Extracting prog: 12m17.920718274s
Minimizing prog: 1h21m16.113046294s
Simplifying prog options: 0s
Extracting C: 1m7.240295242s
Simplifying C: 8m54.669400482s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x202800)
r1 = syz_open_dev$evdev(0x0, 0x4afe, 0x24000)
ioctl$EVIOCSMASK(r1, 0x40104593, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000009c0)=""/4096)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x0, 0xa0, 0x54, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0x1, "5a6c88d513"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x2, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x7, "a9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x6a, "ba", "8fdb"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x4, 0xc, 0x5, "3fc7fc8de0a0892863"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x5, 0x6, "fc17c1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0xd, 0x1, "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x7, 0xff, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xc9, 0x2, 0xa, 0x4, "c3f67f555c9eeb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x5, 'xVb', "93"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x48d, 0x1, "d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x3, 0x3, 0xff, 0x6}, 0xf5, &(0x7f0000000240)={0x5, 0xf, 0xf5, 0x4, [@generic={0xb2, 0x10, 0x4, "dff386761de39b61974eb6f5971387e5a64aba89b7df90a834c6881dde7a4f09321f49de0775e852601a9fa8cb41d5da1ce6260a56f5ed446f19010d80350ecabff2cc3ea0e81c4d291cdc0258f01bbd40f81f805dd426b2be58521a1809df48cd39734427c78e6f1958a01c2c3bce8433e4d3bfc537bff7e59048bc8b51e724c00163ef7b76372b12a156e54df9ad437cd433cff51aaddd6f77779e1921bfc24dadf05f0fff88cfc14b871b9d35d0"}, @generic={0x1a, 0x10, 0x2, "b23d7027c05366294e5b91663cd54f157de232336a3426"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0f41fa239754997bad76f42b7c911dc1"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0xf0f, 0x5d, [0xc0]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x40, 0x25, 0x38, {0x38, 0x39, "d82903c8044d4846ee84945099a56e7eb9441cd20834159e72e0fde3338fb81477701b282b8b15b723a3a7ba067480857bfe8410d6ea"}}, &(0x7f00000003c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "7ed422e8fafc83808225d3acae0aa2837d56abe83de60469f9e79ec9f830900e7e9af2916f36134db36522c0da5dc09ffe1985fc123f3d101cc6c2106f69b6f9ebe28a883759894a54ff94cf234dd868c28c6dbcdac1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x0, 0x31, 0x65, "7d7ca3078488993a6b07edc537a39ccc60552dfbcfb29e57772067c8e779275072fb5a3dc2191a323cfd1de43c2e894e0a12d9f9b99ba0de569f96b8506ded5ab298004fda77b875de473d91282ba6b3b290bca26d2db18223ef3412ec05a7d5b2f3378a7d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x81, 0x1, "bb"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000600)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "222448f1"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "88c925"}})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001a37584402e0c200783480102030109021b000100fd20030904350001c45d5500eda650598253cda600"], 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_disconnect-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf8, &(0x7f0000000000)=ANY=[@ANYBLOB="f803d6bd8f5ed1d241b63591cf34b93e315a3fa49bc3ae752834577eb24e45023b3624141121d885a702560d4ded7cf1aca0f04ff8502bb4aec0f93feba034e86d732e8177b0a95b72beaf15c0899900b894cf4fbc01418ce44e4937f151869568c68dc24b65f58ef5bf23bf33f1b9320ffa57fb65511aeb852bee58202f8ab88f0e920f77f50bd3d86bce1da220639d3f154c011a6c9f92c7d533d05aa72f5b2b8cda25b7ccde88eb5a41b3aefdce65a19f7ad7a6a1eb3c07380a011c07d0678305b2369bc414361a16d4961a378593d770374a051c4e749eb9e06751191bcac8c52004baa0715655ab4b8362602f7b9c54f31ee80abdd8"]}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x71, 0xc1, 0xe3, 0x10, 0xdba, 0x3000, 0xebc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0xca, 0x50}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r3, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES16=r1], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x0, 0x30, 0x3, "427a9c"}, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0)) (async)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_connect$hid-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x300, 0x8e, 0xe3, 0x71, 0x8, 0x789, 0x160, 0x82fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd1, 0x10, 0x2d, [{{0x9, 0x4, 0xcc, 0x5f, 0x0, 0x8, 0x50, 0xf1, 0x9}}]}}]}}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x6e, {0x6e, 0x0, "6bfb5465e6c35698b047654524c3b165bf661a2a04ceefd572c552aa9eb7717de0701f81f1017c4f77b42f746aa088266a30480623f0134712dc4e12689b9c1f8a26e3fe790f27c98df81f3dbb9d2beae074071cba31fc46027755a65190f7006d4abc4af6055120493a0d0e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x6, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x7, 0xcd32e795acb4132e, 0xa, 0xa035d67311b4f14e]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x3, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0x22, 0x9b, 0xd7, 0x20, 0x5c6, 0x9211, 0x74d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7, 0xa, 0xd0, 0x7f, [{{0x9, 0x4, 0x2f, 0x3, 0x0, 0x26, 0xa3, 0xea, 0x7}}, {{0x9, 0x4, 0x31, 0x0, 0x0, 0xff, 0x2, 0x5, 0x41}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x201, 0x8, 0x0, 0xff, 0x0, 0x5}, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109022400040000000000000000010300000009210000000122050009058103"], 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007490590886124920b0690102030109023d"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x8c, 0x4c, 0xc, 0x20, 0x45e, 0x40a, 0xa4de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000000)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x11, 0xe2, {0xe2, 0x1, "56434e40237dbfb47b5fa15f29b613a060d9ca652f3255ee78c7a6f9362115221658f11f1670563221a1d5e0b664e145f2d6ed8198f3c8dc2a438b57d87c4ded0085fe58533e23dbc839f44a8906aaa78c9776b9d04c19b31213d49a42826988d04a9deebc06f0b30b2264eada57206933cf1d2332a01df5d1a9c2045add2520ac1605385ad4f29c1417455dc757d92fe99959819124eea45baf30de8dd2db82aad56ce239aa5fd6bf668a7e1284aeb5232b8ea904884dda71426d2aae6b841cb53f5cb2192329a033c358b8edcc950d8d8a944c4b6f87462fa0035bc372f0df"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f00000001c0)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x5, 0xf, 0x9, [0x30, 0x1f8f]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x1, 0x6, "832a6478", "d7a452c5"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x17, 0x5, 0xd, 0xb0, 0x81, 0x8}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x55, "811ce607c3fe81e016eacc860f1d9e52d92c16a6df5380e1247f61d0296ac30fa09f759e1cb2b570b387483399f2b501cac52e683cd7fd00d69366f0ba8049ebc4f53cb2e50eba8486c962c4a07453ed915c590400"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x100, 0x80, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "61f9"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a17c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x90}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x60, 0x1b, 0x4, "e342076b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001d4f86540d804830047da000003010902380001020840b3090400b201020201e6022406"], 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 11, 20, 8, 8, 30, 4, 13, 12, 4, 22, 14, 30, 6, 9, 7, 5, 17, 4, 14, 10, 9, 3, 7, 5, 27, 30, 40, 15, 16]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x738, 0x1713, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "934bf2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x38, 0x87, 0x46, 0x20, 0x123, 0x1, 0x4afe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x72, 0x34, 0x0, [], [{{0x9, 0x5, 0x82, 0x0, 0x400}}]}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB='R'], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000001100)=@string={0x2}}, {0x75, &(0x7f0000001200)=@string={0x75, 0x3, "16b97311f19e0102b4dfb68c7df227089085d3fee0b053a30f4d3e4c24af9130567be10936dc6517d160553aac0a790bfea14ae8a6f1495d1f008fc89e0cf5b3150bfbde35b43d1bb73ea9925da869d6983f4ea21e3732d09bddc397924a8ff8a6ed63feda5275888103ff9e66f18fc3fc9aaf"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9711, 0x5, 0x1, {0x22, 0x8b5}}}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3e, 0x4f, 0x3e, 0x20, 0x694, 0x1, 0x26e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x1a0, 0x0, [{{0x9, 0x4, 0xdc, 0x8, 0x0, 0x75, 0xd1, 0xd3, 0x5}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x2, 0x94, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x9, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "c4ebe082a85d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x5216, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0x9, 0x9, 0x7, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xffd6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xa0}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x1, 0x6}, @obex={0x5, 0x24, 0x15, 0x3800}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xb4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x3, 0x37}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x1, 0xf5, 0x20, 0xc}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x2, 0x1, 0x8}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x85, &(0x7f00000001c0)=@string={0x85, 0x3, "8391a3394a4b770505ad1d892b56dc29375fbc6cc07983dd0ee74a039f0d2155d6e048cac2ebb6454c8668ed4657dd13f6f2b5c41b5d09af9ef09f86eda38e1e0f6abf8dcedbb6e245d047ca2b3a16ec23e04f6cfb3d218404616b235bc27a8baf5b72dd9894db65abb1ecb6bc6e4252ed9c9f8382049341895dc06f88862cf39648e7"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0db}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x861}}, {0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "885ad27f259a4b5e4123ad71df492dfc87e9a7b99d13322abbfe87e086aad569057bd6f75dfc8f353915dc5834320a7ede4c326985674950aa8ab8c9c05ec4754830ec279099ea7fd1b5912a29782a31c2abaa5107b6a78fc7cb4285dab40809ac6c78ac3ad7cc3bebb095eb4b01c30040d0a5a686c7f6a64fbb57450a35954b59d509514fc57efb0b20865b2c79e23b1533ce179e6611eac9a373faa09a782da9d3e04e58898b933356a4e852c87e1d5812cb60cd457f8fb60f1a505dc268b97467f274d4eafac27fc81a721457dcc0c9e12077c90fd98d090988ab99"}}]})
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x21, 0xbf, {0xbf, 0x9, "8fac3584c1f827749024a963a97dd0f1ae5590ddcd59767a2a8b27ab0d79bd49871e9e21c1e6b0ad1b6f6c83eb60c2edc41fde8b884de47490811e0472fe9f0fd595ee84b7967fd42ccf6cb7c9827cfeb7ed87af9a9cba6e65043442503aef664f039275c70358d2469d906550e4645689ea3be6dbf89af5c23cc0e53fb2bb3219a7252f197b85341fce9353cef7a43592d6b53862bfa9a1ba80e87975cafe40640631d303caeec1e4039b5fc538a3b313e4902d6f7698e220d68be3a7"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0x15, 0xef, "0d8ae981bd321e3678e505b2cbf21247b2539ba8396ebf21857ba02bc723f9df8487338edbb9ceb02c2416d6302f64e951526e84a27062c64cc926c47fc7aa8e3c8ddc8646372d9dd40aae9bb692a08f69f1785986d4f426d7a8f8948d664e6b771709b6decd8c7f0a441da82b39cacbde6084f59d5270d1cb4245bb26c77d1dbe88f40232515ef2aef3401dacc8c3185328c47b3508cdf5824da0b29d11e7d33e9722360eeea9d5119a624eb7146a4a02459a1260dd7392f583ee2bc4b0c0c4a16ce9882438947e1d8c150aba6d35abec8701022313de091ebeca08fa4c4538b13ad38e748895f258639cb56d939a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xfe}})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) (async)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x40, 0x21, 0x46, {0x46, 0x22, "03c3dcffadfb581aae698dbd8831f39344c872d5401e26d243803ab10015c9f1ec9dc8ca8b28c1fad3d7e3f1ede6b14c434215a453b258b31e4f768f555aa49f49f8fda2"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x40, 0x12, 0x70, "0c2f69de8c6fe576a8afadf7d354f73534425376784caf0bdd354cb238e4f970c24e46dee7c47c91df87e3b3a61bb4aed07227c1d1f8b62a8b98aac2dcc31add283992e1b8546cbe2d8dcb97f74b0f6a2680ed35620787d680bbfe1b426863bb46cfc5369f0bf95eb9261836b30cea37"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xd7}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000009c0)={0xc0, 0x5, 0x6, "8788ec293add"}, &(0x7f0000000a00)}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x4, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf56f550d1948aec7958010203010902710001000010000904380002b2d4b4000524060000052400f4ff0d247210ff00002002000700020424020405240100002724134000ed7fe5954b1a8bf8f40de6bef3160e27050000000000008d26e973b7c9001a13a1ab06241a030042090502020002020000090582020002000000"], 0x0) (async)
r0 = syz_usb_connect(0x4, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf56f550d1948aec7958010203010902710001000010000904380002b2d4b4000524060000052400f4ff0d247210ff00002002000700020424020405240100002724134000ed7fe5954b1a8bf8f40de6bef3160e27050000000000008d26e973b7c9001a13a1ab06241a030042090502020002020000090582020002000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0xffffffffffffffe5, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "cc0ec550"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0xffffffffffffffe5, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "cc0ec550"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x5ea44cfb6094daa8, 0xd, 0x30, {0x30, 0xd, "0d16e483eeea2a01d3862c3a0f25af0500000000000000e0c806ffdd0b66be148a6e457aa721bc72aab49bd2f0e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x5ea44cfb6094daa8, 0xd, 0x30, {0x30, 0xd, "0d16e483eeea2a01d3862c3a0f25af0500000000000000e0c806ffdd0b66be148a6e457aa721bc72aab49bd2f0e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x83, "6140726f3ef602e6eab56041bcc8b5b84f2872defe55a2a65888cbb297b5861fe2989a33168a11d62bdcfd3da89e14e70d6d59267c7eab05e6be62143886219d25bb21091808fb64f92136eef515f9e0df5114bfcde6510544de81e2de231c7bfa6c5dab38840f80558acff0da624c92543d05bb00894fde24149358926bd3846aa8db"}, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000180)={0x20, 0x81, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x40, 0x11, 0xef, {0xef, 0x22, "7158eec8ce507400c5609bfa1e0de9f9bccd473152a044043b802b3b8e6176c616c1567945a6c78b89b2afa440130674a3c48c51fdceff0340928438041ba4aeafcbe68e96fce474414522958bdb1a12c16f31158375cac3c4656fab58a54d5b102a62159740c087fc8dd2fcbd30108727a1e34ce513897ac1df18aa3b91a015a09756d401a9e84396c220481fd7a81c9de7436780d5be5901815f29e69cfb8810addac677b35b947bbf586f7babf63dc891f99b53cf9c75d91930ae1925f1febbc0f2a85c22ec1a1722ce533c4c575b107cdbd5778c0f64397055d8ebf7fb78dad81949c3f909e7bdb50c706d"}}, &(0x7f0000000580)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "58bc9b8905b24a99db369d646da2c895e3701513b95b74c14c9e4db2543e1eb046dd8592f51e260cdf8b4a9d9da9404151c579964fd44a68e12b9c45738734418ef8d7799158bd0ecd7c33fab352e61a2e6182a2c5c8df7c0cefd92f64b7ff480d049c868867f4d32a17da8c179340bb8d0ba1952ab7268c7180e2c115657d5b230b2a85be9ecf10d44b"}}, &(0x7f0000000480)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x1, 0xff0f, 0x7fff, [0xf, 0x3fc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xb8, 0x40, 0x9, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x7, 0x7, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x8001, 0xf, 0xb84b, [0xc0, 0xc000, 0xff3f30, 0xff, 0x3f30, 0xff0060]}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x6, 0x3, "a55fa9b5", "8bb9910c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0xf, 0x7, 0x9, 0x0, 0x1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x12, 0xf0, "6b652b097e2527553b4dc08b91a305ca966c0a9752c3a49f11150d5ff87a0c41e0c739405c2274e34bcddb918a51310bf8933c9e24b5ed7e8d443c72f7f1f06069252bbd7fbcfb5a8deeaaa72d86de01f7a62a82bd18c5d0d2b4e73f127efaa548909ef9bfec7b71f92c55f90d269d16794e797e88e102311da2b2c47dfaf3da6483fd0f58cc7a8d431517be9c56e78756ca966e4b2fad5aa71b18e6c26cc615b24c6676fbbae5cf197d644554e0bc6db5cdace3424bcd561dfae70f127f9dc1166907f25bf515a40c122cfa32473608633a894effda2fbccf778342d8772f47469cad1770535882bba56a677c8a97c1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x212}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "6ec4"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "d09c"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xf5}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x4e}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}}) (async)
syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x40, 0x11, 0xef, {0xef, 0x22, "7158eec8ce507400c5609bfa1e0de9f9bccd473152a044043b802b3b8e6176c616c1567945a6c78b89b2afa440130674a3c48c51fdceff0340928438041ba4aeafcbe68e96fce474414522958bdb1a12c16f31158375cac3c4656fab58a54d5b102a62159740c087fc8dd2fcbd30108727a1e34ce513897ac1df18aa3b91a015a09756d401a9e84396c220481fd7a81c9de7436780d5be5901815f29e69cfb8810addac677b35b947bbf586f7babf63dc891f99b53cf9c75d91930ae1925f1febbc0f2a85c22ec1a1722ce533c4c575b107cdbd5778c0f64397055d8ebf7fb78dad81949c3f909e7bdb50c706d"}}, &(0x7f0000000580)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "58bc9b8905b24a99db369d646da2c895e3701513b95b74c14c9e4db2543e1eb046dd8592f51e260cdf8b4a9d9da9404151c579964fd44a68e12b9c45738734418ef8d7799158bd0ecd7c33fab352e61a2e6182a2c5c8df7c0cefd92f64b7ff480d049c868867f4d32a17da8c179340bb8d0ba1952ab7268c7180e2c115657d5b230b2a85be9ecf10d44b"}}, &(0x7f0000000480)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x1, 0xff0f, 0x7fff, [0xf, 0x3fc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xb8, 0x40, 0x9, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x7, 0x7, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x8001, 0xf, 0xb84b, [0xc0, 0xc000, 0xff3f30, 0xff, 0x3f30, 0xff0060]}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x6, 0x3, "a55fa9b5", "8bb9910c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0xf, 0x7, 0x9, 0x0, 0x1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x12, 0xf0, "6b652b097e2527553b4dc08b91a305ca966c0a9752c3a49f11150d5ff87a0c41e0c739405c2274e34bcddb918a51310bf8933c9e24b5ed7e8d443c72f7f1f06069252bbd7fbcfb5a8deeaaa72d86de01f7a62a82bd18c5d0d2b4e73f127efaa548909ef9bfec7b71f92c55f90d269d16794e797e88e102311da2b2c47dfaf3da6483fd0f58cc7a8d431517be9c56e78756ca966e4b2fad5aa71b18e6c26cc615b24c6676fbbae5cf197d644554e0bc6db5cdace3424bcd561dfae70f127f9dc1166907f25bf515a40c122cfa32473608633a894effda2fbccf778342d8772f47469cad1770535882bba56a677c8a97c1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x212}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "6ec4"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "d09c"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xf5}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x4e}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "cfe092"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x70, 0x1f, 0xe, 0x40, 0xe41, 0x4156, 0x15eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0xe5, 0xf3, 0x2e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x20, 0x10, 0xc8, {0xc8, 0x25, "f7b1ab8bf775bbca8c28b46a6afe499e4b4be51467a043f05a01b5653a9548b0aaf4791cd65043d44c1d96031dbe9d3fb84b6a798a40fcc6c9dfb4a2ae6b72d74f64633662ecb2de044699d0f36acee1fa9d0bd6ad0c3cfc794381bc1ef632e400eef1e74441001f0ecbbde57f2dcacc2ece0f46a805b9cdc87fad3bff6180cf43db92d2afda3e8392207d72ab9ce1e8b3e91163d03997e6b7538f5515439fd546ebbdcf791c397669757f01a45419253d69360583ee3bc190724764bb102bdccdf560dd6b59"}}, &(0x7f0000000000)={0x0, 0x3, 0x71, @string={0x71, 0x3, "a2007ea2e7c5cafe9b4703ebbc77b47a51b72cf65e81893c1f11ec887b66e63925d209c70e3048b2fde20607d71c4a5091f233a9d58bba4ccc0e01b707f71fb744a5ba27cc69dd578636e07b9fd16464232462aa8cb0bfe5912eafc3175408141e6cc4e40a99d4ebe3465acb698ade"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x20, 0xa, 0x71, "a23ef0b008259edcaf918501b29b2da776d49d70c0c9926e1e4f1174ede7df3bce01be88d59ce44ab34109cb84df8e1ac8dfe9c3ebc5ada1b148318ef79a2f2910ac6710f206d324e0d60977cdfab3b112f09cb1b9dc3efd334d86e5838f243701cf7d5bb94bf9c2a977bc3c67676fa82b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0xe1, {0xdf, "df6b991b920afdb6a7bd40910100dc42f95aed019b4c55fecb5719d46bcf710623820a2f7e5197e584ecb402324b343d851bcb6a2acd13c1d673ec15ef2fd267eb87f7cf04c49d3749e674acc27d09e844433393794566f7440ebd99aa76cdf9215295355629bab78c9ab166c8a2b50a4aa712ce69f6888c344b6a8d634428dcf1dfa26e64bed58cad968ef384c7364ecae825c4ef2b0564fceffffc3979f35ce8051003b9ed6fd4b54b0936988a2f471d94d91971316749442689221f466532597403e88c778166ebe0fa69717f8e74e2c9fca5e5d86b79a6fde29bdcae4f"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500254300510b00d6968b373010203010902120001000000000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x28, "42a8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e374bddce7c"}, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x61, {0x61, 0x28, "1afa45d6845903f8dcea6996df857a7801fd544f9e0b8b1a749429755cdaddae7212d93ae0f38294d4009b237750ae86ac6c35bc89e7a3e45b15bbcb016dc50f7b38a70433030143f3defca7bd4eeb38cb29669f8664962a4aac4491b8cb91"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0xb, 0x4e, "17571e673e32e61baf9c2ecaea45c3a9e937c6ba54ba1adbfb9538b9ad2719de7d95563f0dd56128114909ab846816025008bd468f3b7cb337d7db5b6c0c01ec54dca05e674c72c04eb9976cf77f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0xc0, 0x5, 0x5, "787b8f0147"}, &(0x7f00000002c0)})
syz_usb_ep_write(r0, 0x1, 0xc1, &(0x7f0000000340)="e0f8ce4645b7f3b4f585f61cbe5d231e273ded3e07697a1126d1be25839fbb5ab73c2d784caede7721f33ad0297b2f06cc09fd79cf9b46841eee1c310cbc7688152b597dcab149f4cb756c6b8990415993a0960c65d01f830caf3bc9a94ece9b3f925ad80c65443bcce0f5a9316599b6e7d31568d2295057835bb410bd6942bfde4b44bb1eb93dc9c374b7948b8178a2cea8b05acae37dfe4cc5c921fcfc27be77c4e2006e5edbb60dc7a0f95619356cce26979b367d3a7e80b5b466874ac91214")
r2 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0x521f3b79cabc373b, 0xb1, {0xb1, 0x5, "f8d3bce2d09dcd915ecc877b5cfca394fea3c5ee9567ea4e34fa6fb26a92d25ef7d98b7fcb6079921a3d0e230b782e89464532714f8f796ef36095eb8b7dbf06473fce0a1638ffde51dedfc3cb8feb3e0329b81e5a1653234d99379be95f1a01b75cfd3b38b91a03e2992351daf41e2b276089115039f8a10d4f024cc6588fe0d327a4a721663f2b32fd6b343a26226991cb1603a3683a29608113c545f85fe17750b2bad6ad6c065811e2897932a8"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x20, 0x2f, 0x4b, "8131d31f9a9ce6c509568890501abd9197b0676fbae9b9f447933415cf581203ef8c800c9b2ebc185ef653e752abca9164d90846b94e35554ba691c3c97d3cd3e421a58ad7ee08042e94d4"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000006c0)={0xc0, 0x5, 0x1, "b9"}, &(0x7f0000000700)={0x40, 0x5, 0x6, "58f49bb9b6b7"}})
syz_usb_disconnect(r2)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x10, 0xc, 0x35, {0x35, 0x30, "d4a331b71f3d1476d4b0476cc174882867837bc983cef95e3dbabf3c50607e5341cc0a9e827c4b206374d1131c0b4940282b27"}}, &(0x7f00000007c0)={0x0, 0x3, 0x73, @string={0x73, 0x3, "73fca2ba13968db8f0d4b285968c700ef2cb6ab914b45b525e2f00fa5c61f69f57bbd4f35175e4513e0d54266263b0eafb07d600df0529f447ac24592afcd218d7b3d391d459e8896cb2b142a94f4f16bd54973c6b8f7664216b0e4f67835ab8ad639678607ed7480292f18565d9a4e9e2"}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000880)={0x20, 0x33, 0x2e, "21e1e0cfc590dab05bfacf213e9d0b97a1b91949d62c3cef12bbc72a7a5abeb9370a34fb3ce29b90b99be94c272d"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000940)={0xc0, 0x5, 0x5, "b0f3600ef0"}, &(0x7f0000000980)={0x40, 0x5, 0x4, "0614a01b"}})
r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x25b5, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xad, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1, 0x47, 0x1, {0x22, 0xf98}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x8, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x40, 0xf7, 0x8}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x41, 0x10, 0x4, 0x7, 0x10, 0x4}, 0xb, &(0x7f0000000a80)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2009}}]})
syz_usb_ep_write(r3, 0x5, 0x99, &(0x7f0000000b80)="2d5cb25f4bb0fa3e9bf7d8cbb00fbdaf6f8d12490d2487bcee37bf75b348427b15413b4995a8f63ea9ca612d6d06a8c80b1b2d2f33f211053fde2e0e18ceb0a8b4963ef6be819fe98a72a4f19991e552c5524eb5fbe409e62a8fbe4937dfb16a8a6947d4fd826ade5bb2ef42548ddd4128ea9c8ab74ad0adfebde9995910f0fb1d28ac1ca8b867767379ab2616dc267bf9cfde10cc2ff357cb")
syz_usb_disconnect(r2)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xd4, &(0x7f0000000c40)={[{0x1d, 0x4e00, "5d1c73e596e687e4fc72195cc59ed60ee6c4c4d553c771dfa5831454b6"}, {0xaa, 0x4e00, "55a9d6ea5f5d03e6044593182101dd888294f8c6efe62bef8dae128bd6f0919f4dfd2d707a457e9edff388a1c1c24c71432ec41e7758ba72686cf4864cc779beee47b1b8d1353d99323cab19e2a569a7a13270384a8757bf4260127822b10d6a56313fbc5763436f4b381368c8da725791b996c4e52a4ce0be2dfd0efff883ecb69ad8fd30576cbb3f5650584094addcd89c2e6c1c14eba40cfd5c83b038c6a476e42aa7965e0da0fa08"}]})
syz_usb_control_io(r3, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)={0x0, 0x31, 0x70, {0x70, 0x4, "ffd6ed04d28ab52d4597ce641f52d14db82d7f1e30c9521d37aedb55d7275ffca2e4afc330d70231715c35e2c414c366486258f1c31b1b6f9f2df74ff1d5752889cf9be86842a2fcccbe65dc102606f77a8ee9ba4a2be973d357fc9144c8ad3c1280c1d88c3df25ae9a955fb8c4a"}}, &(0x7f0000000dc0)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "a4d77a17d9fe53b8b3bc89ec24d4907bf46c892df763ac70e6353ad20451b8dbc4f2b369590a8231eefcb657146d28ad16ac7213fb07b1ac6bd4531fc6f83497e7a65c45af96129dc2fc039c626acd8adad605f5ebe007919b2976700191326103dc98d6a91e9917f2b59b093bd349d3b168de7cdac35a311f476aa737f5b4db3659def0d8d922e236510334e7718d46538137b0ec53e14b1f4c7e9d8b1c3fb41c13ea5965d6fa2e0d5bddd4713742a024"}}, &(0x7f0000000e80)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xbc, "0d67b7b49cfcc67db6c2962d44a41547"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d9a91f46d6878d8582c15393f7e9e611"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x88, 0x5, 0xd, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0x5}]}}, &(0x7f0000000f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0xf8, 0x89, "349cefbd", "593eea94"}}, &(0x7f0000000f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x0, 0x1, 0x1, 0x5, 0x5}}}, &(0x7f0000001440)={0x84, &(0x7f0000000fc0)={0x40, 0xf, 0x7e, "4250d6c30b974172e3747c43eab266d49a06bb44976a1cb5a14be61bf2b1423347255bf59e1adea63e0246dc176662fccc110e482d4b772078d2d98d1a4441c52015507e669b72824d10dfce912cde46dc7cfb5dadbb0bd10d59b19e15a3c6c45596043309a7f57aa936f7dff177a37d28a2e4633e54c01e1cc48c5f0f37"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0xe0, 0x2}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0xae}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x1b}, &(0x7f0000001200)={0x40, 0xb, 0x2, "1e61"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001280)={0x40, 0x13, 0x6, @local}, &(0x7f00000012c0)={0x40, 0x17, 0x6}, &(0x7f0000001300)={0x40, 0x19, 0x2, "0c8d"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x33}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x7c}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x3}})
r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x70, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xd3, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0x2c}}]}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x300, 0x4, 0x40, 0xd, 0x8, 0x6}, 0x3a, &(0x7f0000001580)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x6, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "3dbef52cd10d6aef67fab1ae7bc635b2"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x4, 0xf78f, 0x1, [0x0, 0xc0]}]}, 0x1, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x436}}]})
syz_usb_disconnect(r4)
r5 = syz_open_dev$evdev(&(0x7f0000001640), 0xffffffffffffff81, 0x4000)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000001700)={0x16, 0x5b, &(0x7f0000001680)="abb31cae03adc32c32b2222a36044ef3bed89347e85e3946f03197489e583768c50f3c9801e406673adb67965a1cfd8bae19fcad504a0a4b15bf2252f66f17d66b40bbb08d77e4ceaefd880c88cded9264f30530b035fb139d5be2"})
r6 = syz_usb_connect(0x6, 0x8cc, &(0x7f0000001740)={{0x12, 0x1, 0x250, 0x6c, 0x78, 0xf1, 0x10, 0x1901, 0x15, 0xf8bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8ba, 0x4, 0x4, 0x4, 0x20, 0x3, [{{0x9, 0x4, 0x19, 0xad, 0x5, 0x4, 0x60, 0xe7, 0x9, [], [{{0x9, 0x5, 0x4, 0x1, 0x8, 0xf1, 0x81, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x9}, @generic={0x6b, 0xc, "482c86906f1bfce09f43e220920adb64fc8d768c256681d2ea18452a1fdb3348aba6c6465a113a960d092b1eecba5e3b87b236f2019ab4b6ab323b1cd6367549ce14b7ea5ccf7c210fde2eb31edec397b12b8b85bc57838a6bc7fa4bfb4ca666a21b39bc5124d990d0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0xe0, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xb, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xde, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x9, 0x9, 0x9, [@generic={0x7, 0x11, "f2aa1b9c86"}, @generic={0x6c, 0x9, "57057ae3f8dadd6562d82315cccde172c217cb000087138875502a81a6b7f065c9418d8b0640899d77bc8c929523550374d189837b1f5d6c45ed80fe48e27a622576ffbb26af1a87d5e5f6276dfcf9c9a6f4e7c40e07b0a6447117de3b63ce79dfa1c29753c435361f92"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xa0, 0x8, 0x87, [@generic={0xdf, 0x2, "a2e7e2ea4b7e7647ed8e69053d7de672e7b777d6d88a34f584a2195f04c543ea5257e453c32ef7c0f98d4bb3b5fadf36f8a60e91a9d681af362ae541814bee8126c651725312ca09a896b7cae8c8b3f8afe5c94155c8ae1cd7f068e34a197282537917d5ea1d1f185277f0049cc4f1f7874e8cd556ce0fbbfdc992f02afeaa3726c8036d29d1675adfd50591a5b4ee833d15e4557cd642f10afb44e8f8d2863209e4039838d4d6b7711ec4e131e74d0bced936a8ab264f91c8df482be59b4019e798052863a06eac4868f987433e6fb8df718e8d7757ae766bd841b94e"}]}}]}}, {{0x9, 0x4, 0xb9, 0xfe, 0x1, 0x2, 0xd, 0x0, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x0, 0x6, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x636}, @generic={0x54, 0x5, "22180676c3165be0224c7e49a3363f65a63144a15a370f799ce8f27c091b121bff1d7e7f8716983908055250cb7e63d56d94a63f64e4eea19c1988f18063073917457c06417eb757d3d1be438ca98ccc666e"}]}}]}}, {{0x9, 0x4, 0xac, 0x65, 0x6, 0xb4, 0x9a, 0x58, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x4}, @as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0xd, "ea162411c1766a"}]}, @generic={0xd8, 0xe, "13d263cc2fe1ceaff95441555f37ef598c1a3ba7d7ee6b5d9ec732c799c0323fead9c2cdf40153e1b7516f122533eaca0e8b3f717ae2ba9ee564e1ae09e35bb6bf6c7139c4cddebac735548fee533660fdfbb6a7ed660835a03480b9b7e7d00dedf3817e433e75bc4b9e64acc9468f1fbee7ff69ca068cdf26966f588e4964d6bc250c7d18ef19e4253f33e7f645a7f28c6f2acfc970757850601c72f88688c2c40d7c6202e0a04c765449e8ca44c6c4105c7375150b04b2747cccc6564cee4afdf9f26ec9059bdf19e2071f0200e82fcb7cd8a83170"}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0xc, 0x7a, [@generic={0xff, 0xa, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0x9, 0x4, [@generic={0x32, 0x4, "c5b110dc0e370e27433e3edffbe2964b255ee7f948756c58f5794069b640b06e125a110430d0b154c14e2d864c1e8c44"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x19, 0x40, 0x4, 0x89, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x9, 0xf7, 0x4}}, {{0x9, 0x5, 0x80, 0x8, 0x812a1bcb91f48bd9, 0x4f, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xa}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x2, 0x3, [@generic={0xe8, 0x21, "4e1311466ae310b98811741698846802fb4ff9e859d6778eb698f8cf051e166ae0edaf3947c6274fb277d13ad434749fb7470a3ea237d4973f503f9b433d8b8d4d236016613addf55d823acd9ee91f413aa5f496ce83c82e221eb363d908109efbafbfdab20fc3971234e9d14560bd45cfd728fdd1eacccff95f2c1f609e5b76dfdf3861fd59bdfb647a83227521e368ff0bd689b7472a9f539d697fabf80dceea72c99932dc532614a036a5eb8c8fce2e5fb54a4ce8e6f3075a558dfe71db3626e7c985ef4792aaebb0ebcc27fd87bceaabb177bbc1726d7773fcb142715f7bb1432110aad8"}, @generic={0x6b, 0x22, "857c9debeee66af1836a13030c75105a616d44b2fadfa0ff66f3209c3b40ad1367275f1c2cdf263ab6d4fdc9bf8280e08c40ad9a16fcca9c46c4952b91d279c94e4ec2a8d1f8bbb5b734d2f3b5fa0099fc86c81c6a76393d509948502c4ed35165cfcb8b025bf8f885"}]}}]}}, {{0x9, 0x4, 0x70, 0x7f, 0xa, 0xd0, 0xff, 0x10, 0x8, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x9, 0x7, "04188e5e"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x3, 0x8, "e8d8d1b5316912"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x8, 0x8, "2a27f8f1a1"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x96, 0x21, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xbb, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb}]}}, {{0x9, 0x5, 0x80, 0x1, 0x18, 0xf2, 0x81, 0x9c, [@generic={0x16, 0x23, "0e14c75c1407ab0d3d63b46269814e0da9738103"}, @generic={0xd3, 0xd, "7dd2208d07b9638ad94c03fead334129964f21054106fe4d92a9f87e132326aef5771a9bee40911486c2f1f66b0f073651797772e1e8eb4c67a80fb7e5ada704d907b43927b8f9dce110ecd952778e1254cc87155f5de6e7f5c73d63abac3bcd6c84ea63f1e65083adffc59ecb386f0c78923bee112f85d8189cbf29e93de771965844797cf2e6fc1f5e287146b0a815c1a19988f5a42f3f19cbdbe4e261548ee95019c5e2bf1be45123f4e9b354bafb8ed2633b460ef266c2f4fb6a8b4db636aa0dc0c994c58ae144d1373b0a835706fa"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x1, 0xff, 0x68, [@generic={0x42, 0x23, "ecbbd87ab12d05c713a3d405547cf15099b7e591941d328a5460fa6f5d8b72488ac6ca9eb863d49fbb4e91334c21e40fc74a9f2682a7eefd1dee34bc13579104"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x9, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xfb, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xf9, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x81, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xff, 0x80, 0x40}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x6, 0x4, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x9b, 0x80, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}, @generic={0x78, 0x21, "3eb40c526702f680c71044d25f3efc4c65a06250f136f025ad04e84c4c55ec465a9c3db8a00cde322f33ec114725cde7e96b6bb8183ee71771958283626fa7168d333f666d8856571d67f528a42e1f5e694254231c3d04a5b5cd6be3c6a5f98b27ba59f1438d9847cba124db789431d847dd0470d547"}]}}]}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x201, 0x7, 0x0, 0x2, 0xff, 0x7a}, 0x35, &(0x7f0000002080)={0x5, 0xf, 0x35, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa1, 0x8, 0xb556}, @generic={0x26, 0x10, 0xb, "591ae317778dfb6f80e9cbd2962522659f2631d48e931071065d1f8c8e08a6f9057eab"}]}, 0x4, [{0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xd2, &(0x7f0000002100)=@string={0xd2, 0x3, "14af3f88d29824ed439c38a460a3e6f14c0c825c6aaddc4a852c4af7e1c818d1c88c794f6c1456430e3d0e3f95cdb0aeef9e70aa0dcc4a2695f178a17af915ac9c9385959c27501a4d7106390d1b092ab9d8251556fe4aea4cf19be20050c5b89658f16950387ff936027893f712cd9c692f8b6e62bbc1b9eb594ceef379b28725686ea07fccc29c8bde502536c76362ff669e635ec0108206585c1a5ce23840a9bec09c6a3f8132d00daf3a058d0e15c7a53f656a99fe8dac40060703d262535505a135cca085358071dc4b20f078a8"}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x425}}]})
syz_usb_disconnect(r1)
syz_usb_control_io$printer(r1, &(0x7f0000002440)={0x14, &(0x7f0000002300)={0x0, 0xd, 0xbf, {0xbf, 0xe, "849436b57ecaafc9ef53137fbd2a8ff8e49f54825510ddcebed6b11b9448c3f97553c8757ba68533b672cbe49d0ab95f4baa642bb394001268cceaaff230fda6be6c10d5f33cee62fbf1d7ad044d1236d9c4d8e076467a4dffe376cb8c4cfe1e35bd528ef96263c6f790c52135317a1e3803e307cd37af23021109a7384ff18fb886db029e285ad0a995f9f7b912df20e181f11c13d81cca7a8c8add8472786af6c117cb2f528a1d5957e1f1f708db232b34d5ae8ebb7f1dad2e95e3f5"}}, &(0x7f0000002400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000002740)={0x34, &(0x7f0000002480)={0x40, 0x9, 0x7b, "60db5eb3f34fe3732504b2a58ca6d143adaddd2693ce5c0fce1b5e6bcba3326fe82a7c56abca6df338a7517650d4d47fb636c6f3511648ed78c1570b7047a7068263c4fccb6525cf784b071389cf7b4fbab5a6d377dc35cd6178ba1c564cd812dd7b53353c2a95de4d9a8a427298793a49167cfb50d5faa0399aa1"}, &(0x7f0000002540)={0x0, 0xa, 0x1, 0x36}, &(0x7f0000002580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000025c0)={0x20, 0x0, 0xf2, {0xf0, "a2839a8927d951e45803815a298d87b60eef7a8f9a56d91ef675ebaf6f4853fb73fd7fb6a66830e4ac1f9f003b9c517d1dfe7c5e2e9df71ba9b24c17f84054a3c641dfa7d19883fbea32c075b04f0f28b12e9ebfe97130cf33d4590c62426eaedf3be254cdbf0d3425744651d80f167fce63eee2fc9c6866a8205d9896d170dfe5e0d5d86e684eced8667b754ce1c6837f682931b094d3e3a489f6cec2ae327a1e7c4da98bcb02875f8eeb732bb3d41191f882a5e22ff13b540267ddee2cdd2cf109fef4e70d8a67975f1fbb2a70ae17a898bf4fec2b06d6974b1f5cf7779a524c4d08943cc419d93b6dd3770519402d"}}, &(0x7f00000026c0)={0x20, 0x1, 0x1, 0x65}, &(0x7f0000002700)={0x20, 0x0, 0x1, 0x2}})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f0000002780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x9, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "04ee"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x7, 0xc2}, {0x6, 0x24, 0x1a, 0x5, 0x3a}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x63, 0x2}}}}}}}]}}, &(0x7f0000002ac0)={0xa, &(0x7f0000002800)={0xa, 0x6, 0x300, 0x3, 0xa, 0x80, 0x40}, 0x1c, &(0x7f0000002840)={0x5, 0xf, 0x1c, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xa, 0x9, 0xe}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x8, 0x7}]}, 0x4, [{0x70, &(0x7f0000002880)=@string={0x70, 0x3, "ad6bb67d7558aec53db4088e6b15c1592470df8695f263928a5c365fdd8e5bdb704f08af8848624e236e004b169eaeb192bb5bfa9630c5518042548bc432d96bff6b56aa31f7f12818ccc8ac6d3bc0eb03aaff4372f0ff26fa944daaa81a9591bae6bb85419d7bf0d27ac966f38c"}}, {0x101, &(0x7f0000002900)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x414}}]})
r8 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x60, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe3, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xec, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0xa, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x5, 0x4a}}]}}}]}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x201, 0x2, 0x2, 0xfa, 0x40, 0x4}, 0x2b, &(0x7f0000002bc0)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc1, 0x6c, 0x0, 0x4, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x9, 0x80, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x6, 0x0, 0x800, 0x82}]}, 0x2, [{0xe6, &(0x7f0000002c00)=@string={0xe6, 0x3, "359a2c5c43f413f787a92389093eaaf5d33ab8f0366ae179ffc6bbcb143fca138de84a75b77d93b3170855205592b644421cb842797ff2a1c9065002214b971230a5e4abc6777435834ebfba51f46058dab40e4672bfc7ac212b9780a9cb633967b2c7b1f4904c0fd96d0f2956f4f4fadb605dd32ca2ab6822ad161c5aaf4b68ff1e6144656602ce23e1fca840caf24ddbe35398000c51bfab585e26f392d13cda58bc5a90e879431261cda7722278bb810fb6f59622812f20ff22366884229b939af8c62609a54c4436c69e6077fc37eed46e9035bf29c06cd950fca59f71a45b10ab9c"}}, {0x61, &(0x7f0000002d00)=@string={0x61, 0x3, "9c51dad5af30de12ab89231718723293e82e6b82fe5f7037242efefe06897829b76b5d3e661a401d9ade9e58c9ce5f6e75490860c0fdead701ae13f9ef16a8379b94470969edffe30bd788cd8c4fdf21c0ce3f6160321897e3cbb58d4dbc9d"}}]})
syz_usb_control_io$printer(r8, &(0x7f0000002f80)={0x14, &(0x7f0000002dc0)={0x40, 0xc, 0xb7, {0xb7, 0xc, "da7f9264da71f0e0d4f9500f1ff6e1f9b180eb4712590811ec6a1e4a145aaabcdf2d1126b47b8c70805dedf353a14bc698f8c6b7220b251d1c1dc5ead52f1cd9988b88b0aa2819f85bf9a9a1f6df48b5cea223e5c5c4c7d010c9301402a1c800524353059e6c2fa0b5abc964130091a316273d81d0656e562736596fb34d13dce9003afae4e47f360aaf4bfe01a45ac327e6ca960762ad6b96b25132fa08b82827c47efe1f7510abea91c2f5b64e8ddfc2087bfce7"}}, &(0x7f0000002e80)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "6fd3d620f98f2260f7dc10159220900819019b9b3b4df8e72d4da65c4c8382e19afe2aa9ee1c28408ab12c369f8399158ae22e44770fa913d2480f5fa6260a9cb0b17c6ebc8c21cd4388e08c5ad2d3ba677b5273313db76389d00fcf442b99c530baf199f6a8b47c942a1125e6f15b62229cdec771b3120082a4ddf9bda929c2d66ce6f46b51179b1a114f343bcb01c7e33c5f0bb26b9852dd7d100303cd06a26c6968a200744c4f4bef49fe2c7998c2bec161117b36107c9947fa98478ffe89d86c0f7c233eba3382edcc38658cb76c9cc0728171f5d9924005ed31c0628aa2af5750c04fb2224eda5d68443d06"}}}, &(0x7f00000031c0)={0x34, &(0x7f0000002fc0)={0x40, 0x16, 0x92, "daf61f62e028e577e66f8c01f870001e82e4e95b3060787822653055c0c06fd94704668e213ed92a5c07159ef58dcdbe4ab85d2e1f4fffbbde4640f7fdefba8f3fe229a7b02dfd14c12ca57a2c1232b94783d52509a33a2aa62528e960335ec8fd2639702b8336dbc0e97b45182486bbe7d1f33e92b4466329348af0bee6812af530be7928ee727c008840f27360b5bd75dc"}, &(0x7f0000003080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000030c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003100)={0x20, 0x0, 0x23, {0x21, "87db99ef89065fe6f29f8cea2ab7b8ee01e3d7c656b28c604a9cb1f438965e4951"}}, &(0x7f0000003140)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000003180)={0x20, 0x0, 0x1, 0x3}})
syz_usb_disconnect(r4)
syz_usb_control_io$sierra_net(r6, &(0x7f0000003300)={0x14, &(0x7f0000003200)={0x0, 0x22, 0xa, {0xa, 0x22, "062a1c5b3344a536"}}, &(0x7f0000003240)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "339f212f144dcf580444db753e6c5e49d5d50ca67aaccb2b443ce5088a86b43f7a41668dd80c20b4a014c68cff4f3090bba554587d0f16d9203f7d84202ffc688b95306cb54e0f8051490774076d0475fc0f309feacdbb69a5e44ca2a1efaef629f98308a9ee1094dc795b23354789e13d44735b1eb742892d1fd1170ee2637365cae2076a53d4d991def05245"}}}, &(0x7f00000038c0)={0x1c, &(0x7f0000003340)={0x40, 0xf, 0xc2, "b6f30f3153c5bc7015639be7250f688b01c60c6c34e333239f9259af53560458d3182f57ef73fbc688332c7d9cf711a32556f2512e8962a8832f436b7a0653eb9a8dbfe15be6c58147812f3289c457642079ac5a5750923bd834be57498ebab67da1faf25c5edf53ed31d330bec89cad48370dc26da1357d9d4da9ad0f8d19665656ab4fe8f791cf6e53367935a39754b8084644ba362c4779cb199078bd7513953781d9e17195a8d714ba08b1c53170ffcc37427dd6c6f3da6d72dd3e51bafe8721"}, &(0x7f0000003440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003880)={0x21, 0x0, 0x2, "10b2"}})
syz_usb_control_io$lan78xx(r6, &(0x7f0000003a00)={0x14, &(0x7f0000003900)={0x40, 0x3, 0x81, {0x81, 0x2c, "a58f08b0ea0fdb7eedb8f028474e17aa23bc10b905bda4345cfed3ecd5522a1cb8b685a78cddd00c06bb42ac9912edeac7ca8e9d699dfbda1e26d3bcbe886eefcf246688f846eb64142e13465455ce0722e4d6675e32f66718134f8a48d09d4ced13c8a0fb941541524e385b4268f06687bca67986b953ef902ab510444fed"}}, &(0x7f00000039c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000003c80)={0x34, &(0x7f0000003a40)={0x40, 0x30, 0xc0, "7c3fdc8d9756571c72079f0a7c0ac3cc75ab78260ced1af2a8af674fe7d06157a60b9ac6f3a76127e3bb922b61b404a6af50c7404fee11622c449d47bb44cbb78d94af1e530c364fa7772339ccf4db8dc0e8b90899cdb91c5bd5d6914cc753fea6a90b3f3ab44f7f6f5825842ee91211103cc9987e5e55815d5014ca3b7a52e886de88c9fa40e544d7337374b575146ae6d238719c1ccf46d4fb84d2ead82a0fb383d8f347247277ce95ee9b40b25cb867bab43a51fc6d5446a2a04cfc60644a"}, &(0x7f0000003b40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000003b80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003bc0)={0xc0, 0xa1, 0x4, 0x8001}, &(0x7f0000003c00)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000003c40)={0xc0, 0xa2, 0x2f, "e147ac49714809fd51e1ad668fcea17cda30c14271f9a01f994a2746dcf053ffc185a91c12d245f0b407de38923d7f"}})
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r9, &(0x7f0000004040)={0x2c, &(0x7f0000003d40)={0x0, 0x5, 0x8d, {0x8d, 0xf, "fb3ec206441baccb4f9dc36c1c470578b361817d8853c8c6648e1a344b7d5e20b6fa205f2b918343266a780ce99585bb75537243dce4542e2a72379cb38fe0945e76b1b8326dc9bd7c324a0c3d79da1c95bcb19fe26fd69a378bd6b58990e06af815aa28f68420d43761bd78e9d417461f56ecdbfa2dc68149477cb820700826599bab230b6a06aefe25f1"}}, &(0x7f0000003e00)={0x0, 0x3, 0x48, @string={0x48, 0x3, "ad4b7425138da33b6bfb7e6f9ca7101c0719cc05220236f7029f98886673b27688d38a197e4ec440fd7bc0547a966b0b779a5f3e4b17c7f25508b0b4cbbf7766497eef0776e6"}}, &(0x7f0000003e80)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x1, 0x8, 0x2, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0xfc, 0x4, 0xe812, 0xf00, 0x3, [0xf, 0xf, 0xff00cf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x4, 0x4, 0x36}, @generic={0xbe, 0x10, 0x0, "4f01c2e2d086334ed8c25dd54585d693e1ff1ded8e54bd934e7a21df991dfc95e73a687ad1c8b7d4dda59ff1396bace7eca3e9650480824238af83aaa796d153aedc88e320b0d3b2e2105c853172ff9e3d949e53c74974930d395d8aa198860df27195e9b27549554315d61e6730021af38569c360aa4f525518bcd8cb94138ff2c1292735524db75aa5ae77c57201ee2b6d941e7a273645f5a8156632babd8c13619bfbc4281528274a99a90bbcad12971cc2f2c56dab24b12f3e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x81, 0xa1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x7}]}}, &(0x7f0000003fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x40, 0xe, "e7806aca", "c72671eb"}}, &(0x7f0000004000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x2, 0x7, 0x8a, 0x4, 0x3}}}, &(0x7f0000004500)={0x84, &(0x7f0000004080)={0x40, 0x7, 0xa4, "675836b3c28477c06ef7655c43c27b549bdb9af5225d68d6b484c25d68247f7ce08d74813bb8f3de302e2d6ac54b3c30b913530d84f93468e852ce349a856c6a233fb9261d95fd9422b4c1ea5e6bc2b590927723f0626497bd12b09cb8a81e9e3abcd43cdbd7a19876857d8fbe925511436afaf82a5e0e17fb752277e32996886a3389fc84e3824d1c68887d3a1bef9bd9974e63c356731d7a6473a37b4d1696975de308"}, &(0x7f0000004140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000041c0)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000004200)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000004240)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000004280)={0x40, 0x9, 0x1}, &(0x7f00000042c0)={0x40, 0xb, 0x2, '?3'}, &(0x7f0000004300)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000004340)={0x40, 0x13, 0x6, @local}, &(0x7f0000004380)={0x40, 0x17, 0x6}, &(0x7f00000043c0)={0x40, 0x19, 0x2, "893f"}, &(0x7f0000004400)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000004440)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000004480)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000044c0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_ep_read(r7, 0xf, 0x48, &(0x7f00000045c0)=""/72)
executing program 3:
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000001000000004744c01a00d253c60034bc21e71d09c86484aa3d2793d56e4a20c2d83f887f426886c7a3d87db8dadb8b1c01af4e26bbbc8eb7fbecba34decf14ed56239391287060f52fa14018fbbce342ee453b8de7c88cf0fbd8315b6a4c1bb43735adf6e8722405f7f307877c55a7e2820cb5bccc79a2a72cf88ef293ff1398b769959d66fc0c865a2f5e2fbdf262554b4e7a1aeae3f66e85e91574bfaaa0431e5dd4da8c85be32"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0xc2880)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x9)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0x89, 0x6, 0xb5, 0x20, 0x45e, 0x775, 0xbe3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x4a, 0xcd, 0x8b, 0x0, [], [{}]}}]}}]}}, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)
r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000740)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000012c0)={0x34, &(0x7f0000001100)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/4096], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x5, 0x44, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0009190100000009003f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0x45, {0x45, 0x1, "61639c545d2ce9daa7602630c6863773fddd911869efc824c337939610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d91250100ff9ebab15e9ecea5e229"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/42)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7a, 0x91, 0x8, 0x40, 0x50d, 0x122, 0x559a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x12, 0x60, 0x43, 0x1}}]}}]}}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)=ANY=[], 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000000c0)={0x20, 0x16, 0x5, "8f385ccae4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x3, 0x23, @string={0x23, 0x3, "e1bfdf8a1a5e9273a3c72abc6ec0555ae9e5cc0b2ffcb64b7e045093fd75c5b2b4"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)={0x0, 0x3, 0x37, "7566820cf81b0a78da7e78f1bef0aad34625282cc30eeb6dd6493a39823fdc9b6c4007bf8b58828f409242206d3ceb9b4817a33f385a23"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000b40)={0x20, 0x0, 0x81, {0x7f, "88040af619b329842b906970d89ccb661ad360d15d378823729b19f5a55f7841976b4d96f03ccecbf8322d4324e669a2c69d010d03cf67407e32afe92711c0cd267fea5d07f773d3a9c7a1702435bcb059d9eaf2573e85d1488268afd5bef0105afc64f459fdde081ab8bd8740825f9943e9072e372e55cac4bbeb29e9df75"}}, &(0x7f0000000ac0)={0x20, 0x1, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0xf}})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000940)={0x40, 0x8, 0x1, "bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x58c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xca, 0xa6, 0x85, 0x40, 0x2040, 0x7070, 0xe5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57a, 0x2, 0x4, 0x3, 0x80, 0x7, [{{0x9, 0x4, 0xb7, 0x3, 0xe, 0xf0, 0xfd, 0xe3, 0xb, [@hid_hid={0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x864}}], [{{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x8, 0x5, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xa, 0x7, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc}]}}, {{0x9, 0x5, 0x8, 0x2, 0x30, 0xb, 0x4f, 0xf3, [@generic={0xb5, 0x1, "b3635cc26a7b5bbe167d2da0d0c25a7c6b9d1daf9672e30986576e6a71b2aab59caf72fa3dfce227b1921f068fd78c3f4a1f28f7e4ebd817f1f33b01b8ebd0133b903f3b060fc640b7bc672869a368820c2e3c3fab4c3c8820625c15e32bfcf77bc33c5cb78ae35c205511550de3df15c8fa06372bb78911b98b917ee107fd293898240aee076b1ea3b5c747522b1f85825410474ab32c31d42d25d8c44c849e05cfaebd49f89c197c7ade7018e76892059a69"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x2, 0x10, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0xd4, 0x61}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xa, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x1, 0x8, 0x8, [@generic={0x52, 0x23, "d4329b13cb35b9e2b17c05dc4e1032535c2f9fcc119686cc1feb699462b0a62bb179bfeef0e37a0e0e29bf36db31614a52f5d0628f0d2acef0538a58c59409f0ceb9304550a52728683bb76e1df5c2bd"}, @generic={0x68, 0x5, "ab64f2d0d986946b2e5978ae1c7128779408349a5ceb75f5c0f3122f44ac7ccb8b09ae1cf283c89eddd3b75beae5d8fa78f0ab9f587e8e506ba992a1534d95e16de3f8e05cca7ded065715891f91bc1e702b3e587f104deb636ceda25e86ee6de376c2ba00c5"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x6, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x0, 0xe, 0x80, [@generic={0x1c, 0xd, "c33247fb69b29cd6663ac72890d579733f249f7b891cf4f1eeca"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0xe00, 0x8, 0x5, 0x40}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xef, 0xf7, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x4, 0x1, 0x9}}]}}, {{0x9, 0x4, 0xb9, 0xe1, 0xa, 0xe, 0x1, 0x0, 0x5d, [], [{{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x10, 0xfc, 0x7, [@generic={0x85, 0x10, "d66ec122d9735ce68c1bb3d69d6a6f3dad93fd595d44333637da4da833c6dc1aa8e6f4ab218361aa84213e9271ed9626f06c00e547ea3679c55233eecb68033c1e9a51495d30d4e8800a36321247ff7b1b401da928512ec6b3e43729b4897704ac2c8c40908d14a91f89c489491acfaae8143c8b72a1c3573c6eb3798743e597d8cec2"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xe5, 0x7, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x6, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}, @generic={0x36, 0xd, "a320acfd74736f00e9d84412f20bafe4adb3839ae85dd24857940af6ff7d404a9f9a3e0c2b01c101d65cdf0b19ebc741bbf6f138"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x7, 0x2, 0x7f}}, {{0x9, 0x5, 0xf, 0xa657f46691bfac83, 0x40, 0x9b, 0x2, 0x40, [@generic={0xc0, 0x10, "2d30c45461e06f53bf5ba5893c6060af5597d378e9b6feb2c663d3c68ba86a760eeab183f90b00ecd6fed06aef78609e4014158d214ea8da4b3ea523746af1e71c35a544abf4314a0324197b7213a74e451fe749c231aa79762d5b666e40a2204edc4e366409884018fef9dfc5c432baf24f4a12653027d17ccce428b6e9d1f87b466098b10ee3d1fe8803be01e23c67537b6c5273d234b471c083d568ac8c50e97473e3907839b55d7fb2cf155690869501d5b39b138e6f01148cc3bd10"}]}}, {{0x9, 0x5, 0xe764ffd2de03c356, 0x10, 0x3bf, 0x20, 0x9, 0xb, [@generic={0x13, 0x22, "aa0f8b4f1da820136886e2bc91f1f71569"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x25, 0x6}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0xff, 0x5a, 0x2}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x7, 0xf9, 0x3, [@generic={0xa4, 0x24, "04bb2d77f92e3324d535d36dd1b39c0fdff68487b826aa104c27fe312c93ccab1c0ab3fd4d37044aa313bda645865b9660e5489f1bb2adabefbb2776643f0fd0c941531347cbadadb59be9426d91fadbc290eeab7391e2a7ae4faacbada52b39b1fcf21db491c78884b8bba8d353e66abc64b6ebf6aa7d7ca8cfbc70afa12ef1660903fdcb523396243f30634a89f736c6f9a92a09622cfbf0d6017f742da974adf0"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x2, 0xd, 0x7, [@generic={0xa5, 0x4, "c5b654b89c6cb091e50629a85a459daadc643872a19cc41c27483dc0e1ad9b9c8686da6e1488efd110aa71414a872bc9c5689a26ff8e9282b1b2072199af1cc313f38f41a199acea3e646b820ecda71ddad3e899d0a47927b84a6c927269aaa41c4c13d430fdfebc237da8f31162c526984ced09e5eba9cf0052cc64d4c1f6589f21062a9b7eba81e4708f99332e156fde5f155f70c9f7681c64b03c87c2c746b13790"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0xb, 0xe, 0x3, 0x8, 0x3}, 0x24, &(0x7f0000000600)={0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0xff, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x0, 0xfffe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x10, 0x2, 0xa, 0x5}]}, 0x4, [{0x96, &(0x7f0000000640)=@string={0x96, 0x3, "442d6ff05d3683261e70c7f2539b9dcd21e401c9cf164df401f7af671d4677c38d861f7dc7988b5b41c812a0044f7c09142486ab2f7dc9b81fbff76d77fa5821e72b3a049bbde4ddc14f6695fc7038238e0708c7f6f8f4bbb72d36f37b932167fa4d4a5cbf3d11e789c76652eaa4b2cde6130cd8d65ea0ec686332d2146eaf69bc569652a1fab0e1041c714948417751cfbed04e"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x202c}}]})
executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x80000001, 0x4000)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000540)=0xf947)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xb, 0xf9, 0x8b, 0x40, 0x4f2, 0xaffc, 0x8861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x3, 0x6}}]}}]}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)={0x0, 0x0, 0x5, "19e7c21840"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000500)={0x14, &(0x7f0000000080)={0x0, 0x2f, 0x85, {0x85, 0x23, "b2c64aa89aefe17c96697fbf2b127b08e15861215a9a3bf307ffed7e784e6cad09d4576c64a26716dd673f97269377a688b80eb7902bee7b4211d9d47f0089191f75063189a6307f4646649daae31921f7aefde6d89fa5b2f75d1a679e158cd55654052aaa68c65d0e9d909f1d7a12ebde3dac8c7883a9b2534dc3e4a3fc5e3aa157f2"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xa, 0xc8, "45fda493a389a2ea70511708c475d7983a211870d7efeda80ac45ac67fbb6d243655af7f4ab50f25b06b7b884a84f1117e8f8a132b5bf39bd644286bf8095478aa1ec1d30df829ae44e6e83eaede43381f5819f556b05ab6d78e8ead52e366dfe55702fb7802a912f4acade4954f7ed6fffafb83578c496cecb8ddeadca4a6d57bdd83545c6bdef4b903945a73dd3b9767b000d6dd252ed3486e1965141c06bc7600714aceec191000369a5ed4ba59e6384b66b4e50db72dc6705e5569d19145ce95a7e23b9855e6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xb6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xa, 0x4, 0x3ff, 0x10, 0x9, 0xffff, 0xb, 0x3, 0x2, 0x8, 0x5, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xff6}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x1}}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12016901020301098bd400060000000000041b1605bf45cfdc28b86ee900d097fbeb7e2eab3dac2e7289"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r4 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="51297fec0d006efb92da3338"]}) (rerun: 32)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x18, 0xd, "d71fb2532374b2dc0ecc6e75fe"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="400401000000229e4b22457ced3350d9407586141d260ab35694e361030000000000000073767847efa143f178e0d09cfb3c58ac5a5f09654b1e1e755bbdf69a0629487b3467e3a631233180e08e3b2c01462d66bc7bb455eadbc09ce7f9bb64131ce4dec8739934d8f796ca451320a30c18fdeb934e6f38a21c021729dbe5f4ef85b5b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, '\a'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}) (async)
syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5f, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYRESOCT, @ANYRESHEX=r3]}]}) (async)
r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b82"])
syz_usb_control_io(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb6, 0x7e, 0xbb, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x20, 0x10, 0x45, {0x45, 0x5, "3b651763da0333ddba3802cef5e0a7d40d0590cf8f72318d8b8e9187148f258cc9c51708e1050062e15c69a5a57c64c94d51a60f84a4cea30c43ce1055c03a00000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x30, {0x30, 0x22, "8d59c558a39345c1a394b39b141da059998bb6a7794f8f52df8ba269cbdcc2a3fe0eab6f8e26e1585e32d7f26589"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x20, 0xc, 0x3, "5d7e9b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6c}})
executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000000000010902240001000000000904000001030002000921000000012207000905810300"], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000000000010902240001000000000904000001030002000921000000012207000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x2c, {0x2c, 0x22, "59a1b95388e86f7ce9d75a2b3f35625d0250f43e646d7c8f11417a2bb75dde3f07880eb462d1e3d90785"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000500)={0x20, 0x31, 0x2, {0x2, 0x9}}, &(0x7f0000000580)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "969dd39d5c10c40fc71d10b14e99c8b38d4ab82957683996644093f768d6a65de596938ff8ffb25444a08976fd794ffb12b2c012330677b84f21a5f7b51654e1f54cfdcb3342dea70c69d73d5fdcf3de839fff135aa15d905c510540d647b3f9a68626de34a322c433bf32e566949d1642cc44295601d26ec57249e3f180e435ee5b3ac65a05605573cd67e8d33e9a194c103402a34669135aaff58c1dcf8c4f19b59f7d7115e50a4228bfb2f9141bb09a034113fab868a04c6ce940c9d1bf0a60928a43eaa168e6c2eff910f88207722712cb023dceb289678bdb1b2175d9b1c3d22ca42eae6a5697"}}, 0x0, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x1fa}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x20, 0xc, 0x86, "2c4e73857c3f07283181d1444f997aec8238907f929e182de9beabb11ef7814cbe132322225aad9e195d29ac8a9517fbebac562adaace557a67856b683f102cb14b0bc859167b4f8bcc1bfd1659971efea7133366134cc7677450625b6449585e342d23b5ef7dc4e1aac9ef1152b84a3207bcb53e41ad4506faa51323410fce20b0510e5325c"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x51}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x1, 0x56, "bebb8622aee0d6942c34995d26e288811e72f738e310e8944a9620e34f4c058f7af2917abfd385d8f85eacd00d32e3ffb18c18c048f21c851a7b4e9659ef3aba9ed64c49213b6c60868ad4ce38492f94c68445180d34"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0xf}})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xf7, 0x93a, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8b, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x47d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x59, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x5, 0x98, 0x20, 0x4}, 0x69, &(0x7f00000000c0)={0x5, 0xf, 0x69, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x1f, 0x4, 0x7d8b, 0xf00, 0xf, [0xff, 0xc0, 0xf, 0xff000f]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x7, 0xf2e}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x37, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "04deaf1eb6b79092e261d078c93dece0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x3, 0xff00, 0x80, [0xc0, 0xc0, 0xc000, 0xf]}]}, 0x5, [{0x51, &(0x7f0000000140)=@string={0x51, 0x3, "cbe10172fff59a4d9ea231d43c4ec036a5c756aae44b2e3a33e47be346636a74f6ee9bd65b4186e77380fef583d9b73fd616a1611eb69b470de7c6c4eb16cc20d1d12d0ed85669fd84fa2b0e100b67"}}, {0x3b, &(0x7f00000001c0)=@string={0x3b, 0x3, "344a7f80358dca76acc0f717f8d8dd75864a009531d8924dda935d79cb11d0e9ec0140f52716861c9d66787e6da8b2e5da5fc2dc71ca6e0f38"}}, {0x0, 0x0}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "d35acc250ac4fdbc4a4cea6cbf272fbfc501ffa041c67bd8e6d5755490b8f3b70e45e9489f528b23ebaebc0982edd0e44cdf08281ab49ac399ff5de54d46465bd3007d62f887c57c345f8cc9e4b90d044ac0026f857bb29ad31684dda72ab7205f338b27ddb008c8194b3ebb3c4bc8ac00762f4f65e1d92ec458721a3f8310d40dc91513ebcd3676af95db65299ec02557857c310111d4900422ff0d599ba2f1b6353cd0cb2b45c9235d0843871441baf53b002755991a8ddc956e3bf84273b754c24d7d319e6a88f82b3042380d77f0d13d3b8964a3db16590ca6f5fa155d5f2cbeba05c2d9"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x459}}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7b, 0x90, 0x93, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xcf8}}, {{{0x9, 0x5, 0x81, 0x3, 0x50, 0x1, 0x1, 0x38}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa, &(0x7f0000000140)=@string={0xa, 0x3, "6bea9804fcdb17dc"}}]})
syz_usb_connect$uac1(0x3, 0xed, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x7, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x75}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x3, 0x3, "b6faa0"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x0, "eafa6b658a"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x6, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x4, 0x2, 0x68, 0x8, 0x7}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0xd4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0xd8a7, 0x3, "f130cc3130"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x6, 0x1001}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x3, 0x3, 0x1b, "f6fe77680c0c13cfc3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x2, 0x2, 0xfc, "", "f3"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xc, 0x3, "23735f46ea1d6a81"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x91, 0x4, 0x0, 0xf, "b6b7f06822b0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x32, 0x2, {0x7, 0x25, 0x1, 0x3, 0x3, 0x6}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xff, 0x40, 0xe, 0xff, 0x5}, 0x10e, &(0x7f0000000280)={0x5, 0xf, 0x10e, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "8ebeb21eebad412bd4d9fc7820cd9b21"}, @generic={0xf5, 0x10, 0x2, "462e34e7e8aecb7d46fbc477ab732ce9ab177988c496d6714e31ca1940951557b681130d5f8d1e49997e54a33d241b6b008c057edc3ab61905841242a65b5fda46801013efe9c3c9fb4cc932808f5ff6795879e54855cc9b8de5539a9799c7b4cf07a47a745bcafeb153bd45a6263f08f4050e87422d173843a321e866537b267366556a95fa1d39b1e2657e801d305506ff6d74378a9fa36911a370219486633ce5d9e16a21d02bdb5af8dbb873a8d9ced44624cba688f03aee93c5cf7fdc571ddaf1fe204026cc2cda949783490b3246ae555749efc1e106f18d0b26d60019c0d050ea88276a934c6d866f991e5017347e"}]}, 0x4, [{0x13, &(0x7f0000000080)=@string={0x13, 0x3, "d2effcd3d575a3b62525a62c6038892fa3"}}, {0x95, &(0x7f00000003c0)=@string={0x95, 0x3, "06284c41c9e0e36946cf10fb52f44c89867f4bc1167e538d4705632252fa20bbefe0ed31d434cdbd7e4f15cbaf69e303585da260152e62fc70349322b102a9e4309efe00dc0fe79c34c7af88fbfe2b512e00707057f04d5462e06b502370f341ab608d1a8467cc7b1e216911f345b469c11c3c2da5250967cd88a36997341f59e5754b00d05414ec3a6867fb4fd1b7a491909c"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1d}}]})
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xfc, 0xeb, 0xe4, 0x40, 0x547, 0x6801, 0x436f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0x44, 0x13, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x7f}}], [{}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x4fa, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0xfa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x6721af478ba0d41a, 0xc9, 0x9, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xff, 0x3}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x1, 0x10, 0x4}, 0x35, &(0x7f0000000140)={0x5, 0xf, 0x35, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "5e8e284d8e30b0c2d18336e1d073e2ba"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0xd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x54, 0x6, 0x7, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0xb, 0x6}]}, 0x1, [{0x7, &(0x7f00000001c0)=@string={0x7, 0x3, "6fd2f072bb"}}]})
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r0, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
syz_usb_connect(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x8e, 0x8, 0x12d1, 0x42f7, 0xaa47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x1, 0x69, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}], [{{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb0, 0xb6, 0x82, 0x10, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0x7, 0x2f, 0xdd, 0xfc}}]}}]}}, 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x14, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1c, 0xb, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x0, 0xd6}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x310, 0x9, 0x88, 0xd, 0x10, 0x9}, 0x44, &(0x7f00000007c0)={0x5, 0xf, 0x44, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x81, 0x6, 0x78, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x4, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x9, 0x1e000, 0x8, [0xffc030, 0xff00, 0xffc00f, 0xff0030, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x8, 0x4}]}, 0x2, [{0x6c, &(0x7f0000000840)=@string={0x6c, 0x3, "22f4be1bee4527d323445d3c20c30568a132df5cbd80d33fb674edb1c6b829630ba75d1e11d4839fea048368ffe1855f015b1b9f41fdfc3443856b0eff15449ec924026a8e52dc6b5688ccac7370b717f0562551da6f6e4da5f524b77893bab928cf583b65a1c19cba00"}}, {0xc5, &(0x7f00000008c0)=@string={0xc5, 0x3, "d1770f9091ed2f72465569e216e3cfc1bd220513350497be980d7632e50903d159a315ec47d6bc18ddd6f72a7c0544178cc4443642f5b94a8076aa803a3fdc768273a797615a4bc12da24bc556612a098de52d66172314bd16ea36f524e56675e8f43ee7ff59c1943e4a03fbdf1a1d1190170500b61a0b553cd13df026efa6f7de79f5ca051a24245c3dc26b26737e540efbf2edb4b2141aaadb610d4a20c909ef2e0397f8d202266b8a8e8d5b573f7d624080d77a32e2aff99ced1b69a9c1da8dcad7"}}]})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x464, &(0x7f00000002c0)={[{0xa, 0x4e00, "60cd2723eae4d1c78cfe"}, {0xef, 0x4e00, "cf5f282c9acc5ffd425b78bd483a78fead1dc900109fd61ed7a32e61a4773da1ef5c8510303a3492b1742fdee0116b7fe4d6ed57189fbf5fde25fe9115f78c7e7020fdecfc75525ae3e269b5872a8456251f17884042583f3cc81f549abda5a517a7e330d53e67197c55ac149db7443a33fc21d942db9fc5bf0405f54b01c57c070d50a5fc955bf7490c46e35743af9d570476060c829ffa92e50423fe1ab3fed64fc644b9bae0384f1221da34e36fec284542226618dd3d01f366cd9a7575769a616fff17d95a11d4e242289a1decf3d4faf3639741f298072dafd8289125f0ebdec4a50d6f862c47eab98c2f81d9"}, {0xd0, 0x4e00, "434b16f58658ff3fe9a1a1dde2a89c071799e45a488419355e176f45fba095b0e2460497ccbd173104d41f8959a988225150b26cb0c0b320d2454f94ae89948bcd8eef622212f830b58ca6a4f5fed36bb9c458f54c3130b44cc03961d22280ff84f81672ad5de0437c7ead0d09cdfb849a876f9ce547d7a0a0188e7cf48dcceca862af22860a05faf99c54ff1c7bcd1fa10a02dc6f7dc85467082457bb64d1d23957b22b3f1370859790e54eb10ee9e6e6a6884caa1fb0754d8944e7010e6e23c144be923f56d803b8b0e4712271d9aa"}, {0x65, 0x4e00, "8611e856a63a8e8a80c2fd9605e560c21ef5ff7bf940cf779916e502b90163ca3123dba26ab1d20a1991151afef8a504cd894d39fac8ed78566327ef5621424dc272443a223f73cde51fa8e2db0be2ac7f349f0dcb433ed12c37ea6b75928c6d5f5a216ec7"}, {0xb5, 0x4e00, "7bb1b4f713b744f6d37cdc417219e90acbf336cb3544426d4aa2f36787ce3b0a49cdf3f370cf63aac425251d701c1585144d386dc1f1df28b193e3d2aaa03cbb39c6e886087b194d9a970f72041f7acf01bd05ba957d2971b893e95618bc7a29d87d666b9c5fa40cf923a29bce5bee53f81d1be339d4f1d02653287d9af652ef4c180fd2083308fe6fe6caa5ea5b7895a224028ca6251606f219fcf959d32db0cd4e9cb65ca5d5cc10a762b1ad16ab4084d681887a"}, {0x12, 0x4e00, "3505bfb450f6c40586b3cfddc6835abd7869"}, {0xb4, 0x4e00, "c3d6344fb5f608334414f04dbee9bd876a85880ce9c7ac3ad214189c6465b3db50813c16a640685a941f7d3d7be2c3598fb1e1ae86676b4923de3f7086ef04a14cb976f4008ea342d9e7ff96089ce0ec626eb903a297fa740fa905888d833f294b67c7b8ddab26b09c9077e6fc8e1e6daa36a57a2cf55948d80272d3262c485fa1eadca511dac21f910f2bcc6a000648d02624f2c01e966c8f4e214ab8601bb5fc4f487107d07d73653e08196964ef6fd4cc83a7"}, {0x8d, 0x4e00, "59f03d633959e9e79900865edd73d19d5a22ddce8ccd8f6e0ccc127c8afb91231f198f5993ce78b6149f07ff53cdca05cd6b17847b46e0cfec17df7a027db364db92e5594dd869e830fec8c17c5b966c0180ebaf69416400b582d3734c82d9fadd0942b337b2917c7cfdde428941bdce38cfacacbf4e02eb769b31f7bccba1260366f09a04ddff9ad7c3d488f1"}]})
syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4b33}, {0xd, 0x24, 0xf, 0x1, 0x8f, 0x6, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x400}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x4, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x40, 0xa}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x3, 0x7c, 0x20, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1001}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b40)={0x14, &(0x7f0000000a00)={0x0, 0xe, 0xbc, {0xbc, 0x2, "f8ec5f2243f015bcabd4911aec6f022aea604477c538b7b72937b424e26bcdf55c8db95eed95b924fe674554ef5611949e0619c36e20773b523737729e12a89673ec65661db2cf0469bfa80fdf7c8fe5fcb28af0556e533be810cd5128cb2e1ec6994748bd4e95230344f0282682ab147ef99b30d864ccd3a8670aa13b27e1e9d548314b65d534c256d5fea29ed3613afe06aba6984a241c006d36e420de1788c1f9e244a5619381acef4177ff315a95232ffb8129b0684c6ea4"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000b80)={0x40, 0x0, 0x65, "d4446ada723e1d0edd95c85ba30a3ed9dce490aecd62a5a44bb0651e66d2907263a8050e8991dc8e110acd069cbb994e5e8792deb9f8492b9e298cb6f105f2582ad3d0bdb46e0a7d7cecaa7a118917e9e0f031cd3ab0746bcb1d40a035460bf76e9e2465eb"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0x7dd, 0x8, 0xfdcf, 0x5, 0x2, 0x43ac, 0x401, 0x6, 0xa3c, 0x0, 0x80}}, &(0x7f0000000cc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000d00)={0x20, 0x83, 0x2}, &(0x7f0000000d40)={0x20, 0x87, 0x2}, &(0x7f0000000d80)={0x20, 0x89, 0x2, 0x1}})
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100fdcbc7e10860a5031563ee96a0f43af0927311d6bbe70102030109025ddb01000000000904004d2a416879d464257395ff015f83db08af9e1cd5554ae8d511bfcb35c2da8f126866b8352470f6f5b31cd9295d0107d51d727102d4cf8fee414cefb7e7b243769b4eb9e3f28dbb3e8bf53f925b7e5c0d03e255f90d8ff7bd859e809bdfe3825fda6ee08567b0e8733238ea"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r0, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b716612085140100653e01020351f6f00500"/36], 0x0)
syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000180)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000388e1920bf0aff334bc101020301090212000100000000090469000006613c00"], 0x0)
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x410080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/182)
syz_usb_connect(0x5, 0x33, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x15, 0x60, 0x68, 0x40, 0x45e, 0x2ae, 0xfdb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x60, 0x4, [{{0x9, 0x4, 0x12, 0x8, 0x1, 0x6e, 0x71, 0xd0, 0x9, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7f, 0x72, 0x3, [@generic={0x6, 0x5, "40df3d0e"}]}}]}}]}}]}}, 0x0)
executing program 3:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r1, 0x5452, &(0x7f0000000240)=""/77)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect$uac1(0x1, 0xc6, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010102000000406b1d01014000010203010902b4000301a200f30904000000010100000a2401030000020102090401000001020000090401010101020000072401048c03000c2402020808240201000482d43fbca00f00f4500bb7cfec0905010940001d01bc07250102000400090402000001020000090402010101020000072401000405000b240201008c2a805202050588e3350724010e0a04000e24020110030265810b38e1bcf109058209bf050003ff072501"], &(0x7f0000001680)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x201, 0x4, 0x0, 0x3, 0x48, 0x6}, 0xfb, &(0x7f0000001300)={0x5, 0xf, 0xfb, 0x5, [@generic={0xd4, 0x10, 0x1, "8ed7a053d347ebb966bc8f8b80fa1943023231cb42df0f174bee319d98718ad9106cc25ec7ccf7910c4e6a7a3509e255bbd177c0c1ab8723c2b254665f8961719c38285d053cedc01fb9c7640c6836670c155a057fa9066831e07b1c9b7221abfadcf9508b66589c109f5bd87c148dbd2f3606f6ff7813b3f659b996c9a805f0b545edbdcae9d4b9b594b2ef67449be22637964c650e12c25b69f0b5d4eddfba134220a0e2c535448e3cea102504446f09fedd8dbe681ae31f84743479f9aca312288ce9389010d5b5a63808273d08c847"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x9, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x8, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x98, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x39, 0x3, 0x101}]}, 0x5, [{0xb9, &(0x7f0000001400)=@string={0xb9, 0x3, "20910ccc5cf6cbbc75a93f02c6726b6911d56b9c6bd83fb4ba60756e75880ee26b7528e7b0250d9d6e7d20fd91a166c585f9280051218b5ceec0a994b425d10d06dbe0accc85efb4019dc175efb0d496f917af139740e6f8601f0fdd8133d3095d357aee7336966f8a5fc47c16f89a693226006cf4cee59cefbb090ce9606ab0701f21deec567ccf3cbe62b8581d3d62c6e12ccf9940bcf735423794ed2f1de127e47eb7faa5252b64506633e921a2b9880938a3304346"}}, {0x6b, &(0x7f00000014c0)=@string={0x6b, 0x3, "6b7c572d1b283602b918deaa67220305b59f05a20324154d174cc0be2ad62afd289fdb46e18433dc3804aa5a3dfe694955aba4795277cdbb87ce6e3d4c74cbb85f0fc02d6b8ecd754f003928fdc62ecc8241afa338677cc6321985573d70c28304f8a437acf0e483e8"}}, {0x70, &(0x7f0000001780)=ANY=[@ANYBLOB="7003eb4f7f2ce14a6ca9371494f3ff9088d3775f75b96219278630804cc20375f1bb77221b31ed4e2e1242c8a0cc854d53c16ad42881040ada16a31e174577bb0294d241bbd85d2c2394c38d17ff13916eec9eebed82ab4dff9107000000624d877c6697c0fac243e62e4d277b59f3db9481"]}, {0x3a, &(0x7f0000001600)=@string={0x3a, 0x3, "8fb48ac8d5f4ee2b023071cc2322f2a73050bec4ed19c346378f35516895d53ce7ff3078f1241cc2b5b77b45e479bb6194094166ab390cb8"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xcf, 0x30, 0x40, 0x20, 0x86a, 0x102, 0xc8e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x95, 0x0, 0x0, 0x1b, 0x53, 0xda}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0xb92, &(0x7f0000000100)={{0x12, 0x1, 0x1, 0x14, 0xe8, 0xf1, 0x20, 0x1b3d, 0x157, 0x8d1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb80, 0x3, 0x9, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0x56, 0xa, 0x10, 0x2b, 0xa6, 0x25, 0x8, [], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x3, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x3, 0x1b, 0x8}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xb, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2a}]}}, {{0x9, 0x5, 0x9, 0x1, 0x260, 0x6, 0x5, 0x0, [@generic={0xd0, 0x8, "bf31d8397106a4171293919b9622de0ac91e9ea83f283f68de55aa3c4e634db30d2ea79139b29e33120d3450ce043c1955a754c5a0c8888f5bb189a5c6d86ffd693faa4f89f496fecab266015b4941627307dd272b32500eb0567c8d87bcc9e8a2a21c25ff3249635fd0f015a8155a21705be0ece405b3cbb5f4e6705cd149acde63d636831240b84e8bd8736351be6a8134ff7c4ff5649be908031c8ed930d2d0a01b7ce5266003f207676b430d08084bfea2b3bf00951113e1a3ac40188e23cd33ab6a456b7cd0ca151028e0fe"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe2, 0x995}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x13, 0x8, 0xec, 0xd, 0x1, [@generic={0x102, 0xf, "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"}, @generic={0xc8, 0x22, "d597ade9c83a31f5feae5b0f46f894f607360f2239f7856a91bf693dae1e09838aff5850b373684ff84460ec484daeb311db3efccda4ed596ebeb1ee0197662b86ff5bfca9661afbc69488922c958081a0a4d93b6a8dd261cc0496bc4043724ab9b9ae0189f286373c3d4c2b56926df6c7fd45598dd8251e851559a4862d1c50918f0d30f92f70b2adf72c68fbfe47e9029902f77efb81c94a02e99def5bded140d7af5343de1e56cd6b1ac69f8af7507f0fa03cb2ea02e0357eebcf46c1ed7d2a2cfc916778"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x6, 0x80, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x80, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfc, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x97, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x4, 0xb0, 0x4, [@generic={0xe4, 0x21, "fc2a7be64e52430ed1a21943e5df2cd69fa69174fe6e66f0177a15144b020f9a2ae75064dc6fc5c661aa9d97bdef38754c3fa5af58d2692bc56c6dcdcad1ea31746b6cef182ff95561edadbac75316a3e45b1f246c812520f146f98e3656f02d0bb74c26f5224b2dbe168c99eb05f921b68d1323ef2bccf0a4f6019dd6c7d5eb587e4d2888a0aad85fa6b137660cde4e82dc98cfff4411a986620d5d7a6791549a97fdb6edf87ac159f9c6eb5bd740da5bf4b63b997381b0176cabd73d2fd38d0078b4d6cd2b13c2713f73017cb5a6a1dda3a375514649e0dff10e44eb342b30ee50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1f, 0x50, 0x2, 0x4, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x4}, @generic={0x89, 0x23, "53c63cbb2f7380bada209d25714f84bf0254537d94118b39acd0dda13300b10fc7eb723777a0401cc1fcca412cb448d3ab1a3922f5066d081bfe0be4c9cb90562baaa2b5a3b9c39f7d417ee570e45b765b975c8c95af80dc5f0d5c40a356313b2ec247a61ee0afd4cc729a5d0a518a411ada01ff924f5e5078636cf20e34d0ec0d3983be88cd76"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x40, 0x6, 0x6d, [@generic={0x93, 0x0, "550117f5fb92a316e044c685419afb8d1a936f9890ea01eb3406cebf8bcd1e11b4a769ffacafa123afe7d446cf3db665fa29e0ff629d3f88503fb5c7a575aa10605f486af753f1999d00d615524e368f8481d60dbf24aac62529e282813b24e2aca1f0e667936cec1402ddab80478e6bef4239b6346dc14395c40ae09b9a7d9869861654f3220a97a3f9c5600d08f65878"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x4}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xc, 0x1, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x31, 0x3}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x1, 0x81, 0xc5}}]}}, {{0x9, 0x4, 0x8b, 0x3, 0x7, 0xfb, 0x73, 0xbc, 0x40, [], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x40, 0xfd, 0xff}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x7, 0x8, 0xf, [@generic={0x42, 0x4, "e645af89aed3d74fdb4ab56a78c8f4d3a2d2ee1b163481a8ac79d56faeb54d98de716715feb5fddec3b419c19c06c83499828941751feb17e0d040ab217cd438"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x7, 0x6, 0x9, [@generic={0x22, 0xd, "befb6a3042d2b6e67fb3552570acac21458df916d5cdbe5a94e51fb456f324de"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x27, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x9, 0x0, [@generic={0x83, 0x21, "98ca644bd5cdf971215cf9d057acaf2f51ab574763615a31961d8dafaed300b363c03d563dd7fc8aebd81a609c3aa3e08854154014800a49b95dbfee6a153e531c78765dfe68d516a5b25f9cdddd87e8b818c6f7f5f9d7057a07d14b5e57b91d45f5ccde4d2752abe53689f016cf09a8624c89f7a6f62c2a5b66ed3ea18109a1a7"}, @generic={0x5, 0x30, "c7e5cb"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x65, 0x6, 0x2}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x71, 0x2, 0x5, [@generic={0x7c, 0x4ed12c2317bd7753, "a7dcfb084894186ea7f9fa9c3842a54bb565464107d808fd5c68fa7815b1a510ba04fec8118eafca92b1424cc27e64c95a7c00334926e2d4cdb7250ec567c697b1fb287cceee781db14694ac28b54a10277713af2d7fa032975a5e1e91dc5de230f30514038951e426fba6a94177ba19d03ad0ffa435ba68fdb0"}]}}]}}, {{0x9, 0x4, 0x0, 0x3, 0xa, 0xda, 0x5c, 0x1a, 0x8, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x2, 0x3, 0x0, [@generic={0xda, 0x1, "07165efe7ec3b8a2f8c379810a9f5270029a091b3ad67ff371b6a5670f576e61cbe011cdaeff16c916fdc19dd4473268659c82f2c11df3166e38e6b767ad020a93d000e980ec5fa2c0db5ec8c3dd7d6a9d77019cda6279cb79eb52bcf08dd6b39f0403daa3bb0a16cc4ca8b469daa667bdcec85b92d68b6a6abc3965e514aa52461f8ef1304c7278facbaacd9b3af46d12d500650ba1a169ee6e1fd812d79aa9d9cefe722db37312c16b4ab25ebabf4096924b8853c13c2d103105437f93073c501814757bd581a6d8d75edbc3f96bfe09f6de30799a859d"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x89, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @generic={0x99, 0x31, "605af8855014d310e92c0265772d84077d40aeab8c86ff822ec4b893cd1e37e36d6dce5118d7115c6404c4058f00adefca5af0ff50f608050d64566fba09a8c603643f3d5c6c1a722bfdcc679d3ff52866eace56eb48c6624a35d70602ff96c933bbad6b8731a214c4e3fc4f765d0565f67bf1f0ff2bb423574e8f8e6ab513f5170ff4d8ac00e4c81607eeb35a465cdafc8b3ac9ee5a4f"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x40, 0x9, 0x81}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xa, 0xb, 0x5, [@generic={0xa9, 0x30, "89b62a29cc9be2b3a1de4eab5a33b5357efb55a18775cb43b8c93177e9b4ff152c6f9ceba2255a0721a878b488a2692af10e73fe885aa43223c0aef95e0436771f7a5e425d48b439c1c6b91dc02c24ee3a5379cf5b28950653528e97b640b8512ea9f22e0107c44ec8d8b4b7f2eecb7e8e6ff5c12b0c42d01e9f16bd50ded118930d24d5ff0ad6393398ce6db55fc423e8091f386a65334b267dcb5e9ea0dafa7b4aaa5180f0d5"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x83, 0x3, 0x4, [@generic={0x87, 0x11, "04279cb67e1db972341f88028e5d63b909e05eadb71ef2f6cf368fc5ba5e128e058a514f6e84267ffb9df341bcc3fd36abe371bebf487ed6e4e387f708b0142afb1607f7d5e770ea69632d2e3cf49f8bd96a64bb78fe8f5cded88de0b8349eb21dc18b5df0ef6808eaab1b39379a42fe523c8feb83584b74d110179e2274634f7d04bffd29"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe9, 0x80}]}}, {{0x9, 0x5, 0xa, 0x0, 0x150, 0xc, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xb}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x8, 0x3, [@generic={0xbc, 0xa, "cd76b39b56ef36f146c36deaa5cde73996ba7f364b4bac2d1a3d996672d18e851fb809fd5343b0fae5955c1da441aa069550fb352d0bb6ab5d3e4228e1a0defcefdc92f0b502369570fe1b74fa78ad73a3c433bfe01231d19e6f7909e0bbd6a1b3d2a3a397f8bb6a93162d4dbb9d99c47a7ecc14a1bca6d3c02e37c26174497b7ef3252b01d495ccdd3701f123c592c093552dc9a69affd95db7eb2b2648b35454614f741862bc8b0853a7747bfb9cf84acc0909c3074b0b60f4"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x57, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x3f, 0x21, "9026c8dc554b3365065425f3a80f4ce3284b3388b2aedbb2c3be83080b973fc223268764ce50f882f66b758e4daf96a13f0339db0c0e95c555707fe47a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x5, 0x5, 0x8, 0x40, 0x5}, 0x72, &(0x7f0000000d00)={0x5, 0xf, 0x72, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4, 0xf00, 0x4, [0xff000f, 0xffc0c0, 0xffc000, 0x93785512321514c0, 0x101c00f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x4, 0x3, 0x1c00, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4cee9334197d7940f7693d1e32605e68"}, @ssp_cap={0x24, 0x10, 0xa, 0x5a, 0x6, 0x10000, 0xf, 0x0, [0xffcf, 0xc00f, 0xffc0c0, 0xff5f30, 0xff, 0x81ff]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x39, 0x4}]}, 0x8, [{0x101, &(0x7f0000000d80)=@string={0x101, 0x3, "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"}}, {0x1d, &(0x7f0000001700)=ANY=[@ANYBLOB="1d0388b2cce8365a1323d4bc8330566b0431486debbc0e0882cc7ce4876ad02aed665572bf5f7d17a26f48b2c193c6363795e6626dc1e52fea6f2f44624f00f3fcb7338b13fb4eba0c0a5183f4023370ffc28045a5da4cc983e2f352f9988090dc5d0428727ee4128324b1cf5ab463b87f4eacd55b"]}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x403}}, {0xf8, &(0x7f0000000f80)=@string={0xf8, 0x3, "f80d5c214923918d027eeaf7b487bb47a46975689c952534fae3b41505208fe7cb619bf4fa17e4918c7cf3f7bdf6eca7891d8c69496196e770433f4934d56e07364971b17b29c2777a4f7e83b271d21d98ccd063c4c43c8b54645a3c1e11171d4ecaf664e5a7ac9804bc5b24cf03a1a750b7b1d64d59df7d4dd31068a2266cef28402b5889c08fc43145001419e54ac25ad2f48af5e17d38f63eb2d2cd9388312c85fa3a74e6d15b543791b088f4423d23cfab5cc0fb2aed19870ddbc18c571f463b1e2c5cfc910c01b7700a3b8090c529c305e76169d149743f1fb6647d6594247b72f27fcfd0b12d7e60a2082f6542069ed067b831"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3001}}]})
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x10, 0x19, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfb, 0x8, 0x1e}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x81, 0x9, 0x10, 0x12}, 0x98, &(0x7f00000004c0)={0x5, 0xf, 0x98, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x80, 0x2, 0x5}, @generic={0x64, 0x10, 0xb, "007d084d81044fe7d966e18a7852ac04b78ef81106a227d3b82317d65199d364e62ef83c741229a31b4e00eedf473b0c8ad7b97d9bade91e4317458ce91c8ee55380ee3f1f1cb736cbd67b1073b6925f26cfb214527efe06096177c99019958893"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0de36886cc4df2f591e7ab531320cd7c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x16, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xf, 0x300f}]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000480)={0x20, 0x0, 0x2, {0x2, 0xc}}, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x2, 0xd7, 0x2, "536ae9b5", "90569db9"}}, 0x0}, &(0x7f0000000c40)={0x84, &(0x7f00000008c0)={0x40, 0x9, 0x15, "290d74dd0d1cc54c5dac00f638593072b307df60f0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x60, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "0e9e"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x9}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_connect(0x6, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="a9ca78b11323174701e6759e768edc83e01af12804fb71909a9e06d1d5723f448539cc388012cd39a82d991f"], 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904000000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000043c0)={{0x12, 0x1, 0x0, 0x90, 0x0, 0x7b, 0x40, 0xe41, 0x4650, 0x8e74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0x48, 0x7d, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}]}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029400030100000009040000000101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x8, @string={0x8, 0x3, "20000d00e387"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x5a, 0xd1, 0xbe, 0x40, 0x2c42, 0x16f8, 0x3020, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0xd0, 0x10}}]}}]}}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x8c, 0x4c, 0xc, 0x20, 0x45e, 0x40a, 0xa4de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000000)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x11, 0xe2, {0xe2, 0x1, "56434e40237dbfb47b5fa15f29b613a060d9ca652f3255ee78c7a6f9362115221658f11f1670563221a1d5e0b664e145f2d6ed8198f3c8dc2a438b57d87c4ded0085fe58533e23dbc839f44a8906aaa78c9776b9d04c19b31213d49a42826988d04a9deebc06f0b30b2264eada57206933cf1d2332a01df5d1a9c2045add2520ac1605385ad4f29c1417455dc757d92fe99959819124eea45baf30de8dd2db82aad56ce239aa5fd6bf668a7e1284aeb5232b8ea904884dda71426d2aae6b841cb53f5cb2192329a033c358b8edcc950d8d8a944c4b6f87462fa0035bc372f0df"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f00000001c0)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x5, 0xf, 0x9, [0x30, 0x1f8f]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x1, 0x6, "832a6478", "d7a452c5"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x17, 0x5, 0xd, 0xb0, 0x81, 0x8}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x55, "811ce607c3fe81e016eacc860f1d9e52d92c16a6df5380e1247f61d0296ac30fa09f759e1cb2b570b387483399f2b501cac52e683cd7fd00d69366f0ba8049ebc4f53cb2e50eba8486c962c4a07453ed915c590400"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x100, 0x80, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "61f9"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a17c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x90}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x60, 0x1b, 0x4, "e342076b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001d4f86540d804830047da000003010902380001020840b3090400b201020201e6022406"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @main=@item_012={0x1, 0x0, 0xb, '\f'}]}}, 0x0}, 0x0)
ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0) (async)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000080)) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0xdc, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x33, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xb, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x4, 0x10, 0xff, 0x8}, 0x1f, &(0x7f00000001c0)={0x5, 0xf, 0x1f, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x800, 0xf000, 0x2, [0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0xc, 0x1ff}]}, 0xa, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}, {0x9a, &(0x7f0000000300)=@string={0x9a, 0x3, "b8b717a3ec13a5f8dcfab46a69080c158c733c80020df1797c3b2d5b70714e6148e765d4aef837a866a6f1228a7ee99d00ff75e4c8fde6ca18da7ef679baa0703f4865491a17a9019c0e9efad91508a2115926a292bb5c06aec88f6228d00eef947a0a2e075f90a498052b0671ba0d580dd2d155ea02258a32fa4bfd1f827961aa537e2f79263a7a97735bd74bbd2f69a970a96f6022bfdf"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c15}}, {0x28, &(0x7f0000000440)=@string={0x28, 0x3, "1afeb3f49187a4cf7e942b65b192e8eb0ac7071bc90d0c7d62c799b731c21e3666a579bfb259"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41b}}, {0x1c, &(0x7f0000000580)=@string={0x1c, 0x3, "eff4dcccc7619662ce3d339e328c2bc3c92b45c9b0baaace9279"}}]}) (async)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000900)={0x0, 0xe, 0x2, "9e60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x300, 0x8e, 0xe3, 0x71, 0x8, 0x789, 0x160, 0x82fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd1, 0x10, 0x2d, [{{0x9, 0x4, 0xcc, 0x5f, 0x0, 0x8, 0x50, 0xf1, 0x9}}]}}]}}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x6e, {0x6e, 0x0, "6bfb5465e6c35698b047654524c3b165bf661a2a04ceefd572c552aa9eb7717de0701f81f1017c4f77b42f746aa088266a30480623f0134712dc4e12689b9c1f8a26e3fe790f27c98df81f3dbb9d2beae074071cba31fc46027755a65190f7006d4abc4af6055120493a0d0e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x6, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x7, 0xcd32e795acb4132e, 0xa, 0xa035d67311b4f14e]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x3, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0x22, 0x9b, 0xd7, 0x20, 0x5c6, 0x9211, 0x74d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7, 0xa, 0xd0, 0x7f, [{{0x9, 0x4, 0x2f, 0x3, 0x0, 0x26, 0xa3, 0xea, 0x7}}, {{0x9, 0x4, 0x31, 0x0, 0x0, 0xff, 0x2, 0x5, 0x41}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x201, 0x8, 0x0, 0xff, 0x0, 0x5}, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109022400040000000000000000010300000009210000000122050009058103"], 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007490590886124920b0690102030109023d"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0)) (async)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0))
executing program 0:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf8, &(0x7f0000000000)=ANY=[@ANYBLOB="f803d6bd8f5ed1d241b63591cf34b93e315a3fa49bc3ae752834577eb24e45023b3624141121d885a702560d4ded7cf1aca0f04ff8502bb4aec0f93feba034e86d732e8177b0a95b72beaf15c0899900b894cf4fbc01418ce44e4937f151869568c68dc24b65f58ef5bf23bf33f1b9320ffa57fb65511aeb852bee58202f8ab88f0e920f77f50bd3d86bce1da220639d3f154c011a6c9f92c7d533d05aa72f5b2b8cda25b7ccde88eb5a41b3aefdce65a19f7ad7a6a1eb3c07380a011c07d0678305b2369bc414361a16d4961a378593d770374a051c4e749eb9e06751191bcac8c52004baa0715655ab4b8362602f7b9c54f31ee80abdd8"]}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x71, 0xc1, 0xe3, 0x10, 0xdba, 0x3000, 0xebc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0xca, 0x50}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r3, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES16=r1], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x0, 0x30, 0x3, "427a9c"}, 0x0, 0x0})
executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x202800)
r1 = syz_open_dev$evdev(0x0, 0x4afe, 0x24000)
ioctl$EVIOCSMASK(r1, 0x40104593, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000009c0)=""/4096)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x0, 0xa0, 0x54, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0x1, "5a6c88d513"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x2, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x7, "a9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x6a, "ba", "8fdb"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x4, 0xc, 0x5, "3fc7fc8de0a0892863"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x5, 0x6, "fc17c1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0xd, 0x1, "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x7, 0xff, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xc9, 0x2, 0xa, 0x4, "c3f67f555c9eeb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x5, 'xVb', "93"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x48d, 0x1, "d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x3, 0x3, 0xff, 0x6}, 0xf5, &(0x7f0000000240)={0x5, 0xf, 0xf5, 0x4, [@generic={0xb2, 0x10, 0x4, "dff386761de39b61974eb6f5971387e5a64aba89b7df90a834c6881dde7a4f09321f49de0775e852601a9fa8cb41d5da1ce6260a56f5ed446f19010d80350ecabff2cc3ea0e81c4d291cdc0258f01bbd40f81f805dd426b2be58521a1809df48cd39734427c78e6f1958a01c2c3bce8433e4d3bfc537bff7e59048bc8b51e724c00163ef7b76372b12a156e54df9ad437cd433cff51aaddd6f77779e1921bfc24dadf05f0fff88cfc14b871b9d35d0"}, @generic={0x1a, 0x10, 0x2, "b23d7027c05366294e5b91663cd54f157de232336a3426"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0f41fa239754997bad76f42b7c911dc1"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0xf0f, 0x5d, [0xc0]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x40, 0x25, 0x38, {0x38, 0x39, "d82903c8044d4846ee84945099a56e7eb9441cd20834159e72e0fde3338fb81477701b282b8b15b723a3a7ba067480857bfe8410d6ea"}}, &(0x7f00000003c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "7ed422e8fafc83808225d3acae0aa2837d56abe83de60469f9e79ec9f830900e7e9af2916f36134db36522c0da5dc09ffe1985fc123f3d101cc6c2106f69b6f9ebe28a883759894a54ff94cf234dd868c28c6dbcdac1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x0, 0x31, 0x65, "7d7ca3078488993a6b07edc537a39ccc60552dfbcfb29e57772067c8e779275072fb5a3dc2191a323cfd1de43c2e894e0a12d9f9b99ba0de569f96b8506ded5ab298004fda77b875de473d91282ba6b3b290bca26d2db18223ef3412ec05a7d5b2f3378a7d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x81, 0x1, "bb"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000600)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "222448f1"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "88c925"}})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001a37584402e0c200783480102030109021b000100fd20030904350001c45d5500eda650598253cda600"], 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16=r0], 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x202800)
r1 = syz_open_dev$evdev(0x0, 0x4afe, 0x24000)
ioctl$EVIOCSMASK(r1, 0x40104593, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000009c0)=""/4096)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x0, 0xa0, 0x54, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0x1, "5a6c88d513"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x2, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x7, "a9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x6a, "ba", "8fdb"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x4, 0xc, 0x5, "3fc7fc8de0a0892863"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x5, 0x6, "fc17c1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0xd, 0x1, "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x7, 0xff, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xc9, 0x2, 0xa, 0x4, "c3f67f555c9eeb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x5, 'xVb', "93"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x48d, 0x1, "d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x3, 0x3, 0xff, 0x6}, 0xf5, &(0x7f0000000240)={0x5, 0xf, 0xf5, 0x4, [@generic={0xb2, 0x10, 0x4, "dff386761de39b61974eb6f5971387e5a64aba89b7df90a834c6881dde7a4f09321f49de0775e852601a9fa8cb41d5da1ce6260a56f5ed446f19010d80350ecabff2cc3ea0e81c4d291cdc0258f01bbd40f81f805dd426b2be58521a1809df48cd39734427c78e6f1958a01c2c3bce8433e4d3bfc537bff7e59048bc8b51e724c00163ef7b76372b12a156e54df9ad437cd433cff51aaddd6f77779e1921bfc24dadf05f0fff88cfc14b871b9d35d0"}, @generic={0x1a, 0x10, 0x2, "b23d7027c05366294e5b91663cd54f157de232336a3426"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0f41fa239754997bad76f42b7c911dc1"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0xf0f, 0x5d, [0xc0]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x40, 0x25, 0x38, {0x38, 0x39, "d82903c8044d4846ee84945099a56e7eb9441cd20834159e72e0fde3338fb81477701b282b8b15b723a3a7ba067480857bfe8410d6ea"}}, &(0x7f00000003c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "7ed422e8fafc83808225d3acae0aa2837d56abe83de60469f9e79ec9f830900e7e9af2916f36134db36522c0da5dc09ffe1985fc123f3d101cc6c2106f69b6f9ebe28a883759894a54ff94cf234dd868c28c6dbcdac1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x0, 0x31, 0x65, "7d7ca3078488993a6b07edc537a39ccc60552dfbcfb29e57772067c8e779275072fb5a3dc2191a323cfd1de43c2e894e0a12d9f9b99ba0de569f96b8506ded5ab298004fda77b875de473d91282ba6b3b290bca26d2db18223ef3412ec05a7d5b2f3378a7d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x81, 0x1, "bb"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000600)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "222448f1"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "88c925"}})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001a37584402e0c200783480102030109021b000100fd20030904350001c45d5500eda650598253cda600"], 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16=r0], 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_disconnect-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf8, &(0x7f0000000000)=ANY=[@ANYBLOB="f803d6bd8f5ed1d241b63591cf34b93e315a3fa49bc3ae752834577eb24e45023b3624141121d885a702560d4ded7cf1aca0f04ff8502bb4aec0f93feba034e86d732e8177b0a95b72beaf15c0899900b894cf4fbc01418ce44e4937f151869568c68dc24b65f58ef5bf23bf33f1b9320ffa57fb65511aeb852bee58202f8ab88f0e920f77f50bd3d86bce1da220639d3f154c011a6c9f92c7d533d05aa72f5b2b8cda25b7ccde88eb5a41b3aefdce65a19f7ad7a6a1eb3c07380a011c07d0678305b2369bc414361a16d4961a378593d770374a051c4e749eb9e06751191bcac8c52004baa0715655ab4b8362602f7b9c54f31ee80abdd8"]}]})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x71, 0xc1, 0xe3, 0x10, 0xdba, 0x3000, 0xebc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0xca, 0x50}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfff, 0x0)
ioctl$EVIOCGMASK(r3, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES16=r1], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x0, 0x30, 0x3, "427a9c"}, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0)) (async)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0))

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0)
syz_usb_ep_write(r5, 0x8d, 0x0, &(0x7f00000001c0)) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write-syz_usb_disconnect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_disconnect(r0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb-read$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0) (async)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb-read$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0) (async)
read$char_usb(r1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb-read$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_open_dev$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_open_dev$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_open_dev$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in em28xx_release_resources
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in em28xx_release_resources
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x59, {0x59, 0x4, "66d427cb256b4754e6935026bc5fd8bcb6d1e7297ff05018a2c79c427b810261017b1cf33724d555d501c7112849516efabf8d4224a1c71f02ae36540e6a89cdadbee3ad560a3c1ed6f8b066ca9d5de7d33dc37f677752"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x38, "5bb7fcd0ffd479b2d7f309ab3324197d5008f39252caa0d6e7d2ceae27c61d55b21378b77331438c1b1ea493c7073007b4bc384f8f6e37f6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x0, 0x89, {0x87, "8eb96333e01dde746ecc9cf8310b401155f7c396309000a105f2071e5fd6b17eedc8f64c25e5e10ff62cd69c16c471a22b6f18d9e8f9a8f6b3a8e851a75efeff858ebf1f70b268efecbea1f15023573b9877938f815a2f60cd886a7464f713b673265e90d95bb3a9dc10995c56d0a0dae661b0359c8ef8531c3c02c02273afe5957a2e3c4e9be7"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x3}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

program did not crash
testing program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m26.383758492s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
simplifying C reproducer
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
testing program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
testing program (duration=2m26.383758492s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
reproducing took 1h49m59.150543076s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811da34738 by task v4l_id/5808

CPU: 1 UID: 0 PID: 5808 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x64/0xa0 drivers/media/v4l2-core/v4l2-fh.c:64
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x1d2/0x5e0 drivers/media/v4l2-core/v4l2-dev.c:433
 chrdev_open+0x234/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6da/0x13a0 fs/open.c:965
 vfs_open+0x82/0x3f0 fs/open.c:1097
 do_open fs/namei.c:3975 [inline]
 path_openat+0x1de4/0x2cb0 fs/namei.c:4134
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61f2e80407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffcc78b0710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f61f2d92880 RCX: 00007f61f2e80407
RDX: 0000000000000000 RSI: 00007ffcc78b0f24 RDI: ffffffffffffff9c
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffcc78b0960 R14: 00007f61f3616000 R15: 000055bd2e1914d8
 </TASK>

Allocated by task 5777:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5777:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2539 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x288/0x670 mm/slub.c:6837
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22b5/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811da34000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1848 bytes inside of
 freed 8192-byte region [ffff88811da34000, ffff88811da36000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11da30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 ffffea0004748400 0000000000000002
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 ffffea0004748400 0000000000000002
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004768c01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3025, tgid 3025 (syz-executor), ts 76803126400, free_ts 76755076502
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x1003/0x2dc0 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x259/0x21f0 mm/page_alloc.c:5183
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3055 [inline]
 allocate_slab mm/slub.c:3228 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3282
 ___slab_alloc+0xdb7/0x1a70 mm/slub.c:4651
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4770
 __slab_alloc_node mm/slub.c:4846 [inline]
 slab_alloc_node mm/slub.c:5268 [inline]
 __kmalloc_cache_noprof+0x3c8/0x750 mm/slub.c:5758
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 ipv4_sysctl_init_net+0x16d/0x350 net/ipv4/sysctl_net_ipv4.c:1650
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x100/0x390 net/core/net_namespace.c:445
 copy_net_ns+0x2f8/0x690 net/core/net_namespace.c:580
 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:218
 ksys_unshare+0x45b/0xa40 kernel/fork.c:3129
 __do_sys_unshare kernel/fork.c:3200 [inline]
 __se_sys_unshare kernel/fork.c:3198 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3198
page last free pid 3013 tgid 3013 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x78f/0x1000 mm/page_alloc.c:2906
 discard_slab mm/slub.c:3326 [inline]
 __put_partials+0x130/0x170 mm/slub.c:3872
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:352
 kasan_slab_alloc include/linux/kasan.h:252 [inline]
 slab_post_alloc_hook mm/slub.c:4970 [inline]
 slab_alloc_node mm/slub.c:5280 [inline]
 kmem_cache_alloc_noprof+0x260/0x6c0 mm/slub.c:5287
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:345
 do_readlinkat+0xb4/0x3a0 fs/stat.c:575
 __do_sys_readlink fs/stat.c:613 [inline]
 __se_sys_readlink fs/stat.c:610 [inline]
 __x64_sys_readlink+0x78/0xc0 fs/stat.c:610
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811da34600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811da34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811da34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                        ^
 ffff88811da34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811da34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811da34738 by task v4l_id/5808

CPU: 1 UID: 0 PID: 5808 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x64/0xa0 drivers/media/v4l2-core/v4l2-fh.c:64
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x1d2/0x5e0 drivers/media/v4l2-core/v4l2-dev.c:433
 chrdev_open+0x234/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6da/0x13a0 fs/open.c:965
 vfs_open+0x82/0x3f0 fs/open.c:1097
 do_open fs/namei.c:3975 [inline]
 path_openat+0x1de4/0x2cb0 fs/namei.c:4134
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61f2e80407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffcc78b0710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f61f2d92880 RCX: 00007f61f2e80407
RDX: 0000000000000000 RSI: 00007ffcc78b0f24 RDI: ffffffffffffff9c
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffcc78b0960 R14: 00007f61f3616000 R15: 000055bd2e1914d8
 </TASK>

Allocated by task 5777:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5777:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2539 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x288/0x670 mm/slub.c:6837
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22b5/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811da34000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1848 bytes inside of
 freed 8192-byte region [ffff88811da34000, ffff88811da36000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11da30
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 ffffea0004748400 0000000000000002
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 ffffea0004748400 0000000000000002
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004768c01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3025, tgid 3025 (syz-executor), ts 76803126400, free_ts 76755076502
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x1003/0x2dc0 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x259/0x21f0 mm/page_alloc.c:5183
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3055 [inline]
 allocate_slab mm/slub.c:3228 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3282
 ___slab_alloc+0xdb7/0x1a70 mm/slub.c:4651
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4770
 __slab_alloc_node mm/slub.c:4846 [inline]
 slab_alloc_node mm/slub.c:5268 [inline]
 __kmalloc_cache_noprof+0x3c8/0x750 mm/slub.c:5758
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 ipv4_sysctl_init_net+0x16d/0x350 net/ipv4/sysctl_net_ipv4.c:1650
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x100/0x390 net/core/net_namespace.c:445
 copy_net_ns+0x2f8/0x690 net/core/net_namespace.c:580
 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:218
 ksys_unshare+0x45b/0xa40 kernel/fork.c:3129
 __do_sys_unshare kernel/fork.c:3200 [inline]
 __se_sys_unshare kernel/fork.c:3198 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3198
page last free pid 3013 tgid 3013 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x78f/0x1000 mm/page_alloc.c:2906
 discard_slab mm/slub.c:3326 [inline]
 __put_partials+0x130/0x170 mm/slub.c:3872
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:352
 kasan_slab_alloc include/linux/kasan.h:252 [inline]
 slab_post_alloc_hook mm/slub.c:4970 [inline]
 slab_alloc_node mm/slub.c:5280 [inline]
 kmem_cache_alloc_noprof+0x260/0x6c0 mm/slub.c:5287
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:345
 do_readlinkat+0xb4/0x3a0 fs/stat.c:575
 __do_sys_readlink fs/stat.c:613 [inline]
 __se_sys_readlink fs/stat.c:610 [inline]
 __x64_sys_readlink+0x78/0xc0 fs/stat.c:610
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811da34600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811da34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811da34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                        ^
 ffff88811da34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811da34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================