Extracting prog: 16m17.063950411s
Minimizing prog: 1h19m20.655528181s
Simplifying prog options: 6m11.224829969s
Extracting C: 2m35.271219015s
Simplifying C: 0s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io-syz_usb_connect_ath9k-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_open_dev$char_usb-syz_usb_disconnect-write$char_usb-syz_usb_control_io$cdc_ncm-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d"], 0x0) (async)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x2, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_disconnect(r4) (async)
write$char_usb(r5, 0x0, 0x11) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)={0x40, 0xa, 0x2, "5ed4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x46, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_open_dev$hiddev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_connect(0x3, 0x3be, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xc4, 0xce, 0xff, 0xff, 0x10c4, 0x8056, 0x5876, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ac, 0x2, 0x1, 0x2, 0x40, 0x9, "", [{{0x9, 0x4, 0x5, 0x2c, 0xe, 0xa3, 0xc1, 0xa, 0x4, [@hid_hid={0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0xfb}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fc4d3e"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81783de0, 0xfffa, 0x1a, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0xd, 0x81, 0x5, [@generic={0x72, 0x0, "6dc9d21a3e3330aba19a39e42681889f96948d7a74b405a66df6bcecc68bce9766147b22c53efdc5b87f0420f3166851905cccd66204969d8a9d3400acf7630b84ae6258c3c55017dc99322654c6ee0936207a3d0a668465cb7ec565cd446db4d051bc5aa1f8b9f8c97b45f459044e57"}, @generic={0x23, 0x3c, "b79ea0a739372b1b642ce3591406aa6ffe39cf039eabd9378a3c7b8c606b6d792d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0xa, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3, 0xf8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0xc, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xd00}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xc, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x9, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x30}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0x1, 0x1, [@generic={0x2f, 0xe, "215e24656a92661c9105bc9bbfd4ed882944e0bf36da08601b8ca969b0bd33c14f5cf9aabe31cb8596fdb2ff1b"}, @generic={0x2b, 0xe, "90bfe108451a8b596af2a7f5e494b1919b3e1161c83de518fbd3eb189f81ce317141c7e6610a270ae1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x2, 0xa}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x4, 0x59}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xba, 0x80, [@generic={0xd0, 0x11, "dec694d0b9ef775d76ca56d28330c616002e769b3ec784f3110c69a0d9387d137676fa8c453300102f10e98b238d9559895e480f94a105bf4ef03a8b47c0b7e77b7d7c3b64c692f250aa77f1dc731d741d7a04e80311529aabe5807f1f160c07375140d57284f9cc51fbac91a700c2c6e095cc2160a4a870ff542e300554999c5ed8537f5e21043801d98dbd4f6067ecf7a58169ef1cfd13e4309b8b68ce526d07eb4435f57372f1adeab67f0e30be9b769debee32f587d7f1e67ac064d8c9a0314c33b2a823b7a7f08a2cb26a49"}, @generic={0x1f, 0x7, "f0897eb4773dcbe4551ffc3e7b393cd0ead91ab67e6a3795e26f6151f6"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x8, 0x6, 0xe}}]}}, {{0x9, 0x4, 0x14, 0x6, 0x6, 0x65, 0x31, 0xd3, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x3fd, 0x3, 0x0, 0xfff, 0x90, 0x5}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8596d024dda1"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x6, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x40, 0x4a, 0xff}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x40, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0xc00, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0xc, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x1, 0x5, 0x28, [@generic={0x57, 0x21, "4158a6711bdbdde7ec49fef6b6cf2974c2406db24b525906a62ed5199a175c61babd17553051e6ffee86c452b754f1fde9a10fa5cef92eb8bafe493e9a6e219d5bcc4b6c037bed6183d2b7a55b56f1012a257d2d07"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x6, 0x51, 0x7, 0x8, 0x9}, 0x33, &(0x7f0000000000)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0xb5, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x3, 0x4, 0x40, 0xfc}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x5, 0xf000, 0x9, [0xc0, 0xffc000, 0xff3f00]}]}, 0x9, [{0x1a, &(0x7f00000007c0)=@string={0x1a, 0x3, "932c66e4b689a9693bc4f90acb1c321e8059720406337ed7"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x50}}, {0x4b, &(0x7f0000000840)=@string={0x4b, 0x3, "52332575429e6b6c70750e744bb782a1b16501123a1826145635743f56c3a8ce0fd7fbc5cae5aeb4eaced46a92ff3fe4e314f750bb50dffa6970c2c9e1e02d06fd4a8c402ef7f68797"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x76, &(0x7f00000009c0)=@string={0x76, 0x3, "e775ab1c63c1855fb7a7c70870f3efd5aed0ed1b83f94bc2aae84e39506e9f2beb8c6d072f06b5abc1aa2b9ab062f4babfd7a399a80970ea983954b2b3713a87c66d664daed412d1efe164e3adeb471ba0b3c787afd457e556feefd438a89adef11f3fec3ea3209bb8499de547d426cba131ee01"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x180c}}, {0xae, &(0x7f0000000a80)=@string={0xae, 0x3, "d4c0ef644427bccb148da77cd38efb424d1d55b749ff5f68b0878e4f21a401af4980ad475aacea9512c6924938ee8683113f6a1570b84f2fcabedcb9318a9b59118f4c2c6a2141bce9ca25e6eace1bf34935cc267e48c7a2238c67eb353c295ca725b4e1653a7612df8719162d35fe030a5c3e60223ffde5c0b33a7e8f832c75171be100ffeb096d68b0b121d1131575a0cd68a7830d5eacbc0e8fd11c5640437a254f004b6501c8c88d30ae"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x801}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x6100)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$lan78xx-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x22, 0x84, {0x84, 0xf, "f75a865aaf81b1f1425fdda1b5f0ee19c736e41016f248774d72684da45ccc7f8dbde74885713c2e549ccf80b0cf24e02ca92cd14b6db3add53ddb02b6333c2d364f919aca57c9f7f5dadb9120880c130bc4b7f6eb40e0a4dd229c3bf9f10b09ade0ce2df6bdcf6c4d9c3499e570fe1fc2a2fde224cbcc49c7019668722fe75dcfae"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x0, 0x11, 0x2, "cfe1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'j'}, &(0x7f0000000440)={0x20, 0x82, 0x3, "863391"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "e0"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "a19e"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "0d4e92"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000600)={0x974f8b87cdb0aefb, 0x31, 0x4, "d4e61e58"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 18, 18, 11, 16, 27, 6, 6, 30, 16, 29, 4, 30, 25, 40, 7, 17, 8, 21, 16, 1, 11, 20, 30, 6, 30, 25, 21, 5, 24]
detailed listing:
executing program 2:
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b000200"], 0x0)
r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f0905810320000308640905020300"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4c, 0x101001)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000580)=""/4096)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="4000090000001f574fd8a7808008afbc2b9f8cc01a5a64ee2fed077fb7d21424ef7fd0421cb423e9149a3b89ba7016fc4b88b771d45297"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2}}]}}, 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x3f, 0x4c, 0x68, 0x40, 0x10b8, 0x2383, 0xe695, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000accd0ec85c9b29c2e0bf6ff1c9604e3a5ef13d6668688a"], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x31, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0xe, 0x6, {0x7, 0x25, 0x1, 0xc, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x40, 0x2, "", "fc"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9, 0xb, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x8d, 0x5, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x40, 0x8, {0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x250, 0x4, 0x5, 0x1, 0x20, 0x5}, 0x57, &(0x7f0000000780)={0x5, 0xf, 0x57, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x3, 0x7, 0xc, 0xb, 0x86}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x7, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4505fbde45e61b91c7c5c2a21f870ae7"}, @ssp_cap={0x10, 0x10, 0xa, 0x86, 0x1, 0x313, 0xff1e, 0x5, [0x3f00]}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x800000, 0xf000, 0x8, [0x3f00, 0x3fc0, 0xc0, 0xc00f]}]}, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41f}}]})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x16, 0x8, "9ec242b91c072533"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac3(r5, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0x9a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x8, 0x90, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xa, 0x4, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x4, 0x5, 0x5, {0x7, 0x25, 0x1, 0x8, 0xf, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd04, 0xb, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x40, "b6", "69ff"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x8, 0xe, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x9, 0x6, {0x7, 0x25, 0x1, 0xc, 0x8d, 0x922}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x8b, 0x6, 0x40, 0x5}, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="c02ce21944e9bbcca0af30e121c9a8"], 0x1, [{0x80, &(0x7f00000002c0)=@string={0x80, 0x3, "e36042dbe05ac639f55cff1d5266886c0886e87f759c576beac9f07b9bcf280f57b008bbce5672633eeed96ac4b8b5ecc9b5e5cd2cefa9fec3e7f64ce7f0ca03409e86ae95cb0db72c2e891910a083561bc0a1e8f1924ecdcd6cf27f678772a9a5d95b24930ffcad5f59ea756f52abf3c21ff0d4f2cf41ae2b51aa6553a0"}}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x85, 0xa9, 0xe0, 0x20, 0x13d8, 0x22, 0x3799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x9, 0x80, 0xa, "", [{{0x9, 0x4, 0x43, 0x6, 0x0, 0xe3, 0x35, 0x92, 0x89}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0xb9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100100000040410e42424000010203010902a7000301488005080b0101012430800904000000010130000a24010b0a00ab0000000904010000010230000904010101010230000e2402010904e30f97b5c782d8710a2402020400010004090624020101050a24020105020c01fa66092402010c04bb6d3eaecaf05dd2000f40400a25250600000081d6000904020000010230000904020101010230000824020102000fff"], 0x0)
r2 = syz_usb_connect$cdc_ncm(0x5, 0x8e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x2, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x0, 0xfd}, {0x6, 0x24, 0x1a, 0xa2dc, 0x2a}, [@dmm={0x7, 0x24, 0x14, 0x3}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x5e}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe5, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0xc4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x5, 0x96}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xf0, 0x6, 0xc, 0x20, 0x6}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x14, 0x40, 0xf3, 0xe, 0x4, 0xf7}]}, 0x3, [{0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "c70fc36aaf5afed3518bd002de6a92b00a462d7d8e889663dce839ee91de3e91fd04fadb26450ed06c0f05f9e28cd29b5db2b19e9a1a8ce82f92c76b8b207e01df26798a7dc79e9a8eb47bc0a906ac78a9e2414bbc9f650fa940c1d9353edad1ddefa79d1eb1993085903a3a7fccf857ea91e75ffffd1d4810c7794225e7d02052f5d6a40a213430bb78b4671a05b4cf28bfa311a6931298728acdf7df52bb403830893ab3b639d9954fc97b74aea849796d83aad676"}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "9c2894f921e09d3d1e868c3d5d4d9c23018302b9100328e1306445698b8ae82804300eb3c6a74a184c0669bc3dce1117e97cb65d5aa4f6e6636ca2dfd9a730e9ec5dcd6ee3c53a115bd017111d59fb0c24e5af48b016db7f8aedc012120034d8ff46d606fc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c0a}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x0, 0x8, 0x17, {0x17, 0xd, "b82eecf4d0fcf4d6d2ebec1e629c64bc4aa1c9e3a3"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x0, 0x16, 0x51, "453d222926cd98d9bab406f49d377df0e67ff4490267de9aee89a2bb5ad4dfb0083a8b3c8620ab656ec80ef48f77348141a7ca5ca179f17859ba3b243040384ce2345b772c81f56dac5a3b53a2d9b060fa"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x1, 0x6093, 0xfff7, 0x7f, 0xe, 0x3, 0x9, 0xd687, 0x7, 0x60}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3a, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r2])
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x9, 0x17, {0x17, 0x7, "d3a0411229f55b48a89d290606d5b9b3b655bd36fd"}}, &(0x7f0000000040)={0x0, 0x3, 0x65, @string={0x65, 0x3, "b56b3897e905b23b93410a56b7c6640855034111ff5a9d1fdaa17602ef8f20f406c7e433f0c92cbc9682e1e9caad22f09def35363c7f0e4961d098989562823fd0b29a3120a210711eb2863c9101a3aa0b821349cdec7b85a7beb6b58f7eb1af2121de"}}, &(0x7f0000000100)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0x7, "bd927746"}, @local=@item_012={0x2, 0x2, 0x5, "cd06"}, @global=@item_4={0x3, 0x1, 0xa, "6d2f36b2"}, @local=@item_4={0x3, 0x2, 0x9, "681d5fea"}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x1, 0x1, 0xa, "14"}, @global=@item_4={0x3, 0x1, 0x0, "2fcfe640"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xce9}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x14, 0xd7, "3a5c57d9982fda96d0e2d82c3c56c1b77810670f269843153230344e255103bc7142f6083ca3a727e73338b59c995a9e03f1876a53e5abb5aa8f989a01ae723d1f3cae0dcc9e587c9aa2920ba3123ed53cbfbee9722e8c7b9fe51fa622c7c2d106868f18a74dadd15a4114efcd6f363d72394d885e3c70ebfd879cb2e4b49eeba60a510c6c12de997f834b01bf9d74792d6b4f27b2294c86217341950dd8c4deb13a89550896c37082b9c892f4628e2fb7c461d86ef17ff06156743f3bc5e1633ebae1717a1b5b86e407e954a3a992f0d9f988bc5de6ec"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x1, 0x9a, "e8ee71ff61991c326e7ea45a7bb43401e19aaae11a3a5402c53757c57f2d9879f5291215e0c01a03cab4eb120c8e777f111bcaa96f100a51b4f69a22cf7b3768e6498caa065ac881c2c567f77e997f786c67feb225faf4fb34b495ab6d7041e657f68e7a15f8042b5c4bba06effcc0e3bc045e82766d6b63e90be0e5f1f95afc46d7fc9b8563c084f56803e4307cea6050ead7d86116cda284c4"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00"], 0x0) (async)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a0800040935"], 0x0) (async)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x15, 0x6b, 0x8, 0x4c1, 0x9d, 0xb570, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x4, 0x40, 0xc6, "", [{{0x9, 0x4, 0x73, 0x8, 0x0, 0x39, 0x2e, 0xb8, 0x3d}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r2) (async)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
syz_usb_control_io$uac2(r1, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0xe, 0xf8, {0xf8, 0x23, "3e3e91ef8a0d48b5a29ba6cafb586144ac656bf8e9fec07900a44992d4f3f8dd1c3a5ffea4c7976b17ef5e672aa0d3c1b4c16453b06d20425a7863e80e7d80e9e03129cc1615bd3ef305d1ba8fd1e90e79dd6e7ba6194922f91b1f7ef4d14d1f85d0348ae838d6d7b8fe46e5c5c6477e090bdd353453ae725084b42d6c6a50a3690651a359e152ed395bbe44935595895da89820085e359b8f050d3ca06b0fe7af3edb67d156a841fb68c0579fbb44069f545dd63f012b467eece3bc2ac24a6aa1c441e1b13318bd486804ad452ac61b76327a012d5e2f4d028612f137849691908f4f66f6df43b68408699a979492eb980b3bd6d872"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x20, 0x1b, 0x95, "a79afb2e608ceb630984390628ac9c4fc446b67b9ffb04eca2d39359dd24d5b2958429b20012a348daa8b74300206b72f9a6f1cebab90953c7d081e5fe09e73081103d5a6cc0bb4fc60b88659d5b13c5d605d836439f954a120c91e5c0c2f16c423414df113f59f35ada0399f74fb123cd4db1afc8613a51bb29f32a1d3ba1dc8f33345a3ba8b703c5cda61fea8f31c79c3df1bea7"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x81, 0x1, "84"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "e6"}, &(0x7f0000000640)={0x20, 0x83, 0x2, "0bb2"}, &(0x7f0000000740)={0x20, 0x84, 0x2, "60ef"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "0bc99a"}}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103"], 0x0) (async)
syz_open_dev$evdev(0xfffffffffffffffe, 0x3, 0x101000)
executing program 1:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r1 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xf, 0x200800)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/178)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000140)="607500c6")
executing program 2:
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x70, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x60, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa, 0x9, 0x0, 0x10, 0xd}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@generic={0xa, 0x10, 0x2, "5dcc4b876f3ff9"}]}, 0x1, [{0x3e, &(0x7f00000000c0)=@string={0x3e, 0x3, "fe453bab5dc55d80ff2a7e9631feec2672554bf71d40a44f37b71a6357b2519581c05217cb083147f155e0f648caa0193b5a2d2688f2c5efa63725d8"}}]})
syz_usb_connect$uac2(0x2, 0x10d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x414a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x3, 0x1, 0x10, 0x0, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3ff, 0x6, 0x4d, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x400, 0x5, 0x3, 0x8, 0x9, 0x5, 0x84}, @sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x3, [0x1, 0x3, 0x1, 0x1]}, @processing_unit={0x11, 0x24, 0x8, 0x5, 0x6, [0x2, 0x1, 0x2, 0x3, 0x2, 0x0]}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0xfe, 0x9, 0xde}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, [0x6, 0x2, 0x2, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x4, 0xff, 0x4, "2c86c3af67af74"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x7, 0x81, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x7, 0xc, {0x8, 0x25, 0x1, 0x1, 0xc, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x1, 0xfd, 0x9, "ebc7", "e5"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x200, 0xff, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x80, 0x9, 0x5, "6e6f384048d23a76"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x81, 0xd, 0x5, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x2, 0x0, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x50, 0xffff}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x5, 0x5, 0x29, 0x6922e195c1c66c3f, 0x1}, 0x1d, &(0x7f00000002c0)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x8, 0xc}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x1, 0x8ea3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x403}}, {0x5f, &(0x7f0000000340)=@string={0x5f, 0x3, "243b660420e0c8fc7779e0eb7236bae5ae37d4fb444143a5c6b470d89d67bccc5a49543cfeb6513e7d06fe9d772b21bcbb2b42155e12e54d5e01ea1b92aa4f40785b386c56f51ac6d5db8c8e34625d6e63632f494d3527c31a3360777a"}}, {0x9a, &(0x7f00000003c0)=@string={0x9a, 0x3, "4d7e4d2d0b3e18f04a42668755aedcf6abb78a99887473df2411dc7245e4ae37671d1c0cd72246f250e667648910f9d3a4b487a73d1ccdb95fa6afb3ff6c9b773ec4414a94f469d145e2b80869878428b208e4678f6639dea2c4a72fff29548cb1bf0ca78cd0df2cfad5373bbf96915ebc8b3e74ab9f719d296ba5d5940f31d025f7113eb1d436ffa86e290081f8f3350e6e7efe25d99535"}}]})
syz_usb_connect$cdc_ncm(0x3, 0xcf, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x6, 0x10, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '4'}, {0x5, 0x24, 0x0, 0xf222}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x7f}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x48, 0x24, 0x13, 0xe9, "2f2b8cda852049917756afe802543d9415f760e8cd4d8ff0192947d2787170d0e723bc7434bbd3b7b23774c2f2c0a2d81b1dd8af2000e9e2f6d3f4daa6d91ca6a05d64de"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xde, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0xc0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x21, 0x3}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x4, 0x7, 0x7, 0x10, 0x10}, 0x52, &(0x7f0000000600)={0x5, 0xf, 0x52, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe1, 0x6, 0x9, 0xd5f, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x7, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4, 0xf, 0x2, [0x3ff0, 0xc0f0, 0xff3f00, 0xf, 0xffc0, 0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0a7f9c0b90b32a39b077879ec7649fe9"}]}, 0x3, [{0x8d, &(0x7f0000000680)=@string={0x8d, 0x3, "77fbadbb12083c61fd5d794459d5c804fb97c9cf11e655d22a08acf9df249999400c66826f7d51e6e32fcb7abbadfa877e927673718ae803b744eef5ffb8a2b94bd3756769d3f5dfcecf9aed50c4216baa4a9fb1e49451f1af522dafc57b5771672dc254b1e86fa9e72f9c4562bd3111767d6c4673729f07eaa4faf0b42b00a1d51b0a93ccda2ef44f1f04"}}, {0xdd, &(0x7f0000000740)=@string={0xdd, 0x3, "ad27be05edd5b43b1dbb083b7ece1e41b48970fd4cfd7f9d23c8a40afa04c4a805358ec265a1d42813456a67fc5a9fbd100bda7f3df83f8bb0fd6e9a210390887b477d40c84690d3f996369a9ad8de0b17ff2d7b3e7a292356324e8d93e52004d58e48d21d0cdceaf2ec3b6d080a0cc7f46e454705bec1ecb7516d3e500618db29cbe57c7426ce260fd96b7847f6520b967e8c1c49d679dd09492f72ea32d6437e92d905fda25829f2f7305fccaa97e9a200af44f5f371c917bf1ff8ea884c36d8a0ab9f01052a2359ead4e30494b311a8a97c590ce1871edf12a0"}}, {0x9c, &(0x7f0000000840)=@string={0x9c, 0x3, "2c4a2ba27b2d26cae052b8791af22a85d615b8f8860801e374e7af7d8400f8d5f164eea9f35fc370943aaf61d2b4aba3a8c76f9afae7d9534ef1f9958e2e4e5a51a711c2fc4c32834b345c3a44223d9dff413b3d44220962a8f859972ac2076e5b8506ccbaf6696f6a092eecb825bbc6b57d6d8b62b34b05741ccb899cab61dba1902ae169634842df5dd915be26f3f6aacaa65ab62cf6da82e1"}}]})
syz_usb_connect$uac2(0x5, 0xef, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1043, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x2, 0xe0, 0xfb, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x4, 0x1c, 0x4}, [@effect_unit={0x13, 0x24, 0x7, 0x2, 0x0, 0x1, [0x2, 0x2, 0x0, 0x0, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3b, 0x7a, 0x0, 0x1, 0xc, 0x2, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc, 0x0, 0xba, "b0e42a"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1a, 0x7, 0x5, "8792c01369ee7483"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0xf9, 0x2, {0x8, 0x25, 0x1, 0x2, 0x30, 0x4, 0xa9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x0, "80d6"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x401, 0x6, 0x7, "1702d0e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x12, 0x7, "ca", "0601"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x2, 0xb0, {0x8, 0x25, 0x1, 0x180, 0x0, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x6, 0x3, 0xe, 0xff, 0x5}, 0x8d, &(0x7f0000000a80)={0x5, 0xf, 0x8d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x5, 0x3ff}, @ptm_cap={0x3}, @generic={0x7b, 0x10, 0x3, "d37924cd7dd4f176f2b2f98c4dfc5e3cb3eb0fd4be9963d3423ae0616a5d571669e5c58bcc1636812d163527232fdb4439294a761546504617a65fcdd1519221d3695a2dee416f14eec85ceacb178c225a2b2231e6e57a9c13fc27d4f8332e51feefd6e72f088776a50b76ecfffe8b5147f7a3b959ab0379"}, @ptm_cap={0x3}]}, 0x2, [{0x21, &(0x7f0000000b40)=@string={0x21, 0x3, "20fd743c7605ebb6c6c5855952468e184012af0ac5ce8c6baa42cafa2c88ae"}}, {0x8e, &(0x7f0000000b80)=@string={0x8e, 0x3, "e8679144a7c58a51fe4acf5fcd4fd74405dd308338e089a82bcb115752fde67ec36bef00b9655893c8ffa8bd0ed18cf572fc98ad1b3df6815c935203aab23dca1ac411bafa7822cc185d9e54b93a80f7ba2b1f341927b7202a0b3b3ac21828b658f8f3a1eb88479d9a65d45ea53f7b620f860c42aefd85730cf53c70e1971503fe3d7f17bc1d99f5ce77cf6f"}}]})
syz_usb_connect$uac1(0x1, 0xa1, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x7d566207a3a04ec, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xba, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x1f}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x54, "28289d6ef9cc"}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x3, "654bc8c695"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x5, 0xf, 0xf9, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x2, 0x81, "e4365b819ddbf05a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x1, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x3c, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x2, 0x36, {0x7, 0x25, 0x1, 0x8, 0xa4, 0x810}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x310, 0x6, 0x1, 0xf9, 0xff, 0x5}, 0xeb, &(0x7f0000000d80)={0x5, 0xf, 0xeb, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xcc, "9c82b1b80cf021cdf55fa42ccc7204f6"}, @generic={0xc6, 0x10, 0xa, "a028d7f4028eb8a4e1dcc1e053b175f541f3fb248f78cc4724f6584df7b9015b2ad8e11527ba3e48ad796eb5145899bd6a63d35c74f8200827f67cfa51c23593de22f7004633280c53b66c8bb3473bce078907e3b91344ca2f2dd98d4e156479b874ecebf03b47a8e710584f05c67cc9c7b895d65d0d93e0a29caafce1daef227e73230e74e6f4028e7721ef8b43fd5935600cb58617cf5ac617071eb67809fb6f452ca2e276312f5e15ce6b205605a72c8b270c855093456df88d0f1beb5f0146adb5"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x731, 0x0, 0xfffd}]}, 0x1, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x402}}]})
r0 = syz_open_dev$evdev(&(0x7f0000000f00), 0x8, 0x802002)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000f40)={0x51, 0x4, 0x3, {0x2, 0x4}, {0x75e0, 0xc}, @ramp={0x6, 0x8, {0x51, 0xffff, 0x1, 0xfffc}}})
r1 = syz_open_dev$evdev(&(0x7f0000000f80), 0x0, 0xa0000)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xef, 0x60b, 0x500a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x88, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x61d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xf9, 0x3}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x201, 0xdd, 0x0, 0x9, 0xff, 0x81}, 0x24, &(0x7f0000001040)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "de5e40ed84a97f04abefa0e370cf083e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x2, 0x8, 0xfff4, 0x1}]}, 0x4, [{0x2e, &(0x7f0000001080)=@string={0x2e, 0x3, "19dcf8334b907d63747cb2867bf64030991f196f644acc9aef829498e2553ceaaa7d47073d052905133b049b"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x457}}, {0x8, &(0x7f0000001140)=@string={0x8, 0x3, "46fbfa9d0517"}}]})
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001200)=""/63)
r3 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001300)={0x14, &(0x7f0000001280)={0x20, 0x6, 0x8, {0x8, 0xd, "eb6683fe2f00"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000001480)={0x2c, &(0x7f0000001340)={0x0, 0x13, 0x2f, "3faa16d4a034e99c185a2d0851e677433137677bf087235834791df79df617030a25dd7cf5d932c5f87ed9289e5095"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0xbf}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001400)={0xc0, 0x5, 0x3, "29ddc8"}, &(0x7f0000001440)={0x40, 0x5, 0x1, '/'}})
r4 = syz_usb_connect(0x0, 0xa6a, &(0x7f00000014c0)={{0x12, 0x1, 0x200, 0x4b, 0x2f, 0x2, 0xff, 0x1199, 0x6833, 0x5644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa58, 0x4, 0x8d, 0x1, 0x20, 0x5, "", [{{0x9, 0x4, 0xa2, 0x1, 0x9, 0xcf, 0xfd, 0x2d, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x2, 0x7, 0x40, [@generic={0xbf, 0x22, "e3cfa09ab57e3221b46be3e115d121187e5b8ebcb1f5a22ecd5ac07fd8e0b253a3e8ac1ccbb8249b4633ad16c8e3a447f8d687593de4e8de8b22107fbb3d577fcb74043f96bd47e83bb144934840b0185579c8d437238b0a65b88e9218ecce82471957ae578cb966b293b0b4a89f3a8f47ae53821ba4fb128de9e7d19a735eea082ac93c497c32d4f437c37af03bf2fdf401e3c9e2d9cb6bb8b753f95e2e37d448806dd6786b0518c9175d46488bd45fde5bc24e33743a9a111e23f65f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x81, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x95, 0x9}, @generic={0xf7, 0x6, "f11bcb1b81f78e4af03ffde905db053d5ca834ee706c553ea672b31c6aa5d3404e5c6cd86e4755223692c9d9041293c556895ab70d0b100993b82a71f8a4bff3d2eb565e62db4b91e4fcc4fe0e8ec613e74c03b4b6651c0ccaffa590a68525735a45d27846db195a925b902c9e0705c21d600fe0e084b4501e129147ed465ddf67beb701f2a0987798618f79a4f7cff1c52722508d982be716f02280eaa11b4091442dd0a08b096e55ba17e752f5081adf5fbfbb0b916337917c98afc4131c3e33592576204bac794b045778cb0889bc23579c4e256a9d9f4706051be90f94d774c80c1a93f5c6086bee46f534f7e5a61a3f61e5fc"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x72, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}, @generic={0x4d, 0xc, "5dfb36c89565f7b943de484f41d9c91efa76c72dcbe5318c4de3969dd80ee320e56a54aa25ce54de8861fff09f4a6d0621f6ae839d587567cdefe389abab64ae928a55c50d10c30499fb46"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0x2, 0x40, [@generic={0xd, 0xf, "4533c19dcd574a020c0b2f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x7, 0x4, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x73, 0xd, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x10}]}}, {{0x9, 0x5, 0x82, 0x0, 0x400, 0x6, 0x6, 0x4}}]}}, {{0x9, 0x4, 0x3, 0x5b, 0xb, 0x33, 0x90, 0x9b, 0x6, [], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x7f, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x14, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xb993}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0xf8, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7e, 0x40e}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0xfc, 0x3}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x2, 0xc0, 0xbd}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0xd4, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x13, 0xc, "7ba78c06ad9f4f66d34654bd8f82111b4c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4a, 0x6b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xad359debccf6ec5d, 0x7, 0x8}, @generic={0x4e, 0x0, "5a87b00611aeee905ff79d8be6db98e7c7a880291154bdd6d804f230e5562f4e7e106cbea3ebc7013da30c621c1a43b1f3a3b648c10845f920416342259ccc32f0ab7a7e9608a7b52598b62f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0xc2, 0x0, 0x7f, [@generic={0x7f, 0xd, "9a4fd9ddfe578471e5d793f3296daea8436825d4781bfdadd14b4689df6e7ca59c7b05d6ba9870aafbadedcd233cf80b52c43fd536dcff80e904d40c33338d20fdb51df67f7fdf85743721e1486dc022f630eefe94b71c33622fe2642b99f021580190f24aab87d2b9212881ca99b91e072fe6a6080636243aa97e7b37"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x408, 0x3, 0xe3, 0x0, [@generic={0x9c, 0x23, "e46adc8d3a58813711db0c01283858b4b8950bd29c35d3dd0ac970020da0780b88468ba90394eb061bf7d8ee8ceada32489028fd31e80f49f85771ab0f15ee63be1b9e6ab6bef206a1c3632de1d492dca30f34899eb4d7b40a85ea9598cef8f98c59a64d63051e3893475b22999a019ee01b6c1c5926d367f853a104c8182289946fefbe85bb24b3ad70767b7b5c6aaba5acd31f0f593036ed59"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xc, 0x6, 0xb, [@generic={0x76, 0x6, "8e7a580ed1f1018e53dd35fc87f1fc8df6956515ed8819cbdb7a58f63705b51bbd21d5a190978c15346243b35e1e399a888aff29e7966d3669c069b79b75ae95ef468c072bb330c1e358a42da71338c1e913acd66b71bbedea450fb281baa225c3e318eb52b98631e09aa1a2c895d75f747e0cd3"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x71, 0x7}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xee, 0x69, 0x4e}}]}}, {{0x9, 0x4, 0x4d, 0xf, 0xc, 0xd6, 0x5b, 0x98, 0xff, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "0be69e9f1c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf8a1, 0x0, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0xafc5, 0x9, 0x80, 0x6, 0x9}, @obex={0x5, 0x24, 0x15, 0x5}, @acm={0x4, 0x24, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x0, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xfd}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd, 0x1, 0x2, 0x1, "a1a194", "d7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x10, 0x6, 0x4, 0xfd}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x8, '2', "e33dbf"}]}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x0, 0x6, [@generic={0x5c, 0xd, "cc663e2f26b763ab7f45d71d9cc1e14b18dc8ce1056e323638e1cb128861034974b157abcb8697b389ad4448e1a1a0a3f80579b536b5a42f970a58060cea0250c70cd5c8378020b07326f9d49c3024f033f0bbb1483c3956f2a5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x80, 0x0, 0x8}}, {{0x9, 0x5, 0xb, 0x14, 0x40, 0x2, 0x81, 0x5, [@generic={0xb8, 0x22, "e8834b8cd72142779d930377f194c8536429b94b72788c56ac190d9c32624f1a017cc0776ed371dea26b17a011f943bf301aabbdf46e54c7b9a9314f5be3257612442e2dad80f157904ea2f41a5ddfb1775c5d87112dd9ac4b67fd0abd5540698a9d61d0950833e7306134f91582a9b1eec67d61205c7298496ec9cf6de7fc3f7b48b5cede9de44a4d9420c0e8b427c8db9d368dc906c03e20b2583847e52b7eb4c4eafc03e5cf7d7847ca63443c39eb8db2380e4414"}, @generic={0xf0, 0x85e0c72fae3e2460, "38715ba558f986b55235b6e7be03aa0d3c0759109641e8963a4f1c6320ac5a350baa362f96aa150c0860ee1801fc0f2ce024f069a00cd439a5a0f426dd20dc3277171490d10ebbe64947c806e9da3c67df8f73445fa35416ff1296da5f214f22fc49aa769dfd0fa6ee498416f8f6d5f86761c6a0ec7a650867ee525acbefcd61c62847eb307ae01e3621012dae1dd2f1efd671bbe900924e4e7cf3c37c2a025a2a0faa4b88344d8968b00a237b63f6996e9e20b3537646fbe6a3734a9fb14ae430851c4874f802a23b3faf58dddcc3afd347bfb306d072dc1d42e032bb7d9d05f888bb908c4ef0e7697ece6cfcd3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xc, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @generic={0x34, 0x21, "e54caedfff5f894b789e3a6ae726bc26b845375c7142045ee2952cb8d31412d5983f50d158e02552541173fc939a20443cba"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x58, 0xa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x37, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x1, 0x4, 0xe}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x5f, 0x82, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7431}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x53, 0x85, 0x2, [@generic={0x2b, 0xe, "ee145f1ec015ca366a0691184fc9369546c38819e74ec1b0f84a7ae9ced77617447bb49aee0f956407"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xe, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x4, 0x2, 0x2, [@generic={0x12, 0x8, "76eb230b751c874ca73c027ab682fae0"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x5, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5c, 0x6}, @generic={0x35, 0x23, "a8171619e0ccf511d1147a95109ad5551a0610fdbaae288c17d9d44d08be2011cd30a1886c70dbe6b1d4502393f730a8765b1e"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x5, 0x4, 0x7}}]}}, {{0x9, 0x4, 0x2a, 0xc, 0xa, 0x84, 0x8e, 0xfa, 0x6, [], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xff, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0xb, 0x8, 0xfd}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x3, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x6, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}, @generic={0x4, 0x27, "e413"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x6d, 0x2, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x420, 0x40, 0x0, 0x2, [@generic={0x40, 0x21, "a079724e9c9cb8e0397d2676747801a0be6a1ed7902247f55b4ba4bf93c763508efe5b539681fee0c6b2579c18196466cbf92e6917d2e148f353f09e1d4b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0xe, 0x5, [@generic={0xae, 0x10, "16fafa64eb5e5a555fc8b885d78be4ce8bd90723a0061123f6c7b865c426932a46d6aba5cb8c048daf681c8ab45819f8e3715809be219271d05079c5d24924d70ffc4f7fcbacf0e716e98f3048f5b579e525a826cd3742e65209a58b0e89ac255bd36945b2ef3c3301f117598f4ff93690350ed78a134d5c8109706e2d7537b0e424c92a3fafe95515062c41adf3c7760ad3e96d214c0a247b6e4dbfa0f094a2e0bc55bc4a9537acc85a77c8"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x0, 0x11, 0x2}}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc7, 0xc, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}]}}]}}]}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x110, 0x3, 0x4, 0x80, 0x20, 0x1}, 0x5, &(0x7f0000001f80)={0x5, 0xf, 0x5}, 0x5, [{0x65, &(0x7f0000001fc0)=@string={0x65, 0x3, "3ab9d03716726735ffb2192e64689afa5601e6c352987979e70103c57b780f0690630a06824dc23b1245d0ad3e1dd633e2e6b30b5b1deecbd223ca9d71e141f8eba52dcfaf99977ed0de1d80ad0bd1e6f56fa8ca7f088934ac9a9f7a366a2e6cb78569"}}, {0x7f, &(0x7f0000002040)=@string={0x7f, 0x3, "b0571830ae1aeb30513fc2754bd9f04924379e35775fe554ba1013127f33bd33e45324f82bb18b83909cb8767281be04dc7007477741ab8e967e9a088942f822e0f1c350adaf1fe9882874bfa66708424890ed507f6f25360d7dc4dcd58e6985610b125112c3521744d8c897b052efdeb9b0987466147466eef4945c05"}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x409}}, {0x1a, &(0x7f0000002100)=@string={0x1a, 0x3, "253f6b6c0099406a3d634bd95ba0d6227aede712896251dd"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x411}}]})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000002200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x43, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x6, 0x66, 0x1, {0x22, 0xd4c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x4a, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc0, 0xfb, 0x5}}]}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x250, 0x7d, 0x5, 0x6, 0x8, 0xb3}, 0x59, &(0x7f0000002280)={0x5, 0xf, 0x59, 0x2, [@generic={0x51, 0x10, 0xa, "784c0d8616acbc61da98ad671cbe1ce3fc493159960573777d5fae7354ef0a1070cc1e9dd84c219a575c7ef89d10a2d05575f44c5839785a2069aa029edf215243b20b62ccc8dc5d08b2f017e9b0"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x41f}}, {0x2f, &(0x7f0000002340)=@string={0x2f, 0x3, "18a517a7a9c586a0f47916242fcdd76a91e77d582fd5da2847a2f159d7082150a5badaf581b0d58361961536e1"}}, {0x35, &(0x7f0000002380)=@string={0x35, 0x3, "bac76d7521ff0027698630f8a70a52cee1fb0a4ddefc873a75870cbebb611db3f8d17a07c7144bbf729993ae68c0ecf5b79bb7"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0xc0c}}]})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002480)=""/205)
syz_usb_connect$uac2(0x3, 0x14a, &(0x7f0000002580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x499, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x3, 0x1, 0x14, 0x8, 0x4, {0x8, 0xb, 0x1, 0x2, 0x1, 0x4, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x39, 0xf1}, [@selector_unit={0xc, 0x24, 0xb, 0x40, 0x7, "fa0efb67eac671"}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x6, 0x3, 0x3, 0x9, 0x12}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x205, 0x6, 0x7, 0x1, 0x5, 0x80, 0x3, 0x2b}, @source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x6, 0xba, 0xd4023118e837979b}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0x8, 0x1, 0x1, 0x23, 0xd2b6, 0x9}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, "f3032d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0x8, 0x7f, "304ba721206238651a"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0xfff7, 0xff}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x100, 0x5, 0xf, "e1dffc9e42a565"}, @as_header={0x10, 0x24, 0x1, 0xaa, 0xf, 0x2, 0x1002, 0x13, 0x8, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x78, 0x0, {0x8, 0x25, 0x1, 0x80, 0x6, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x74, 0x2, 0x2, 0xfd, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x2, 0x10}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x100, 0x1, 0x6, "a4dd104093"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xee7, 0x1ff, 0x2, "12bc6ce0d5"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x3, 0x5, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x4412, 0xf5, "4c3acaefa0dffac9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x1, 0x91, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x180, 0x9, 0x5, 0x6, 0x88, 0x8}, 0x11, &(0x7f0000002740)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xaa, 0x0, 0xdb1, 0x0, 0x1}]}, 0xa, [{0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x41d}}, {0xf1, &(0x7f0000002840)=@string={0xf1, 0x3, "9e5a82b5934931652775998b2c7bbdc2af3686aaf3b4500d795f59f956295a22dd852ffd4c7a0809d62ce898da630575424242c4fd6ad1f0da53448ab43ca96ec6dc8d6a05a55b1e59dd7dd837c4637a73cdf7f38ee130c7e59824f40e932a7c53d64a65c437ad5e846ebfcaa7be984faf01ad878df0823264336addfb070e72863d082f94656173f5a649f8548b024f8ea11a2b7680aec7112ad9122e3bdc3b5c8c9fb6415846cb99178a564f660bf6e7baed75f5914c1f08db1b042bd812ce6eb93eedccb07fe4dc27dd1cd3a73105ad449ffc66c0a1d44356839673fde1b324543b1d559149b226119d9c77e39c"}}, {0x4, &(0x7f0000002940)=@lang_id={0x4, 0x3, 0x180a}}, {0x23, &(0x7f0000002980)=@string={0x23, 0x3, "df9bf6b50003ad3587d322be4d9f03327e0d94c27f4416cf591de8a000185d787a"}}, {0x68, &(0x7f00000029c0)=@string={0x68, 0x3, "b7ff655708cd6e0666e32c2610d408e2d8f6a0350ed2e2a1e7da873a0cdc27573ae5551c0315e41fcac336bc0261aca2346ab462667fdf98e8aa174288f63b55e05bed902b516b80bae9edcbf9b2713abde646205b90fff80acc762c56c3f0b0378d1574e5cb"}}, {0x83, &(0x7f0000002a40)=@string={0x83, 0x3, "3faff5d0ce04ea4924236ccf9a41550054c2a1c7f76811dae72c4a6319ae87c487d4744e118fc78f5cf7ef1ce8935fb0d7901a55acd5e184adab80d55f27ad7107bccbe63874442e41b6f3d8130e563c3b6a888abe65c21d3e597bbcfece90246a47865f89f6264d22823f4b649f39bc9e78b624502f00971706075270af7e033e"}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x44e}}, {0xec, &(0x7f0000002b40)=@string={0xec, 0x3, "68712b53c9ab3da43cf1c1c19eff464244434e7bcb00ba5f106b614354666b352864de1bc91c9be78a748ebe11a5b7e0c971fe46c2b81a74a875fe76548438a9935921465b272ced4afcb61f47ac97e5070e823544be46b9ea8b6605e0457b5fe5e014e243f454d44ec0ece4929b6399d524f26550905c3832f37a5112dfb6bb02e8335bc87c586397aa91554eca7f8b2977bf2d3718261b3bc45f0569c85c1248b2d37cd21afef0a1e8d92d5393a54ea15752295896286a04ae8369119e2eb33992918a6d0fcb3d6c767c73c2a61866ceba574f90c66dd7196080ee94bf0842cd29a7a352a524c1bb15"}}]})
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002d00)={0x5, 0x7, 0x65, 0x3, 0x6, 0x3})
r5 = syz_open_dev$evdev(&(0x7f0000002d40), 0xfd8e, 0x40000)
r6 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0xd2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x99, 0x86}}}}}]}}]}}, &(0x7f0000003080)={0xa, &(0x7f0000002dc0)={0xa, 0x6, 0x250, 0xaf, 0x1e, 0x0, 0x28, 0x1}, 0x42, &(0x7f0000002e00)={0x5, 0xf, 0x42, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x8, 0xf000, 0x4, [0xcf, 0x3fc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0xef, 0x4, 0x6, 0x0, 0x8, [0xffc0, 0xc000, 0xff0f, 0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x0, 0x4}]}, 0x6, [{0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x421}}, {0x38, &(0x7f0000002ec0)=@string={0x38, 0x3, "20092ed22d452379e4dce6a3e3d6578eff88aa3b0371c7aa45467780f76fe58ca16029728e9d1b8dd1562fa70c7a178b1774f64e21a5"}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x444}}, {0x21, &(0x7f0000002f40)=@string={0x21, 0x3, "3e07629c9334ac1a19bde014e393ca5adaf99a6cc195ec7d68c34bd31d0fdc"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x43e}}, {0x9d, &(0x7f0000002fc0)=@string={0x9d, 0x3, "d5676e4e92c67843d3ad0f6c16ba9f296751f1c4384dc9299f30a43077f16bd4c4d1c04976b7951e2ab0f8857acc3a09f06d859749905edf0557a1694fc0b745df922be10a3969700e801cfb9712718598f15d501f8713fc2a02328f1ee6e8c890b913d55036e381fa874145cae41590e72502a476f7de1447b445258e7195ac3e95fea60baa9a5707c683e0c01bceca97204011b75c1464f38203"}}]})
ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000003100)={0x4, 0x7, 0x9, 0x2, 0x4, 0x8})
syz_usb_control_io(r6, &(0x7f0000003400)={0x2c, &(0x7f0000003140)={0x40, 0x10, 0x4d, {0x4d, 0x5, "8d4d05f531afa9e194b9bf5728f91faa42e82edfe1ca1b06fb9100071f59bc5f2613f1ff196f79454ac88fc8d015b238fd99db1e8fcac5c598778d5e7aa2c76add162e2e73b869081f18b4"}}, &(0x7f00000031c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000003200)={0x0, 0xf, 0x14b, {0x5, 0xf, 0x14b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x30, 0x4, 0x6, 0x1, 0x7}, @generic={0xae, 0x10, 0x2, "a37bc130b0174c714aba943f44048fde83c73e37921c11b240d73eb6bf30dac986876526ed5cbfdd7c8259bde84628fda879cca412d653a341bf9d6910d4f9a2053ca7b15c4630838b5d709621d2ef0b52052802c299a76d1252c64deaa15f4400644f229e529f5ce754d50c8811c05619b47d628dab909416e4ebe25864c1baca9fc1093e4e103328ad5837a8b0005ba25fe06940f577b73ef9862c045c73b5c2ed2a553f432326c41583"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0x5, 0x7, 0x0, 0x40}, @generic={0x66, 0x10, 0x42987addadcfc354, "ad9b4867be90c855247c8c29050556bcabfc6fc30d797e119eb057f7129fb0a8008a0dbb255981db717cf480c9f4d6f04ed377d3aa16f8be382959ff5f543ae74e6e3f1c2e06117422e631083cdda8ad666fdbc393021d149c0f7709a7915ea5b2161e"}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x4, 0xf000, 0xff}, @ssp_cap={0x10, 0x10, 0xa, 0x9e, 0x1, 0x5, 0xf00f, 0x3, [0xff]}]}}, &(0x7f0000003380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x7, 0x4c, "77b9675c", "636d9368"}}, &(0x7f00000033c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xe6, 0x81, 0x1, 0x2, 0x2}}}, &(0x7f00000038c0)={0x84, &(0x7f0000003440)={0x20, 0xf, 0xb6, "2a4e0e129b83de9c4eca79d1cfc4d5b4c486f904cd5e21e2c55d7eb6cba6b1ac3b5960dcbab7528912a6cf02bde934ce17589a4beac23e4859bca606010b746d86348888feeff176ecb3b48a16d91c335c35842c8bef5020f1260889f5cf3b28e8c0b9880057bcdf56f77cf1d84efa8befb0c05be3b4e39db3eb4c297dc9c3ab39761d7150fb23b582adcda6fb3f1aca28fe894f3a668251753e5e86c2474603f8649492a3b03a89781d8da84c3322c19806ca352441"}, &(0x7f0000003500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003540)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000003580)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000035c0)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000003600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000003640)={0x40, 0x9, 0x1, 0x16}, &(0x7f0000003680)={0x40, 0xb, 0x2, "b3fd"}, &(0x7f00000036c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000003700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000003740)={0x40, 0x17, 0x6, @random="81c91d71711d"}, &(0x7f0000003780)={0x40, 0x19, 0x2, "d7a6"}, &(0x7f00000037c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000003800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000003840)={0x40, 0x1e, 0x1}, &(0x7f0000003880)={0x40, 0x21, 0x1, 0x1}})
syz_usb_control_io$uac2(r2, &(0x7f0000003ac0)={0x14, &(0x7f0000003980)={0x20, 0xd, 0xd8, {0xd8, 0x3, "2a7212f706b9cfd0435d91fa23cddc41a16271604fd27d98adfbb25901b9b4f55577aed105f8b9ddb5a6fa5f6adff76a5c90fff806ff9374540ccb223d4f637dd773a4391fa05073daa4f7af46cb505b78ef6afc3ce6186e21db9c206f8043a35ff923a4cd6286db49210c01a409ad57cce71ed0a3c6bf0aaed81d799178a4d1ef87b7b12419882e10b00260f6c226330eadebf323a25bac0096aa80d57bd93ddee40992c23e67b4a2575717ae795d8e0c8c733881b744ea3f38764c36f5b33bb5afcbcee8cffd98fbe41481b030876d73d6ebc3f9fe"}}, &(0x7f0000003a80)={0x0, 0x3, 0xf, @string={0xf, 0x3, "1d1fbd74b4e1a945000f51a52d"}}}, &(0x7f0000003dc0)={0x44, &(0x7f0000003b00)={0x60, 0x12, 0xcf, "4e7e62a2b16b87667a9c5cf37c6de494b171f0f24813dadaf2778d1d8bfa926ca495a7ac788f6bdb423013a8325c33f5b7275fda97bab3f6649dabaa65180e07d6192131807c035f01b5f034618bada6170cff8eacd7941aab3b2a15befa0e2c80ae36bcc7472ba4f41216034bcb565fc9ab5fd164958601ac9a9d9daec309da9501fcc68caec4630fa8f2c14bfa5f99795d455b4185dbd3e02eeddd346787ce73b1f2e5dbb6bb7b92ee63bd25d4fe1ffaba3cfe2ab31c4290550a856bac06ece9ba5eb3e607291a1c84b5da058245"}, &(0x7f0000003c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003c40)={0x0, 0x8, 0x1, 0x85}, &(0x7f0000003c80)={0x20, 0x81, 0x2, "b505"}, &(0x7f0000003cc0)={0x20, 0x82, 0x2, "d2bf"}, &(0x7f0000003d00)={0x20, 0x83, 0x3, 'xM\v'}, &(0x7f0000003d40)={0x20, 0x84, 0x1, '9'}, &(0x7f0000003d80)={0x20, 0x85, 0x3, "160c65"}})
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000003e40)={0x7, 0x80, 0x5, 0x0, 0x8, 0x2})
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ecm(0x1, 0x75, &(0x7f0000003e80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x97, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x3, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "90aeb1"}, {0x5, 0x24, 0x0, 0xbb}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x40, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7, 0xe4}}}}}]}}]}}, &(0x7f0000004000)={0xa, &(0x7f0000003f00)={0xa, 0x6, 0x200, 0x1, 0x80, 0x81, 0x40, 0xc}, 0x21, &(0x7f0000003f40)={0x5, 0xf, 0x21, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x3, 0x1, 0x0, 0x75, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x1, 0x625}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0x5}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000003f80)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000003fc0)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io$sierra_net(r4, &(0x7f0000004200)={0x14, &(0x7f0000004040)={0x20, 0x23, 0xc1, {0xc1, 0x22, "9ef7fa0207c904fbbc076fc30be53c34d7c05cf60fdad1a8f5b250b993615d938267a67ae3257caf725a439cf1c3fedd8ed6576c9ac8cfd4501e963e5bc504dfe54bfbc995896f15cace7c529c35603ac9ee4c6275e326835bad8f8aa9d8664e098cb9f464443235a2b0a48fbae977191cda8156cef73803c7c295988662d28bcf95e8b8efd5515ffd591f4648b9931d881dd9895c1e60092c0e13e86d0eebeb213004523be8369ddb12be213c30634752295466d9fc7cb9e7172714a80e3f"}}, &(0x7f0000004140)={0x0, 0x3, 0x84, @string={0x84, 0x3, "bf871dbcbb0d052b9c3758a574c3920e0551cf4c553276a1cdbc4fbc99ed0b797995bc3fbb0d67e0f5913d558d9df0124617441679840672411bcd01f86539a9afd9de44eb49d33705c82339908023e0ba45e0c44fb157a5e9252557f427f20d337d149c01a129d390fc4d8ae7c9d5269d1e12d07f6a3d1826fd484f20e46b108a84"}}}, &(0x7f0000004740)={0x1c, &(0x7f0000004240)={0x40, 0x16, 0x72, "1563dc5b7c2d9919e5c1bc2943733db83b2d29af27e2e06741acc302f3db1112019c45de16bbe7806a4ee2dc9db40bf80c2b8447234c71e599e7cad1e24683118e09d8042bfe47b9d7229886fd37ad33df70fb08f3e27426177bde89e7842160e3f4801fd24700dceff86c677270cbfc9451"}, &(0x7f00000042c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000004700)={0x21, 0x0, 0x4, "86268cd3"}})
ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000004780)=""/118)
syz_usb_control_io$hid(r4, &(0x7f00000049c0)={0x24, &(0x7f0000004800)={0x0, 0x10, 0x77, {0x77, 0x2, "f0710d8bdda9091d47955b6bfdfbf4990c632eaa4a9ae0418a7b28bcbcb324f103dd91b8617b6577879435e80ca3dbe52abd2f80201c2c97f438b068dfd3b504217a6497f7e792170128e158fccff5551c993eef2904f4001f8e1b9bc25f676d1529a45ec99d9815f91ec1b8d03f2396ce7db696ec"}}, &(0x7f0000004880)={0x0, 0x3, 0x94, @string={0x94, 0x3, "141e649c1a23aad5114d16e7417bd52df6c0ed017d766029d0ab883deddf1b6ea7c063ce1dbbd1c9c71d73a35869aa27f8f97f1d698cc685cb4538d398a60e763b07fffe7bc2490b319e0642fa1f7f4286e18f02c7704f1474ecd70d31e3df5ca2333f289e716953d18a930a05afe773d094313e06d9a8bae30e9e1689fa238d5da19b1df2fd903559e8d9df79668b2976c0"}}, &(0x7f0000004940)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x5, "cb9b94ac"}, @global=@item_4={0x3, 0x1, 0x8, "7d262ea6"}, @main=@item_012={0x1, 0x0, 0xa, "8b"}]}}, &(0x7f0000004980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0xa8a}}}}, &(0x7f0000004c40)={0x2c, &(0x7f0000004a00)={0x20, 0xf, 0xcf, "f403c1ae4e5e7f7f2fbcc0cff50180138f57df8976067811f67699890b441ee345b3503c28a511be2ff105579ff0eaeae2f22b760b5be4898c460a2f4865039d96a58a8bea964762cf709c3f80f9f0b7bb9734040b2585a2dd751dd65149ddd2bd948501f8709294bea1a25955252b7675553564691a76ff5094db4311a4473e6a7b760086feaaf9d018f6779fccb894eb5dd5ee3088189f15a1b2604e555ada99ab578c10e9109076680eb71bc8fbf8cda5ca4bfb3eaed22d4b4ff37c227da603be25b54d8b91fed2089463b5ba7c"}, &(0x7f0000004b00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000004b40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004b80)={0x20, 0x1, 0x3c, "85bb51ffa9c057b0fb9ae41ac6e3e6da613a6ee5a7915a1870925992b40d44a69e746886c19ce1af9f59f0fca1209fede4cc187fd1adcacb95f4daeb"}, &(0x7f0000004c00)={0x20, 0x3, 0x1, 0x3}})
syz_usb_ep_read(r4, 0x6, 0x2a, &(0x7f0000004c80)=""/42)
syz_usb_connect$cdc_ecm(0x3, 0x64, &(0x7f0000004cc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x7, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x8d, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "2805"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xe6, 0x2, 0x0, 0x3}, [@obex={0x5, 0x24, 0x15, 0xeb5}, @dmm={0x7, 0x24, 0x14, 0x3, 0x7c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x87, 0x9, 0xb6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb4, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000004f80)={0xa, &(0x7f0000004d40)={0xa, 0x6, 0x250, 0x5, 0x1, 0x5, 0x20, 0x6}, 0x26, &(0x7f0000004d80)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf3, 0x31, 0xfffa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "96662aa053b7ecf62f11c6892e3b0021"}]}, 0x4, [{0xb3, &(0x7f0000004dc0)=@string={0xb3, 0x3, "168416f99be09ba9085bce2af56920301aabda423353afcbe88901138ab9588bf40d1a3f5ed46bf63cdb7c226bede67b9b369315b12387876e132e7d3cab17d728e0c9624bb83581c259c327b1be4552e680b6da0d85d538d8137a54fdc3d128e47a5a6b5910ff160c4d4dc3bdfa1157fc9b6eddb8b1207478a7e852efd4367d4fc219f8f1dcb57d0d4720894fcfaa2c4fdb9d7059c31c7369e37c680a067fb5705a70fe04982abb0b861d7fc69d31d7d8"}}, {0x12, &(0x7f0000004e80)=@string={0x12, 0x3, "4eaba9f944d21de2eea76fa99324d772"}}, {0x5c, &(0x7f0000004ec0)=@string={0x5c, 0x3, "1728e4d3880321b3bb7be8c346cfb95a030f2a3a4b204e22bfded68c7615eda1da399bd8443178267958e264748bc2ac4029fad3f210807beb62c632ef92b11c01227cae785df0e5506781882d0421cc6084881d2e75c1494eaa"}}, {0x4, &(0x7f0000004f40)=@lang_id={0x4, 0x3, 0x41f}}]})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="122b4abe540000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000037f979309040101"], 0x0) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a0"], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x726b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0xf, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x8, 0xd5, 0x1, {0x22, 0x6c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x3, 0xf}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0xf, 0x2, 0x3}]}}) (async)
syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12015002000000ffac054e0216c49850cc01097bd9380889e18ace01000000000000000609058103ff030107024275e2e90e1ab3f03bde1fed4b72ea5a256256a114f5c28070da3577b6dc5c7005c1872f3f7f358d8b8e5f79101ed73b46adddd3d9f53f16791f4ff158aa9c566ad5a1fa903b9cea81a394db113522219ac11f0d03a74ddf0d8290a0b36bde1a2415e7c67c192e7f05638779a3e62d67b7ff8f0c0ebef7853d2ae8672ac2aac4d91cb760ba7818b291a85989361e0f923788259795dcdc0559560a3acc831ac84f7c398a390e1652c16b25980b59a3fd95caf0011e6332d78fd7abea55319c3a1d74c0b6bf00000000000000"], &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0x3, 0x3, 0x28, 0x3}, 0x2d, &(0x7f0000000140)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "f4a3b325e8eb9094a913b0540c8b1ed1"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f11ff990bead5af6785c8c510f4afd4e"}]}, 0x4, [{0xc3, &(0x7f0000000200)=@string={0xc3, 0x3, "ffa4f07ab53ae427943c3c859e9b532e6f3891b300000bb694889dfd6bff44c8edaf945f69f35af61a93d9ccf58d6b4b64b2a3f9fd6cfddb6a4ed9c3c3dee3c90fbaae35032c5c3ca3cd069b9d1a86d83ce4d2d8cceb2a1adada1f991e2849aed030b3d379a723e9e62ed74120752a937908ccde2f1204305b7b49a240f5bd4eb76050fca9135bbd686eb3cad73ed394b39760d96f016f3a4bfe13309059ad3afc41615b06c126bedf207b6d560a425d206a2b4aadee19e35f82a8e8bab1172a8d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x437}}]}) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) (async, rerun: 32)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x5, 0x20, 0x50, 0x10, 0x2304, 0x22e, 0x326b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x5, "", [{{0x9, 0x4, 0xf8, 0x4, 0x2, 0x77, 0x76, 0x4d, 0x0, [], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x1, 0x40, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) (rerun: 32)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="3b1103000000b621b9"], 0x0, 0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001581c2908570b2805396d0102030109021b00014001000b0904c8050103e092830905d85f"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001200)={0x14, 0x9c, &(0x7f0000000200)="8db8be87e707e40b73c58e8ee379d273eb346dbda8d5d1b8aa9ad72390709f16683b8bfa2da4c6cfeacffec1b836f7365c5e57581fff2c123b63e8c3d273a26cde320345891e230ff40657c9bc4f149a51ade0e61ffa0332f13bc8674a1bbe44152b7aab0d6378e9e16e2c1743ac50e16410bdaf69a5115898126aa764be6cb5fd0e4d2ee6179a6ca515cd16eba7ed1b086dce3ac25a8de2c4fa840a"})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010700c14f0000000000001098a0f00010000f80b0904000902030000000921fd7f000122e301090581038936050a70"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x9, {0x9, 0x21, 0x3}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00412200000096231306e53f9248cce335234c93070c0000002a940107060016008300000b09007a"], 0x0}, 0x0) (rerun: 64)
executing program 4:
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000108205a300400001024301090269000301090008080b00020100207f0904e9ffff0001200009240100080709000609040100000102200009040101"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a44808f00a71729188010203010902240001060000000904020002ffffff0009ffff0000000000000905ec"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000)
write$char_usb(r2, &(0x7f0000000000)="93", 0xf5)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0x9b, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x40, 0x5, 0x94, "3deafd8fc1e5087fddd631db426a67781fa63f061dfa8b839a8ab39b3b3c24eec813505d90fb04005402b836b0b9eff8bdfb6cbe72eab1f1b89ecb97d165606ccf09cf5a27161a84c9cb645ea9e6eeba0f52cad52ffceeffedc56f1b11c06dfea1a39b2407476c2da725ab6388b3ba1fd251e1f9cc3af141d78ab62082412b262193a4e0a9cc5404e17a532f34770d63017e24a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2f, 0x72, 0xa, 0x10, 0x2040, 0x265, 0x450d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0xff, 0x30, 0x5, "", [{{0x9, 0x4, 0x3, 0x6, 0x0, 0xa6, 0x71, 0x37, 0x5}}, {{0x9, 0x4, 0x3, 0x7, 0x0, 0x1, 0x4a, 0x10, 0xff}}]}}]}}, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b23, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x3, 0x10, "9185c7174c970f8ad3f7539a579871cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000000, 0x80)
ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000140)={0x1, 0x5, 0x6f61, 0xffff, 0x3e1, 0xd9})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="0002e1000000e13140e322be2844edbafbb62518c737a919d90bbb51c22ec6655ea554dfd46e4293cef04598e0b018aeb54d572510564dfb2fb5b10cc057c6aeb8335b8cd122fc3d361e2f223279e496d6b87d28343d7747b10e6bdae1a461376598f4850b2fe3bfcc7a9672b2cbe0bc31d7c90bcb166849960e44333f789d210ece2a2c9ea088f392441897a776935fc36e40688f4d2501d80f04d12abe54db5c2479c24f2c3bc3169d08a607e8cf0ac8523ab13dbc90ec89b430851d6304a54aec9d80e6bae016e458712d49b426efea64030bfac87d53f9a49e2de855489a2624665c03ef8226c1713927f297ddb53c3a0e809429e1ec01a2a49ee036e412394af61385c6456e0a4a9e27a89be9234f4da7ee3a21f5c403264fd9d4bd65639db24935703e837302b9a1c07c79622b3c5230282763c3f774cb3f930e4d7dc47affddebfcc2c298ef1927b30b8e88be565cf1a911eeb4656625996a353bd467df72c8d99da4051e6896e6044cd5eece766d1f9cd1cf6bc97960ddd02281ad04dd9433695dc9d11131aefdad889a5b5bdefc6f6707e6a81b430058eefab6a1717402cff32290312960f11153"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000300)={0x0, 0x31, 0x6e, "d2890c156dd3041d53d4cdc400000001000037d024d064590a003ba5bbcbf73fe04aee978a680dc09b6097e3dcbdb399091c634a5756b08318c9bf48326e8bd017705b019a200f3874f7b92e963cb4d65a789cbb2e71e7caea5666bb3cd860cf8f740e4d122a76253e57487a00ab"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}}) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
executing program 0:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x81, 0x2)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040))
r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x77, 0x80, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x10, 0x6, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x150, 0xe, 0x6, 0x10, 0x40, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x8, 0x0, 0x30d, [0x3f30, 0xff3f07, 0xc000, 0xff0000, 0xc0c0, 0xff003f]}]}, 0x5, [{0x70, &(0x7f0000000140)=@string={0x70, 0x3, "5c4dc3c33be71fb4cf6d6fbf728ffe4498f6422b8101480a60d0f8ccb86e4cb20f308194e6fc4449ef3ba573a76214c08316f0316ff150d9e8f20dc51480c8864d4d49c70be27cdae98b6d819fe9210d961feeace017f6a56cf2ce51f9aff29fdd7d97c556d61954ed95fd939e9a"}}, {0xdb, &(0x7f00000001c0)=@string={0xdb, 0x3, "dc991785b6e4f109ac930404f79c1aa8da79209ca5326bd88d10041229b910f48454ea076865ba1903817fc41e41aac3b67bf8bd0f949681aac6fb0e1dbd083fac300a46c675136f20d5424855d708f02d01a92973a44adf1875ec05cc9b05c037719d6776af9a60daae9eae12a06d4dcf52e44ff57c174f6a3aeb1b1ad54b5e5d040b578c9e53e04ab772c50c7612dc7d94bc636a9a7a1fff19847a38a233d6fc1e8d8e54d52624d31fc6c16627698f7761d40b4bf5e31ad438f3b582bdce551e0875b5d393613340f2472c0c93486b59be6fd44aab1c62ea"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}]})
syz_usb_ep_write(r1, 0x8, 0x5e, &(0x7f0000000400)="30f55ff9a78a29ac0752e937a4938732c4ed2095fe5de0423c29bafbd9d261bf317e9f795dc3679eb4c7f9e5330bc6208974dd42baa46eb0c61f525e640e524ded7ed9a03220dab6c52d88ac2edf98ad82228bcca327aa2c7d3d3a411801")
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x40, 0x4, 0x1d, {0x1d, 0xb, "c08d1bb4ddff6ac619f97863bfaf8d8388d3df6e8b4f48d4bf8d48"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000540)={0x0, 0x0, 0xff, "8aee0774fb00fed630a1dd5471a9aed9cd79c2324d1194fbecd923d275cf4e6e33f9446e9a476ea5fe9238be4e5fdfec21404bd1f50bf862f12dda1bf2e07d65a50f57a4529c8c7c743a0038584eb85463379f870119817ad24ad7c31fb4c83fc4d4760cb8cb4d495d7b2625a5fcaecd465a995a2e9c39e67cee83c2d7379583a9bfe1f6336e99ac4cb3bb53cdf7931f41e310b4e77cd3db620ef5528e0a13c764c73b8e9e73ff6a550a7a451b3e788992d2fe584d8b835ec582cd2dab15c026a3693e43081755bff8fdf2769fbea811ae00d3ebdbbbc1561f9c98dbbd0a0aefd81b4424571477221c43ba83ca9b783d820059503a03cc9d7e20e5ca7f8689"}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "18f3430316029fd53ec5f86b400862f6f7a2fdaa274ad4ebbc6de796b4a5697f8369beaefc719b7483ac246efc80d367923eed2cbe9b7aa98828884bfa06f78baa2ffa174fee8f81bb65aa5342711b223321e759efe60fb4203872d2328d066a758320a710cea870fb973f7b8aa6eb3e058419a05995525f41f9ddef63500328ef783711eeb90f4fb703ca7fc2903d074d50f1dd6ef7f8cf1d3da00fb9637a2266fa7a2f69e4b8beeaa83ed0a4a47a3ddb5ae7887130aab7aa3a7b372013bc7f06aa37c328f24cb5921bccaabf8384ab7a6cc3132e9159bd24f53f3706d4159e87b3d4a1f562e5bc214f9b4dc49447cb0b44aa73dc306e91a702a33bab5e5cb61f7ec2b0fa7d16ce68ec0a532c7ebf9113552e851b176f9200e3d2aecff84b6239995c7714554d05e4c24a96f8e8d63d3f1084728cfcdc628e7d25882eab0d56ef651e5bb70de44f6916717ff288df3e9ea3ff354112bd35a4e45c5ddd3179901e3420bd8990c46426cae64ca0ac4f38b787181b93eaf17ae6cbe5adae83eb5ad94df2bf9feccd10ada1d8ca10a39bd51efa7199031c942a4298802f25d2e8e159e9dc6e52a8f731286cf5f472f0020124807bf502b4bb7cde9e717e94791b86f6a7a831e5ec57cf5ca6e8497d7aad16ada2e31d3f16750f8dc9b14f547e657adfe8057060e24cad8a1b895f78eae5c9860486b0040357384a2b6362b18ccfd5697f4415c8e6aab3ade67a2ccd7d5cb504ab0120757d4a44797ead31f695bc029a2aabed7d1909e632be8ce35ccfcb363ef45ab296b0ed28c2eecd3a6f132dfb945487a78fcfb65f2c29f5620a2f045e90f331bbdad8f3afceef9fc894561df732e2a71538e0e7fcfa9c509c65402770331bdf47075e7c81d10d609bf2092cd2a27636148d2e5e75270b3ae22e81eb7d98c679b15b1995563936ecd3d0082e46041812c187939d4f8fedebc3a140f41c034042cc54615c17699a3f2882785b788545278cc3aa25b7131d19fb247fb7200a0f4802c6374c99c93a954b9981a39c8fe4b4d2d74e662c13574973e09185b2cbd1c6736759b16aea2a2b43c2f30c4cc30133f094bdc142e089fb07072cc9ab305107b546729d54ee281d9b408afc635f3c6e2a12c232dc6045296cb57b41366f5e3eda7fd7d62edb71f592b8716e53ea139650147c6d0e785d3c91ceb6de393f3fc763d7fd605d62cf64a1c167e524dc53a32c39f0a65b9cd942cb4653e8314d6067c32ca873e7dfcc4a1f95b1a3600a8f93f39c546360431ba35884c8466ce226e8c2106990edf24c93688d3bd8dae2b62131be3f68fe6caab6de5bb046cdea044e53d345c84134ec4ac9f41ad1135123fecc5d18c583e150e7dfd5d1b113ff9d61ba76b5240c83f9cac87f10da906dfdcfe7ee9448fa3ba204a6ef3556c296007db7ef6c79a8c493866e45c873df"}, &(0x7f0000000ac0)={0x21, 0x0, 0x1, "1c"}})
r2 = syz_usb_connect(0x3, 0x475, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xf1, 0x59, 0x78, 0x8, 0x8ca, 0x2042, 0x205f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x463, 0x2, 0x9, 0x1, 0x50, 0xf9, "", [{{0x9, 0x4, 0xf7, 0x76, 0xf, 0xad, 0x76, 0x26, 0x6, [@generic={0xe1, 0x3, "6e7c9e3af45771c39b536cb4b83adbc0ee1e9d8c48b98355904a82b10d43dcfc321e1d1ceacfde7318a983351fd9490a39610256825cf94ee4dc368ea5a66cb0a6ef61e8e155644129a38a7d264f1155126bb2c4dbc06ace7791c7c9bc16e8af9e97929a69cd1472fc09b1ee37ee0b734a3579a879af911a8734bb42c2dd8489b0091c8b042e306a052ad999979041ebd9e801a4538935b1eee9d52b4c17bddbf8496a8e7256e7ae2a0083ea81302775d5ae1d7b5bdaa8c1054b8cbc0895b05727af3ae47620de74947a7975f4741609a1168f3d7a76f4cbb9e0ca074dbdfa"}], [{{0x9, 0x5, 0x8, 0x4, 0x10, 0x9, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x2, 0x1, 0x6a}}, {{0x9, 0x5, 0x4, 0xde8f5829fe80b5, 0x400, 0x81, 0xa, 0xc2, [@generic={0xf, 0xc, "6503b5bfb4a339c6e19ad3cdbb"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x9, 0x92, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0x23}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xe, 0x37, 0xe5, [@generic={0x41, 0xa, "d185f5eb656029fc944b13cdf0f5e0794b42804d35991eaad1ad40fc57445bf5de72c7a23d17d7af416f05d68a4687c2cc3de9c9b1bb9f82c9dd6ce972ae3a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x81}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x0, 0xad, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x7, 0x4, 0x0, 0x2, 0xd4, 0x6}}, {{0x9, 0x5, 0x6, 0x8, 0x7cf, 0x0, 0x9, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7f, 0x1, 0x4}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x0, 0x2, 0x4, [@generic={0x2c, 0xb, "313b4a2d6e9bf67ab0304f8dd5ab757e918267cd857c650424d4ab47d78c982f35dedf161b2c73c9c698"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x430, 0x80, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x2, 0x10, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xb, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x199}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x0, 0x9, 0xdc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xec5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xe0}]}}]}}, {{0x9, 0x4, 0xc5, 0x8, 0x9, 0x10, 0xd4, 0xfa, 0x6, [@generic={0xb8, 0x11, "4dc25490b84f3cb2464883c64761d22be4b1a03b59cf59f42349b24ac1dfd7f2af64d3199df32ee4621a3e890c7e63e6258ac0329fd70d4d9d959e6b8c1f12d8b8e9986e8bb42e7b3c8698b0d734eccf201b00a0f596db1a202e7fc6875bcf604a73c5a21b078d5157918df0af73b97b61ba181a36bef10ed2e9095c4a15a6a73925fa4d01b3bf65df4717b839433eb2e4ff539aa9f18cc2d5be5cb2dc505c3f3d0a5054f5ad135e0dd5e83d2b7ab345dfff483753d4"}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0xe7, 0x80}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0x0, 0xd}}, {{0x9, 0x5, 0x87, 0x0, 0x8, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7a}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x5, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x7}]}}, {{0x9, 0x5, 0x7, 0x5, 0x400, 0xe, 0xfe, 0x80, [@generic={0xb, 0x7, "61f9d00bcd53b2aeb6"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x2, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xbac}, @generic={0x59, 0x23, "148e8aa0fb395935578e1d170a4e60a794b66ec85a0da18c8ddb054c25d661deae09558725fdf8780c19b3a3ebd6174fade1d6116cfc561134fcfc2e7376073bd7fc42a628500a807c9cd567675e21c68921cb4b8a9f52"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0xc3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x24}, @generic={0x9c, 0xb, "ceca980adfd98e4a5367372d0b46a12f2840df1ac92c8a24066373a2d8b13eef073a68e12ef0d22e88b4baa21e28891527552d48cd2018f95bf4cc8a986538c83ecff54dea09f51def4a289d5a4461217026e6e4191e8f5352cc3c7df9b3e3f0a124a27441d80e7d661b0335e09350f225189eb14fd1807d6d197b1535881313f2d8c5ae64e37f4e0e97670a3fcc4991be933fa7ddeec29c1dcd"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xa0, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x200, 0x9, 0x9, 0x6, 0x10, 0xf}, 0x2c, &(0x7f0000001000)={0x5, 0xf, 0x2c, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0xd, 0xd, 0x4, 0x6}, @generic={0x12, 0x10, 0x4, "7cc42bfb7fa2b595b103fffd57bda5"}, @ptm_cap={0x3}]}, 0x4, [{0x24, &(0x7f0000001040)=@string={0x24, 0x3, "e4dab53f412e78f20217e5330b09bcdc012fe0cf6717a5285e07832fc9a944a099b9"}}, {0x4a, &(0x7f0000001080)=@string={0x4a, 0x3, "fc82a17ae7c2ced6fe52e41dd5b252592ac8321ac6a1f782bfcdfc2b887a45781e1a65bbbded83f416e79543ff724f8106b1bda2b49d302e6de6f0edc2cd8024a1751878370213b4"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42c}}, {0x5b, &(0x7f0000001140)=@string={0x5b, 0x3, "c3a707413e7b29eb2e24a862a5b42748e896c481755707e96a2c9e6ae29c527270c0c6e1996e887ad31a533df7a6f8719a4e78eefafcbf96bdba68748587b4436e63a993aee82d1f2f6cb014853448adccd06b7e3bca747c27"}}]})
syz_usb_control_io(r1, &(0x7f0000001400)={0x2c, &(0x7f0000001240)={0x20, 0xc, 0x17, {0x17, 0xe, "134e4e4a1619be5bf177fd4188927b4655052e99a0"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c7b}}, &(0x7f00000012c0)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x1, 0x2, 0x4}, @ptm_cap={0x3}, @generic={0x55, 0x10, 0x1, "edacad4df752ca80ff693651b41be7357e9834c246b7bfff1f0ff31bfcccaf628ec5a24d432eb756988ed2520f5b32c5d14be740a4abf90c87f438cc42b004f3e293f65423a0904cbb1b341640d85011a3f6"}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "c759ef3b88afe76e35a672cb7844d03e"}]}}, &(0x7f0000001380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x7, 0x3, "74258719", "8688c727"}}, &(0x7f00000013c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x5, 0x0, 0x4, 0x8, 0x9521}}}, &(0x7f00000018c0)={0x84, &(0x7f0000001440)={0x0, 0x12, 0x95, "f9012ee49705e3c0763d0f8be7d43efd62a541c865bca03d2b2246881de0209e3b157a1492ffbe4d59c415c272afafc9ca6fa5ee3de99e8241dbc3e9016a308df833e79bfe3e33eaea9eef79abc1dd9eb13a456a53f7da8594dd0f1a1b2c6a5b2864f68b36da2cebcb09dcebf44bdd9b167934ee0155c65d81ffdc2e6b0b3316edf717476ae21f92bbda5df38bb05f85b7453cbdbe"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x408c6c391ac0b0a0, 0x10}}, &(0x7f0000001600)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001640)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001680)={0x40, 0xb, 0x2, "da12"}, &(0x7f00000016c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001700)={0x40, 0x13, 0x6, @random="b6ebcff97ebe"}, &(0x7f0000001740)={0x40, 0x17, 0x6, @random="c46cbbe57ae9"}, &(0x7f0000001780)={0x40, 0x19, 0x2, "9122"}, &(0x7f00000017c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001880)={0x40, 0x21, 0x1, 0x8}})
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000001980))
r3 = syz_usb_connect$uac2(0x4, 0xe5, &(0x7f00000019c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x8, 0x10, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0xb, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x0, 0x1c, 0x6}, [@sample_rate={0x13, 0x24, 0xd, 0x6, 0x2, 0x5, [0x0, 0x1, 0x2, 0x0, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x82, 0x1, 0x4, 0x9, "", "669c"}, @as_header={0x10, 0x24, 0x1, 0x8, 0x5, 0x2, 0x2, 0xff, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x1, 0x27, 0x7f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0x5, '}', "6dcb"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x8, 0x5, 0x78}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb8, 0x1, 0x2, 0xf4, "", "f87bd3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x4e, 0xf, 0x2}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffa, 0x6, 0x9, "b2c56872ec"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x907de2737251c793, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x0, 0x8, {0x8, 0x25, 0x1, 0x80, 0x33, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x3c9, 0x5, 0x1, 0x81, 0x8, 0x4}, 0x98, &(0x7f0000001b00)={0x5, 0xf, 0x98, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x3, 0xf00, 0x3, [0xff0000, 0x3fff, 0xffc000, 0x1bf30, 0x30]}, @generic={0x73, 0x10, 0xa, "e0a179f3bfd24741684b1cbf5b6bd43ba4a2f637af719f11c4b05c8c7024165603c86ccb0f2111fd2637068bf4e56a9310a0829b1a824c7bc64689ded38cafba54a45f1ba0a1f2a2d8eeada628b6e1ee331bc418307f2f85074fb0784f484892e091f3c7f9f2c5752c2efddc0f72fb7b"}]}, 0x1, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x82c}}]})
syz_usb_control_io$hid(r2, &(0x7f0000001d40)={0x24, &(0x7f0000001c40)={0x20, 0x2, 0x26, {0x26, 0x6, "428dfc4a1e636c807a367bf6cb9ae46fe62b62ddc4deca386599b30d77898aa30aef055d"}}, &(0x7f0000001c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000001cc0)={0x0, 0x22, 0x19, {[@global=@item_012={0x2, 0x1, 0x5, 'R\r'}, @main=@item_012={0x1, 0x0, 0x0, "03"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x7, "848e1f39"}, @main=@item_4={0x3, 0x0, 0xa, "8d3d9ea1"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x5, "0822ac12"}, @local=@item_012={0x1, 0x2, 0x7, '\v'}]}}, &(0x7f0000001d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xc7}}}}, &(0x7f0000002000)={0x2c, &(0x7f0000001d80)={0x40, 0x18, 0x90, "e1bc20c7e667b71c3f73421a178f9dc2f2244bca2aa048c30145a267841bdb0effc4fcc94e6f0a8e88219924d8a1d4bf1f210443b92f6cdf41019fde4e0f8afe5d6db5f009ce8a461d9a587bd8ca4eeccf187cd7100e278e6e31e16c41bd65ef694ab3ac3890aec823f268828e439140c507763f615a9532452243198346f09e2ed8bb8ed506d41e5dd83995ba415a12"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001ec0)={0x20, 0x1, 0xd6, "6de3be5f494628a5997a72109b7ffe412c2dcd7a54d86c744883af6ad9c835701498d2756a0429a7774821b5fc0281682a969ebbd9b45896fe7c3b1eee88e0715e49d7fa80b089f513edba583d40436859929dce86851976e47565b850c7b34f418f1141c2ba4a38ec26feb878c7690344dee9f44edf022d5de2cf002db012a2939d3e8afce7892b4d6262c3f0f017b2a2bb3378c00f1c53397e2594fdb72bc3e78ecf53da40690579082ad3347a1d0ffeef500b8b1a050d6423364e6479094073789877b201c9675cdf8894f79f5423840fccddb8c0"}, &(0x7f0000001fc0)={0x20, 0x3, 0x1, 0x4}})
write$hidraw(r0, &(0x7f0000002040)="741f2029f6416b47a2978c54074cb7a7912f744dc174fcd7ef2e36b8d3a65b26c82cd229e08dbda6956a2edcc3b5c6a2dc15703eab80efe46d8e0b92581e10d10efc9127f4646b40601af5366d860edc987d16409fe2151ee1200f2062d8ae", 0x5f)
syz_usb_control_io(r3, &(0x7f0000002380)={0x2c, &(0x7f00000020c0)={0x40, 0x6, 0xd6, {0xd6, 0x2, "fedb2c5ca1106b7609a8951e8d62a1e6f536a72dda9e7f605cfb11adc07448f85ae03a1b80324e50da06bc1c552d53103a930c24a661360e6858abe08cb4cb4087234157a54b856c8b7f368e3854d1352c8610a1cbe47351fc204b048db0cd235bda30c5d6b8c2a85a794f7e3bc5ec276c2e8b3ea239c075030f09c464a370069e181f4d5d3ce747485469967b81a696aa45269bb36da533610cff536e2fb3f59fd8fc93a05bde4e6a51000c083e9cad431554c63f44e061148d08346d908ed0f7085a42a3be8b8bd9b80a5fa4b3cfeb46f65bac"}}, &(0x7f00000021c0)={0x0, 0x3, 0x54, @string={0x54, 0x3, "33152780d717939244fceeeffc0b8be3e6162e37579ab290ee3feb884d2097f652b785ddd4a5299d58c6c307ad21cfe0240f75bf2005cf3d2a09f9d7f5e9d8eb522b4589672bd7570acf7aa345a3a807d443"}}, &(0x7f0000002240)={0x0, 0xf, 0x7e, {0x5, 0xf, 0x7e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x0, 0xa}, @generic={0x42, 0x10, 0xa, "caf50ea9e1b6de252bd09ee270f59c46891c84856e1521e38d9ebe8ae84649bc06783726a0b81ab92497c5d5b85b1e7e6976fecaffcbcac89f2149a050726b"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4b049a81d28e2b7838d15a92d3f5ee8e"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf000, 0x0, [0xc000, 0xff000f, 0x30, 0xc000]}]}}, &(0x7f0000002300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0xc, 0x48, "f4a0cb63", "3a80b36a"}}, &(0x7f0000002340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3e, 0x0, 0xfb, 0x5, 0x8, 0x11, 0x9}}}, &(0x7f0000002840)={0x84, &(0x7f00000023c0)={0x40, 0x15, 0xa9, "16874140bec6619c54072bcaeb0bc6f3ead63e57ef91a2d946778f82ffe86f12bb2d9befbf62eefbb99b9507be04ffd31761bb384d087571cc92d4b04cd279b091d624722bfead89a24b31fe2053951babfa98799d4b89d783d1100be3fcae65576a349fd962e0aa2f83dfa2dbf4c605ab35629e0561d4d15daa4cb0fb479424d47af53026fd6648bad236d034396ccefb12c9756307a2c713c5e2d66cd712ea393338a5078b77e73f"}, &(0x7f0000002480)={0x0, 0xa, 0x1}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002500)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000002540)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f0000002580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000025c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002600)={0x40, 0xb, 0x2, "3ca0"}, &(0x7f0000002640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002680)={0x40, 0x13, 0x6, @random="a97ab3bb782d"}, &(0x7f00000026c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002700)={0x40, 0x19, 0x2, "db13"}, &(0x7f0000002740)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000002780)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f00000027c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000002800)={0x40, 0x21, 0x1, 0x5}})
syz_usb_control_io$hid(r2, &(0x7f0000002a00)={0x24, &(0x7f0000002900)={0x40, 0x9, 0x14, {0x14, 0x2a, "19ea2bbfc71c8aa73e34620bf6cffccef8c5"}}, &(0x7f0000002940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000002980)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "06fb496d"}, @local=@item_4={0x3, 0x2, 0x7, "6ac91562"}, @main=@item_4={0x3, 0x0, 0xc, 'GxmV'}]}}, &(0x7f00000029c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd25, 0x6, 0x1, {0x22, 0x164}}}}, &(0x7f0000002c00)={0x2c, &(0x7f0000002a40)={0x40, 0x16, 0x3c, "71455e249f44bdcf474707992c3ebe25c8c1250fcf659092ae0b3c49e6540d4fa4a96c7c0c292734b59bafc25413526410d57055242467a85a05a182"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0xc5}, &(0x7f0000002b00)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000002b40)={0x20, 0x1, 0x50, "53492081d4825095c131eab287fb674c5973756484dda93eed00e6a65080f67144ad06ec94b69ce90c0a7ed024af2749817da53eaf989ed288c7958fe76703ae328948f8a9bbd1eb1450c707fdfce42f"}, &(0x7f0000002bc0)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io$rtl8150(r2, &(0x7f0000002d80)={0x14, &(0x7f0000002c40)={0x0, 0x10, 0xe3, {0xe3, 0x16, "ca71d7e1a2c90fcda31d838aad7809f9d913b931b29c7690094d153bb8c84e474731e3d7fb6d3f04123b606f5d4a7a1b73d906287d8ba1a827424e619c9d25390ef23d5e69169d9322d63448126fbc7dd1e953ca2b5f12bae36c20a74903db1c858e0d59f2370afe0901d6b1ac02891460ca33a2f7ee472a1681a6b8c329c87d2c634bcf39652320a6910fbd6bf181b448e958b0458cf7bf171c939ef8b39c63f8fe776ad2d4246c5dae97bd82b0c964e7268f7c425c76b06562c35c32800b52be9104a6cdf061288e511cf5f4585645d09d56db551decc0e2b3211f2183176a8d"}}, &(0x7f0000002d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000002f80)={0x2c, &(0x7f0000002dc0)={0x20, 0xf, 0xa0, "48c3aca9149dea25561114ecb0ac2c64a9074fb0953dded22ae84e9becb2ebd756c9ae37449cfaced39b579e3b9a77351c9e8d51942841e55105a0b7d573a3a0f0e599fecb2ec608ae92ad851242d6d52142c06f097fd188f32ed2d4965942c66d5e19a48e6c44ee8cabac7b2fd7d10435f47574f9e0cef964ee71c589cd077bb087378a31dd6e61c9da7baa80f341003ea1427217bce4f7d586c6ee28b51c15"}, &(0x7f0000002e80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002ec0)={0x0, 0x8, 0x1}, &(0x7f0000002f00), &(0x7f0000002f40)})
syz_usb_control_io$uac1(r2, &(0x7f0000003100)={0x14, &(0x7f0000002fc0)={0x0, 0xc, 0x3a, {0x3a, 0x22, "cfa66c4b21bb86e7c3dadb10f3411b6e8259731fbd568ce778425886cb4a11ae99a8670c41b63672b5e2b5021d1563ec65348b2710f9ae48"}}, &(0x7f0000003000)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "2a81c91a8d70b396a954860e631c92bcd45b53ae2a85f4ee45d67ca4b3afe32ad41aee858852f730ed58cbb9e8ec1ea638965b64712c73e143004941976674cb5cecd2c9889b5bd54a701560fe92c115a8632c171da88225ad7ce5bcbef29d466d3be48f7c2bbdc211f6f26695a5858ee80884a1ab847ec20e1c86c1b335b9f76da402e9ef8c49c6924dcbac43f6ee84871cbf8bdf496ab5651e8195fac0d4e16514852b38e6fa3fb31444c337b809b20eac41f68024392605cd36fd0aa7e737ad9bd803822082ceae8b68c36ecbc630474c739216d182ccc87449118c5707743f1054d4a5"}}}, &(0x7f0000003440)={0x44, &(0x7f0000003140)={0x20, 0x0, 0xff, "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"}, &(0x7f0000003280)={0x0, 0xa, 0x1, 0x5d}, &(0x7f00000032c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003300)={0x20, 0x81, 0x2, "c191"}, &(0x7f0000003340)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000003380)={0x20, 0x83, 0x3, "e5f0e6"}, &(0x7f00000033c0)={0x20, 0x84, 0x1, 'X'}, &(0x7f0000003400)={0x20, 0x85, 0x3, "9be85e"}})
r4 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000034c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0x3, 0x1, 0x9}, {0x9, 0x5, 0x6, 0x2, 0x200, 0x1, 0xa, 0x6}, {0x9, 0x5, 0x1, 0x3, 0x40, 0x2, 0x6, 0x1}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r4, &(0x7f0000003600)={0x14, &(0x7f0000003500)={0x0, 0x31, 0x91, {0x91, 0x21, "82954fa2dd5ca74c3505f3d63667196cd71e83ddc3a2e8a2fbf9f01bdeb09587745baace7501666cabd0a30515c46908bcfe0f01a0865c76083694f541d1e909b58cbaeab82d367bbfe65a28c79e5940123bec85d3e4ad08bd98392d9cd3d730d36a5e3f3f4f5d33554390ab5de5d11580e48fa54eacf927e3c7eb1b75c030c7b1e9e6ca7052734bcc8f617032928b"}}, &(0x7f00000035c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000003b00)={0x1c, &(0x7f0000003640)={0x40, 0xc, 0x25, "3c14a82705e55356b9ea9fe92c9404a2fed1e1dc7ecacbad03d0f1e7c4e96bdb81f3a75e41"}, &(0x7f0000003680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003ac0)={0x21, 0x0, 0x4, "7b86d629"}})
syz_usb_disconnect(r4)
syz_usb_control_io$lan78xx(r2, &(0x7f0000003cc0)={0x14, &(0x7f0000003b40)={0x40, 0xc, 0xa3, {0xa3, 0x0, "cb1b4a19ad7b0963dae3d436f3788ecac5dc82404598ddf08863a418a2905e6baf9115db566dda93df149e79aa8682fc381aac54bbb97f473fd770f707a2e311c78d52972759759b2d49f6d028654664392a727fc93e91c96247ac16d4cebabb5f335ec3ca54a167293e694a821bf8f5c5505a951f6750b5c70d2a9f36821f742e93e9b86229f9d30afe8bd405c72dae74a6b1b6e82ebcd08bc05c78d909cdedd6"}}, &(0x7f0000003c00)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "e17b798164fcdabefdb45a6a54b429010707b25aa471d2f0962a5823f3a1c4dd55cedb746998cce80a6eac68645c4a43cbcda2212514f019665394327e88af126fc434e12a30d966209a2e9f89969ab5fd3b5c807029d81bd1ea1adbbe39cbffd63c8f337ac726cf6c9e4d5b696954ccd90bfacf12435f7e10e21f84c5b51e755067cdf73d0754f1"}}}, &(0x7f0000003f00)={0x34, &(0x7f0000003d00)={0x0, 0x14, 0x97, "078cda339fae598ba7fae9692e780d15f475d704b504109085e5e44e55e6c58568c6c01042d6eda4a8358847439f68df171b90b4dfdbfe1234de8a7b6ebb4a696d7609a2866487c53de5482ce36704497783a49ac1e7f0d14b4788d20476c394298349f44d279d440c0698628ab222a55f73ae6f5ee1a251e4d0e6a71424aea14cc149108e56709a9ea26b6416951f1bc5b3d069e88ff2"}, &(0x7f0000003dc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003e00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003e40)={0xc0, 0xa1, 0x4, 0x80}, &(0x7f0000003e80)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000003ec0)={0xc0, 0xa2, 0x2f, "f62712af40a3ad0a34d5ddf45ff7ac037751d390d5b80f61faad8a0f5187ef1fe3574b708df6e3e47ce53fae121888"}})
syz_usb_connect$cdc_ncm(0x4, 0x7d, &(0x7f0000003f40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0xc, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "bcd644"}, {0x5, 0x24, 0x0, 0xfff5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x4, 0x10}, {0x6, 0x24, 0x1a, 0x7aa2, 0x16}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x6, 0xfffd}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x45, 0x40, 0x9}}}}}}}]}}, &(0x7f0000004180)={0xa, &(0x7f0000003fc0)={0xa, 0x6, 0x310, 0x1, 0xfa, 0x2, 0x20, 0x7}, 0x5, &(0x7f0000004000)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0x1409}}, {0x91, &(0x7f0000004080)=@string={0x91, 0x3, "87c275062efa296d386301b53d6af6f8c10f7981a4938097a8c1d1b41b237bb0555dcb33e004a89c117bf9a21b26da1757d8a041ce12bc529cbc4f4aa757e95d4c2afe18555b5fdbcf44609016d03968c3ff30b8da4cae8286813a045391e23f542babf2802b39b97e0adaf942f84afd5bf8f037aa5be40d4c5f907a45c7e44bd5735a929684d5135278064bb50610"}}, {0x4, &(0x7f0000004140)=@lang_id={0x4, 0x3, 0x443}}]})
syz_usb_control_io$uac1(r2, &(0x7f0000004300)={0x14, &(0x7f00000041c0)={0x40, 0xa, 0xd5, {0xd5, 0x22, "5b7e9f0c851b1d42539692db022cb176540ae20d46cda47343a6b4e0091cbcfa6f2d0a3fa25ca4efea0132d689306d3742f7e1942c884dc4f100c405e22afc6e7e545add070bc9f7dea9924c23ea86f1a66eed22f68b48fc5aee632a7506170fb5d0d2035d9e95c80fa4c7184b5c85bbac9278621096a8499f401d3a6d412718138657aa6d012ca9a2b2b719d8d50c4f0d7fea4f8172c0c687719a43a99e03edd59efe8fee0e6bc1d57ccf6fe29dbf584b1b4ba046d03093ff6cc1e9166b1a57001a5f4735c0f271e65383dfae456009374832"}}, &(0x7f00000042c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000004580)={0x44, &(0x7f0000004340)={0x0, 0x0, 0x5c, "b86576a6325614f5f2f4bf1fae9888feefae1c9d2fbefb80a72b0ac55ceeec0a9c1cbf5b251d49c4c14cb5b009752bdd490783660f628146ad331ece06467e37a70d15fcc50e6362e0d0ee6733e5e0b33825e64f919e90612cbe51a9"}, &(0x7f00000043c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000004400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000004440)={0x20, 0x81, 0x3, "fc4802"}, &(0x7f0000004480)={0x20, 0x82, 0x2, "d742"}, &(0x7f00000044c0)={0x20, 0x83, 0x2, "8322"}, &(0x7f0000004500)={0x20, 0x84, 0x1, "bc"}, &(0x7f0000004540)={0x20, 0x85, 0x3, "35cc3c"}})
syz_usb_control_io$lan78xx(r2, &(0x7f0000004740)={0x14, &(0x7f0000004600)={0x0, 0xc, 0xeb, {0xeb, 0x22, "40203ba0ad83a1b23b327da366c42f58d93dda64237ffa6a08cccdd194d34699fdc8829dc2f1b96d928baf4ba42c8a187ba325d7320cd9d8968167c49def34c767d855d021dc0c911c70b4cc4e3f4bdd5c04ece0f59f06885db8e1d78a01e432c7e4493e1d785d23d087d2286cee72c8b688aad63749274d5db5f4efd788e53681752f57a1824fddbffc57b5b7dc1925c31a269955681594c11c45a6e8b4d10feb966614e0552a669183a679619cca544bf9851c487b1574c331bf1600e81a0c6a0e9146e29a17602d9de76fc468b6c2237c225ec02f8a262519379c5487a472e57c6ed4510e83cffa"}}, &(0x7f0000004700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f00000049c0)={0x34, &(0x7f0000004780)={0x0, 0x11, 0xec, "aeb20487fe8e5001d94f24a9435ecfe41403982b4e3221ffa58fad9d20b986d8806dd0f950b7e76cb04769815caf3bbaf38b5e8e9657b7e5c837f7d07c485c824e01ca1fe18a48ecef7d695f934214e027ad86dd100619720a8e1d34aa2ff60c76bb417787feb6a4f9ce7513d76a38cc270c74a4f94e55e381c7176111a625d0b85bfcde8a8b047a4619e7e7a6a8d140901d5915c980e2f141b7ee6a34c016b6fded9c0c97aa6eaa7904ae769ef86578775e29199dda68381b1ac7640ebbd74090ca7883bac1a0b7735c70076983506dae88e60aba86acc004dd1abf8c3762435eb17252dfe3d8487b0af34c"}, &(0x7f0000004880)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000048c0)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000004900)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000004940)={0x40, 0xa0, 0x4, 0xfffffff8}, &(0x7f0000004980)={0xc0, 0xa2, 0x2f, "310bedd69c678e653dade4dee29f69b0506894077d27f868a770b8e045c4f8df6b571d028960d610fad1922df3c3cd"}})
syz_usb_control_io$lan78xx(r1, &(0x7f0000004b00)={0x14, &(0x7f0000004a00)={0x20, 0x21, 0x90, {0x90, 0x4, "af8d0ee02b89853896c1ebf00537c6fe4ba7c6f5ac40596628d25dd0a6141ab46162d923f4387de0a53ccca06ea6716d7bec17d53b34aaecc1f1cafd42737882af6237861ff17d680e6d6e30c5e4c1ee1e5003cd4d490bdbe98c64f648caf911838a6449808d0b2e80d0f0795b91f1fde61885b1793e98ece1e4432f03922e0b6598d7019aaacdbd5e7328f693be"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000004d80)={0x34, &(0x7f0000004b40)={0x0, 0xf, 0xf4, "7d2db1919fb568b881b2f6e38f5184e07dc4d26139e6b5aa92a6ad12b6a12aebdb784a0d856b63cb03d684829bd04b3e2bc07cb7cadded5004cce5debb8c249316a0754e1f04858fb957100549f6763f677f01479dc4038c7d6932ffff6b83fcb4d1386b8138657475651e2fb80ffdbeb1665e04d4cce3087ad6ef883186f91f4b4c56a34a6113ec0053cba19f64d19bcd12218c76952d1b5f2f58fefd3cc92461b44fcd0bb1f2494340ccc7625402ca9c51b4ef7f85c07dee941cb6a3f5c808915b92eb82f33ad2f5032037bf52f7c7288432be936476664cf7fced008a4053ca9a4cc9da503e12b19d9f2ce11cba10dfdef1e8"}, &(0x7f0000004c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004c80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000004cc0)={0xc0, 0xa1, 0x4, 0x10}, &(0x7f0000004d00)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000004d40)={0xc0, 0xa2, 0x2f, "b0f7325f073daece30f81020fc2c2bec1998de9ac648a28cea227025967163caa34fd5ba15eeefb438b15e6b8d5657"}})
syz_open_dev$char_usb(0xc, 0xb4, 0x8)
syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff0001)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000004dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x68, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xae, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x5, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x3}}]}}}]}}]}}, &(0x7f0000004f00)={0xa, &(0x7f0000004e00)={0xa, 0x6, 0x110, 0x8, 0x9, 0x9, 0xff}, 0x19, &(0x7f0000004e40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xe4, "8074c7112fdcaee012a463cc1d4765fe"}]}, 0x2, [{0x4, &(0x7f0000004e80)=@lang_id={0x4, 0x3, 0x40c}}, {0x26, &(0x7f0000004ec0)=@string={0x26, 0x3, "3866a96d4f3d9ad926379032d2b695f26b40f977bf6b35be7ebeaa54a112fa134472cb11"}}]})
syz_usb_control_io(r2, &(0x7f0000005180)={0x2c, &(0x7f0000004f40)={0x20, 0x22, 0x101, {0x101, 0x26f7ad2dd9635fa, "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"}}, &(0x7f0000005080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f00000050c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0x6, 0xe, 0x8000, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x3, 0xf000, 0x0, [0xf0, 0xc000, 0xffc000]}]}}, &(0x7f0000005100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0xfa, 0x1, "063cb086", "30840ae8"}}, &(0x7f0000005140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x1, 0xa, 0x9, 0x6, 0x3, 0x81}}}, &(0x7f0000005600)={0x84, &(0x7f00000051c0)={0x40, 0xf, 0x58, "1dbe3eb9a63a52e715aae3dc4431f8d711c5c3e286ac136a3707e5ec3acb3584a8d12c136e030d61486fbf9bcbd9d85e869b96d38c1966d807ff6569ddf37f2e95cff8dc5df7c4327fb87eb33f08b47fa1a1890481eb6aec"}, &(0x7f0000005240)={0x0, 0xa, 0x1}, &(0x7f0000005280)={0x0, 0x8, 0x1}, &(0x7f00000052c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000005300)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000005340)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000005380)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000053c0)={0x40, 0xb, 0x2, "3f81"}, &(0x7f0000005400)={0x40, 0xf, 0x2, 0x9c}, &(0x7f0000005440)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000005480)={0x40, 0x17, 0x6, @local}, &(0x7f00000054c0)={0x40, 0x19, 0x2, "b12c"}, &(0x7f0000005500)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000005540)={0x40, 0x1c, 0x1, 0x21}, &(0x7f0000005580)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000055c0)={0x40, 0x21, 0x1, 0x81}})
syz_usb_disconnect(r3)
read$hidraw(r0, &(0x7f00000056c0)=""/124, 0x7c)
syz_open_dev$char_usb(0xc, 0xb4, 0xfff)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x5c, 0x2f, 0xb8, 0x8, 0x2357, 0x105, 0xb929, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x4, 0x80, 0xf, "", [{{0x9, 0x4, 0x5e, 0x80, 0x0, 0x97, 0x70, 0xcd, 0xa}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(0x0, 0x8, 0x420000)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x401, 0x6, 0xff, 0x2, 0x2, 0x9})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="02171a00000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect$midi(0x6, 0x2b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/275], 0x0) (async)
syz_usb_connect$midi(0x6, 0x2b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/275], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e0040000524150000ffcb7e392a0c"], 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x4, 0x4e, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x8be, 0x1e18, 0xce1, 0x625, 0x9, 0x3, 0x0, 0x375d, 0xf6b8, 0xd10, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x8be, 0x1e18, 0xce1, 0x625, 0x9, 0x3, 0x0, 0x375d, 0xf6b8, 0xd10, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r1, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92")
syz_usb_connect$midi(0x4, 0x43, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x6, 0x60, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8e, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x1a}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x77}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xff}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x80, 0x44, 0x2, 0x10}, 0x8, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc5, &(0x7f0000000640)=@string={0xc5, 0x3, "36b8be9ceaf5504c225012e847d0be0afb69c0a76e8492f644c635399ddcc7dddad1a2452e17c70379b959d038ceb68c5a46cfa2b3ab908d3aeecdbbe7c25ec0f53203cd48a369ce88c4e7ef3ca355e1e319eb99062a934ee00d3610fd0ea35551c2e483e1c517663a24dace6fab8dcf2c5d475cfadf1d426dd62d157be4e442a238420d0b9ccc1058637b9d5de8df941e28dd14114811bda0849131e576147bcbf231dd944ea9487e3026c462efb4cbaf671e397adac7431d02ccde444c8c780289a5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1103735494de850ccace8d5e476daddbd29893a1929690a843b82fdcfccf2bc6709abdd96dd511ac7e3134518127f5bc118d71312e697ead04b28609b8aab7022c23e8273ada9734c5c30abc56866592a093d5a191edfcd4bb04ba4fa102c69ee22c99b666944cdd3aef79c4639f683c8f65000800000000000078ea79f4f916feff135418c8f7fb284df1ff96"]}]}) (async)
syz_usb_connect$midi(0x4, 0x43, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x6, 0x60, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8e, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x1a}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x77}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xff}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x80, 0x44, 0x2, 0x10}, 0x8, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc5, &(0x7f0000000640)=@string={0xc5, 0x3, "36b8be9ceaf5504c225012e847d0be0afb69c0a76e8492f644c635399ddcc7dddad1a2452e17c70379b959d038ceb68c5a46cfa2b3ab908d3aeecdbbe7c25ec0f53203cd48a369ce88c4e7ef3ca355e1e319eb99062a934ee00d3610fd0ea35551c2e483e1c517663a24dace6fab8dcf2c5d475cfadf1d426dd62d157be4e442a238420d0b9ccc1058637b9d5de8df941e28dd14114811bda0849131e576147bcbf231dd944ea9487e3026c462efb4cbaf671e397adac7431d02ccde444c8c780289a5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1103735494de850ccace8d5e476daddbd29893a1929690a843b82fdcfccf2bc6709abdd96dd511ac7e3134518127f5bc118d71312e697ead04b28609b8aab7022c23e8273ada9734c5c30abc56866592a093d5a191edfcd4bb04ba4fa102c69ee22c99b666944cdd3aef79c4639f683c8f65000800000000000078ea79f4f916feff135418c8f7fb284df1ff96"]}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="008500000000001dbacb95d59f4376a813003134ecb33d65564d923de56893a118679f4622895da80bad2486ab48992d48b6955bd346a43ca71fd3432221ce22a06db4c9e530ee643d48773f233a0209"], 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000000000408f0e030000000000000109022400010000000409040008820000000122180009058103d30700e001dd9fbeded413ff5de0a3967a82659b98125c0bb408041b5f46641dad1c3fbcaca9085e88c69ab7b8f8470d86e6b58de222ac1088794cca709ef75ad174bb5e9098f678b9d58777353e5d4a152153bc660386d236fb0b4845f814f026272c3af2324b9221084ca90510b2f42d4fb513e0ed97f41b88644022cc4453f465dbc91f641c57f9168aa597fc1d363ed831ea69eecd6f9c1e38e38a402b5bc3ae7865c510426361ddd86f09626c9c0dd87a3a3a6f8aac03672d72babf46219b25fda49f6d7ae80af8399d1e5af5069cb9fa1b1492519d433478efe692840e7a315be033943b503207626957c74f1a8d756fb1a945a7ad048f7748d82adb4017f11177ba1e62679d460c2bf4330000000000"], 0x0) (async)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x3, 0x34, 0x0, 0x0)
r4 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff0109050e02", @ANYBLOB="5d59474ba7adc479c6ffa651b12c2f92513cb1d3e3942a4b73605501b3984544f6c408108dffebeee6b04b377d2d01542911f59c855e87d649d8720e1808b7365681f9313a12480a9027308f7636dfe56cbafc"], &(0x7f0000000000)={0xffffffffffffff1f, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$rtl8150(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="400a36000000e10feab45ea0512df2b83694956526b9a57b5b9093cc118c721c247d73544e27a50000001e0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_connect(0x0, 0xf68, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x43, 0x6b, 0x75, 0xff, 0x2c7c, 0x12a, 0xb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf56, 0x4, 0x0, 0x5, 0x20, 0x5, "", [{{0x9, 0x4, 0xa1, 0x20, 0x10, 0xff, 0xff, 0x30, 0xe, [@generic={0xe9, 0x2, "a6bf7e109a284785d3d457bfc946d40278debaa08edf3f73d7ac3139b6ff34e83592d10a47509d54bd7a2f8b0d3ce325328d54620c3049e032c73c7988f828bdfb49f2ede8276f7db43b9e11ebfd91330ba4be6ecbb29efdba3d13c5bb0884bf927e81647112f7e4a0f9b8247d8babf5adb455d89d2b09606a6a9114fda9477b630ed5e6e4dcaafb159175c2646a0294b5f3bd36b82a80f15bb52fd1ff98a4126744b6c327e0103ba543274f0d3605d14531e8eca6fd44c86245e30cd2a52e030034c5cda102cec80c76f2e8cac7c99fa56a442ce59c02bcecb70e748c69bbcc498bbe242c3738"}], [{{0x9, 0x5, 0x9, 0x87afe8de16cb1ddd, 0x0, 0xa, 0x5, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xac, 0x8000}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x9}, @generic={0xa9, 0x2, "8a85a0f16d0fddbcee8292ff74422f8fe1c83ef292deacf676d50b4697da3971d97a9cfb016b3d874309e134f4ee14ea2487a4a626b0073758f9baf128617db7017ac82920969ee01d0acf5d273d0c31c475b003351fe0ed819cbcca12cd8f0091ed2efbbc77d37dafc4671b67acd9d76b39f1e40d05611f154638d3d7486d6e703179e4935f7fab77e955cce7288ff8ef68aa4626a20ab97344eef2732ad47c2402dce73ab253"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x4, 0x1}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0xa, 0x5, 0x2, [@generic={0xf2, 0x5, "b86f7ca0b8c1e4893d854694153066269805ee5b624841e910490b0cb22a83997414357cbfc09b63a12b8c9f24a084837c6d932c28bcc702643887073967e024d431759925d74e101e0bb453fb3654721a151429849143d2645313b1e30ad63ac5ac5bc6217242af7e3df45021495499290ff7b88596bbc06c62869b01c653ec92400a887cb1ca493da5b3ea04413766fb3129d82e5f9079d0245d6f70b8fb0fd36a1fd6fee0a8d8d90145768edbdbe3ba4ccf3aa89224a48a652b0fb02837bfad307aa71cf31c303254d3db80dec4bb669856e8c01739e8d2039445bbc4e36827c09805ffce8b1b8d6e44143da55405"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xbd, 0xff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xe, 0x6, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0xa, 0xff, 0x30}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x6, 0xea}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x200}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x40, 0xfc, 0x81}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x0, 0xfb, 0x0, [@generic={0x69, 0xa, "69fb8d74acf3ae1e60509053535b7480cdb4be9499eea421c3e7a24a1de4f8af5f946f4d6d3dfb4c0753d874bd51cbef98cc7502ccc308f6c7297473715a3b7505389a2ebd34d8ca290ec4424bcc72470d569ba71b7f945c1b3a3af996ffe426fbae644c35d775"}, @generic={0x26, 0x10, "bc147ba605854ea796e4fa435c8460ffcb164b045b8b4fe452d7ee529645cf494bdeab12"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x76, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x6, 0x2, 0x87, [@generic={0x39, 0xc, "908407ebaf0a14ae081426ad8ef6b2b50063547dba792b16e746f14cae61c7e507e4422e8d3376304ba1d66927837ea9f966f1783e3ff5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x6}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x7, 0xb, 0xc, [@generic={0xe6, 0xe, "21d6da9daa30076cefac558d4bed662c9e058ea20707330b9ef616b2e0035298f160f6fedcff26a5be00ae33d85065e4d76bd4f54d6e6db14aeeb9711e126b8ae4b561e524b57746f21a33bc0f539c0bdc67e6fc27fa1cc0df8784021b16925d93c230e9ca73aa1cba7c69e9b0add924ee4996280c73ff2812c6a4fa25f83ab164f5b80800b47a81ff1499f1f4fe8aea38e38d9b1236349c54d752d1e5435c6a7a05c082c384b974870218c5c5d7aad5627f1b36014b8ed9931280756f46603517a7504bb4a4e3a117513de3b2d0ffdba0ba5017e34d3f478009532e61e4b90bf4869f96"}, @generic={0xc8, 0x9, "67da1434930353d04b9a3546be176d0fe8a098b728f78b0f6f478e95c1b54b2bcb108b88d781066cb4638c71677d200181f90bc67d2e58e2fe7b8701bf5d8ab0a18524168093ab13e2d5ae85392e4e1b70d49d6c37b0df9246195d067ebff08635270932b35828d23f5f2a7c7e8d49f0f0e81dc619a0aa32c89a422a167b2f9f82b073ad97cdbcc7e8af99a5ca1fc89fc1264030ba3e42ff52be2f13a4b9cc2a49cc8e1faca7513c68008091cc03702440d85061d98a7ad36b5c811247673951808d5b382859"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x6, 0x6, 0x1, [@generic={0x16, 0x10, "53938a4f7aff9a3da50f8f2e3baae97548767e2d"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x4, 0x3, 0x5}}]}}, {{0x9, 0x4, 0x30, 0xa, 0x2, 0xff, 0xff, 0xff, 0x20, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x40, 0xc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xffff}, @generic={0x92, 0xb, "1a94de5615bbcba842b13afca5e1202c2d0fa3d448640e8dcb99c60e5458a67952a0f0260a189c8f33906ec06f79025e2aeb3cb45673d40d8c76f1e04672acffc08078dde42dc9bf86a1ce871c609acb6a546712eaeefb58438d2c3a4e1e28cbcb7819630edc959f9823065911c7651ee0a6400b76a218ac73aae848b752a823406efe2427def31cca4ee01d119d4ed1"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xcb, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x82, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x7d6}]}}]}}, {{0x9, 0x4, 0x6e, 0xd4, 0xa, 0xe, 0x1, 0x0, 0x7a, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0x9, 0x6, [@generic={0x18, 0xe, "9749d49b8eea1d92ea248a412cc1fd653eabdccf95c8"}, @generic={0xd6, 0x10, "948e87f495c3748d9342c87c217aa9cbc7ee39f3e4601245e70accfde0ccd51b5dc4fff6f0b06895a3fecd74f24f3c10b232dbca6bec04dac082bcb7202b3cc6e0193ef06b8c9e5994c91ad89febe1366cb68032482972cf2b22496ae8dbaa68da8356184880474f8600686df036ab6230590487227ff6a2893568fab2a46832b0530079c047273d31f4b5be0ad27b4ab054132d6382056abf280a302d8d8fe54d81b53e166d32f5b1662c235941021fa1230b80b902bfd8e2f8d2d6fab2178175c625708f02f86dfff22438e72b3a260f7b3367"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x3, 0x5, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xcdc}, @generic={0x10, 0x21, "34a0e7abe248a7f34f5b0639f64a"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x64, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6e, 0x2}, @generic={0x2d, 0x2, "50e63a911e879291915bb3a97130584e680dab50b06e14ab1d85dec942ff30d6e0dabcf0db86821699c05d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xfd, 0x4, 0x3, [@generic={0xde, 0xd, "c6934de1112b8d111672f4d4a38e7b0dd7d47dda15d54637f5a4f6ad14925ad3a483f6723a5f14bceff40ae80153cce719f2e60bc7b609a1261be2addfe6e4b2a7699ccb7c3c1455ba96e5a93bb4980c5fe22d26f5b91f2df8d6b50af3626582971906e16f0eac717fd1216fee7b0d1d2bdfcb84f3ed217cecbcd09be577c7c613d149213658289e8977386c1ef08a3fe3f685ff2215b5ccb9c50194345eef161c00936d0573cdd6ccd06cb619b8240f3b94315152ef4946307e3cd96fd8ac143889b136be5cce1fa67c275406e947ec3aac7ac812d8733eea61f80b"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x0, 0x3, 0xb, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x5, 0xfe, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x86, 0xfc, 0xe}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0xfa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x6a5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x6, 0x80, [@generic={0xe2, 0x8, "f47f5373269c58e8a1e2ef4eead9dd0a5344e1b52034937e65501d7bacb51e9f4ca6c6486657ce95ecc01320eb6dd3efd93bb66cd1ccf3b7582b9f4df50841ce7fa870d05ae9e08a2dc2435aa86fa01d2ca42274d58b951154c44763215ae60c39a57059820840e412f707573d6540fc10b5b9ce2d2197167659374da5a7aed420e1681b2a2233eae45f5a923053a01cc0346090fc9a846a2b4b3e7d6e91b6d60b37de6cb446849ad4d802db5dbc9ef62ab34a95946b2690fc13fc45d9e402b697bbb84fa52dada7f84b9fc387e88c77fbae77f8d60da134a6168903840b2cb9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}]}}, {{0x9, 0x4, 0x20, 0x8, 0xa, 0xbf, 0xbe, 0x3d, 0xd5, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x3d}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x5, 0x1, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, 0x2, [0x6, 0xb], 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x7, "ddab250c4a"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x40, "195751e1"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x405, 0x1, 0x6a, 0x3ff, 0x7, 0x98}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "07c621"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xeb7, 0xfa}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xb6, 0x9, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x7}, @mdlm_detail={0x70, 0x24, 0x13, 0x7, "8596f75ffc9eda1b0a351f4968782badb966958b2b45e9f8783a8815453755ea60e613379636f08774452ebe30111802ad0bbc4704a8f2bf2cf8f11a12cc8b06a56b749ec8534bd6cb1a04ea5ed79d393916538e622cc1664843e4a35b4039b4c95077b36b5c6c1718eaf3b0"}, @mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x3, 0x4, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}]}], [{{0x9, 0x5, 0x95, 0xc, 0x20, 0x6, 0xff, 0xc6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x68, 0x6, 0xd, [@generic={0x84, 0x22, "697b2e8864b48dfb2522cbace6d98026b99685eb81afbd22cb1a9133d5a1b678c6d315741bc2c042248c26883e422fd15d3c3ead01efa48f8d94bb30e2d6b40e5cd1a5badf8811d8baacf0ed1a31f5433825aa9318ebae8dbda126107b75868d66dc0955f5fff3140f6792d6786e0ecb21a0082c97e6ad7f1d58fdd575d12622a753"}, @generic={0xd0, 0x8, "a09ffa826fe2635ac95e4d165df63f4ba533b51c92a42f4bb8403800d53cabed842cbe5444944d7855185fa0304fd555390b5db24034d5ddfa2eb8904a1e335280c710b85fd0283f3d73a1873dbf6472c6c5285835eb72c2bd25816ea23839a0f8286da5a3bef247e43af78a1f760784773492322cd3b25ce5fa457464dd8c5af9170ea6821dc99d809dade750ccce844cf6a9c2e188eddb809bf7ed2e5c0fd5e6c44a40ed4df4cae4c53d254e13311530674fe04d622236a30d9ff9ba6861d7ddf297eeed8f202401f9b8de13ae"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x80, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x1, 0x4, 0x92, [@generic={0x2b, 0x30, "78f0d39651146a80c689c1967775ca2b2785f47475bb9bec78c82f328ad396fa45b572fa1f98841d78"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x6, 0xd, [@generic={0xa2, 0x8, "040c5ce8d5ed86924061fa7a8d80f6bfb6484ce2e173fd2a2f463f78a0b3373a6708be4376c0370f215cdbb43be1f1aaffb9e99e256cddaa2fd55dfcfd367c2edf632600434630eb44ad1ca75e1e078583902c570a4eac66ae46d939d106e82f6571f9146c7804f12ba3a83c5f164f7466a210478fc2235f4441e5dde5d123d21aef42458591e4e8302611d4284e85d10a7a0ba23df71f6341ec038c31eee950"}, @generic={0x15, 0xc, "8198e1786b90ef8f6e05194e89b26f9f8ed087"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xfa, 0x7, 0xff, [@generic={0xba, 0x15, "bf107d8ec3681e22d92555bd9ef94dc7a734142c60045e466626d875c0f1384417cce496f6f9839912e3444131c6cf1c3e238b7f2ecc0d470778151975211ee79eb26c05a3eb667960939cf4300634e6b87ec494145534095f50a277dce609a7d4354f4c6481756a0f600b36d95d2940755fa88ba8025836152b06adf5f48bec5a4dff12a8bd1dfc91f147fae7efec14fcde59ffb71145db9ab553ef041173886185935517f2163872b26751647b289f83e1ea8e73ac0540"}, @generic={0x90, 0xf, "d841559b3dc8797ada23d45cf0fffcf9f70bf2dd66950a55da26eec1c6fecd34f042472932e3e6fbd138084544f50fc19eecc49327dcc8f82334ae0ae9d7038723466973fa4c5261f8e464618a77c2a3ff13cc46f9a27c16a1640e0267b8a3dca51a6d00bd9b5410348cc360edb0c5ce952b36645c7fba1a1188ad6f68b7ba4391f9be77f8f6fc40d1db0e105e2b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x40, 0x2d, 0x7}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0xb0, 0x6a, 0xfe, [@generic={0x45, 0xd, "77b25cf558649aaf8b70a726fc3658ba0e3b9803f0da539ef21571ef1eb736e28f534d6e4418d5d96795abab13e331fd91ec92b38bc4adec4f147a73a49f1e1b8e6c44"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0xc7, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xfacc}]}}]}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x200, 0x10, 0x79, 0xd, 0xff, 0x28}, 0xf, &(0x7f0000001a00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x2, 0x800}]}, 0x9, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x300a}}, {0x1b, &(0x7f0000001b80)=@string={0x1b, 0x3, "a58ddf7bfaedce646fa262407dcb7ad81f19c45306824611c8"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x340a}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x40, 0x10, 0x5, "7c0d668284"}, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, &(0x7f00000002c0)={0x0, 0xd, 0xd0, {0xd0, 0x23, "e463debed5309e8eec20736694f2a5b5fa8c049829811b68c4a57371aba2dfd8a7806d67ef5b89bfbe3ca8dabaa5ed6b47b3101d0ed52b586d571acb952265e4d9d9f8a41ac06d942b5d5e624036f625d91430ac2259caf42c661561d2d82ab8fa0b6ab4d50ccc41f519503e1d1c255d98e24f91075c1b2772b7a1cfb5b3227a681a50420ee062af253343e64cbd4a7d4844a67d7c6b7ecadd9dc929c7ccf08770421e776e6d26daa38837975d1f694b8918d38aca190a2779c83a333407bf67a07318b1c29fc6b8956b67aabea9"}}, &(0x7f0000000440)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "a1da220b1b4b796ed3e0e41816bddc8bb35eccdea854978ba33d35f1ca2977c4c60ef7f0d098c14fe0be5c1ea897f303728d41e5d74cd87c5c732882b537a4d3711f67bd24469ca42fa23879204327a1e06e566380bbb0813bfb94fe8b5f22bb9df5d05c19c1cfe5ccc0dc97e9c4723a544262f4985a3bb3d36bc856f92a049f02ab649a197acd21b3ec47fd6803deb79c000a661f608fc655a8686ccea7434b2158"}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x40, 0x15, 0xb8, "2e9e60c82410198a386f0cf78847bced7161299844894a14b92d3e1f7152301e763f7b9088078828773b238e55e55dc041539d8441e4bbea623e0d51914548980148f6946671dd21108163f166532ffbef696b52f20ecc028e5dacc11fe32fe1a2c5c306a44728341862649fbd20d5604b4c08a193d8e2cda12d1a9ee427bff7839601c3894d7c8494c5a921d273007236661dd5801a095d9ed2a8c40a294ca562b9eab1ff2d0cc99f5df7198e0d87a6c47af108787144bf"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0xc0, 0x5, 0x5, "98aa46d0ad"}, &(0x7f00000006c0)={0x40, 0x5, 0x3, "df2e85"}}) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
write$hidraw(r2, &(0x7f0000000f00)="5bfd", 0x2) (async)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x42, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async, rerun: 64)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64)
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x4000)
ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000200)) (async, rerun: 64)
syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, &(0x7f0000000100)={0x20, 0xd, 0x8a, {0x8a, 0x23, "9fee84b64bde36f9962690cf88fe40943102730a52d44360dc9c1b327cc3839ffd4a0f9c80df570011284d5698f1995b95d4dd344113dd197bc2aabb2c9fbcb9f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619c0d9e5670278a2d233de415c39c663fd08361b7abe5abd7cc254f04bbca9853709f06"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="01030400000000001804"], 0x0, 0x0}, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
executing program 0:
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0)
r1 = syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0xb, 0xdd, {0xdd, 0x23, "ad3c828562beaee36d4b75b732c55273031ae5c084b9a57fae3848adf8dbd0533eb72771a75246b344fc8246efd27d0eee55801b18cd675c95dae98ae176948ad51e956bd55fea0f206a6fac6e845d66b12678950d787ca114072f2c67d476e1ec27201cd1b978198bb81bd3a6a21d6fcebaa8a52e50739cadc3bacb7d3ed578c296497b3a94546713b35c6c50db1c085452ec3ea1ab9adfb8cd385fa4f4f509011f0922e14068de8b87662fe913c537a3374cbb8d4987a33b5dfba1fafe46c414ffbf64975afaa4ad3c0a96ee8cc512095ba217579b458e25fb93"}}, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "5c42d022"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xb, 0x1, {0x22, 0xdc4}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x14, 0x6c, "6152265df2b1480ba6c0c363e94157d6c678a9a151a38780de935d207520e33a828430fcd277ea63d9310f809ed883701c1bde1702e4d13b9b9626974e185d92e369368f3ab0b94f882899a8aa5f7cefc523c9152c61eb241681193a66ba80a7cdf72f1c1ed43f3b3be43c95"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x3e, "1e67ce824ef5d323a283a1f8bb5b573e24b9393acfdca28d1afe322809cd6d64905084fce4475c042ff9225086ff7061687dfd091185cd0a15ef936625f6"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x6cd, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xce, 0xaa, 0x34, 0x0, 0x2735, 0x100b, 0x247c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bb, 0x1, 0xf7, 0x4, 0xa0, 0x1, "", [{{0x9, 0x4, 0xfd, 0x2, 0x10, 0x18, 0xc6, 0x7e, 0x1a, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x37}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x0, "bbc8f28f5115"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0x4, 'Q>'}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x2, "dfb2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x402, 0x4, 0x6, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x7, 0x9, "de77"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0xd7, 0x7, 0x4, [@generic={0x52, 0x24, "70b7c9756df9e141b55662a5958e4e20b40aebafa0f2b9dc26dcd7829421ea9c0d8529c99df9de82ce5d60c37c33b3cf4ecae5c50c0efd29e39f016cacc6ec1d57eef13795beadebedcec5b87c695b4a"}, @uac_iso={0x7, 0x25, 0x1, 0xdd288b3fe7310648, 0x1, 0x9}]}}, {{0x9, 0x5, 0x0, 0xf, 0x400, 0x4, 0xc4, 0x7, [@generic={0xa2, 0x5, "20070d69be505e94230a9ed978ec91a61603e83990cd11a24495eab2f4317e5c4e0aa6a34634cd54cdc196aed316e70313f2a4df1260251ae9a2689475bf8e80e860c27ea04c8a51ca106e01f3c20ff7f8eef8e010b9b4d987f7a49b133415954b94b0bc4fe39fd8fecbe78b26f449a70f1f890149fbf94d220e143d62c794cd4b8fa7609bc25d235ad5b1ac225ff046d0eb363b76017a5670f292658a57d6f0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x8, 0x5, 0x2, [@generic={0xd8, 0x2, "4ffd70eab20d158198556d72323f77fcc734e6e956474bf0be099532a471b2b2f91aa8547c625e678d509f7edc387241fe788e44cb28e41d804aa67a74351ef08085482ed3fc0e4230202e98f3883df7f877d62aaf539beb078de49f7e1aa9efd35fcee390034fd8618620bad061e1e04a6c8dc26166455f88aefedb94bedce43430272eddce896b26b6d2bf28ea34d9b79a644d35a209e90f02bc200e7feeb844fd26129db83a1f37d78c59b8439517b55b435e3a10baedb467834777e804f191509d6cf11465e14c4b031c966f550f10b06a093c95"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x5, 0x7, [@generic={0xdf, 0x10, "d05657cd669707ca3d3f61636eef101651a319f564b8863b0553d38f489c64a14d605821d33230d8ed11bd6ceb69368ccc8ebffc426a9134c8770818f9961237db1a8544e8476f6ae2178fb077eed03bd83898b20af3cbdc6d530ee750656a8d52cc6e9f8ee7f5dfd7bc98a894fcb5eed30c5efe35a806bcc9ba47fec2b8cbea84ed9c12df86ce2f96fcc3edc7d0e4256ca8d6b13f0586142b9911404687963e2fe8a2e02ff79d9707f8f8714041e262fc93623612672749110ec95633a2ec136856e9a8c2ea395de928972bfba668c1ca4f865b6a8ce303f275b85694"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x0, 0x78, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, [@generic={0xc0, 0x22, "772d64f94886013da6290c096ea7da68672e5e7dcec1e3a27f1af4cf82d68619235fae996c49a722a0c661347a26cd00866dc0b2cfbc8b573056570442c94c57061cfdd1fdbffac4ffad168aaf29c6c113e0f484bbbe8305b1cfb1e8a220641e37a95d2a451c8a02c9d484208546bedac8ecd1e5512fcce71d0bcf30850c5d596d0d4f89b8b66cc7db2b1e26f0156d32a74c0d2b4870469c127ddf013b8717f49fcda50b04723323264a89a335a5ebab8afe705b2f17bfa6e444384ec014"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0xa, 0x5, 0x80, [@generic={0x52, 0x24, "aac07cc2830e5eedef6fe1c254fe229e9f9f9bb71891e66bdf82e8ef3328a1e953d07876fa7ce0bb941dc98c079f0cb7b583a1c7280b643b2f76edda47fb4b3780730e45f0e689e323e1a6106b002607"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x20, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x6a, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5c}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x0, 0x9, 0x80}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x80, 0x3, [@generic={0x98, 0xa, "66d667f1670d1cb19fc099102163a3891f35bf0bff238e03671abe29d2ab2bd148264c590a597ff9c906616aea3d73fb734fe3745ea88abc1ee2aadc52fafe73138f447a0447dcec1042fad0090048c91a2f629b20e63c87d3dcb69d635f48bd4469a3d76a224fb2113aef46569e66def7f6bac5edf4b1d6788943a606d00bd1a128ff3eaa954d4b4801e87588c67cf1dd4eee3d05a2"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x1, 0xa4, 0x3, [@generic={0x37, 0x77, "4c30c80623237908508bcb8d808b2aa4bb26569e90a56a9c6a361f844c84dda22653cfcbc1451a4bb023c72dac9a74f7ca5856ebd4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xffbc}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x1, 0xd, 0x30, [@generic={0x81, 0x7, "3643fdfe592675a5b92324d0fb3d80b8563f1420bdd3f0aa6b319458782071bd35adb34b652b6844ed51b0d5a65ee785d1bd79dfaaf815959b2a4901baa083b1c666bef18c464aa20401cca3b09e942ab721533bc88501ede90cef2631e510564119a463290f84e1d4a140e9590834de3411e64d8186cdd9181cbacbbd51cd"}, @generic={0xa4, 0x7, "b442a103bc9763b45669c457607850b6e330fad28ccee12321ad8e4e329e905aa948bfedecc490d2dcc0afb2bffcde30aa770d5748ebb01d04a1c260c22b2e87d8be693ad2b18602de0bdd5e1ebcdaff4ba3ecf602ad83477c06694960fe36f20077a505f3eec283ffc60e46486de89ee62645d595ddb767f1cb6bad1f104cf54b3ee2fb952ca05484cf0caaef65674226447abc34f25fe009d88bfe1f20e061f311"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x4, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x2c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x14, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x1, 0x1, 0x6, 0x0, 0x80}, 0x2e, &(0x7f0000000d40)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x91, 0x8, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x3, 0x0, 0xc73, [0xffffc0, 0xff003f, 0x0, 0xc0c0]}, @ptm_cap={0x3}]}, 0x9, [{0x9c, &(0x7f0000000d80)=@string={0x9c, 0x3, "a56e0510a730a1981edc25f87f1374c26c032cab9ce0263f64943348d51fbfd295027c14e20a241902b683283212e9179ab70711d42c8e667e2d2c84af82ef82ed8e7711a9cea71dd53ac254055e6c79dc5ad617f7d92d6a3c9c590741c24c582dba551e3aadfb4f647b4ef622a7368f4c88a4e538e4277d40d04e0976a34f0bd3ce9ba31901553f23068be45af07ebacb7fc9e73b16d88897c7"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4}}, {0xb1, &(0x7f0000000e80)=@string={0xb1, 0x3, "6f18adc6f2813388ccd0013c3b32e0b4ded1ff657a9b8ba9a44c91f5bbb29856ed2a5697b035dd9c6eaa323f46f9686bec79ae558b79442a2e937c5e85f1c9df343c7546fda421fc010ffddd218702792ff71651f428eed8dca9b61e82fb16748eb6d237bffb51a55d619dec03560fa9d7c12e3280a3fc3b43b55a12c06559fa2e591f28a345cede93470b11bf493b077002a48d23df10fdcc961ab0cf3de08d9cef8b948032e9db4c95fb783bc0cf"}}, {0x37, &(0x7f0000000f40)=@string={0x37, 0x3, "2cece2e5b2ba6ca192be56170a0a56ba3742c89b782722233f6ab3aa13485efa3d55c0755c4ce152989d403bbfa51cb70b7661713c"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x40a}}, {0x50, &(0x7f0000000fc0)=@string={0x50, 0x3, "4c0479b1c4da2e12b56c127c6694ecfd36cd7f4c755029dcefcab212ddf8aadc958d2cef049a1b60732f42723b1ec96e784fc65755dec1ca990d54f8b7c0b8b3377d27ab46a3c2f9be433df2e330"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x412}}]})
syz_usb_control_io(r1, &(0x7f0000001480)={0x2c, &(0x7f0000000480)={0x40, 0x22, 0x70, {0x70, 0x3, "1e1d827857393d46efe0795e6af254b36b86f0f478f63eb253721767eb561be1cc0ec68e523516bb50143e4b17bf4a544c8c6e8def1a0ccb4afdbdd5ba6e9ebaec83aaafb6a9e523c5cd1f4ab1c0931daac5e0313ee0e2410911da65c52f2e0e96eb01b3eb31961fcc75117197e6"}}, &(0x7f00000011c0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "8c1d6d77fdf4d9e9a86e36f8ed50a45110eb33823538a3e520be374a13af37634d8f9eeb7687c7ceb62346a8ee10432a7440c2563ad326868e389c8209a920d04d8bf3fa4010dc2312acd0abacfcd327aa204547ae489ed0cdf92ecd9e68a9f712b916f7d73d090b0637227cc53e0d252dfa095f26c3452672dafbb86cf136a8c954b2cb369369da99f0f5a48efe4b5a4c6fc50d195762230574fa460232750baccfeee973248c4e2491aa394e1bd6726aa3ce81b8f77ea1abe449dc0caaab4303049932bbdd4c154e49f5e0d157c5bb66a3410f34ba22da678bd8f09ad061116181ee68e1746b2a80e7"}}, &(0x7f00000012c0)={0x0, 0xf, 0x111, {0x5, 0xf, 0x111, 0x6, [@ptm_cap={0x3}, @generic={0xdb, 0x10, 0x3, "3d45558fbfd8ef946790195bd314d4dcedaa09587da9a63ef54958c931aa91570df2a57fc21f0536cedd41419b80b3b51e14ef7a1c36720ae33a44a296b2cbd7596d798823c5d96744274e34cbfbf999026e9eaeb05cdbecbc533319ab85315000863870f3fe6949ec3793ccc6d751be0fb9da18961f508df00c6aeee05a63fc51efcee63449d8e9d8ba74b91af7402ca510bb769bb6ea831e0314a17431475963836d74b55068d4d070867816dd3e5ddfafb702c73f9354562a2dcb658225679bd0d3f2e78b697d8c0dbaa34132c940e9ee3f355a63ebc2"}, @ssp_cap={0x1c, 0x10, 0xa, 0xb, 0x4, 0x5, 0xff00, 0x5, [0xc0, 0xc000, 0x2e, 0xff006f]}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffffa, 0xf00, 0x4}, @ptm_cap={0x3}]}}, &(0x7f0000001400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x4, 0x1, "52d36f52", "65611ac6"}}, &(0x7f0000001440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x10, 0x2, 0x3, 0x8, 0xf9, 0x154}}}, &(0x7f0000001980)={0x84, &(0x7f00000014c0)={0x20, 0x18, 0xc4, "f22cdd37e82c022eb57c713113532c9ef3121dc094a4ef509f956e71583686951a4460fd64a7f71aa6be5e8c86fbaf7db03094ddfcfd4e3de6e15c596271a7d60a146350a78ab13bb4ada1588d850f60193012d0dcf9ee24a7e0a8ef8d7ca3402bc25c3311c2a81ea5e20839642ad6787ad938dfa583c300a957843359e510125b40ac8b6c06e288ebe419571a339900918ac3e66367e6312306c2a4ae72057b3f16f89955b886ca7989f37130fd2f315338defca954cbda0ee7536317e4adbf473eff99"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x6, 0xb9bfd65d344b0add}}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x1c00, 0x8}}, &(0x7f00000016c0)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000001700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001740)={0x40, 0xb, 0x2, "2b9e"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x81}, &(0x7f00000017c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001840)={0x40, 0x19, 0x2, "a8c9"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000018c0)={0x40, 0x1c, 0x1, 0x23}, &(0x7f0000001900)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x10}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x3b, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0xd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff0007058103400001070582024000"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010007a7063810ba1101107ff1010203010902240003000738810904e440009fdc2b010904ac10003f93e6070904b50600bd3e359a"], &(0x7f0000001880)={0x0, 0x0, 0x1f, 0x0})
syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0xea0e, 0x600000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, 0x0, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000002800)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x3, '$8u'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x84, &(0x7f00000013c0)={[{0x7d, 0x4e00, "5235e66293798c93f4945ed2f2249c27f3130c81e7d2b5957376e6149082d14e8989b9cbca54cb46638a2cfdeb840cb98881a3e237f14a27c94c073108c7748369a37d66017cd1abbef1c057e0dfe071781f466ec34f37c9cbf115d4e5703f1449cc998624ee95098faeaabbe59913872cc33ccd6136138ef20ceb8613"}]})
syz_usb_control_io(r1, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r3, 0x0, 0x20)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a1d0283"], 0x0}, 0x0)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0x15, 0x6, "15657a707ccd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xff, 0x2, 0x1, {0x22, 0x553}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x1, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x210, 0x3, 0x2, 0x2, 0xcf, 0x6}, 0x135, &(0x7f0000000340)={0x5, 0xf, 0x135, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x2, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bb1f600d1ee7deef39f0bd0dd5b8c8c2"}, @wireless={0xb, 0x10, 0x1, 0x99a72b9d372cb6cb, 0x1, 0xf8, 0xff, 0x3, 0x8}, @generic={0xef, 0x10, 0x3, "ee7fc55fe7a30a104c4df9a743ff0879aa479fabf3cf22d720f28e2842b82412c822eaf21ab04efdb320b3b38f20215000b8d756e80dc8955bf9e2e2ec571f08c7b008aed8045cc86e7cbfd7c5d7eb26ac8fa3b244e205d9ed3d4b44d154e51a35d14fe38ba82af32bc73b59275d9362e740575eec3b5be3ac34dbe00ce0ad93aa95a100a33be832d6edd25fcc57f0350901b8d969788f1fbd2cc46bba886b9d9ee66471fabf194fd0010c79e0c7d31259711042a49efa4a8419c0803c6037ca4b922726c5dfd8ac79dd0b893eadd6535aedbd045e461b797452a9823e0ebe56a11d7cc3dea2b4eb9b2e8643"}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x3, 0xf, 0x9, [0xff0000, 0x1f70, 0x3f00]}]}, 0x3, [{0xe, &(0x7f0000000480)=@string={0xe, 0x3, "696e50ac0794b79e5c37365a"}}, {0x20, &(0x7f00000004c0)=@string={0x20, 0x3, "a57c062d06b73950c833892babeb310d2b9025f233def50c9b82c26fb466"}}, {0xe8, &(0x7f0000000500)=@string={0xe8, 0x3, "38f440e4f6e1e28f348f74d84932f031cdd447f0b6cf1a0077406229ff453778c6621aad567e39b237d593866aa033ca1c210d095c8c36cce1a834ff21775690ec24eff5beecabffc8c7cb2afc07164bb03f48c741b457bde280e82ce38912fadae0fb6c1c4eb57834bba177e674ee43f1011c2573fa8e84da8b8514b68594a05c565b2ae121c58db5b57f0d0f7d5f3764d8e604be7e0fb8d5dfcaa21e80d136bfae87d0c8a878c453d808eb006807b6e6ada41bc4313543004dcd8ca4a0abc4721363ec90afe64a7216ce6b74229b4ad05d12f98e7e479be79aeb8cf6455f0f1068c45adf7d"}}]})
executing program 2:
syz_usb_connect$midi(0x1, 0x41, &(0x7f0000002480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [], [{{0x9, 0x5, 0x2b9bf0ccbea08295, 0x3, 0x8, 0x7, 0x9, 0x6, {0x14, 0x25, 0x1, 0x10, "ff350ff707613403f3261fa8e7481e64"}}}]}}}}}]}}, &(0x7f0000002840)={0x6, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001010203010902300001010080320904000002ff00000007058102000200070501020002000904000101ff00000007058201"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x198, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x186, 0x3, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0xeb, 0x4, 0x1, 0xfc, 0x6c, 0x65, 0x4, [@hid_hid={0x9, 0x21, 0x8001, 0x5, 0x1, {0x22, 0x8ef}}], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x3, 0xdd, 0x2, [@generic={0x26, 0x6, "3cfc640c7d30a390b573096d193b4254fe9424b842b3abdfdd277cedfc7e8642fe775dde"}, @generic={0x3f, 0xd, "d708d7273217710d41ade854406fe3d137bfae17a0bc000c5229aa61da507c303ca90e449dfc79196498903d02bfdba50e8c70350524877696a676ceb4"}]}}]}}, {{0x9, 0x4, 0x61, 0x9, 0x7, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3d}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0xf, '\"M'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x0, "eae609"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x4, "20c7c6638d"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x400, 0x4, 0x2, 0x8}]}], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x2, 0xe}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xc0, 0x1, [@generic={0x66, 0x8, "3ec9c76dcac64795073d968e151e2037aac80b009ffb29661b0b1044da69e944a37b341ab27e4624e91b9c1e18cdce8cfa91ddd6473e3394db7bcb6c5f55328371fec688e66d4f156119897fb7d77673db56eb5f5b6dc7d86133cfea62cdbc64498626aa"}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x4, 0x3e, 0xfd}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x1, 0x10}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x4, 0x8, 0x2}}, {{0x9, 0x5, 0xe, 0x8, 0x7e7, 0xe, 0x0, 0x1}}]}}, {{0x9, 0x4, 0xe3, 0x8, 0x0, 0x2a, 0x13, 0xfb, 0x9}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x5, 0xf, 0x2, 0x0, 0xcd}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2001}}, {0xc, &(0x7f00000008c0)=@string={0xc, 0x3, "ff597fa72da56b1ee148"}}, {0x0, 0x0}]})
syz_usb_connect(0x2, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff000000070501020800000705820308000107050302400000070584"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201ff0096473f20c4104482756c0102030101021200018b4b280f01cee3a2060904b10e0003000001"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003b686481086124a2036e60102030109021b0001080780030904590c01ffffff00090502004000c00006"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xdd, 0x28, 0x41, 0x10, 0x3f0, 0x207, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0xc, 0x70, 0x2, "", [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x19, 0x2c, 0xd8, 0xfd}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0xd5, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x2, 0x50, 0x6, "", [{{0x9, 0x4, 0x0, 0x12, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x8, 0x24, 0x6, 0x0, 0x0, "a99065"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0xd5, 0xd5}, [@country_functional={0x10, 0x24, 0x7, 0x6e, 0xffff, [0xc, 0x2, 0x40, 0xff01, 0x0]}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm_detail={0x70, 0x24, 0x13, 0x7f, "d04aaa37b1043c7881f41da12fdff39688b051844800d8c247f6ddd9bf933dc7607b791b8425deb72dc200b1fc313204c6c2484e1fd0ac674eb37d6298075e632e082c8ac909e7cdda409c03ac64b7b64624e72b73cfa9f600c138584838dc0b5b6f02ca13890d390199bf7f"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd, 0x5, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x6, 0x9}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x9, 0x6, 0x10, 0x10, 0x13}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x5, [{0x18, &(0x7f0000000380)=@string={0x18, 0x3, "7df8811cc1b2626a0d6b7835c33bc820d377661e02e2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x810}}, {0x74, &(0x7f0000000440)=@string={0x74, 0x3, "cadef3e715e4f251b40f1537c528fb628df8d19bbeeca90d25ec8c50c4d2c7292669a355c4726ef7ac33a40984eac4b9364b1bb9a209c47601f32aaab00570351a047f701e5db2909e4aca35ce74204428f5ecf5e7ebc0dc59c3a005ad53078be34edff712f27c11a154daa303e326ef5713"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x420}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x30, 0x24, {0x24, 0x11, "689f81819f826d2e4945911bccf7f5f238080b9e83acd74238e79bb57c61f0183690"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000640)={0x20, 0x31, 0x5f, "7d596025a2929bc16ecee233cd393a4f12df0873d7baba4815f60b3043e283998519b443c51ecbb40c41f8b74c719c8d83b7f31c845d4b66f539ae5ebc451b63bee5eceda77a50f4d80f02486f19815d53a17bc0c64f4c5bb790cfc6a2a180"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000740)={0x20, 0x81, 0x1, "12"}, &(0x7f0000000780)={0x20, 0x82, 0x1, '-'}, &(0x7f0000000800)={0x20, 0x83, 0x2, 'lw'}, &(0x7f0000000840)={0x20, 0x84, 0x2, 'f~'}, &(0x7f0000000900)={0x20, 0x85, 0x3, "7ba96f"}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0xbe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x80, 0x2, "", [{{0x9, 0x4, 0x2c, 0x7, 0x0, 0x5f, 0x90, 0xe3}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x56, 0x4, 0x40, 0x10, 0x8}, 0x0, 0x0})
syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(0x0, 0x5, 0x200000)
ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async)
ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
syz_open_dev$hidraw(0x0, 0x3cc020af, 0x2181) (async)
syz_open_dev$hidraw(0x0, 0x3cc020af, 0x2181)
syz_usb_control_io$hid(r1, &(0x7f00000037c0)={0x24, 0x0, &(0x7f0000003700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x200, 0x1, 0xe, 0x1}, {0x9, 0x5, 0x9, 0x2, 0x8, 0xa, 0x80, 0x3}, {0x9, 0x5, 0xa, 0x3, 0x40, 0x9, 0x80, 0x7}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0x7c, {0x7c, 0xb, "76d87f3a3ad631458ab8a853cf1fd361b29487a0324c2fd498fab69199fc2bc41c6313fa742a8d019923fbe4875b3e920e3ffc60d550ca15ed02274dbed4cc965eb456f55b359850940de4bb2b13b0a0ccccce828b0b6fc3aa8be2586855c1cec1e182894d5e2046e563711e7068dda3419baf297053e3f11694"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000200)={0x40, 0x14, 0x49, "e821febc9309a7ef1958db5ad9bf7a90fc25352044c94ad08138fcd0fcf5486d078fea0442974db597bdf7d26fe4c183e154ea645783f3a1039529a89def63d6c1f2c157a80f06d7de"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b80)={0x21, 0x0, 0x4, "bb65def6"}}) (async)
syz_usb_control_io$sierra_net(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0x7c, {0x7c, 0xb, "76d87f3a3ad631458ab8a853cf1fd361b29487a0324c2fd498fab69199fc2bc41c6313fa742a8d019923fbe4875b3e920e3ffc60d550ca15ed02274dbed4cc965eb456f55b359850940de4bb2b13b0a0ccccce828b0b6fc3aa8be2586855c1cec1e182894d5e2046e563711e7068dda3419baf297053e3f11694"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000200)={0x40, 0x14, 0x49, "e821febc9309a7ef1958db5ad9bf7a90fc25352044c94ad08138fcd0fcf5486d078fea0442974db597bdf7d26fe4c183e154ea645783f3a1039529a89def63d6c1f2c157a80f06d7de"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b80)={0x21, 0x0, 0x4, "bb65def6"}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00H`']) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00H`'])
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000280)={0x0, 0x10, 0xe, {0xe, 0x8, "a22451eceb489ad00475a0bb"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x20, 0xd, 0x74, "9f82bc6d0fb347d2d449849aeba5f41266ada1bbc23240e4d535d4ae610ba620f9371d3156bd55b15b83e0b4329dc91be21e449b7976b49d7244f1a26ae07bce3421ecab997262d8ae1e3f850635a37e4b2107935f1bded0806b5ae0ea1dc815dc25524b3ff9278fe6fc45ad0194e169bbc0291d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x4, 0x80000001, 0xd7af, 0x71, 0x0, 0x59, 0x7, 0x800, 0x4, 0x6}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xc582}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xffe5}, &(0x7f0000000540)={0x20, 0x89, 0x2}})
executing program 3:
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x72, 0x2, 0x3, 0x1, 0x2, 0x17, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xdce}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x3}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x40, 0x0, 0x0, 0x20, 0x2}, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f2d00030a1003020100080709000a100302389701a4030014100405c6d3eaf601000000e80700407d5013eb"], 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x140a}}, {0x102, &(0x7f0000000fc0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x140c}}, {0xec, &(0x7f00000006c0)=@string={0xec, 0x3, "862866d886cf948cccc84c756e88751e68e33991c814076d505362fec8b2b236eeeb60cf6be00d8f2c64b1d219feeba181c30ac310d76acbb08ae34a1ed68e2816eb95934193c5d2ecb109f90d44fc6031fcd1ec4a3c679a64c75ed53858f70489d780e206f1d0eb1e800502201cbc950c42ef0c265cd0f81999180d7fd23379e6789e016058c922aa40b847ebc76e4bc497f3586672bb7267a3a85ea622005c7b2247caba36aa9934ae5aa23df32716ea07c388c25a2ad32331ef386146b6e38c555f932146783be5e14100db31bd272acb33ba48efa402f63ca8d9b6182912695cec900b8a99070034"}}, {0x6f, &(0x7f00000007c0)=@string={0x6f, 0x3, "db224e8cf3ffb6122f4e90b95a30ceae1f9f703f95d3d676d91f32343dae4d085fa9a03fed6588f8fc8df446597171ced6d98865c489e9d33f47a67f4f8cf6fd127803d549cd498097dab041972fc21cb131bd1b55a1c2e694af5716abb91a231f835a7ec2746d80e10eb88892"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c1c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x804}}, {0x80, &(0x7f00000008c0)=@string={0x80, 0x3, "a643cae4ff7f6a948626d28e9e4ac45a8ddd6f59b93fd14b5113e66f9ba1d4fb3e75167a1c1857e37d41707e170a38f04a2b9b3fbb13d2e328794e601f5124057fe6a8cb852f21ba5b4af3a3925169b91705c43819aa0b315f847af0489c343168494010105044dd726bf64eb48bf6cd4589e314d510d588be47ffa47204"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1001}}]})
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x79791925654a9987, 0x0, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfac}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9e, 0xa, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x18, 0x6e, 0x2b, 0x40, 0x10b8, 0x1faa, 0x6112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xa, 0x0, 0x7, "", [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x55, 0xa3, 0x55, 0xe6}}]}}]}}, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000cc0)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000002dc0)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac2(r1, &(0x7f0000000d00)={0x14, &(0x7f0000000b40)={0x20, 0x2, 0x87, {0x87, 0x10, "fe0cd216cad24b09226b11c845d29d173995a8768e97963794abdf73a79c196474a5932f28cf06e15b61bf76e8efab634c89aa48e933049209f94ca95a2df61be3caaf7e448abf26c095ed35d9b8d893a4a0e36048700c5c0c11d2a87cb7187e553507eadc52ae212e253e6752a3d816607367fe7b02dd349acd2a2620732a5c5443ae3d42"}}, &(0x7f0000000c00)={0x0, 0x3, 0x42, @string={0x42, 0x3, "aff2fa15f36ccae7b251cf422542f5f19d66aecda64bde4f678de2b0b8ad39b1309edd45987c3faa45fc18f1a9f4fd531289f957fc17b2293603e9a71afdb23f"}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000d40)={0x40, 0x2, 0x3, '\x00\x00\x00'}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e00)={0x20, 0x81, 0x1, '\a'}, &(0x7f0000000e40)={0x20, 0x82, 0x2, "e3f8"}, &(0x7f0000000e80)=ANY=[@ANYBLOB="208302003efd0167"], &(0x7f0000000ec0)={0x20, 0x84, 0x1, '9'}, &(0x7f0000000f00)={0x20, 0x85, 0x3, "dc8ad2"}})
syz_usb_control_io(r1, 0x0, &(0x7f0000003740)={0x84, &(0x7f00000032c0)={0x40, 0x12, 0x7, "8416a80bfdfd6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x3ff, 0x21c0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001a00)=0x4)
r3 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x2, 0x0}]})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e9ffff1f44104d7a0000e100000109022400210000000009040009010300020009210500000122050009058103ff0310"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000109000320"], 0x0)
r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f0102030109021200010001100409047801"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x5, @string={0x5, 0x3, 'Ed='}}, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x9, 0x2, 0x9c, 0x5, 0x5}}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x62, 0x63, 0x76, 0x40, 0x1ac7, 0x1, 0xca78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0xb8, 0xd, 0x0, 0xec, 0x9d, 0x15, 0x9}}]}}]}}, 0x0)
executing program 1:
r0 = syz_open_dev$hidraw(&(0x7f0000000240), 0xd, 0x1a5080)
ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000e80)={0x8b7, "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"})
syz_usb_connect(0x6, 0x7df, &(0x7f0000001740)={{0x12, 0x1, 0x300, 0x7, 0x73, 0xf9, 0x20, 0x846, 0x5f01, 0x325d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cd, 0x2, 0x4, 0x5, 0x20, 0x6, "", [{{0x9, 0x4, 0x72, 0xa2, 0x9, 0x6c, 0x1a, 0x3d, 0x7f, [@generic={0xd1, 0x9, "acf9d38e8b96ca4b3af4de196f0b564362b9784101dfa2a447418f4ac8d1ebb3f91211f4ccfc0dff20fcee9508c3fbdc7bd12db7e342ae5a96b59c423a8561b3757c9120fe483e0420b67cade61a1bb6faf5712887085e80ad616ad7d61597a66b244833ea9bdfd2857a8e5e9b7d31e6a782e7db1771e2919e34a0737e562262ad3b5ad2e07e1cbce23fc41169ae7ffaca62b9a026b56cce3df8ed19fe325b40cf874849590956681ef52fb2c19e6902943b1190ac56d176aa256e5a3fa0737a0703e96c12b09d6c87b02844e2d8f9"}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0xc2, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xed, 0x3d, 0xf0}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4d, 0x3, 0x26, [@generic={0xb4, 0x8, "66e14b68b9ac7f8af065a7f193f0b6605d883a903541be8a8e94eeed68de093aa5f0a3e767c586eb7e1b48c5f9e1fbe9e261f85d3bf790d577bc5ec5011b7113b6be540c272d9dfa3a992712ee5f3575ec7bb3f13a5b58b996ee6808f9bbdd581e11ea44ac75b36c48d8bf5665875d41cba1c7b425908f3c428592927945fea8ac4025dc405c1fe84ab78319446d378f9d0e8c8e8ace10e92b0a36ce299994922f17ce30c5ff6e0c574d88dbbfc56523d7f5"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0xf, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8000}, @generic={0xb6, 0x7, "5538e223bd5548faad29e811355a4d1216898adbffcdf78fbdb0d67c20f50e384d67b51cf59485a2d915e3d357f0f34c1ce1e6c637e938357c2aba029a516753ff419702ed470c2fef4880ad81e67feeaf38b03ae4912c3d92f5effb09de508d66fef26c5048ea16a844caccaa6b5a9746ac8e506fb72b4711369e3995a2f760d755770fb38c5f908f021a5e05807bc11ac20c59d76c20f341016730c74530254fa3c276e3c46c6eaaeb289047e1e1985a967f82"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x0, 0x0, 0x9f, [@generic={0x62, 0xc, "1ccd42cc258700e3e6d80b00f5564391c6b777f6210efec05b68a2318cece3123052b792c01a2a46d8f7b49fc35c34c9e2d0ecbd09a6b4d29d4488c3aee1e94c6e9e8ed19b02dc20ce80e0b84e187db9732f31b6b897a6fd7c4339a8ba9797ea"}, @generic={0xe4, 0x23, "e0eda0f48d1862d91e1b2e36c9e4c4cd737615bc8f50af87be66f19aa57a4139c68152caf88dcced840b0ad42bbd0d459459f4534fe278d62730aef5d41444c6377eb517a9bf37c797fbc2cf322da296e005a3a17ac76f983cbf4ea967e287a1ad8b741f311ad53dea4991bfa36b1ddf78393342896e891cfede4e9ced09c5f791ba1bbd9801b52f37756f26ce0ef950f1e5f91c95be91d2372474ba6cb15de264a3879a35fb59920ae76f0a804b178f1f295d9e926f9c423973f79dd2616b1da9a620264ad0591aa1ce6144214ae83b300302eb6dedf5c95b12e8bbedcfa623def4"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x5, 0x10, 0x9, [@generic={0xc7, 0x23, "c2792a95797a6725b8f1f7295f27731f1ca6f131cc5db73d7a9899f3c13eacbc03cb15c64e4a5ab63ea369a501180c7924c3628aee79f528f75ba97e21a141f0f62a8c6e68ee4d26e9f2ca324d2923326e3a99cd4cb0d1690fef46bea5ce97161b37dc921ca15dc410c438f427e24d096a104cc9821d5931b353e8a84aa93334b6544800724704a9385368cd186787a6647060a57158ac24c0ab303da4f07c87736a3b3b0fa88d77fcc0c2d12d9f2fd0eeda0603edca0c3d5ac4d28154d9352cf7eaa03f2c"}, @generic={0xa2, 0x22, "34e119833646e490c6c161ccfb2c2b39eda31cc700d2b9d327e2d336c31cb313b8eb10c3668ba1935afc931bd475fe3a03f37298dbfc3ada73a65b2e5bcfd2677269f7839a71df343dd69cef9bc1e3e669ce27f1b9ea79f57a3fa18ae83627c55d4189dcd14bf57f9d63d76fb1d29b5bb9b0b376a0069c32a8118d13ea752302f0858731d6172d63f607b000080ef868160de7ffe2b1af8adc0081f0ce563858"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8, 0x45, 0x0, [@generic={0x20, 0x10, "1b063c71cf4f2b9d4b94293d44750447eb201bbdfc6b7fe60bd2032921f5"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x3, 0xff, 0x5, [@generic={0x5b, 0x0, "343274cb597f3a7a43da6a741b3f0125845333041fa0e6a69e00fe2ba3595308233c6640ab8cbd940403a0e28fe83f26ca98d555476c9b0d655f9041811c6125430076cf2a301688bc5233b49e73caa22acc654aadaa9ed438"}, @generic={0xec, 0x10, "e6f0fa2fca8cd53dc03c7364b09bce267195f6f6b581d09130480e4aed55abc43b0a2ebe2772cf2d47015b6c91a7cb1cbfa1f7316d20dc35298ef0137e0c411a7a1a8ac2187605064ca365a90779b7cb6dcd1b39d25cd5ccc31eb18957ba13faf72cb258a538df0fb4a2875b3bec6541f02e3b019c54c07d0364d612c2b41954300b04ba104e7d22ee3b05b41252b806d327eedb3136deda755dfc3096579ea9ebe84202edca5076984f6c891603016d6c86dc9871e6c120a74bca1a8d98ad4a44ff6441c390632e126b3a66b301e18020fc2812d92bed64f2dda6e67db34b63245da7d69c46d1395d49"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x80, 0x5, 0x9}}]}}, {{0x9, 0x4, 0x83, 0xcb, 0x5, 0x34, 0xfe, 0x82, 0xfa, [@hid_hid={0x9, 0x21, 0x3e3f, 0x0, 0x1, {0x22, 0x1b3}}], [{{0x9, 0x5, 0x1, 0x3, 0x10, 0xce, 0x6, 0x67, [@generic={0x37, 0x9, "d55a96be67408bbab4bf32f31641f83c336ab362a87ce516859c9eb59a45fe623c125b965672d1f434112781e2b867f831a484d539"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x0, 0x7, 0x7}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0xe3, 0x9, 0x2, [@generic={0x17, 0x3, "363a1459f1e02cf4ebe1bd7e00c9f4de28cc5ee6ee"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x33, 0x6, 0x40}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xd, 0x8, 0xf7, [@generic={0x4f, 0x0, "80e70542f94acd55090e79ed0e634ff790f6f39ce133d39f931a3d5cb278ca5682a0f6f6cb4d2431155438661d3dd050ae13a467c507aa3ca0ca482ac405689cf74b5c8a4eb3b73929a95446e8"}, @generic={0x2f, 0x1, "30b4cfc17ab31761e3f9d87afcadc9f3eeafd4a1ca8e79509858dbfe1ff861634f9d631d12127f1c3d6af9e15e"}]}}]}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x300, 0x0, 0x6, 0x7, 0x20, 0x5}, 0x19, &(0x7f0000001f80)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0xdbe89080d592edd1, 0xa, 0x9, 0x8, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xbc, 0xff, 0x3c02}]}, 0x5, [{0xe1, &(0x7f0000001fc0)=@string={0xe1, 0x3, "3563a081fa8dde6d29bd62777b1d04ed3ab188b47be003a79770104f96b774ffaf219046f0125fcbf0a6bbde0ed96c80109b610400dde04cd59db542b3a0926b7aab8e580d922e26460dada94849159ad474a06fb89f843ec66424f276e8dcd7981adaf15a0e1a144280434a106fafd6018ddfc05d94058148f06aa64501e934a3a189582e0e4f8b37569b0292fc7d29ba20c40271313f3978a9d0e75dc825aea191491db5f2a94ea725bf9eb76566ba9a21381413e838490ed6c9fa64249790f99abe5db3ff645587bb88bbad1f5f4fd8f08f3b4f9c37da21fa1c0dc7473f"}}, {0xa6, &(0x7f00000020c0)=@string={0xa6, 0x3, "bf2c6cc36f6b67cace3cdea52fab0911a744498064792626137d0e1554c23c033fefac7315d8fb924fd34a0df52a4e823f798ea86108e62ed6610cf06cac3599931c1d09c5e619e35b4b5c2c9903e0707decf991267eddfecd39f2e25d9a630ad2603279b7ab2431c8975742c09981bf8fa41fa5b7842b817cb4d677441e199ced7c608f5674bb53eddc68c3dcda1325bfb017288d2f8ea7990700a5ca9e6e1293fc2720"}}, {0xc9, &(0x7f0000002180)=@string={0xc9, 0x3, "9b84892a9a6cd77c5f23a4c49d73d9d3e3ab91cd22e5ccadaed20a81a36dd64ff9bf700a2be0fcd5ee1b53a3ee0e4cd4245efa4d78da68c9e2a9b3fc2637acf43d9e943ec38dad0c87a02fe3000b2113881e7f473a54ded8b2ba4aeca1165a78c1299e8b19abf32ada69de2065a6e71a023a6128aa79f2e6b440c3b2096a78c96f658153cebed37063d2e326965da62b605ed344c0c8264c40fa7c3ca65ea74ba0d111e0ec8c262f4e57cbf5a457690232198f7de0a3e34e1929a354e53a27acf8cabf5a1ca44c"}}, {0xeb, &(0x7f0000002280)=@string={0xeb, 0x3, "10e69e8af5618ca5611b7c4d6e11496319fba69f80a21029cdd3947cf023f80066c4520a61db18e46c2104371e7b08cf490d9c80068810402ca36ef07349fcbd75e757830307ff35b9f27969ab8669b27146bc22e97d7f056d919e6b31ec986fa696e3be2cd0578ae51d3a0bf0025ed3e6391ebc83fb60872c3838fdcf64f1a367cc7daddd714135c71cbbbb5c13d8857f039e1e91b1d89f0c3cc51018eb33f3bd8874229d70ca2fd53761e5d4291003e0045d4c80bcd48360bf8cdb1efd4e997c04cf9c61005f1b112c71d3d4b95a9eaf520ac68baf36c3d4fb17c3831a1b7658b326ee8ad6e349da"}}, {0xf1, &(0x7f0000002380)=@string={0xf1, 0x3, "c7375c6e25a6e1d7493a86f24a2897998e1c7b0b4da4ba0e1e82971fe33c5c3de7393aa33672d50257b6f4e45af5db1673514948d108ac710ebd5f6666b19af9e8de194a209d678d741cc4dd9ff030b0a286ac47dbd573e9e5aaa43676cf22ed01a8e2a6b0eeda45c898b779821e89513deeddf3c370f861c29e1e0a7e1accc1420d2bf983bf27efac329e0adcea2218908d628dd326bc29c6fef63fcc3424ef2396464a3e1832679cdba19f981bde00d776f858d782c9227ffb84d8ea74e2226dd76194d76de10e7af50fd10c4f0127ccff122cd881aa7a094d5ec9886f84d1fa74d128f80c3bf53e23a9bf38f973"}}]})
r1 = syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f286c1"], 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x5, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "fc0d19531dce"}, {0x5, 0x24, 0x0, 0xf000}, {0xd, 0x24, 0xf, 0x1, 0x515, 0x62, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x80, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0xd, 0x48}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x3, 0x9, 0x20, 0x2a}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x99, &(0x7f00000002c0)=@string={0x99, 0x3, "f709d952ad60d1bcbbde8fd3b3930d38fa0e9c2753213784f41d090ac43ccfd4eae1cb953c67fca52c2b01c5330cdbf3c865faebf3142283f4445bb11e56068dad4b4bcdb7d543f587f70de43ead5e71ee699449fc1e0c98bb409073bc76f98ad6e8561e40fd317c0a9d2ca24bec5a482d59bd3a25ffefdbb53846bcf953b537ac31d497a83a8e272c8f1f82414504c58e1b0b933308e2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x459}}, {0x56, &(0x7f00000003c0)=@string={0x56, 0x3, "d6e1ccbf3794bbf0094565d5bf7cdf1a3ec9cb5938b21ff3cd222219e568add8c9008bf39c0686eecec9aaf28edab5ee162845a51b36c98190c227997d6a98875716040af6d361ec02d8b3584d61cf4655f09a71"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}, {0xa1, &(0x7f0000000480)=@string={0xa1, 0x3, "97e3f616fc6aa2aa94d61e67c53aff9297fab2a4f0cf0087d16100c00222171fca184ecca4abc3c91b0b3d3bc9beaae8511ca0051aa7cbdb267262b40a262b83186d3736e699202048d52d3629ebeb1abe9f79ff28c8331fa964e15b698a2fc102d74cb6ebb09d26cbe576f896a6eb9e8925231a5e9f42128e920c876cefa648c9ab36609bdae0199837e790f75071e62763e4a0c103b637b51446def74c81"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0xc9, &(0x7f0000000580)=@string={0xc9, 0x3, "c5c6cfde9f54a2d03581f0d62dcfe74311aab9b723c11d56bcb528f4a47c000bc7c32a88132bf26ad4d207988379d938753f54a4bd9dfd5305f24fe9c9c99d4e4886e2c01f093f52c0c8294f1856f0c0b78cb525821d53b2f8ca1a95f0ef77b0f55ec92f5ef31aa524bb958cd36bf2e656ea6e2a68f6fb4576726fdc9cf70a02894e9ad51289a9b40da9c9257f834c9b932323026b45538f49825f6008a9a0898655074d6b2d19d124038d9d4563d5801393960ea4fae2f5f3104cd9d1e58311af7d177468a285"}}]})
syz_usb_control_io$sierra_net(r1, &(0x7f0000000900)={0x14, &(0x7f0000000700)={0x60, 0x11, 0xfe, {0xfe, 0x22, "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"}}, &(0x7f0000000840)={0x0, 0x3, 0x80, @string={0x80, 0x3, "e07508d03f8ee3d07a7aec85e4a33f17faa2807f28839fbc5dabf3448217d7341226f5bc7f6b2a3dc150b23a4dc8868a730e3119ecc3c8b4b04a6f208d4bbc67177c3b6295b8b5b8224a567601c499c96f3915b4ceaf31ff88230c3c45dde25a7c9ed678e629f3de6bddb7ed5b19dc59981a407fbf9ed99a551878c2b86e"}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="0017420000003bf0ceadd62fa7a1930d073175c677bdca020212682009c453feb695b1dcaa8881de96210912750c953e92cee2f93673c62a0d149cc552905899a37f0d64ffd00cbf598acc03a80a7e4470ea966fc666369c897f0647dfd19a4a80254be6b8bb4bdf57d703fdfd4dedad9278381ab860ffc85f8da3294b6fcd47bb631dbaec45b518e2a9c030f3beb49a4d75cb3c6fb06cd230ebf030a60d6f7ec0f2f927a48cc7ecef77e3d93991463f1474b41eca6effab5550c9496534ed"], &(0x7f00000009c0)={0xa1, 0x1, 0x400, "ce800a606532136c4ba7edf6face6455c55d635244e803ec5f825135b3d5f6a40e8550a34134cef920d17552664dcce3e86f7dbac4029d64496a2c25d36c6547e7c374fe586008d4071831e8b92353ab90b025790b7892cda984c529062986b22a9a5d5e05aa8866ebbfa0aaf282b5601ec1f9837d9032d212d5872459b9cfbbdd959ec24ec5f86dc095d895d0e90d14c576ac39cb6d63f3a4dcf0f4d08b26f5cf9312e12013f8d9ba7be24d1aa774921a6019a9eb2900ee1606806c92f361d7812ac6823b7869affe409abb2106ff5aec24dfdee52c70e141b9e375a76a695fa1a36cd62acff44a0202545672676c6cf3e0089fa266f7848e1ffb743ceede99b8dd755795116fcefa739eafce0aa8261ab196d10258a238b3d4d0c7e8db8384eb2616a6ff2e43a2a3757a24f63f68421a42d8cdc57140f2a7f4edc8379fea38ba64be49cf5ee7d7801a92a83e0e71b7f3540d01ed081623ee922019f6247b85a6ecfac80785683883e72e97965b9c36f14432dd205500345bbad952e4b247227292336cd75f793cf68d086a034b9a45c3aed42ca61f40725a46797bd4e8e3af94449e30d988ca0ee7e85f07cb059e4dea8b137e0b5ed5498bf4c8aad4a41b83c3344ddc729fd94b5e3693cc28fa0bde13e4c07e38f39ab40575415e54eb76396fa0f28f10e4b593ee7efec05702e708361a8a96ca083ad202f05d6e32cc0086ad72a0a7783cbb10fc51d86a655f7a624dce2a76ad4e35888535636d5da5394fc8adbe9d03781f19f57ed7d3da50fc8d483e24cd3bb00aee2b245310450052de4fb0806b9ca86b77666e1ffadcd3653cc912fd62c8dcc2e6a78dda31d34da74038fdb57334017461cbdc881ae85a7a40e30a3f3eb10b71c8bad51de26d8cffaabb41e77311ef4e2005d10d3fa0b0963092ef4cf76e74c4c2a723b3dcd66992820837ac2c8daef3478b8b2e339f28937460b9bea9a96c567493ac12653052b8c8e747e9182894c4c0082c9ebb2d89053944bdb7ca6ca572ec20e55bec85f8b5e873b1a60e4430615b4ade0a124761ff3caf1cdabefc73d85970de72cf4c7ef7b69b48fbabaac2e1f44ee43d7715a65e1be7c61c8bd1792bd2167dbe6a5ec737fb8c135165ef17fd33c81ff085745dff2574a78ca4ca735960d2d9f37e3e43b09d31b5154f9d30fb0df07f7ac678b16d45bf585023d1932cfa9762e25be8bb6c1d1a3e6a937338abbd5a463ca83c7b74c1f1ceceb7cbd63a28369ca470f66bdf6567fab03e6cf5ae153d35f91421d5ce1aed940fade552e2f615f39945df8ae9509550391b55564c45dd3acbf2ea482085d616389934a3d2e2daaba525581aad3a605a82c62f12a4d95bc144a8c0cd88a90d1a240a6d29c9207be17f826e74ac77cb772a8f2ae6e2687a294f5f371f3d789647de4c2e84a3bba1c45adffa2b1094"}, &(0x7f0000000e00)={0x21, 0x0, 0x4, "46c681bf"}})
executing program 4:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x22, 0x84, {0x84, 0xf, "f75a865aaf81b1f1425fdda1b5f0ee19c736e41016f248774d72684da45ccc7f8dbde74885713c2e549ccf80b0cf24e02ca92cd14b6db3add53ddb02b6333c2d364f919aca57c9f7f5dadb9120880c130bc4b7f6eb40e0a4dd229c3bf9f10b09ade0ce2df6bdcf6c4d9c3499e570fe1fc2a2fde224cbcc49c7019668722fe75dcfae"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x0, 0x11, 0x2, "cfe1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'j'}, &(0x7f0000000440)={0x20, 0x82, 0x3, "863391"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "e0"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "a19e"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "0d4e92"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000600)={0x974f8b87cdb0aefb, 0x31, 0x4, "d4e61e58"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
executing program 2:
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_connect(0x3, 0x3be, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xc4, 0xce, 0xff, 0xff, 0x10c4, 0x8056, 0x5876, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ac, 0x2, 0x1, 0x2, 0x40, 0x9, "", [{{0x9, 0x4, 0x5, 0x2c, 0xe, 0xa3, 0xc1, 0xa, 0x4, [@hid_hid={0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0xfb}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fc4d3e"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81783de0, 0xfffa, 0x1a, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0xd, 0x81, 0x5, [@generic={0x72, 0x0, "6dc9d21a3e3330aba19a39e42681889f96948d7a74b405a66df6bcecc68bce9766147b22c53efdc5b87f0420f3166851905cccd66204969d8a9d3400acf7630b84ae6258c3c55017dc99322654c6ee0936207a3d0a668465cb7ec565cd446db4d051bc5aa1f8b9f8c97b45f459044e57"}, @generic={0x23, 0x3c, "b79ea0a739372b1b642ce3591406aa6ffe39cf039eabd9378a3c7b8c606b6d792d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0xa, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3, 0xf8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0xc, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xd00}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xc, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x9, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x30}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0x1, 0x1, [@generic={0x2f, 0xe, "215e24656a92661c9105bc9bbfd4ed882944e0bf36da08601b8ca969b0bd33c14f5cf9aabe31cb8596fdb2ff1b"}, @generic={0x2b, 0xe, "90bfe108451a8b596af2a7f5e494b1919b3e1161c83de518fbd3eb189f81ce317141c7e6610a270ae1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x2, 0xa}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x4, 0x59}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xba, 0x80, [@generic={0xd0, 0x11, "dec694d0b9ef775d76ca56d28330c616002e769b3ec784f3110c69a0d9387d137676fa8c453300102f10e98b238d9559895e480f94a105bf4ef03a8b47c0b7e77b7d7c3b64c692f250aa77f1dc731d741d7a04e80311529aabe5807f1f160c07375140d57284f9cc51fbac91a700c2c6e095cc2160a4a870ff542e300554999c5ed8537f5e21043801d98dbd4f6067ecf7a58169ef1cfd13e4309b8b68ce526d07eb4435f57372f1adeab67f0e30be9b769debee32f587d7f1e67ac064d8c9a0314c33b2a823b7a7f08a2cb26a49"}, @generic={0x1f, 0x7, "f0897eb4773dcbe4551ffc3e7b393cd0ead91ab67e6a3795e26f6151f6"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x8, 0x6, 0xe}}]}}, {{0x9, 0x4, 0x14, 0x6, 0x6, 0x65, 0x31, 0xd3, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x3fd, 0x3, 0x0, 0xfff, 0x90, 0x5}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8596d024dda1"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x6, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x40, 0x4a, 0xff}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x40, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0xc00, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0xc, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x1, 0x5, 0x28, [@generic={0x57, 0x21, "4158a6711bdbdde7ec49fef6b6cf2974c2406db24b525906a62ed5199a175c61babd17553051e6ffee86c452b754f1fde9a10fa5cef92eb8bafe493e9a6e219d5bcc4b6c037bed6183d2b7a55b56f1012a257d2d07"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x6, 0x51, 0x7, 0x8, 0x9}, 0x33, &(0x7f0000000000)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0xb5, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x3, 0x4, 0x40, 0xfc}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x5, 0xf000, 0x9, [0xc0, 0xffc000, 0xff3f00]}]}, 0x9, [{0x1a, &(0x7f00000007c0)=@string={0x1a, 0x3, "932c66e4b689a9693bc4f90acb1c321e8059720406337ed7"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x50}}, {0x4b, &(0x7f0000000840)=@string={0x4b, 0x3, "52332575429e6b6c70750e744bb782a1b16501123a1826145635743f56c3a8ce0fd7fbc5cae5aeb4eaced46a92ff3fe4e314f750bb50dffa6970c2c9e1e02d06fd4a8c402ef7f68797"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x76, &(0x7f00000009c0)=@string={0x76, 0x3, "e775ab1c63c1855fb7a7c70870f3efd5aed0ed1b83f94bc2aae84e39506e9f2beb8c6d072f06b5abc1aa2b9ab062f4babfd7a399a80970ea983954b2b3713a87c66d664daed412d1efe164e3adeb471ba0b3c787afd457e556feefd438a89adef11f3fec3ea3209bb8499de547d426cba131ee01"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x180c}}, {0xae, &(0x7f0000000a80)=@string={0xae, 0x3, "d4c0ef644427bccb148da77cd38efb424d1d55b749ff5f68b0878e4f21a401af4980ad475aacea9512c6924938ee8683113f6a1570b84f2fcabedcb9318a9b59118f4c2c6a2141bce9ca25e6eace1bf34935cc267e48c7a2238c67eb353c295ca725b4e1653a7612df8719162d35fe030a5c3e60223ffde5c0b33a7e8f832c75171be100ffeb096d68b0b121d1131575a0cd68a7830d5eacbc0e8fd11c5640437a254f004b6501c8c88d30ae"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x801}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x6100)
executing program 1:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d"], 0x0) (async)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x2, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_disconnect(r4) (async)
write$char_usb(r5, 0x0, 0x11) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)={0x40, 0xa, 0x2, "5ed4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x46, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io-syz_usb_connect_ath9k-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_open_dev$char_usb-syz_usb_disconnect-write$char_usb-syz_usb_control_io$cdc_ncm-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d"], 0x0) (async)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x2, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_disconnect(r4) (async)
write$char_usb(r5, 0x0, 0x11) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)={0x40, 0xa, 0x2, "5ed4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x46, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_open_dev$hiddev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_connect(0x3, 0x3be, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xc4, 0xce, 0xff, 0xff, 0x10c4, 0x8056, 0x5876, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ac, 0x2, 0x1, 0x2, 0x40, 0x9, "", [{{0x9, 0x4, 0x5, 0x2c, 0xe, 0xa3, 0xc1, 0xa, 0x4, [@hid_hid={0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0xfb}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fc4d3e"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81783de0, 0xfffa, 0x1a, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0xd, 0x81, 0x5, [@generic={0x72, 0x0, "6dc9d21a3e3330aba19a39e42681889f96948d7a74b405a66df6bcecc68bce9766147b22c53efdc5b87f0420f3166851905cccd66204969d8a9d3400acf7630b84ae6258c3c55017dc99322654c6ee0936207a3d0a668465cb7ec565cd446db4d051bc5aa1f8b9f8c97b45f459044e57"}, @generic={0x23, 0x3c, "b79ea0a739372b1b642ce3591406aa6ffe39cf039eabd9378a3c7b8c606b6d792d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0xa, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3, 0xf8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0xc, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xd00}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xc, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x9, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x30}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0x1, 0x1, [@generic={0x2f, 0xe, "215e24656a92661c9105bc9bbfd4ed882944e0bf36da08601b8ca969b0bd33c14f5cf9aabe31cb8596fdb2ff1b"}, @generic={0x2b, 0xe, "90bfe108451a8b596af2a7f5e494b1919b3e1161c83de518fbd3eb189f81ce317141c7e6610a270ae1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x2, 0xa}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x4, 0x59}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xba, 0x80, [@generic={0xd0, 0x11, "dec694d0b9ef775d76ca56d28330c616002e769b3ec784f3110c69a0d9387d137676fa8c453300102f10e98b238d9559895e480f94a105bf4ef03a8b47c0b7e77b7d7c3b64c692f250aa77f1dc731d741d7a04e80311529aabe5807f1f160c07375140d57284f9cc51fbac91a700c2c6e095cc2160a4a870ff542e300554999c5ed8537f5e21043801d98dbd4f6067ecf7a58169ef1cfd13e4309b8b68ce526d07eb4435f57372f1adeab67f0e30be9b769debee32f587d7f1e67ac064d8c9a0314c33b2a823b7a7f08a2cb26a49"}, @generic={0x1f, 0x7, "f0897eb4773dcbe4551ffc3e7b393cd0ead91ab67e6a3795e26f6151f6"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x8, 0x6, 0xe}}]}}, {{0x9, 0x4, 0x14, 0x6, 0x6, 0x65, 0x31, 0xd3, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x3fd, 0x3, 0x0, 0xfff, 0x90, 0x5}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8596d024dda1"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x6, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x40, 0x4a, 0xff}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x40, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0xc00, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0xc, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x1, 0x5, 0x28, [@generic={0x57, 0x21, "4158a6711bdbdde7ec49fef6b6cf2974c2406db24b525906a62ed5199a175c61babd17553051e6ffee86c452b754f1fde9a10fa5cef92eb8bafe493e9a6e219d5bcc4b6c037bed6183d2b7a55b56f1012a257d2d07"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x6, 0x51, 0x7, 0x8, 0x9}, 0x33, &(0x7f0000000000)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0xb5, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x3, 0x4, 0x40, 0xfc}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x5, 0xf000, 0x9, [0xc0, 0xffc000, 0xff3f00]}]}, 0x9, [{0x1a, &(0x7f00000007c0)=@string={0x1a, 0x3, "932c66e4b689a9693bc4f90acb1c321e8059720406337ed7"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x50}}, {0x4b, &(0x7f0000000840)=@string={0x4b, 0x3, "52332575429e6b6c70750e744bb782a1b16501123a1826145635743f56c3a8ce0fd7fbc5cae5aeb4eaced46a92ff3fe4e314f750bb50dffa6970c2c9e1e02d06fd4a8c402ef7f68797"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x76, &(0x7f00000009c0)=@string={0x76, 0x3, "e775ab1c63c1855fb7a7c70870f3efd5aed0ed1b83f94bc2aae84e39506e9f2beb8c6d072f06b5abc1aa2b9ab062f4babfd7a399a80970ea983954b2b3713a87c66d664daed412d1efe164e3adeb471ba0b3c787afd457e556feefd438a89adef11f3fec3ea3209bb8499de547d426cba131ee01"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x180c}}, {0xae, &(0x7f0000000a80)=@string={0xae, 0x3, "d4c0ef644427bccb148da77cd38efb424d1d55b749ff5f68b0878e4f21a401af4980ad475aacea9512c6924938ee8683113f6a1570b84f2fcabedcb9318a9b59118f4c2c6a2141bce9ca25e6eace1bf34935cc267e48c7a2238c67eb353c295ca725b4e1653a7612df8719162d35fe030a5c3e60223ffde5c0b33a7e8f832c75171be100ffeb096d68b0b121d1131575a0cd68a7830d5eacbc0e8fd11c5640437a254f004b6501c8c88d30ae"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x801}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x6100)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$lan78xx-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="380a20000000b5ce754f72434e577a78f95c4ff74a31d4aaf17675cc556f802971890c29eb5e959df2bcf022562f9962ebc804e734e8cce9af58bd4f6732ef5481c3725da276dc1795bbb808d2898a7d1d3f4b29d90d0197b035aa4a1f4b929ac680e33d28f2417e48b19f65c1e3c6d5bfcb460480c563cf7494ef674479050c03ecaa37afeb20615fc7731f434d6e747ac20719db1e6c38475b4147d97e73a899abd404424322540194a222341e61329d7005bfb4e0281b55807534dd1ffa550fe6cd740f769de23fb705a220128ea0bed7464fed22a9804f64bfdde93504387311e8f66d56"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x22, 0x84, {0x84, 0xf, "f75a865aaf81b1f1425fdda1b5f0ee19c736e41016f248774d72684da45ccc7f8dbde74885713c2e549ccf80b0cf24e02ca92cd14b6db3add53ddb02b6333c2d364f919aca57c9f7f5dadb9120880c130bc4b7f6eb40e0a4dd229c3bf9f10b09ade0ce2df6bdcf6c4d9c3499e570fe1fc2a2fde224cbcc49c7019668722fe75dcfae"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x0, 0x11, 0x2, "cfe1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'j'}, &(0x7f0000000440)={0x20, 0x82, 0x3, "863391"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "e0"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "a19e"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "0d4e92"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000600)={0x974f8b87cdb0aefb, 0x31, 0x4, "d4e61e58"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in ms_read_bytes
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010d1b0210e00615f1"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$cdc_ncm-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f23000000050f23000303100b14100407ad0e475b1bf392818f68c2ef4b7f0710021c320600"], 0x0, 0x0}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_connect$hid-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r1, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000800000cb3f702fc7ee2d3613740e61e3a82440ef17ee6000000000000109022400010000e80b09040000010300020009210000000122e301090581038936050a6f"], 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in ms_read_bytes
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (rerun: 32)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_disconnect(r1) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_disconnect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
reproducing took 2h3m15.054264713s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888120c35071 by task kworker/1:0/24

CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 12:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 12:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888120c35000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888120c35000, ffff888120c35800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2865, tgid 2865 (udevd), ts 24097723903
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x634/0x820 mm/slub.c:5545
 kmalloc_reserve+0xe8/0x350 net/core/skbuff.c:637
 __alloc_skb+0x185/0x710 net/core/skbuff.c:715
 alloc_skb include/linux/skbuff.h:1384 [inline]
 netlink_alloc_large_skb+0x69/0x150 net/netlink/af_netlink.c:1185
 netlink_sendmsg+0x680/0xda0 net/netlink/af_netlink.c:1875
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg net/socket.c:815 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
 __sys_sendmsg+0x160/0x210 net/socket.c:2799
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888120c34f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888120c34f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888120c35000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888120c35080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888120c35100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888120c35071 by task kworker/1:0/24

CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 12:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 12:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888120c35000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888120c35000, ffff888120c35800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2865, tgid 2865 (udevd), ts 24097723903
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x634/0x820 mm/slub.c:5545
 kmalloc_reserve+0xe8/0x350 net/core/skbuff.c:637
 __alloc_skb+0x185/0x710 net/core/skbuff.c:715
 alloc_skb include/linux/skbuff.h:1384 [inline]
 netlink_alloc_large_skb+0x69/0x150 net/netlink/af_netlink.c:1185
 netlink_sendmsg+0x680/0xda0 net/netlink/af_netlink.c:1875
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg net/socket.c:815 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
 __sys_sendmsg+0x160/0x210 net/socket.c:2799
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888120c34f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888120c34f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888120c35000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888120c35080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888120c35100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================