e4324e7255b5dfcf392b1461b1bc7d5ee49d09696b2463d74934589348e384b88f4f2b79c34608117003a88136ef3"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x1, 0xe6, "f4c5478bfdd40be5ddc33b8d2bca8aeac3340b2adb15262924fadf11c1995522924073d79febce2f676c8437cd7144d4850fbbf3864f5d15c5e0eea00b6ebb0080737c2983d15648c56aae642797e2a57e0b5ae9ab5bb393868b70aee7c2fbc4ffd91121e8a1f1e4d3c5501bae415ec2a048b41eb13ad6158573ee8225f46f3577a82a4bac6eb9ee445f2ecf55580be2f2e696b580fe5db23ac1dd4a6e3e7ee267d7675eac49989c7af87c695b57c8cdf231e8a95a1a0298638aac9137bb19300cc2ac0bd816c84da1c3122d02432358d203daf24b8637930ce48bff849b3ca5f1694f863558"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xff}}) syz_usb_connect(0x4, 0x210, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff03600203090504"], 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0xc9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x44}}}}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000e00)={0x24, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc"], 0x0) syz_usb_connect(0x8d181b7c10c3ffdd, 0x24, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000014c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x0, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0xbb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xa475}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd5, 0x4, 0x2, {0xa, 0x25, 0x25, 0x236, 0x8b, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6c, 0x81, 0x6, 0x2, 0x3, 0x7, 0x8000, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x71, 0x43, 0x6, {0xa, 0x25, 0x25, 0x3, 0x2, 0x200}}}}}}}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000e40)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02171a00000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x20, 0x22, 0xc3, {0xc3, 0x6, "cba5af36e8eeb80427f4eec7600803ba21aec626a977a8544d22b288a5ef6991a1e7a393628b8bf91eae77bbceba81c0e85bfafbba0257ca3da93593d40d51d5a19c4ebcf91958556c3d972c8936b0d3c54e59d4620050ca82e8c53d6b31fe3e5f1b6aa5bc830777e431223de42e146de9e61e80e267ebb7a29f1cb9dea63027cf23c140b527de5083867f02b57c709331f2a4edb5ba31d908faaf70e804e77f124853dd6fad083184ebe2b6dbef280df786057ead24e9ccc2e9490b8b0c1b2938"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x44, &(0x7f0000001180)={0x40, 0x9, 0xfc, "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"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001300)={0x0, 0x8, 0x1}, &(0x7f0000001340)={0x20, 0x80, 0x1c, {0x7, 0x3, 0x2, 0x0, 0x5, 0xfff9, 0x7, 0x1f546390, 0x8, 0x4, 0x401, 0x3}}, &(0x7f0000001380)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000013c0)={0x20, 0x83, 0x2}, &(0x7f0000001400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001440)={0x20, 0x89, 0x2}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x9e, &(0x7f00000007c0)=@generic={0x8, 0x0, 0x96, "b6da0d4b", "ce852381e3e98bada719db3fdb53c6d68fc8b0eb70d2edc5cdcb2b388ead51fb6e5fb4d4f92194a4ccfd73facbbfb8aec0dd1d739fb66b3b6bab858fb4d0dc1fc8bb3cf8e547e28679eed187fde1a103b4c6cca5c2698371cba88ae6a621add00f5f65c2fc31fed105ca305251cf9473b1cf26d5b5b03ec30ac5186291782b212c5801968d709104fc0a8e68666040f24733eeabe3d1"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406304ffff0000000000010902240001000000000904000009030000000921000000012229000905810300"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000c80)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000e80), 0x0, 0x125040) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x95, 0xd2, 0xd4, 0x8, 0xc72, 0xc, 0xeda1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x63, 0x7, 0x0, 0xff, 0xba, 0x44, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x1, 0xa0, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x2, 0x40, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x8}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x4, 0x3, 0x3, {0x4}}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x30, 0x7, 0x10, {0xa, 0x25, 0x1, 0x6, "c59ba3dec069"}}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x6, 0x0, 0x96, {0xc, 0x25, 0x1, 0x8, "4a9dd85066191dae"}}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x9, 0x1, {0x13, 0x25, 0x1, 0xf, "d54fd884587891def0801699c11660"}}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x3, 0x96, 0xf0, {0xe, 0x25, 0x1, 0xa, "0dd57f463ca55362b067"}}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x1, 0x9, 0x2, {0x5, 0x25, 0x1, 0x1, "f1"}}}]}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x3, 0x6, 0x8, 0x20, 0x7b}, 0x3d, &(0x7f0000000a40)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x4, 0xff0f, 0x4, [0xcf, 0xc0, 0xc000, 0x3f30, 0xcf, 0x808000]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "92277239855026dde53877169cab48ca"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb6, &(0x7f0000000ac0)=@string={0xb6, 0x3, "d6aa472551a24f3d6e76c79f44696b5cf1fd8e2c442e8f97e996dfb93448a3ff05bcda40398afa4dddd6a92833028e51795e492c7cf06092454da5caff29fe81589915a94fb681df522bf74b51ade438b8c6d943d340d1160c56bf52e4d08042dd1102c032c4ec77e3486044f73ddeb80415c2c7d3ee0f4755f19c32ae7bf26a7053285e06205d46ac8f6157cf3f0623aa08f8d34f3a1053d28edf4d20f36aefbef5633fc431181cae896d28d4e11383b0116db0"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x4, 0x16, {0x16, 0x1, "84ca4ba8851def515bdba15b510d689cd4e0303d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9, @string={0x9, 0x3, "ea3811689faeda"}}, &(0x7f0000000100)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x82, "2e8515245b0f357d7b682d3164a57eca"}, @ptm_cap={0x3}, @generic={0xc9, 0x10, 0x1, "a0a22bb547aade9e6ef560246f8579b422e2ed906d027627b648c71b0052b01d82bf2fd936c8e7eff81ce8bc2452d7ee28e584c23854298785ca9803699771b9a40ba153e3702ad05befd40b2491aea3f38fabbce39bd5c51a90078409e54a6c2e6849a0ff65f8730cfb4ed0ddd2c4ed1e38b7bb56df5c167544cdf0cfc8b18c089ac7a686986674fed57facf2348e6ee0cc1a661d5c7c6620cdd54343175cd1865d5b4ad123cca120c443ec12bd193d8404adae033fe94e8193f49a602931ec46c8a343c048"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x1, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x5, 0x9}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x8, 0x0, "3e8c5ebc", "6a0e8f46"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x1, 0x7f, 0x6, 0x9, 0xffff}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x17, 0xc, "7bad8d27e5304a47de8b8414"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xa3}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "c1cf"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "8b3d"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x10, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5dc, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x340, 0x84, 0x3c, 0xf4, 0x20, 0x10ce, 0xea6a, 0xef2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x1, "", [{{0x9, 0x4, 0xe3, 0xf9, 0x0, 0xb5, 0x67, 0x31, 0x9}}]}}]}}, 0x0) r2 = syz_usb_connect$midi(0x2, 0x74, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020000004099040410400001020301ee02620001010b0005090400000201030008062403020b01fd000c0624020101030624020180060b240301fc02ff05f509892a2403027f00010f030ad0f57f05400e01ffff090508103800f70905082501043046e2ee0905071000006409060f25010b090000a6fe97900300000004000000f6"], &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0xfa, 0x5, 0x0, 0x40, 0xb}, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0507dbc590a2f1a0fca0aa12654000"], 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_ep_write(r2, 0x81, 0xdf, &(0x7f0000000400)="02fc0b9bf21b54e826c444669a00a7068588afd9a4529349a021e31cd50015dbb2517494601153aaf745b750134c9a696ca25bcaaec233000000000000000000008c5e6b8b88f7a8a78f76c62a087aed02b4df18af471760eff220f6dd1cc6a3cc20df72530f39caff8cb3f9764b947872a5c2086d25087046fb8baab00db67e2c0eeeb73fc780ac8242f873153c457e8a02b51acfb4ea50720f6e9221a67611d9656c84eb40fe168aa1863750833141bfd49d2e447339a30ae082c56b0c2f59f6a420f651a7af1c36b91408a683c9f10e80a7fb8a06bfe05c71c867e2a471") r3 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000225708140d8131000728f01020301090212000100011004090478"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x100, 0x12183) syz_usb_connect(0x3, 0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_usb_connect(0x5, 0xb4c, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_open_dev$evdev(0x0, 0x34930c73, 0x48342) ioctl$EVIOCGSND(r5, 0x40086602, &(0x7f0000002280)=""/4112) r6 = syz_usb_connect(0x5, 0x24, &(0x7f00000032c0)={{0x12, 0x1, 0x110, 0xa9, 0x79, 0xb5, 0x20, 0xe41, 0x4159, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd1, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x25, 0x1c, 0xde, 0x2}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000003300)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000003340)=ANY=[@ANYBLOB="1201000200000040c6050010000000000001090220000101008032090400000208065000"], 0x0) syz_usb_disconnect(r6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xeb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000033c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000280)={0x55, 0x8, 0x81, {0x62, 0x800}, {0x1, 0x9}, @rumble={0x80, 0x2}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010080a50de2ee3acbe888063f45c4ac038df9d2400304988a0f6b010203010902120001018000020904d509006678460577a2a8352c9cf2e31039ae8b59078c8f6c147da7c0c5632ee5b2e51790dbbaabb30ac660f32ec50e7bcdef844245bf6963f05651b7708cf73ad36f26f431c91cf5bd86cacd4f7cb6d15f9e4eef06e6c9e013cb85f807e4cbe70b91a1351b0cde4ae5af1a583d175c1df45d9aee13214c960fd1a6d0d7650b18aeb2382a07b2174692e3fa9e4a33d6a5e2f1daa4dafdbf98089351074bdb39847d1a1d54c6398604a51c44c4c73fbc2c43f4e434fc1550085d"], &(0x7f0000000200)={0x0, 0x0, 0x12, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0xf7, 0xf5, 0x81, 0x40, 0x55f, 0xc420, 0x3b0f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xc0, 0x4, "", [{{0x9, 0x4, 0x22, 0xb6, 0x1, 0xc1, 0x36, 0xb4, 0xb, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ef, 0xe, 0x9, 0x4}}]}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x822b01) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000004058048700400001020301090224001b01fff0c909040008010301020009217fff770122a10f090581032000030544"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x155555555555573f, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000400)={0x0, 0x10, 0x2, {0x2, 0xc}}, 0x0}, 0x0) executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x3032f4f8996aef53, 0x10}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000740)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000007c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="070100000000001019040100000000000001090200afe301090581038936050abffd9f11"], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000b5b30a40450c05"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000900)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) executing program 4: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008ca15010140000102030109028600030180000e080b0101010a207609040000000101200009060000000000000011240906060000020002005df5ef9603000c2403fd0101a80306f9ff01090401"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xda, 0xff, 0xa5, 0x20, 0x413c, 0x81cf, 0xd409, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf, 0x9, 0x8, 0x2, "", [{{0x9, 0x4, 0x4e, 0x4d, 0x0, 0x72, 0x27, 0xe4, 0xe2}}, {{0x9, 0x4, 0x2, 0x4, 0x0, 0xff, 0x0, 0x40, 0x6}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x49, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102a30dbe10e20410142278010203010902370001056480e609044b05000273cc00052406"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) executing program 0: r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040480b041000010102030109021b00010100803209040100"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000240)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000300)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x3, 0x4, &(0x7f0000000080)="69b5113d") executing program 3: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) r0 = syz_usb_connect(0x0, 0x58, &(0x7f0000000340)=ANY=[@ANYBLOB="120110038f816820e804360430850102030109024600020e0610030904fad8016845f808090508102000070980097f510503b08f7c0209050800000b00200007039a0f05d15b89f26d0905070340007a0a84"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x140c}}]}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x174, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x2, 0x1, 0xc, 0xb0, 0xf, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6ab379f45f60"}, {0x5, 0x24, 0x0, 0x8ae}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0xc}, [@mdlm_detail={0xeb, 0x24, 0x13, 0x7f, "673407da59add3a563aa2492b073cccdbdfc24f0619588752095232eb832c1ad4308b593087b5668c3d2d98f3639b1ee7129c083598be162798e5bd4b85c68b3af49c725b7c116daf1a1888a5592301d9b80e4d02cbd5db143f963e75758716cc24156bd8b4755db696dff1561f199d76d7f3cc50f0f6ef8b55925c2bd1abd41c1e62e6fa9fc6f8040312a32751edb57f865f59a15047c756c253ff080756ac4aa1af02418715aed792254f7b598599baab28d90063f79f642e68f9702938ad0a5b34e86400002c0ff93968db47528f09ec90d1ee705d77997be6452e1fd6befc9743214de15b6"}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x50, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2d, 0x5, 0x9}}}}}}}]}}, 0x0) (async, rerun: 32) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000480)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="3cfffffffe000000001c"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00119a3c1bbc6f57de04bf6a428ddeaf458b9566f3c730fc466590"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="400808f2ffffff3bb7a4aa50323fc3f08efee90ce2e892a207b60123a16d148eaa81a4edd91ae0fe4874ab7d7fe91d703033010341e1c32251923208691e343572e675f858b505d7e14100ac16abe3e4394f3e0e601127d96e382326dc5c3cade2391cad018079850ac3f400"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000001e00)={0x40, 0x14, 0x4, "008b35a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac3(0x0, 0x85, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12109082e00000102505a8a4400001030109021b00010101400609040002010701010509050102200010"], 0x0) (async) r3 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0021000705010240000007050202400000070504024000000705060240000007058103400001070588"], 0x0) syz_usb_ep_write(r3, 0x88, 0xb, &(0x7f0000000540)="1000"/11) (async) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) (async, rerun: 32) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (rerun: 32) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000700)={0x60, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r5, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (rerun: 64) executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) (async) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) (async) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) (async) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) (async) syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002d306c10ce0aff2001010102030109022400010000000009040000029e02380009050d0000000000000905a8"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe8}}}}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0x9, "a6"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000e2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x5, 0x2, "80c1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006abe00081c1b3e1b000000000001090224000100008024090400050203000200092100003e0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, &(0x7f0000000140)={0x0, 0x4, 0xa, {0xa, 0x10, "28320d9ca3d00604"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9c, 0xee, 0xae, 0x10, 0xbda, 0xf192, 0xf112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x57, 0xc1, 0x0, 0xff, 0xff, 0xff, 0x80}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x6, "97e17c7d60ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRES16=r1, @ANYRESDEC=r2], 0x0}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x20, 0x10, 0x2, ' bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 27, 23, 10, 6] detailed listing: executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)={0x40, 0x3, 0x1, "c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xb5, 0x50, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6d}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="da9bf806f286000e000000001c87a1a1a6f3d2476ec94d2767f52ac46ef1800332d1e22b53b732"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) executing program 2: r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0030904000000010100000a240102000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020000010200000904020101010200000905820900020303100725010c08ff03ccd78237b5865d60275ce62374850e2feb966167b53b6dcb746ea33259cbb33802da6ac2478dd6cd383111860b0cd8"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x82, 0x602) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x5, 0x87, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x20, 0xe, 0x1, 0x6}, {0x9, 0x5, 0x6, 0x2, 0x20, 0x6, 0x9, 0xf8}, {0x9, 0x5, 0xa, 0x3, 0x200, 0x4, 0x8, 0x2}}}}}}]}}, 0x0) r4 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000180)=ANY=[]) syz_usb_disconnect(r0) executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) read$hiddev(0xffffffffffffffff, &(0x7f0000000d80)=""/81, 0x51) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac2(0x5, 0xd8, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x9320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x10, 0x40, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x39, 0x1}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x0, "e4"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3}, @selector_unit={0xb, 0x24, 0xb, 0x8, 0x6, "07c17f50180e"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, [0x8, 0x3]}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x2, "0812d1b8b1"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xa, "54f8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x9, 0x7}, @as_header={0x10, 0x24, 0x1, 0x22, 0x6, 0x2, 0x4, 0x7, 0x800, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x0, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe, 0x1, 0x0, 0x6, "4abff4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x6, 0x8, {0x8, 0x25, 0x1, 0x80, 0x33, 0x6, 0x5}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x2, 0x2, 0x81, 0x10, 0xd}, 0xc5, &(0x7f00000005c0)={0x5, 0xf, 0xc5, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0xf, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xb9, 0x1, 0xa, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0xa320, 0xf, 0x6, [0xff0f, 0x30, 0xc0, 0x30, 0x3f00, 0xffff3f]}, @generic={0x7d, 0x10, 0x3, "f9748150bc5f4811cfb0e968566a3a24650305c6b4f3312c3df18d9c1259a16d29b60d5dc75fdad5c94063ffaac19a74dfaddff6a66209c32594ac012e8c259c6d200830155614cd376ebbeda4a741e9b8335aaebb20ac195204c330d71b67ecd1f8d9d8d6c6121bb612f7409e99c055cf0c33429de0b47943ae"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0x4, 0x5}]}, 0x3, [{0xed, &(0x7f00000006c0)=@string={0xed, 0x3, "c8fd60c770144327863ea5a1f0896dba2dfe0e06bfcb3a737c9e9a4083cca1c6b7843cfb5004a9cb546bdcf529740a065036202b3a88db2ce6f2daf8e7d19f7bfa70691a67a9abdef0182284e98951b227e7f832154215bb3c0208c3c5b592f177ed8efd27b2ace9f5a1c2cc75a0c5c53267433e26205a40a269d94b5e7195ae8f9217756514471c2af83837eb9b447a8e6eec233e19ba1373f04be1d282ee57bc4534d4319baff122fd698aa9d6cc972031f22f68e936d853a96e32d9f8897d8d8be1addc7d8c2138e8d8b27b2b7181293aa233bc1448ee2f773c7c978fc11590fab4b675b03696219db3"}}, {0x3f, &(0x7f00000007c0)=@string={0x3f, 0x3, "c7ccea30aad3cf3ec21d826c96ffa9065effb040173c0a2b80069bf9aa9da50cea7abd44639b23856e95b244b13acb3b0f09eae3318af483d091afa9f5"}}, {0xba, &(0x7f0000000800)=@string={0xba, 0x3, "6b6d02edaf9a872a159daf2dcfc8c4e4a4d5f2bc9df7c4ad718776b79fec0e35f0f57554e7fb575aedcaacd14d64dcc06c39b179c3aec87907ef9830cd5fd02c996cc6f723b1c7e98a3ba2fa470ffb549970f36e5db40b5303bb25f3b29c2eda0d2a025e49948e6be69c265e04b7cc4cbd1ecbd30af36f421cfe79c4a7edc4310dd84e1c558c28bc015773e211e7f844841aa6748025497eea2359589a2f63c3a1f38ee6749071be4e76d9654f8e8413ee53f0b091837423"}}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000e00)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40025b0c, &(0x7f0000000f00)={0x3ffffd, 0x0, 0xffffffff, 0x800, 0x9, 0x5}) syz_usb_control_io$uac2(r2, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x40, 0x2978438a180d9402, 0xd6, {0xd6, 0x23, "473160e99d94e063390b39dae925528f54f02883a4504847b7e39ac6f72bd899589fbdda74c073d74cb51d3b72e997894cc53bf2d965fc65d9f6177327d5374ad45ed96a7b8070211834525615e4669c51037b804cd0c11a2565e8e669d48ed4ae2d625f0057d63350bde5682b23de99936c9c5bba1f0abf7b3f7145fe214517a1301cfd6e2688b0d66716fbcc7d1b546631cc6e52164c8ab99c2ef739e0f146ddb30dc45217284a76446908f5727e8408200fe85569f433b650e1151fafab4525c23e793ade3b1e9bd575ce02751e5ec324e983"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x20, 0x5, 0x8e, "56b869f4fbbcad9bb686adc50093081381db762fc94c96e8130fd989226a9a0da2be44d82f5c0c343dc3d1db36b535b5125668732310c279fbfe87ca210d21ddd32965c018531964c0710b1be84cf5eaad798072328460190ec5c85dcbb4eff6f6198f6cc8aabdf7d5fdbccde125434c5b52c3082194d701e908e7032486abd0725b3da1f311e9da29cd59cb076b"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "c928f5"}, &(0x7f0000000c00)={0x20, 0x82, 0x2, "c8cf"}, &(0x7f0000000c40)={0x20, 0x83, 0x2, "8394"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "b3c4"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "93b803"}}) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x40, 0x64, 0x72, 0x8, 0x1164, 0x1edc, 0x32e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x42, 0xa0, 0x9, "", [{{0x9, 0x4, 0xd3, 0xc0, 0x1, 0xa5, 0x8c, 0x83, 0x5, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x40, 0x81}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002380)={0x14, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000003bc0)={0x44, &(0x7f0000003980)=ANY=[@ANYBLOB="200b19000000208c0bc6e162ec9082bf327d29ce09d757c4f963b08068c950"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x268305d, 0x503dc9bbf29b3de3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e040040d7cc000000015002120001000000000c04"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000000000001d"], 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [32, 12, 16, 9, 30] detailed listing: executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) (async) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) (async) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) (async) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) (async) syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002d306c10ce0aff2001010102030109022400010000000009040000029e02380009050d0000000000000905a8"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe8}}}}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0x9, "a6"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000e2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x5, 0x2, "80c1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006abe00081c1b3e1b000000000001090224000100008024090400050203000200092100003e0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, &(0x7f0000000140)={0x0, 0x4, 0xa, {0xa, 0x10, "28320d9ca3d00604"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9c, 0xee, 0xae, 0x10, 0xbda, 0xf192, 0xf112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x57, 0xc1, 0x0, 0xff, 0xff, 0xff, 0x80}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x6, "97e17c7d60ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRES16=r1, @ANYRESDEC=r2], 0x0}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x20, 0x10, 0x2, ' bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006abe00081c1b3e1b000000000001090224000100008024090400050203000200092100003e0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, &(0x7f0000000140)={0x0, 0x4, 0xa, {0xa, 0x10, "28320d9ca3d00604"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9c, 0xee, 0xae, 0x10, 0xbda, 0xf192, 0xf112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x57, 0xc1, 0x0, 0xff, 0xff, 0xff, 0x80}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x6, "97e17c7d60ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRES16=r1, @ANYRESDEC=r2], 0x0}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x20, 0x10, 0x2, ' bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$lan78xx detailed listing: executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002d306c10ce0aff2001010102030109022400010000000009040000029e02380009050d0000000000000905a8"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe8}}}}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0x9, "a6"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000e2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x5, 0x2, "80c1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [32, 12] detailed listing: executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x341080) (async) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/95) (async) syz_usb_connect$midi(0x16fd77ebe52a5296, 0x60, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x21, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x30, 0x7, [{0x7}, {0x38, 0x6b}, {0x9, 0x4}, {0xff, 0xb}, {0x80, 0x9}, {0x4, 0x30}, {0x3e, 0xf}], 0x3}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "a614b62abd6549730025fad576"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x3e, 0xb6, {0x4}}}]}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040351210824000010203010902750003010c2081080b0001010520b50904000000010120000924010100071500090c2403030703fb03020700810904010000010220000904050109ff"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$midi(0x3, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xfb, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x20, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x9, 0x2, [{0x6, 0x6}, {0x3, 0x7}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0xf5, 0x2, {0xc, 0x25, 0x1, 0x8, "ecc9c5ee0ee306e1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x2, 0x7, {0xd, 0x25, 0x1, 0x9, "fe1a3abb7ce351ec58"}}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x8, 0x0, 0x7, {0x6, 0x25, 0x1, 0x2, "b6d3"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x40, 0x90, 0x5, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "77885072f990b5b7929da5faac18b9cf0a"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) (async) syz_usb_connect$midi(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x30, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x2, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x670a, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x5, 0x7}, {0xd5, 0x35}, {0x4, 0x2}, {0x40}, {0x8, 0x3}, {0x9, 0xe}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x9, 0x2, [{0x8, 0x4}, {0x9, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x53e4ad4e8e6c7581, 0x3, 0x8, 0xc2, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "0c7c20a975aadc"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x1, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, "cd99"}}}, {{0x9, 0x5, 0x5, 0x2, 0x661, 0x5, 0x7, 0x5, {0x9, 0x25, 0x1, 0x5, "98a97bebc0"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xed, 0x80, 0x61, {0x6, 0x25, 0x1, 0x2, "b4e1"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4e, 0x13, {0x7, 0x25, 0x1, 0x3, "1dcd4f"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x652, 0x9, 0x1, 0x4, 0xff, 0xf7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}]}) (async) syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x5421, &(0x7f00000002c0)=""/93) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) program crashed: WARNING: ODEBUG bug in vub300_disconnect bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102033f09024840"], 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: concatenation succeeded found reproducer with 12 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect-syz_usb_control_io$hid-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) (rerun: 64) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$hid-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_open_dev$evdev-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$evdev(0x0, 0x3, 0x143080) (async) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: WARNING: ODEBUG bug in vub300_disconnect testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program crashed: WARNING: ODEBUG bug in corrupted testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync simplifying C reproducer testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: KASAN: slab-use-after-free Read in mmc_host_classdev_release a never seen crash title: KASAN: slab-use-after-free Read in mmc_host_classdev_release, ignore testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program did not crash testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true reproducing took 1h33m48.81362194s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc900001b8c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 __might_resched.cold+0x1dc/0x222 kernel/sched/core.c:9264 __cancel_work_sync kernel/workqueue.c:4561 [inline] cancel_delayed_work_sync+0xb8/0xf0 kernel/workqueue.c:4642 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: af bc 01 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 71 1c 00 fb f4 8c fa 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc9000014fe10 EFLAGS: 00000242 RAX: 0000000000094bad RBX: ffff8881022e0000 RCX: ffffffff878a1a55 RDX: 0000000000000001 RSI: ffffffff892df882 RDI: ffffffff87d2bd80 RBP: ffffed102045c000 R08: 0000000000000001 R09: ffffed103eae673d R10: ffff8881f57339eb R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000029fc6 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ODEBUG: object ffffc900001b8a60 is NOT on stack ffffc90000148000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40 lib/debugobjects.c:705, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(lazy) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 lib/debugobjects.c:705 Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 60 8b 0f 13 4c 89 e6 48 c7 c7 c0 c8 d2 87 e8 21 c2 fa ff 90 <0f> 0b 90 e9 b2 e0 bb 01 83 c5 01 89 2d 3f 8b 0f 13 49 39 c4 73 da RSP: 0018:ffffc900001b88f0 EFLAGS: 00010082 RAX: 0000000000000050 RBX: ffff8881121e1968 RCX: 0000000000000000 RDX: 0000000000000050 RSI: ffffffff8193b6e9 RDI: fffff5200003710f RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000102 R11: 0000000000000001 R12: ffffc900001b8a60 R13: ffff8881022e0000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8882684d5000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055788e03abf0 CR3: 000000011b8d0000 CR4: 00000000003506f0 Call Trace: lookup_object_or_alloc lib/debugobjects.c:682 [inline] __debug_object_init+0x2a9/0x3d0 lib/debugobjects.c:798 __synchronize_srcu+0x1c3/0x300 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister.part.0+0x12c/0x540 drivers/base/power/wakeup.c:237 wakeup_source_unregister+0x1f/0x30 drivers/base/power/wakeup.c:236 mmc_host_classdev_release+0x42/0x120 drivers/mmc/core/host.c:69 device_release+0xd2/0x270 drivers/base/core.c:2640 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1f7/0x640 lib/kobject.c:737 put_device+0x1f/0x30 drivers/base/core.c:3884 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: af bc 01 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 71 1c 00 fb f4 8c fa 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc9000014fe10 EFLAGS: 00000242 RAX: 0000000000094bad RBX: ffff8881022e0000 RCX: ffffffff878a1a55 RDX: 0000000000000001 RSI: ffffffff892df882 RDI: ffffffff87d2bd80 RBP: ffffed102045c000 R08: 0000000000000001 R09: ffffed103eae673d R10: ffff8881f57339eb R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000029fc6 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ---------------- Code disassembly (best guess): 0: af scas %es:(%rdi),%eax 1: bc 01 c3 cc cc mov $0xccccc301,%esp 6: cc int3 7: cc int3 8: 0f 1f 00 nopl (%rax) b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 93 71 1c 00 verw 0x1c7193(%rip) # 0x1c71bb 28: fb sti 29: f4 hlt * 2a: e9 8c fa 02 00 jmp 0x2fabb <-- trapping instruction 2f: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 36: 00 00 00 39: 66 90 xchg %ax,%ax 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc900001b8c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 __might_resched.cold+0x1dc/0x222 kernel/sched/core.c:9264 __cancel_work_sync kernel/workqueue.c:4561 [inline] cancel_delayed_work_sync+0xb8/0xf0 kernel/workqueue.c:4642 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: af bc 01 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 71 1c 00 fb f4 8c fa 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc9000014fe10 EFLAGS: 00000242 RAX: 0000000000094bad RBX: ffff8881022e0000 RCX: ffffffff878a1a55 RDX: 0000000000000001 RSI: ffffffff892df882 RDI: ffffffff87d2bd80 RBP: ffffed102045c000 R08: 0000000000000001 R09: ffffed103eae673d R10: ffff8881f57339eb R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000029fc6 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ODEBUG: object ffffc900001b8a60 is NOT on stack ffffc90000148000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40 lib/debugobjects.c:705, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(lazy) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 lib/debugobjects.c:705 Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 60 8b 0f 13 4c 89 e6 48 c7 c7 c0 c8 d2 87 e8 21 c2 fa ff 90 <0f> 0b 90 e9 b2 e0 bb 01 83 c5 01 89 2d 3f 8b 0f 13 49 39 c4 73 da RSP: 0018:ffffc900001b88f0 EFLAGS: 00010082 RAX: 0000000000000050 RBX: ffff8881121e1968 RCX: 0000000000000000 RDX: 0000000000000050 RSI: ffffffff8193b6e9 RDI: fffff5200003710f RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000102 R11: 0000000000000001 R12: ffffc900001b8a60 R13: ffff8881022e0000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8882684d5000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055788e03abf0 CR3: 000000011b8d0000 CR4: 00000000003506f0 Call Trace: lookup_object_or_alloc lib/debugobjects.c:682 [inline] __debug_object_init+0x2a9/0x3d0 lib/debugobjects.c:798 __synchronize_srcu+0x1c3/0x300 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister.part.0+0x12c/0x540 drivers/base/power/wakeup.c:237 wakeup_source_unregister+0x1f/0x30 drivers/base/power/wakeup.c:236 mmc_host_classdev_release+0x42/0x120 drivers/mmc/core/host.c:69 device_release+0xd2/0x270 drivers/base/core.c:2640 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1f7/0x640 lib/kobject.c:737 put_device+0x1f/0x30 drivers/base/core.c:3884 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0x168/0x210 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: af bc 01 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 71 1c 00 fb f4 8c fa 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc9000014fe10 EFLAGS: 00000242 RAX: 0000000000094bad RBX: ffff8881022e0000 RCX: ffffffff878a1a55 RDX: 0000000000000001 RSI: ffffffff892df882 RDI: ffffffff87d2bd80 RBP: ffffed102045c000 R08: 0000000000000001 R09: ffffed103eae673d R10: ffff8881f57339eb R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000029fc6 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ---------------- Code disassembly (best guess): 0: af scas %es:(%rdi),%eax 1: bc 01 c3 cc cc mov $0xccccc301,%esp 6: cc int3 7: cc int3 8: 0f 1f 00 nopl (%rax) b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 93 71 1c 00 verw 0x1c7193(%rip) # 0x1c71bb 28: fb sti 29: f4 hlt * 2a: e9 8c fa 02 00 jmp 0x2fabb <-- trapping instruction 2f: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 36: 00 00 00 39: 66 90 xchg %ax,%ax 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop