Extracting prog: 14m15.70007592s
Minimizing prog: 1h32m37.10047215s
Simplifying prog options: 6m3.115689269s
Extracting C: 1m57.750154097s
Simplifying C: 0s


extracting reproducer from 32 programs
testing a last program of every proc
single: executing 7 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_connect$rtl8150-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
r1 = syz_usb_connect$rtl8150(0x4, 0x3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x60, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x21, 0x8}, [@power_domain={0xa, 0x24, 0x10, 0x18, 0xd, 0x2, 0xf9, "cd"}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x2, [0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0xe, 0x1, 0xad, {0xa, 0x25, 0x25, 0xfffffffc, 0x1, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0xc, {0xa, 0x25, 0x25, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0xf, 0xa1, 0x8, 0x6}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6a6c089f013d27a0f71739167cae0d62"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x415}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)={0x0, 0xe, 0x3, "30c05f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8])

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_open_dev$evdev-write$char_usb-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$lan78xx-ioctl$EVIOCSABS2F-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_open_dev$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x10, 0x4, "7098615c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2001e7000000e70244f04d071ba71604d65d4ec9f2c4ff906995ac8f3fd9bf6ace83c76fa7666a42c7456d1a1495433f0c7fbbca11d3bc9bd1e878d89efc901c875c39f9aae45d25757b0735596aff7e37a6551eec3627255051fa32465e961eefb623ab73bf44abccdabf7d9a3a10da93c8abb485977aee3b9262b15f56454af40c37d87f3277c4b5051298655e7cd0caf20ae5af9aa69c5644dbed36a88e33f6f47164441bda33f5a31f6084a1a53712fd8a757163638e522aee2cc3ae1dc21fbb2628c0c6c2a6b45eca1282b4af6939a8a9ef9b37bfc65f251e2be6611d4b40dfd2d6869df1a8bf302e8e9c"], &(0x7f00000002c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "35b818d7e39fedccc5135dc50828a8c49cc2bbcb934797557e7dfc385634ed099fb7ce610e0819cd22d92ad1bacf3700c2bf1c3b6b4dabe92684feb48a97863dc944462fe7122776f68cf9be82c57e7684853490469c5f05848d2db4ecf2bfa6438d4480f44f4e9947fe1d14988e"}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="000f68000000050f680004461002e1369d67ba5190eeebdb0357d2165f81ba4d951d19ace971a863b0c0a6f876e4da0b7758ab984e7a7b6559c1a07aafb6c2c7fe9ee7219b77e4b5320d7a7418ee79415cc3de6034b6b92abf7f00000000000000060104780008b8ff07b800"/119], &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0xcd, 0xe, "72e3b649", "4c81fe63"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x7, 0x6, 0x7, 0xc, 0x6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x16, 0xb9, "409ca062a533186eec381c738f0734006c73de20105dd188d4585d93426d99995ccc9bcee2d85c252ba53c1d4b15466a37f354035552bc010befbc71e3fb0d96167e1a0f9c0cf9abbf43972e92ea04b086b0ec701dcbaf74f2fb2efb5fd00928e71e498acda8820d1499a7c17695f6d2f3bc8afe1c2e18c8f095dec85f84ea4ae0b9a1b6deb855dfc5fd508235ea9e184e26c9735550f00989d6476d60c0871e69377a61544727e1a44fb6d7175b81ed626d22615105acba84"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xb2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "2a1f"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="bae2d4da02e6"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "a016"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0x1e, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x5, 0x1, '\x00'}})
r3 = syz_open_dev$evdev(0x0, 0x2, 0x20580)
write$char_usb(r3, &(0x7f0000000040), 0x0)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfa, 0x47, 0x59, 0x8, 0x124a, 0x4023, 0x234a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0x8c, 0x8, 0x2, 0xc2, 0xbe, 0x19, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0xa1, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x7, 0x0, 0xd}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000001c0)={0x9, 0x4, 0x9, 0x8, 0x10000, 0x5})
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x3, &(0x7f0000000080)="113205")
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_open_dev$hidraw-syz_usb_control_io-ioctl$HIDIOCSFEATURE-ioctl$HIDIOCSFEATURE-syz_open_dev$hidraw-syz_open_dev$hidraw-ioctl$HIDIOCGRAWPHYS-ioctl$EVIOCGMASK-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$rtl8150-syz_usb_control_io-syz_usb_ep_write-syz_usb_connect$uac1-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0) (async)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000000c0))
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002)
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRES32=0x0, @ANYBLOB="04ae64167768c8157732592ddd83b6c125de5651562468dd44ba091bcb9d1520241b1f2ed651ca27dc58d2d794ede3f111f74067c542ccfda5254b2953e49a823b033a1081a720d1e86538f02d408435b88d9bbd444756aea8f8e5ba7f9288561a74ec66e38ca96f1f315e2bdc1cc4bd8269d696fdb35ec3b64972c9f9d4694b7d2b6ae708ec42", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100021282e00840200193eb300102030109021200012d0730050904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async)
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_ep_write-syz_usb_disconnect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_open_dev$hidraw-syz_usb_control_io-ioctl$HIDIOCSFEATURE-ioctl$HIDIOCSFEATURE-syz_open_dev$hidraw-syz_open_dev$hidraw-ioctl$HIDIOCGRAWPHYS-ioctl$EVIOCGMASK-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$rtl8150-syz_usb_control_io-syz_usb_ep_write-syz_usb_connect$uac1-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0) (async)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000000c0))
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002)
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRES32=0x0, @ANYBLOB="04ae64167768c8157732592ddd83b6c125de5651562468dd44ba091bcb9d1520241b1f2ed651ca27dc58d2d794ede3f111f74067c542ccfda5254b2953e49a823b033a1081a720d1e86538f02d408435b88d9bbd444756aea8f8e5ba7f9288561a74ec66e38ca96f1f315e2bdc1cc4bd8269d696fdb35ec3b64972c9f9d4694b7d2b6ae708ec42", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100021282e00840200193eb300102030109021200012d0730050904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async)
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGKEYCODE
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async, rerun: 32)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/148) (rerun: 32)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCGKEYCODE
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async, rerun: 32)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/148) (rerun: 32)

program did not crash
single: failed to extract reproducer
bisect: bisecting 32 programs with base timeout 30s
testing program (duration=38s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 8, 21, 11, 30, 4, 4, 27, 8, 18, 16, 22, 32, 32, 22, 23, 13, 13, 7, 6, 18, 18, 27, 30, 9, 20, 14, 26, 1, 19, 23, 9]
detailed listing:
executing program 3:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x16, 0xa, "404233b442669c8487d3"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x3c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xf0, 0xf5, {0x7, 0x25, 0x1, 0xc, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xfa, 0x8, 0x4, {0x7, 0x25, 0x1, 0xc, 0x7, 0x3e0d}}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) (async)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x30, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0xfb, 0x9}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x1, 0x1, 0x2, 0x10, 0x3}, 0x1c, &(0x7f0000000d80)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0xb7, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x40, 0x3, 0x20e3}]}, 0x1, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x44e}}]}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0xfe, 0x30, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f14ba131fca1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x7, 0xfd}, {0x6, 0x24, 0x1a, 0xa, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0xeb}, @obex={0x5, 0x24, 0x15, 0x9f}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x5, 0xaa}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x4, 0xe}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0xf, 0x5, 0x1, 0x40, 0x2}, 0x8, &(0x7f0000000e80)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x813}}, {0xe4, &(0x7f0000000f80)=@string={0xe4, 0x3, "9bda74ef76779fdd9429fdf31335d5ebafa3ccea20f71376583241672b6226b8df4a039acecc5b5977190a75261b7e5c589b655b1cc6f84cb400e728a042ba64dc667ec979512a6b20c3fcf7ad926c674d3d643bb2fe70c208c715e4be66331d9187dc860bac22acca7421b2673dab8b9f809f8aad322396b975ca010c14476d460fea9769e67d87f403d71978a5fe992dbed737dd36b58c1ed3b0abb81f9d5b310a3efce7788bb0d71221d961175e3e693fea278c59fab683fd35cd5325717b9889668413ba21c59c4db1325bbb134456baab930c0aedb7ce34e863226714e054f5"}}]})
syz_usb_connect(0x3, 0x5c8, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xa1, 0x17, 0xac, 0xff, 0xe41, 0x414a, 0x607a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b6, 0x3, 0x5, 0xcd, 0x1e0, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb8, 0x79, 0xca, 0x6, [], [{{0x9, 0x5, 0x3, 0x8, 0x10, 0xfb, 0xc4, 0x10}}]}}, {{0x9, 0x4, 0x49, 0xd, 0xf, 0xff, 0x4, 0x73, 0xe8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xd1, 0x2b, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1f2e, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x77, 0x8, 0x4, 0x9, 0xff}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x17, 0x1, 0x3, 0x9e, "8ff7c9b9f713"}]}], [{{0x9, 0x5, 0x5, 0xc, 0x20, 0xe8, 0x6, 0x1, [@generic={0x84, 0x5, "4ca1f789562f1b0752fe7547f0bc88a37fca024e4aa2d09f0b0d5735c0d77044ac42f00fe8d7ae329c2cb3c39f042de13d070d037f93f483dfa59a57b697ffce63a24f62e0c5878071774725bb86531ad099315daf9b8c2a63ecc10fea7a580ce79f766556790b15f557bb234ec45f19dfb784e9187187d8c2048d12db1e07bde6c7"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x6, 0xde, [@generic={0x53, 0xa, "645fc51fddc4f39e14b9a4cd75b5442e0487479776b824c2f257403b839802fbbd95dcd39fea8dfa3b43bca0f029ea540857f70183cf9e03f34b3bc2fc418984182a0640750856dcdcbcd92bfbacd4983b"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x3, 0x8, 0x1b}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0xff, 0x0, 0x0, [@generic={0x6e, 0x7, "826cbcf2f7336acb718986b2949591a077d9edad5d868ac5c95eac335955486da400c431e4453d5d43c376b0b7217937fc740aa9cfbd53ce9379274b36880edea7c7e23221ad99ed5e5637aa730bb80576bba9d0e02fc8686556c68062776ab4a282ffe85ea61e32b40c9a0c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x1ff, 0x40, 0x6, 0xd}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x40, 0x3, 0x5, [@generic={0xc8, 0x24, "2bc3656b6ae811eae3c84c0d01d10c87e376fb0b64ff66087ede55bd0bae6c5de4eeb7c5b3e9ed0ef0804bb08662b432643c48ce1424ea55a3cfb850c6cc4e8433804d587f701d582f3e6161280614a88f32382f13d8e893591c1112ef211368e4d9a49562900ae2f5e172d190c2d41b5f9d4944e239dc07302d8e2d542f2df7931d6dad4afd1064a810e7a1ac54f40e3fb456d426b9192a29ab33463b50c27182640ed1690de8e2b90f5735985771434e1870069372d95e94274cdaef639b5818b7f77d20a5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x4, 0x2, 0x3, [@generic={0x63, 0x9f59f02072bb3301, "50631f12dadcdb655a8e12dbf7e3ee9838b41e0fa12e67299b6ffbf2524e76d96264c032d5375fac3aa0b9cdca850845112b355fcae7a3b1af8112a9a58b74b284ad6bf9936e5e8b6023cd21e04016f3c94152f239ac4a3f32d552da417ee7e748"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x9, 0xf6, 0x8, [@generic={0x59, 0x31, "4f05fd8de5c7a8b7395f8063ad95d0c824995a432993545d9e4c27780b25df5ad84eafbbc9230d33e8ae48fb472e6d7e9d673d2a27b358faca3bb780ab5c347d432afbd8cb24c0e4983259abe74b71a46cdc532857547d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9725}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x58, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xa, 0x10, 0x9, [@generic={0x34, 0x6, "1fc76d6d5e5258b1eef492825ce6bbe7cbaeebfa2545e223713aad2be6ec4edd9652cba7e3cede9795e422af8caad9c71f8d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x1, 0x18, 0x1, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0xc, 0x97c36843c946a139, 0x400, 0x5, 0x6, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x2, 0x81, 0x3}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x1, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x1}, @generic={0xcf, 0x11, "e70186bd313536cae262bb168742a3ecfc6f5adf9dee5bb618c21f9f41b664a583be343826a8bf19927b42117b3d9c49ebc34b59a41eec74ae51ebecd38af11290b9ecad6e5f5700083d40b4e562c7fed61925d2b8e0e280d6569188e21fd5fbbee32c6ac877ee2675a468cfffe5f3eab25f7f17521b72e609a342b989294ff247ffdfee4c6df518136e78bfcdbce42a12b8db410ff77a1b4846696e051cc5470f8e7357d940f00eb1b24f92f3730be95dba080f13aef764569f1e198a49427336b9de0443809fe1e9800f68c3"}]}}]}}, {{0x9, 0x4, 0x4, 0x2, 0x3, 0xc4, 0xaa, 0x87, 0x5, [], [{{0x9, 0x5, 0x7, 0x10, 0x458, 0x81, 0x0, 0xc7, [@generic={0xb4, 0xb, "d2c80158dee2a3570d469b8574868c728351d8e818b41832d175087a13c4fcd3f6e90380200b85030bb441f85065e86bdba200e1b4e7c3250b62d15ded43b83c960d650cc86d243328dbaec6b8c99c7bc14feb267bd04f6b875ca7a34f0c7094a211747b4df893120d78c682a932bacc847983ef2a13b628a52702ac5a9e36eea97bea435bfb4d7b1d4a6d6c4ae819331c241f767e84b770e393a3791f294237d1a8b838b2bfc8e7fa743b847c2b792487d0"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x4, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x8, 0x5, 0x25, 0x10, 0x6}, 0x4c, &(0x7f0000000780)={0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x70, 0x0, 0xfffe}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb8, 0x8, 0x7, 0x2, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x4b, 0x3, 0x5, 0xf000, 0x4, [0xc0, 0x0, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "8eb914995d553e33bf26f704a0370f7c"}, @ptm_cap={0x3}]}, 0xa, [{0xec, &(0x7f0000000800)=@string={0xec, 0x3, "88b92eef36c87551a2918643873f40c459bed3f23ed6b0b81d6ce93f2a281b532d4f8b0666fac89d40aa7625c784c7a8593634ee6f0dc5d8ba99892fb66abacc36f364a4ddca1699a7f5edd2bb30f922d26c710e7ec8a7db601469bac0168e3a73c588a3c3846f5fbbf5eac2571d34012fd3cdf0ded96a06bbaa4463ee7060dcdd47fec8e2990a0f63b4dbd6e981267a5327b9d229e4d6ef400db48be74db33d401ef4afa2ef352790ba3dfbcefa0a3bc5856bbb8d5ecedf66dc433cb059160c9626d83ee5b5b10d03d732c7a9d6d4e7ba8e163b8f74e4176cd6999d134a6bfe686897d5680ffa36a76e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x1d, &(0x7f0000000940)=@string={0x1d, 0x3, "2e17a20bca2cf00243d840818eba737322eaa47cc60678f11b2b46"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x21, &(0x7f0000000a00)=@string={0x21, 0x3, "f9fd0c7e9bd9384bec3d99976264b1f92cafde60bbd808852b449c68916b0d"}}, {0xd6, &(0x7f0000000a40)=@string={0xd6, 0x3, "662062c39c27e9263a7caf02654973da9a26bb61bfc230741effd293539f248b2e34eea2a18ee65f8d9194a3fcdbf91d1aa797f959421bd3d5821b09ead1d1ea79a858a3e53ae8c33fd937e25e1c8f0ba84fe74ef082d9df0d85880246204d73c4132ca02f8aabb0b98036d48353a7919f883273cf83700b28a16b0be3078a9c0e963aacd49cc039e1d48ade8028bab264025a93f1614d4f309c4a40e3ec73852a9c763add07fbeaf1674d0b6ae793087b564fa7640ebad180ee8373b179db5a9091573607a28e3df0f9a9cd35ab9a404749d25e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1801}}]})
executing program 3:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000080)={0xfffffffffffffd96, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c53a0950101009102c0"], 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}})
executing program 3:
r0 = syz_usb_connect(0x1, 0x64d, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x16, 0x68, 0x35, 0xff, 0x2c7c, 0x12a, 0xb2d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63b, 0x2, 0x5, 0x8, 0xc0, 0x2, "", [{{0x9, 0x4, 0x6, 0x9, 0x1, 0xff, 0x0, 0x40, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ada05dfce8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xc00, 0x2, 0x20, 0x5f}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x1}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x6, 0x0, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x5f, 0xfe, 0x7f, 0xcf, 0x4}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0xf, 0x3, 0x2, [@generic={0x6e, 0xd, "0a9e03069e1c84ad4e06b7d9fe7c98771f39336cb5688185fc87c8ee9cee47584ec5a24b313d42687438ce59cf9529d7258448b2e4c98fc679516314d2da4eabcc69d452001224dd47f190cdbb36f2ae8c2bed6d5717117aa1b558cc6051555111ae6bcaa043a155c8361f7a"}, @generic={0xc0, 0x21, "56475b1921ba5ae2febd76d36e2a63dbcfd2753d512932c7764d541c8df10b8912ab0fb7e767e366c11130c79a3719c330d62282cca2914ef91fc3afc603d2c72db03055802472daeaf35b8a6360bf8f8d55ccd6c61fb0832d76c058e1ba484a742232bc96fbb9adcde5f1bdf239ef7e231d1b65a4886c6fa94297c609d3cc6236ab01faba8d0fa9a4a2bab4488d3eecbf45708b8197f75c5bb66eaece172b6812ce2a1c4ef8c22f584520d79d79f6003f36636da1564e3a7ead76ef623b"}]}}]}}, {{0x9, 0x4, 0x38, 0x5, 0xa, 0x31, 0xfb, 0xe, 0xf, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '[A'}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x5, 0x2d5, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x49, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x81, 0x5, [0x3d95]}, @mdlm_detail={0x38, 0x24, 0x13, 0x5, "48d877c0193d5a7d7ac6d941c8f464b994620c2b6a3784712310546b7fbcfd4c0b0f350518df8de07d45119cbb92627b879f7ff3"}]}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x1, 0xb4, 0x5, [@generic={0x79, 0x21, "40eb39f2eb939ff1efabec103bcceda115834f5593264d9cfd3ea1ea9ae8f9c7b50c73159a4b9b6324cd14bcc1b83a1ee1f8d7dba4205a775efbe2c9638edd5dd3cfafbe75a7695e713134c21a8598777b90ef869b5007a9f8a607a11eb23d45a07846414e7bf831ce473e694251185f923bf14f510409"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x14, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xd, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x75, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0x7f, 0xb6, [@generic={0xc8, 0x22, "616b194346eb15ceae749e551605a91403fcd570670a19c4dedb078fa34cf98278e96bc7b6cb9d936842adf9f73d97a007498059943a5a9868cdea85a7466393bd68b7c8c856812b6bfbd2e4ebcca33ddbcb5b721889f173073198111c5cedaa34ecdaeaf3c82c1f753b06254aa81aefae1f32c5479fc9d076f75e1c3ef13c428eb25b9e6f9e8da3c0ff8e4ff577c37fd6afc023fc4d58f37c1d4c72c30435f6a1cf4045be318272e52e80cf45a9836ebd69bee7fd336e4cb147a4e1a789e314c3beb60f36c6"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6, 0x2, 0x5, [@generic={0x73, 0x21, "265a4901714404a814ae445068192727a779e36ec671db58ccfccf4940201fb6a32b71685af34acf7aa973c0c0b1ee0f7768030eaa67b6406e3359e28a1a6e2f5e9804dcae5c2e8791c8f9a73410af3024d510757fdd179315beb201c067cfb20245ce3ef377f98a7ee3ff4c490bd60711"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x5, 0xa1, 0x7, [@generic={0x20, 0xa, "3c4b1c7067323ab1ca3dad6a90548b88ddf1d629b32c5f45dedee18726d1"}, @generic={0xe3, 0x21, "b0e6d1daf11c218179dc600041717a804b080b5daa10becb45d476666264ef9e51208af6e81c27e9d75e0cf48cfe4e9f08871e28b30c96030eab48d6302f4614223e2e3928b702d7c0b1f61e92f7ef094c10e6b4e76e1a8409636b8e279d00db6e3773fc401f00f2dae647b0626e5025f0060330a9e145db6d6b0531e9b0045db51e1acaf709b0d0aa200ac7f28d99af902a8011b1c42c8c943b3502e8f9b0ba78cc0d21fcf564fc908f4396db1a4c8d535655fe6357e91203d864a4c129ea6118b94aa66760da654da5ebb868194b32c75cb5289c14d04490c16ab5ed93517497"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xe, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcf, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0xc, 0x0, 0x2, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x5, 0x9, 0x1b, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x6, 0xf7, [@generic={0xfe, 0x24, "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"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x310, 0x7, 0x3, 0xff, 0x40, 0x67}, 0x111, &(0x7f0000000c40)={0x5, 0xf, 0x111, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xf, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x6, 0x7, 0xa, 0x4}, @ptm_cap={0x3}, @generic={0xe5, 0x10, 0x3, "062e825835686a3563ba33c468e77b071c6c134c00521689fe7e670145550643ec5fe3529aa4aa577bc10bf21e8783619ebd7cad81fa2bc23a1235d0abda66e8de6304d438a6b3e3c1c455a6e0eaefc81b049863e3de9e1187127d81c661d16a3488688a97ec92f29009f82fe59e43655b10db98e2df6a4cf6e3847236bd9812de301db25266125ad9921f33eaa89b2a8f446afee6547c262e98ea7b0596f7598564c4e491f36b92ea6c5061da1da39d11eba2a58420f475c6933a8c5426e8006563132a06a127429c51b63ef0816e7a9c50e96533611c5a57e13d76049a840f0100"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x0, 0xc, 0x6, 0xff}]}, 0x8, [{0xb9, &(0x7f0000000d80)=@string={0xb9, 0x3, "32e0a2b9eef8c204594191a7d059bd26dfce6267ead3cf4a6f1f53602e0be91ab7297509b0b9f7a2ffe0aec3bba21f28abe9d9d5b0da61eaefc5d42dda5702755a983cea316ea70829a892ef218832d6e72385af72ca642c86d5abb23217709e88e1a2ec57e9397d217c874e09cbbbcbca8aaa282f9d78d16c0eb7852b0e2f22231e0e523409722438a991762beeb6d0896df16eeecf0bde57073e3c0e6e57930b9cacfe2cf8ff040242c45d2f93df99d63b546b3b697f"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x44a}}, {0x39, &(0x7f0000000f00)=@string={0x39, 0x3, "35d1b6a85f7446f006e9a4806fd02c79c69318688f1e4cc0e576657a62ad39257992101fd91261004add13c4fe40e7cab9ba03f71da56a"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x380a}}, {0xb2, &(0x7f0000000f80)=@string={0xb2, 0x3, "61300da88b5e2c887c5660f35759c078da4f5586a40999900806c99e7bef93d124901f49eb8ad3211b9ec60bffad042435b46f679d53b8cdf244e70adfba5397df105a3aa742a38b82caf060f0003d9112c752dcbbf73fce9f8dccdfddb02dd8ec34b1b07e71e3dee8e6d8b6cc8c18c526dfcacbd6adea510e0bc6ed1a2552663a79bf3e44ffcdfd85f731970d475ddf5c7438f0445db1745cba8af3686ec235a64fc421ebd95a6c6e1733b4608a9bee"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1c0a}}]})
syz_usb_control_io$lan78xx(r0, &(0x7f00000011c0)={0x14, &(0x7f0000001100)={0x20, 0xd, 0x5a, {0x5a, 0x22, "70acf6ee8f601014eca68fab48c8925fee8c3179e8eb6db780f5ecc1b0530a23e2b83ffbc93f473e2c900b7c7d703bec7fa4e7effe66a4c507be2e819631aafa9100777eaaeb808e41bca4cc5e5ec94eaef7f7f3b0ddbc8d"}}, &(0x7f0000001180)={0x0, 0x3, 0x11, @string={0x11, 0x3, "c41a0d34141707ca3f3dd068f29310"}}}, &(0x7f0000001400)={0x34, &(0x7f0000001200)={0x20, 0x12, 0x8f, "bd64c1f2e9334f99ca55622fd5774f0c234086e865d923464471c3b3644a41cf39e22110039bc5a13689619b294dd080391a409aca369a59e799a0d059cb6cc688e281e9f38297c327bfe528d709ea279414d0c1b39e980ae8b765d9a036efefce7efc6bc62c803623cf84ee1fee446de8d86734bf73bbfd59c5006d318206233dde82a9055599299dae583f1db126"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001300)={0x0, 0x8, 0x1}, &(0x7f0000001340)={0xc0, 0xa1, 0x4, 0x8e7}, &(0x7f0000001380)={0x40, 0xa0, 0x4, 0xff}, &(0x7f00000013c0)={0xc0, 0xa2, 0x2f, "f5bc045a18445ea7d0e1e437fbcd42890389c09f5c17467641ebe0516e1e1e78adea5b81199ee5bedea15fbbdc6c72"}})
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0xc, 0x2, "c0fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x0, 0x2, "de39"}, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"])
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0x40015b0b, &(0x7f0000000040)={0x3, 0x0, 0xffffffff, 0xe09, 0x4})
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="913c0000001122334455000000010000000000000000000300"/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
executing program 3:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x424800)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000040)={{0x1, 0x3, 0xe, 0x3, 0x7fffffff, 0x80}, 0x180, [0x6, 0x36, 0xa8, 0xfffffffa, 0x4, 0x8, 0xd6, 0x80000001, 0x10001, 0x5f3, 0x45, 0x4, 0xfd4, 0x7f, 0x7, 0x5, 0x7, 0x4, 0x8, 0x4, 0xff, 0xb, 0x10, 0x10000, 0x2, 0x3, 0x101, 0x8, 0x5, 0x8, 0x9, 0x7, 0x8, 0xfffffffe, 0x8, 0xea, 0x1, 0x3, 0x4, 0x3, 0xfffffffe, 0x4, 0x3f77, 0x0, 0x80000000, 0x5, 0xfffffff8, 0x6, 0x1fc0, 0x1000, 0xfffffffe, 0x1, 0x81, 0x0, 0x9, 0xfffffffc, 0x5, 0x4, 0x2, 0x3ff, 0x7f, 0xffffffff, 0x0, 0x5, 0xf270, 0x8b7, 0x0, 0x100, 0x3, 0x2, 0x9, 0xffff, 0xfc01, 0x9, 0x3, 0xfffff7f0, 0xfffffffa, 0xfffffffc, 0x1, 0x8, 0x3, 0x4, 0x1000, 0x200, 0x1, 0x0, 0x7, 0x80, 0xffffffff, 0xc, 0x3ff, 0x3, 0x4, 0x2cff7469, 0x5, 0x2674, 0xa8b1, 0x8, 0x7cf1, 0xca12, 0x80, 0x10000, 0x100, 0x7fff, 0x8001, 0x9, 0x3, 0x10, 0x0, 0x8, 0x401, 0x7, 0x8, 0x9, 0x2, 0x8, 0x39, 0x10001, 0xfffff91a, 0x6, 0x92, 0x9, 0x80000001, 0x7, 0xfffffff6, 0x9, 0x8001, 0x0, 0x7, 0x1, 0x2, 0x684, 0xfffffffd, 0x9, 0x1ff, 0x4, 0xfffffffc, 0x1, 0xe, 0xff, 0x8, 0x6, 0x3, 0x7fff, 0x10000, 0x53c, 0x10, 0x101, 0x2, 0x7, 0x0, 0x6, 0x3, 0x3ff, 0x8, 0x7, 0x6, 0x2250, 0x6, 0xa116, 0x3, 0x816f, 0x1, 0x1ff, 0x2, 0x8, 0x7fffffff, 0x10000, 0x3, 0x7f, 0x6, 0x3, 0x18, 0x401, 0x4, 0x2, 0x6, 0xbde, 0xd3a6, 0x9, 0x0, 0x0, 0x9e, 0x1ff, 0xfffffffb, 0x5, 0x6, 0x10, 0x4, 0x34b, 0x0, 0x1, 0x8001, 0x80000000, 0x1, 0x3, 0x8001, 0x5, 0x4, 0x2, 0x1ff, 0x3, 0x7fffffff, 0x5, 0x1, 0x6, 0x873, 0x400, 0x6, 0x7, 0x3ff, 0x53, 0x7, 0x7f, 0x6558, 0x3, 0xac20, 0xd, 0x2, 0x3, 0x9, 0x29ba, 0xffff, 0x0, 0x80000000, 0x72c371e4, 0x0, 0x100, 0x1, 0x6b90, 0x3, 0xfffffffb, 0x9, 0x9, 0x7, 0x4d75, 0x6c7e, 0xd, 0x3ab6b668, 0x7, 0xf523, 0x1, 0x6a, 0x3, 0x80, 0x5, 0x1, 0x9, 0x0, 0xe, 0x400, 0x0, 0x80, 0x9, 0x251, 0x7, 0x4, 0x5, 0x101, 0x1, 0x100, 0x800, 0x0, 0x2, 0x9, 0x1, 0x81, 0x101, 0xfffffffa, 0x523, 0x6, 0x5, 0x2f7, 0x1ff, 0x7, 0x80000001, 0xe5, 0xffffffff, 0x7, 0x8, 0x7ff, 0x9, 0x2, 0x0, 0x20000000, 0x59, 0x607, 0x1000, 0x5, 0x4, 0x7, 0x4, 0x5, 0x7fff, 0x8, 0x3, 0x7f, 0x1, 0xfffffffd, 0x1, 0x40, 0xaec6, 0x8345, 0x3037, 0xcdb, 0x7, 0x44e, 0x5, 0x81, 0x0, 0x8, 0x3, 0x6, 0x48, 0x6, 0x2, 0x97f8, 0x401, 0xff, 0xa, 0x0, 0x4, 0x4b, 0x8, 0x2, 0x6, 0x5db1, 0x400, 0x2, 0x9, 0x7, 0x1, 0x0, 0x7, 0x3, 0x80000001, 0x0, 0x593, 0x80000000, 0x6, 0x80000000, 0x3, 0x8, 0x7, 0xe, 0x80000000, 0x9, 0x6, 0x4, 0xf, 0x4, 0x6, 0xfd6, 0x8, 0x8, 0x7, 0x5, 0xe, 0xb, 0x7, 0x4, 0x8, 0x1, 0x3, 0x9, 0x7, 0x3, 0x6, 0x8, 0xcb0, 0x6, 0x7, 0x200, 0xffff7edb, 0xfffffffc, 0x4, 0x5eb, 0xe, 0x3, 0x8, 0x0, 0x6, 0x5, 0x2, 0xfffff9ac, 0xfff, 0x0, 0x8, 0x7fffffff, 0xfffffeff, 0x2, 0xfc, 0x5, 0x2, 0x64, 0x7, 0x0, 0x8, 0x45b, 0x30b, 0xfffffffd, 0xd798, 0x2, 0x2, 0x1, 0x8000, 0x4, 0x1, 0x3, 0xc8, 0x4, 0x5, 0x2, 0x8, 0xffff1b10, 0x7, 0x2, 0xc, 0xffff, 0xa, 0x9, 0x6, 0x0, 0x3, 0x800, 0x80, 0x2, 0x7, 0x5, 0x9, 0xfffffffb, 0x200, 0xde, 0x7, 0x7, 0x2, 0x0, 0x2, 0x6, 0x498, 0x3, 0x9, 0xd7, 0x100, 0x9, 0x1, 0x1, 0x2, 0x1000, 0x8, 0x7, 0x2, 0x7, 0x7fff, 0x9, 0x4, 0x8, 0x3ff, 0xb47b, 0xe752, 0x0, 0x8, 0x6, 0x5, 0x0, 0x6, 0x3, 0x49ec, 0x8000, 0x4, 0x8, 0x6, 0x6e4, 0x0, 0x1, 0x0, 0x4, 0xfffffffe, 0x800, 0x5, 0x1, 0x8, 0x0, 0x9b, 0x0, 0xffffffff, 0x0, 0x7, 0xfff, 0x3, 0xe428102, 0x8, 0x43, 0x2, 0x1, 0xffff, 0x7ff, 0x8, 0xb15, 0xe, 0x7, 0x4d5c, 0x4, 0x9, 0x8, 0x3, 0x4, 0xb, 0x3, 0x6, 0x5300, 0x3, 0x4, 0x3, 0xfffffff8, 0x5, 0x0, 0x7fffffff, 0x9, 0x4, 0x7, 0x7, 0x5, 0xfffffff8, 0x3, 0x6, 0x4, 0x7, 0x7ff, 0x5e, 0x4, 0xc, 0x76bd, 0x1, 0x3ff, 0x7ff, 0x0, 0x5, 0x7, 0x0, 0x7819, 0x7, 0x648549f3, 0x6, 0x401, 0x1, 0xfffffffb, 0xfff, 0x61, 0x6, 0xd, 0x2, 0x100, 0x2, 0x7, 0x92, 0x40, 0xfffffffd, 0x1, 0x8001, 0x7, 0x2, 0xab1, 0x5, 0x400, 0x3, 0x5, 0x6, 0x3, 0x2, 0x1, 0x80, 0x0, 0xe697, 0xfff, 0x5, 0x4, 0x5, 0x6, 0x88, 0x7a, 0x49, 0x5, 0x4, 0x8, 0xff, 0x0, 0x8, 0x1, 0x0, 0x9, 0xa, 0x4143, 0x9, 0x8001, 0xaa2, 0x8000, 0x10, 0x3, 0x6, 0x8, 0x5, 0x9, 0x7fff, 0x2, 0x10000, 0xfffffffe, 0xa, 0x7, 0x7702678d, 0xea20, 0x4, 0x7, 0x5, 0xa77, 0x7, 0x0, 0xfffffff8, 0x6, 0xaf7, 0x80, 0x6, 0x5, 0x4, 0x1000000, 0xffff, 0x0, 0x9, 0xf, 0x4, 0xe25, 0x469, 0xfffffffa, 0x2, 0xffffffff, 0xc, 0x6c1a, 0x0, 0x6, 0xfffffff8, 0x7f, 0x1, 0x9, 0x9, 0x9, 0x2, 0x6, 0x80000001, 0x4, 0x2, 0x6, 0x8, 0x10001, 0x5, 0xd2e, 0x3, 0x3, 0xfffffffb, 0x101, 0x3, 0x3, 0x3, 0x9, 0x9, 0x1, 0xd, 0x82, 0x5, 0x526, 0x401, 0x7, 0x1, 0x100, 0x5, 0x0, 0x6, 0x8001, 0x0, 0x0, 0x8, 0xff, 0x5, 0x8, 0xfffffffc, 0x980000, 0x400, 0x3, 0x8, 0x8fa1f07, 0x4, 0x0, 0x11f, 0x2, 0xf, 0xb3b, 0x0, 0xffff, 0xe, 0x3, 0x0, 0x8000, 0xfffffffb, 0x1, 0x9, 0x80000000, 0x2, 0x7, 0x8, 0x10, 0x2, 0x101, 0x3, 0x8, 0x6, 0x2029, 0xf75a, 0xa2, 0x2, 0x5, 0x80, 0x1891, 0x1, 0x4, 0x0, 0x6, 0x9, 0x5, 0x1b, 0xa, 0x0, 0x2, 0x8, 0x2, 0x6, 0xffff, 0xfff, 0x8, 0x3, 0xffffaf90, 0xc, 0xa, 0x3ed, 0x7, 0x1, 0x5, 0xffff, 0x5, 0xd, 0x9d, 0x8, 0xfffffffa, 0x8, 0x6, 0x2, 0x3, 0x200, 0x9, 0x7f, 0x5, 0x6, 0x1, 0x280, 0xf, 0x40, 0x71cc, 0x1, 0x0, 0x2, 0x4af, 0xf, 0xb, 0x1ff, 0x80000001, 0x101, 0x8, 0x6, 0x401, 0x10, 0x6, 0x5, 0x9, 0x3, 0x1, 0x1, 0xfffff800, 0x9, 0x0, 0x100, 0x3, 0x6, 0xfffffff8, 0x6, 0x1ff, 0x7f642287, 0x0, 0x9, 0x1, 0x1ff, 0x8000000, 0x7, 0x6, 0x9, 0x0, 0x7, 0x8, 0x8, 0x10001, 0x4, 0xfffffffe, 0x1, 0x40, 0x8, 0x3ff, 0x8, 0x80, 0x8553, 0xfcd9, 0x3, 0x4, 0x4a4, 0x3, 0xb783, 0x10001, 0xc, 0x6, 0x9, 0x0, 0xd67a, 0x10001, 0x9, 0x1, 0xfffffffd, 0xfffffff5, 0x7, 0x5, 0x882, 0xca8, 0xd1, 0x1ff, 0x8, 0xaf, 0xb, 0xb, 0x8, 0x6900c2a2, 0x4, 0x212, 0x9, 0x3, 0x6, 0x6, 0xb, 0xff, 0x9, 0x7, 0x2, 0x4, 0x1, 0x7, 0x8, 0x0, 0x1, 0x4, 0x6, 0x8, 0x8000, 0x8a4, 0x519, 0x17, 0x3, 0x8, 0xe, 0x0, 0xa7a, 0x82b, 0x7, 0x9, 0x5f3c2c1e, 0x3647, 0xe, 0x1, 0x6, 0x23, 0x7, 0x7, 0x34d, 0x5, 0xe, 0x1, 0x1a4, 0x9, 0x6, 0xda0000, 0x699, 0x0, 0x9, 0x9, 0x0, 0x5, 0x11bd, 0x101, 0x8, 0x9, 0x1, 0x2, 0x7f, 0x2, 0x401, 0x1, 0x8001, 0x0, 0x9, 0x40, 0x9, 0x2, 0x8001, 0x400, 0x9, 0x1, 0x0, 0xff, 0x4, 0x5, 0x22c, 0x3, 0xff, 0x5, 0x3, 0x4, 0x9, 0x1, 0x1, 0x6, 0x1, 0x7, 0x1, 0x8, 0x101, 0x7, 0x3, 0x0, 0x8001, 0x8, 0x3ff, 0x3, 0x40, 0x3ff, 0x5, 0x800, 0x3, 0x6, 0xfffffff7, 0x7d1, 0x8, 0x0, 0x4, 0x8000, 0x5, 0x3, 0x0, 0x9, 0xb, 0x5, 0x2, 0x8, 0x2, 0xc420, 0xbe03, 0x3, 0x8, 0x8, 0x5, 0x1, 0x3, 0x6, 0x24d, 0x4, 0x5, 0x2, 0x4e, 0x2, 0x8001, 0x3, 0x5, 0x4, 0x7fff, 0x8, 0xfffff85e, 0xc9d8, 0x6, 0x80, 0x7, 0x8, 0x1, 0x6, 0x9, 0x98, 0x7, 0x9, 0x9, 0x1, 0x8, 0x9, 0x0, 0x9, 0x6, 0xff, 0x101, 0x9, 0x3, 0x62d, 0x4d, 0x486, 0xffffff9b, 0x0, 0x4, 0xfffffffa, 0x1, 0xf, 0x1000, 0x4, 0xfffffffe, 0x2, 0x50]})
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001080)={0x2, 0x2, 0x2, 0x6, 0x3, 0x80000001})
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000010c0)=""/203)
read$hiddev(r0, &(0x7f00000011c0)=""/67, 0x43)
r1 = syz_open_dev$evdev(&(0x7f0000001240), 0x4, 0x2301)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000001280)={0x6, 0x2, 0xff})
r2 = syz_usb_connect$cdc_ncm(0x2, 0x17e, &(0x7f00000012c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16c, 0x2, 0x1, 0x5, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "8a4cc998"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x78, 0x4, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x32}, [@mdlm_detail={0x100, 0x24, 0x13, 0x6, "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"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x3, 0x8, 0xa47c, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x2, 0x14}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0xea, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x1}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x110, 0x3, 0x6, 0x0, 0xff, 0x16}, 0x19, &(0x7f0000001480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "95840337f7cdf3fffcf47d48088252a0"}]}, 0x9, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001580)=@lang_id={0x4}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x17, &(0x7f0000001680)=@string={0x17, 0x3, "1e8bdd36348fa3146e6159c33585427cff6706fe54"}}, {0xf6, &(0x7f00000016c0)=@string={0xf6, 0x3, "e6f26d9924d3c1d04bdc1f3d3f9df311702affef3119057c3b8918967493d23a2af3bcf551cd6dae699eb508856b7626dc91110086d874f5343607c317619649fd8bcaa36cdbad96e2b9ec7363f0c69168df359356b8473e4a5993cb1b851a416617c56a6ec06015be2766df6eb25acbf7931bbb44df1989295b83bdd438ec3d1e153b0f6cf052a5b86eae18c2b6bb2422964470a0b57ad97ee86d07b969b45c0049a2f9435b6fc13d4fa6f81e068605cd7829cab1a06c0da178ad3b6e8f9ad65b84b2ffd5d25a73c509b22fd897f064884157cd36cfafa51f649d6f9f12de674f1b605f1453d7c5c791ef87ab44671b0daff211"}}]})
syz_usb_ep_write(r2, 0xd, 0x69, &(0x7f0000001880)="2ca15f1030e4e2120c709bd716755bfcbd96252616c32028340023baa75ddb9fa0309ce742656d88d58a9926e5543096d06230cafb474f8810a0252cb01ff04cab389eac4f3f8fbe41d306a1dec2334bcb6244b1381a51425112873e1ad1aae49f0c55536ee5bfda76")
r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x200440)
syz_usb_control_io(r2, &(0x7f0000001b00)={0x2c, &(0x7f0000001940)={0x0, 0x24, 0xa9, {0xa9, 0xe, "b5ce74e2415813928a870ef9bb7862d4804fb2a8a2ff2a0f4e899a34ff32de117fad8d87d3a2fa2c7db0e2f70c8a927b1cac8b1cb674727859878f5756bf1771f2d5d118a67ef1cc09ae5bb3fcf512ba67d34b80d8aa6b9b7e05bde02b8ed6b629f38a6947cc6268a8fad4f22866545d4fe49c70dceac4fd0389cb2fd957de23e4de068ab9a35a6916f0660fda295e4ced9d2c66e3b2e263f4bcd9551c85248deed906deb83107"}}, &(0x7f0000001a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000001a40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x6, 0x8, "3b31bed0", "dc218e2d"}}, &(0x7f0000001ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x0, 0x81, 0xe7, 0x1, 0x4}}}, &(0x7f0000001fc0)={0x84, &(0x7f0000001b40)={0x0, 0xe, 0xb3, "13ea39dd10c72c002a63024cb12dceb4bc03591bf0ee2f4ece1b1bbe9a0c3c6e1baf2990efb1fa69a09e72946cb4eeb210ac8748a87513c8ce7195a6d5e69f7449ab6596a6a492652b07c3978d3fc6be41a8872dd0f2f76c95c735415234eedf63d44fdb06078225d13125ea31da103feb68eeaec74c1cf217f4c95d86141e17585497d9e550e2d92db07e57a3103ce87cf1597a78a767a7602efc92bd90035251f4415b0cf4b67c9a7765b3a098cd3fdc4ce2"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0x69}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001cc0)={0x20, 0x0, 0x8, {0xa0, 0x20, [0xf00f]}}, &(0x7f0000001d00)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000001d40)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001d80)={0x40, 0xb, 0x2, 'sd'}, &(0x7f0000001dc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001e00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001e40)={0x40, 0x17, 0x6, @random="639b3d034bbf"}, &(0x7f0000001e80)={0x40, 0x19, 0x2, 'Uy'}, &(0x7f0000001ec0)={0x40, 0x1a, 0x2}, &(0x7f0000001f00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001f40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001f80)={0x40, 0x21, 0x1, 0x1}})
r4 = syz_open_dev$hidraw(&(0x7f0000002080), 0xd3e, 0x200003)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f00000020c0))
r5 = syz_open_dev$hiddev(&(0x7f0000002100), 0x4, 0x40100)
ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000002140)={0x1, 0x3, 0xb})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0xab)
write$char_usb(r6, &(0x7f0000002180)="313b0ff94a1f865070498e2eb5869fb52e759d7961c8014713953a6eeed0faff3c37838c33c3", 0x26)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000021c0)={0x2, 0x1, 0x9, 0x7, 0xffffffff, 0x800})
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000002200)=""/48)
r7 = syz_open_dev$evdev(&(0x7f0000002240), 0x10, 0x1)
ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000002280)=[0x1, 0x80000001])
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000022c0)=""/130)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000002380)={0x1, 0x1, 0x80, 0x0, 0xfffffffd, 0x8})
syz_open_dev$evdev(&(0x7f00000023c0), 0x6, 0x0)
ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000002480)={0x12, 0x7f, &(0x7f0000002400)="bc2d8766488354dea9e71f8456da39755cd3b2f426634ec818414e9b096fdaffaae54b6861b78db6f3b1c146b99ca41f03da753c19b0d33cf64982cbc4a13a010eb713903708cfd63db370a825e232419609537c02759e433dab0107be5c55be58ae9cc92d28509896330e03d4c513088e89fa035a887e94ab161fb673b292"})
syz_usb_connect(0x1, 0x911, &(0x7f00000024c0)={{0x12, 0x1, 0x0, 0xc5, 0x87, 0x11, 0x40, 0x4c5, 0x2028, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8ff, 0x3, 0xbb, 0x9, 0x20, 0x4, "", [{{0x9, 0x4, 0x1d, 0x8, 0xb, 0x51, 0xb, 0x51, 0x23, [], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x2, 0xec}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x71, 0x2, 0xe}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfff9}, @generic={0x100, 0xd, "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"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x6, 0x4, 0xb, [@generic={0xdd, 0x6, "8cba5f17485fad79667def0382255832d74cf5801b0b721aacffe37c91efc3c3761b1f3d8ce9748259d3ef886a73ae92807ea238231f1f1de761280f7af39d0bfbff6e0b6a3faf9de81993941c7b09b66c90404bb3c7f4375cc82c8230ba856cb6febc118355fa977c6435fd76cf18f155d5b4da93f42c8f188327214b08f04d1620a4db67af233aae33b254b3b390c152215d5a882cf3f71a00f225a57e4cdc9db796a01aeefbebce585db6356b4b892cbbf6965dc050bdb6cef13a76e677af7854830888c6dd74c7ea7a79fa136dc1012e789d1f6341f986db03"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x81, 0x8d, 0x4, [@generic={0x48, 0x21, "c6a4b2250d1d5b519b6d65f0e4f0acc38527d41f80aa7038b6a5928a1e26e614606eb060469de499949e34df8c01babb93d2862e488890a31da88c7019cb92c436fd08a33e5e"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x7f, 0x10, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xc, 0xfa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x94, 0x23, "e05f85aca353d8f5da568c4fd184420f88359b1ecb51fb0c3578c4f0be925055502b03da74504a05ae84c69d7132d22dbb6f3b18483612adac2b9452a09e278c2d2d0f5eef6f02d82124f3c59a8c33cc1aa59b426e5275b7f065d57ab8f097161dd644a74f4e593226459c57b84b23a587e137104a86704916e9c468e0b8f1dc3d7cc416b90ad57ba93f14a6d7ee21f73e2e"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x9, 0xbe, 0x8, [@generic={0x26, 0x3, "4a6e63a5001489559f4437bec02a4f692b0ff4a53dc2bca3363caabe6eaf39e2ab873043"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xf6, 0x9, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x80, 0x1e, 0xff}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x4, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}]}}]}}, {{0x9, 0x4, 0xb0, 0x0, 0x8, 0x64, 0x62, 0x28, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "87a94e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xc, 0x8, 0x80}, {0x6, 0x24, 0x1a, 0x30, 0x32}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x66, 0x24, 0x13, 0x10, "2499f2828fa34e35e3df8d12b349d09538c480bff98e55eac949de50357d8c7ea506835fa03dcbdbde9efab1f39e3f59b771dbaee1b7dc4214cb2cadc6334dbe49211b12c32dc7e8eb075c8ab5d06f73d831821ab83a2401b0b1dc303a589a1e25a7"}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x7, 0xa, 0xa8, 0xfffa, 0x2}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x7, 0x5, 0x4, 0x3}]}], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x4, 0xff, 0x40, [@generic={0x1d, 0x5, "0bd7ccac564d46bf57f0c37c5bcb1aa4683565f49d0ce12782f3ad"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x2, 0x9, 0x79}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8a9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x40, 0x3}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x40, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}, @generic={0xb3, 0x24, "711ed0029b8384c8321ec84524be5d2cac61afb619bd6ad1850a66faa9fb6e8fbda5e6f43876c536cbe9a938f2feb67b9354c47124eb1fbae57d619b34fe232960bc18353afff77c7d7185a453bb84a364bc26fefbb6702dc340bad292f62d91dd84cf1af8711f18416a80d8d7c8e66837deec33ce7bbff8d75103c5a031825c7ed2ffa158fe8088a6fbd63a65731c6cee6d9035be93a55ae0c39a6f4071f0d0c7f708b88caa569e746566bdaecd06e2ca"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x0, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x10, 0x6, 0xff}}]}}, {{0x9, 0x4, 0x4a, 0x9, 0xe, 0xee, 0x19, 0x3b, 0xfa, [], [{{0x9, 0x5, 0x3, 0xc, 0x10, 0x0, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}, @generic={0x56, 0x23, "a8447f7ece49838fc7870517100402adec1f10776f5628f7201899edef451b07ced87b04f2708fd64ccaec8433a2ac9a70c31a365b612635bb4d97506d07cbedc9cee85668e3ce93e05aa42418372c2f250fa6c0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0x7, 0x81}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x7f, 0x23, 0x7}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x0, 0xe, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2d, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x6, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc6, 0xdd6a}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x17, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x7, 0xc, 0x10}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0xfa, 0xd, [@generic={0xf4, 0x6, "47688954a39dfd7fa75ff39e965b280637d3b069fbb21bb315559bd7edd6b8c4ee01347a2b52685c9d2fb020c6c92b86b8a63de2d71433815881b16c81e8379268208b8d34275376d6753c843441e26fa9d0c54cf27023826c4f20a0ffe0da196d81e3e1e4d13003be154f4337058bf4440467cc9cf7308866999a08ca73f17ad5dcf7cb322eca04a10b75774c32b19b61d0a12c373c97eb79902d2ba7256322ed26a7736d8059186095841adc7db9ea80982748a2c0fa81d53d590adbd75ad7c0ece2cb5f2f3593d1fe174af6181250ac90e66c47426a26ddb0b9ce02dc65d7887d07a92a204ec9f2ea835a9ad3e5626920"}, @generic={0x88, 0xd, "3f6fb7875ad39043e4368c27b99ccc81b25ce11b47cd63d6021fb803abb4760a0d054976cda9e57ef34e1ebc5dda8e104fc01b09c2fb93381cdda565644c063ecec58cb85e36f080919cddf78ee906ad7499bb90fcd1a1fdcb513ab0091238f2ae1adb3bd75d219143d06ccf4b13aa27d008ec34991dba42535487a7fe1f42ed0a5276b505a4"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x8, 0x8, 0x3, [@generic={0x5e, 0x21, "d624197eb14832c81bc0e14ce0ba85c4ee6c7a3b18f76c130affda38ef79c688eeac5136f7a4c2ad42144bf74de0855867f136c7e96756423a9a0af7d62fc5a6bceb1b5d0db3b379a1189cb05ae39bd81da6346dc6915de21fca16b8"}]}}, {{0x9, 0x5, 0x8d, 0x8, 0x40, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xe}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb2, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0xd8, 0x3, 0x7, [@generic={0x7c, 0xa, "baf35106bc8c6139d79ebfeacc47479cea0069d3c8fb9bfbb9629d67a9bf9d7efa2d47b04b0f8acf7df4e19324e5ddd99c913fcb77b506c6cd2ad7508a95bb3b69f5ddce8f6c4ba658a6d0f2ddf98307d69ee0de20c77bbe9e818a0e459d004dce5c1678bf9d8300398f04966348a17626807b900a70551b85a2"}, @generic={0x33, 0x11, "de415d6b112c4d707924cc9904c0a304593b92c1de88f7f16b6de6b0b90ff598707e2ac02f7eb5ce34ec45002483171b02"}]}}]}}]}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002e00)={0xa, 0x6, 0x201, 0x2, 0xc4, 0x4, 0xa7}, 0xc4, &(0x7f0000002e40)={0x5, 0xf, 0xc4, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "3e99fab7f54a9deffb1119d21735c0ef"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e190569c925b4712d172bffc95b9b5fc"}, @generic={0x97, 0x10, 0x3, "38992700152f564d32e92edb78e14669caf8b13f6033bb1d7b67da157a3a50ea7c284d589b19a0f680a716f77734500966fb9e01135c792445797ac0d919443b7020779ad6727aff17f242b57e981be92dbea55568a3fc0afb399132f27b161d4b18db6863e75b12163610e7f71173567efa532e71386b92c988141b1e80a0537b90484079265b038fbc933a5167a59d499b130a"}]}, 0x2, [{0x4, &(0x7f0000002f40)=@lang_id={0x4, 0x3, 0x500a}}, {0x83, &(0x7f0000002f80)=@string={0x83, 0x3, "c97bafa78cdf49a59e92e4a538ef8b134b64aa8a2ab711eb4ab48a5ffe8f4f3601a45137144fdaa6b4a217733d53ffb3e81d7018058811f9a7709ed2a58a309282cb70ddd5e029266488c14f657061653ee8e1e53873f02b642013de1ff3c48e128f5164f51ed8a5b93499de545a0bb3f509b5c93cd37a1b004804fe13636764a3"}}]})
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000003080))
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000030c0)=""/225)
syz_open_dev$evdev(&(0x7f00000031c0), 0x7, 0x400)
executing program 3:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async, rerun: 32)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/148) (rerun: 32)
executing program 32:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async, rerun: 32)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/148) (rerun: 32)
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x95, 0x408040)
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x1, 0xffffffff, 0x3, 0xffffff5c, 0xb, 0xd81, 0x867, 0x0, 0x6, 0x6, 0x9d77, 0xffffffdf, 0xfffff1da, 0x8})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fbb0f09040001d609"], 0x0)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000000c0))
syz_usb_disconnect(r2)
syz_usb_connect$uac1(0x1, 0xf0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x80, 0x41, 0x9, 0x20, 0x9}, 0x23, &(0x7f0000000180)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0x4, 0x6}, @ss_container_id={0x13, 0x10, 0x4, 0x81, "6bc706d21eac40cdef7867ff2ddcd3be"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}]})
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xb6, 0x34, 0x18, 0x20, 0x525, 0xa4a4, 0xd37e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x6, 0x4, 0xa0, 0xf3, "", [{{0x9, 0x4, 0x84, 0x6, 0x2, 0x2, 0x5, 0xb5, 0x4, [], [{{0x9, 0x5, 0xa, 0x1, 0x10, 0xf8, 0x6c, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x410, 0xe0, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7ff}]}}]}}]}}]}}, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000900)={0x14, &(0x7f0000000840)={0x40, 0x11, 0x79, {0x79, 0x23, "e470aad77f448dde43eb01b3256ffef0ad4eda6a2559b7e90f20ca326f6a449daa5bf4b06a38abc6af8ef6ec4d1448a2f8fba0d20c3d2ef0ecb7705638050143cd2fc9edc16c31145516a052720a4ac21794ca34b3afb579fc24feb2c6071bbf5062f6c57932f149d9f5ae8c313dc80dcf8945eeac6634"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000940)={0x0, 0xf, 0xc6, "850477c92c35343e3a2becfe9cdb58f631b1272c5f6b5604e713e66a734f15d430329d0a3467b152c95b1268ff21fae929e431e40e45d0c3b7d5aeba443cad3e52d941ce7a00a127ab84d9768e56c7ae428ceac70d15e8f478f27ab41893841637e7a98bc4a772ea2d4f948f7104ee108aff9272c379893d83502945d80f9d9a056b402473746996d422127e08625450d934f7cfea4c358c7cb4352a089c17b15f57544e09178d3c05d4b1d332b7024852c8a2ba5d3ed4d4de68fef9d3cb5087933a8a956f04"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}})
r4 = syz_open_dev$evdev(&(0x7f0000000d00), 0x0, 0x400102)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000d40)={0x5, 0x13, 0x3, 0x7, "dce1a49ff8b56808edde70cb3012265f6a14d782554759ecb6230ab666232f75"})
syz_usb_connect$midi(0x6, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x414b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1b, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x80}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x0, 0x2, 0x8, 0xb, 0xff}, 0x36, &(0x7f0000000bc0)={0x5, 0xf, 0x36, 0x1, [@generic={0x31, 0x10, 0x3, "1508d9f2f2acb78799f7d15a5c11124e5e721333428adbcfc98a236d9bd9c89f0ac6cddff196e6d6efe0bf4def54"}]}, 0x2, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x860}}, {0x74, &(0x7f0000000c40)=@string={0x74, 0x3, "229476a6594a4620728813a9f702e7a8cf068127476698fe1652f1a85f1558ace63dcbec6ac7569c880e4652076ef807255d0a085b6642ef87d435e0262c42b31205acaa93534e16d591c687a82528fe2e9c04f1a9021f645934d9a8f8f11cc9abf4b3f3ba70094b11ed73f9a5257cf334f0"}}]})
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x84, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x0, 0x5, 0x6, 0x10, 0x7}, 0xc9, &(0x7f0000000300)={0x5, 0xf, 0xc9, 0x6, [@generic={0x8d, 0x10, 0xb, "30d66018dfd5f32c5cd478cf4627af248ee3d73e4f40eea41fb1b7a614f3d44cb73251d09f6d07376bdd78bdcf061e4c1cb0472ed068f1cf8529eb09af50f68649aa5741ebd076c5a490a0873be221bf35baa98d7e6e42776356a5234e1cf61efc573447d4a431b50990321e8dc5428876c1584947ada1c0559abaf926218eb8366389e9df24e0f2e1c8"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0xfe, 0xa, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x3, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a8e2396a12a331254b704983c5f83ee6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x5, 0x56, 0x0, 0xfd}]}, 0x4, [{0x11, &(0x7f0000000400)=@string={0x11, 0x3, "d8ed7bfcb035da49362dd330d40e36"}}, {0x43, &(0x7f0000000440)=@string={0x43, 0x3, "ba14e67cc52b93fd9fa7584d105af6d5f0ca8e5d250593670dba54acaafa0775d82b3540b58d283bb90cd8958a700b8fa43d8cd99a67dcb86120599ad8e03bfe1e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x7c64}}, {0x66, &(0x7f0000000600)=@string={0x66, 0x3, "66e87b05322344eb791dc80e47a4b3ec19658e210223f2aa795aef6af1a66034d8574437395b4e3d4739fd9c65faf6c309966a6d35885b0e97e78ff6f3adb0dde79154b557dacfb0b586fd5ca4834cf45d6f9181464bcebffa98c3fdc4b9bfda5fd3d7ce"}}]})
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000014c0)=ANY=[@ANYBLOB="3c9b00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000000)={0x100000, 0x0, 0xfffffffc})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x84, &(0x7f0000000a80)=@string={0x84, 0x3, "13507c4fcb7a051ddd5c329c8f7d5ce8e47cd35f47b7e45d37bd75f1c7af254ba286e61f655a4b10b633a0c74ee894646c8bfc06b1bc249e2357ec1cdbf90a98026036cb1378f6e6d3f30638161bf362503f4a6e058389c212906d70fab3387af1e48b2de580c22969bde1a286dad3b6adebe729718f5ce1ec17c110251f708a1658"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b628a340fa04902453f8010203010902120801000000000904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0fc1cd79"}]}}, 0x0}, 0x0)
syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x8b, 0x70, 0xe0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0xad, [], [{{0x9, 0x5, 0x5, 0xe, 0x8d026bda17bf10e8, 0x7f, 0xf7, 0x40, {0x4}}}, {{0x9, 0x5, 0x87, 0x52f828ab2ca3a53b, 0x20, 0x3, 0x9, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r2, 0x9, 0x1, &(0x7f0000000180)=""/1)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0xa, "43ef0db0"}, @main=@item_4={0x3, 0x0, 0xa, "378bf02b"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @local=@item_4={0x3, 0x2, 0x5, "ea5ecc19"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb505920de0c1a003221010203010902120001000600000904"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)=ANY=[], 0x0)
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x20040)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000740)={0x0, 0x4a, &(0x7f00000006c0)="0e8b9aca40a320f5b607bd77692166940e376a7d0e32ad8a9d4bba09948e74c0d188e467684166de9b0c6282a0e117ba49f3c4516ef6051c42d8aa38ddf4231b72d7abeac63f32eb0fdf"})
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0)
syz_usb_ep_write(r1, 0x2, 0x0, &(0x7f0000000580))
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x8e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110030040000102030109027c00030105c003080b0002010c20020904dfff00010120000924010100ff1c00020c240303020409060300027f0724080605010009040100000102200009040101010102200009050109d70703f707082501030200000009040200000102200009040201"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac3(r1, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x0, 0xa, 0xd2, {0xd2, 0x5, "c53eaf8e94e1dbffb32035c7132e17686f450bd97c8b2d23e47f49ba072ab5e95a537a7a89ffe887834702d52611c893123489b0f83a4cd7481635e997bcbb9b064c10c9bb46d8550a5e557a4a595edc807787364ebdfacc41ce28c424bc0f0994faa3e0abb7689deb18d9d21ae27f588f5fbbe1a29411ae065dbce9c17af4a948793a3d1484717ae31de21f33ef1e00e2abc3789b281776ac537a874f01f8ec42caa01ca8b5fb3536bd1ca2939ea70dddd3450699405aaa93cb1cb2e2b7faff55924e399e94be190d9aec9c23ec78bb"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000640)={0x44, &(0x7f00000003c0)={0x60, 0x12, 0x7e, "ddcd8f69eb94f796134f5df7bc5a69243564dfdde8affce50b2cd28d1ecb881df81ddf5c282b1f6c30c81eba3a76db48c20e83f5a65fba34ac2654b44af21a8ccb3a0cb5bc7dbdafb66c5acb8a67bc9e98269bc479118b2808068ddf0043145635dd7242683ec0a9d06f769f901f0af11b0d674c763a928b81e51043471c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x67}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000500)={0x20, 0x81, 0x1, 'L'}, &(0x7f0000000540)={0x20, 0x82, 0x3, "ce5528"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "faf4"}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "581f26"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "ca82c4"}})
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/201)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x1e, 0xe4, 0xac, 0x20, 0xb49, 0x64f, 0x8e62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x1, 0x0, 0x7f, "", [{{0x9, 0x4, 0x4d, 0x1, 0x0, 0x55, 0x9a, 0xd7, 0x7f}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x2, 0x65, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0x21, {0x21, 0x1, "88ff5cb5e85ead4c31157eab1db3e450c83cc44e2a58111c57c4f48570e081"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r2, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x1, 0x1, "9e"}, 0x0})
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
r4 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r4, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x40, 0x7, 0x1b, {0x1b, 0xf, "04002d875dcacf5eaab3dcd7dbf710cd407e17b1d4ba237573"}}, &(0x7f0000000500)={0x0, 0x3, 0x93, @string={0x93, 0x3, "5207c790a24a0fab617fd2678a485023f6e9542ff8013ccf467712e177d28ec30316e6e640310834367a853e24a9ed76e342073372d475f6201ddcbfba1e8c2f00100c2bccdd1587d6bf04f43257aa5be2647892af4dafdcf64d6584eac864ecf32c6c1f38be2cb50227a434ee663f3712bb9decbc5ccb38f1cbee5fed5cf7f7cbe0aa2e84f9ae58a3c631b69084c9b6b4"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0xe, 0xfa, "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"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "11a0cf259abf8b8f86d7b18c2d9edb5982a479007880dc23098202ea9bae7296946caaaddae651063024ae577dcf69"}})
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0)
syz_usb_connect$midi(0x4, 0xf8, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x499, 0x100a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x1, 0x1, 0x4, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x8, [@midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x49, 0x5, [{0x5, 0x7}, {0x8, 0x8}, {0x0, 0x10}, {0x2, 0xb4}, {0x20, 0xf}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x46, 0xe}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0xf6}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0xa, 0x8, [{}, {0x0, 0x4}, {0x90, 0x7}, {0x2, 0x81}, {0x80, 0x3b}, {0x36}, {0x0, 0x8}, {0x6, 0xd}], 0x5}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0x5, 0x2, {0x8, 0x25, 0x1, 0x4, "558be961"}}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x7, 0x3, 0x3f, {0xc, 0x25, 0x1, 0x8, "c948b3f69d53e97d"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xd, 0xf, 0x4, {0x6, 0x25, 0x1, 0x2, "1253"}}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0x7, 0x9, {0xb, 0x25, 0x1, 0x7, "7a63fb42c3072d"}}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0x80, 0x3, {0x13, 0x25, 0x1, 0xf, "f4300c9e19f2352ead77855b52692e"}}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0xb, 0x2, {0xa, 0x25, 0x1, 0x6, "729f53d0f4b9"}}}, {{0x9, 0x5, 0x3, 0x1, 0x9df4e3c2d070f163, 0x71, 0x92, 0x6, {0xd, 0x25, 0x1, 0x9, "81e4b16c52182cd63a"}}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x81, 0x2b, 0x6, {0x9, 0x25, 0x1, 0x5, "0c33e52b14"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x1, 0x2, 0x4, 0x10, 0x70}, 0x2f, &(0x7f0000000240)={0x5, 0xf, 0x2f, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x1, 0xff1e, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xcf, 0x34, 0x7, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xea43, 0xf0f, 0x76, [0xff30]}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "82d71f6b4768ca57ea07fc8259189cb49db236fde1000ba40957eb0191f84b5925743cae5c0c0193c43c45cbec060417a05db0f68d4fd4d709d2ea0b82ce8244a40ca2e81aeefe3738f2e8da12465e8d9201aebf896fb85cb2216b60f65470c4b2217ce924ec0ebd36edc114729d48b3fd952fb30d8215f3f654112f"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}]})
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0) (async)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000000c0))
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002)
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRES32=0x0, @ANYBLOB="04ae64167768c8157732592ddd83b6c125de5651562468dd44ba091bcb9d1520241b1f2ed651ca27dc58d2d794ede3f111f74067c542ccfda5254b2953e49a823b033a1081a720d1e86538f02d408435b88d9bbd444756aea8f8e5ba7f9288561a74ec66e38ca96f1f315e2bdc1cc4bd8269d696fdb35ec3b64972c9f9d4694b7d2b6ae708ec42", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100021282e00840200193eb300102030109021200012d0730050904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="1ff2f6f25cde5e7c4719d498c7976085fc260ac0dc72278a48d4da480d80fc9bffc93128ae32e1f87ec5ed7bf39a1e42cefe83b1b8bf6767ea85a59d588acc2b0a27a9c32021c8cc4e2d0d0c49e78354da2a474e59b9ae59812c75de9f29f72ea3ff0ed5492af117758c5ea5704901328064d28f658e7dec5abe06bc620eb90a2cab99790fea126f77421578613096439d81078b9b09440d128b8f9dc5c4e886baa5611e97f2368aa0689a0872aa2c8a451a0d7474fd8d1c286745a71c315d97b1b13516680df663074a256c9a78b4a6d9591dfe6bbf51eebc0916745acdd932ac65aceef73d8235cddf837ddce85ade556ddf0aa71154de8dc51f0aeaba19be06d042062d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async)
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]})
executing program 33:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0) (async)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000000c0))
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002)
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRES32=0x0, @ANYBLOB="04ae64167768c8157732592ddd83b6c125de5651562468dd44ba091bcb9d1520241b1f2ed651ca27dc58d2d794ede3f111f74067c542ccfda5254b2953e49a823b033a1081a720d1e86538f02d408435b88d9bbd444756aea8f8e5ba7f9288561a74ec66e38ca96f1f315e2bdc1cc4bd8269d696fdb35ec3b64972c9f9d4694b7d2b6ae708ec42", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100021282e00840200193eb300102030109021200012d0730050904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async)
syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b003452cd600e870011a433f1366d6a5e4f1088b4706f4c0871405459becd7ce1cfba01d51720efb7b6ff51de9eced4f1f680eb83408b5ee0baf08377fad0857e6b534072ac113d50969b75172367f78b99582249f233a375150e8ff237279e57d72ec5dff05365a8d04cb3777090fca11239873e1da00d59d3a5d9c95eaf20a5429226840c28b841c1026fa7403a47768d42e4da49b0245967c7776cbeebd7ab945df5be8d559584cd6259218f379026e24723858c71497a620b940f9707ef5880e"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}]})
executing program 1:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x2000)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000140)={{0x3, 0x101, 0xffffffff, 0x9, 0x6, 0x7}, 0x348, [0x8, 0x8, 0xfffffffb, 0x3f450734, 0x5, 0x9, 0x3, 0x6, 0x5f, 0xefa5, 0xfffffffa, 0x3, 0x1, 0x4, 0x0, 0xfffffff7, 0x7, 0xfee, 0x7f, 0x7, 0x91, 0x2a1, 0x1, 0x8, 0x8001, 0xfffffffb, 0x7, 0x10001, 0x0, 0x8c6, 0x0, 0x9, 0xe, 0x1c5b, 0x6, 0x200, 0x0, 0x1, 0x4, 0x1, 0x5912, 0x0, 0xfffffff0, 0x7, 0x3, 0xfffffffb, 0xb, 0x6, 0x741, 0xfffffffb, 0x1000, 0x5, 0x8, 0x800, 0x9, 0x10, 0xf, 0xeb, 0x6, 0x8, 0x7, 0x8001, 0x80000000, 0x0, 0x10001, 0xfffff67d, 0x2, 0x9fde, 0x6, 0x6, 0x4, 0x2, 0x8, 0x1, 0xf03e, 0x5, 0xffffff81, 0x4, 0x3, 0x0, 0x61c97833, 0x0, 0x8, 0x5, 0xffff, 0x1ff, 0xfffff001, 0x0, 0x6, 0x0, 0xd40d, 0x9, 0x9, 0x101, 0x8d, 0x0, 0xff, 0x3, 0x2, 0x4, 0x9, 0x1, 0x6, 0x5, 0x9, 0x1, 0x326f, 0x4, 0xffffffff, 0x5, 0x8, 0xff, 0xfffffbff, 0xb5bb, 0xc, 0x139, 0x1, 0x0, 0x8001, 0x8, 0x0, 0x7fffffff, 0x6, 0x6, 0x6, 0x3a, 0xd, 0x8, 0x9, 0x2, 0x1, 0xb, 0x9, 0x8, 0x8, 0x5776, 0x0, 0x1, 0x9, 0x5, 0x1, 0xd4f, 0x1f, 0x10001, 0x1, 0x7, 0x2, 0x4, 0x9, 0x6, 0x2, 0x8, 0x4, 0x9, 0x3fffc00, 0x7ff, 0x1ff, 0x800, 0x4, 0x1, 0x1ff, 0x0, 0x1, 0x80, 0x1, 0x3, 0x5, 0x10, 0x101, 0x0, 0x5, 0xc6, 0x0, 0xffff, 0xb4000, 0x7, 0x1, 0xa56, 0x1, 0x1, 0xfffffff8, 0x80000001, 0xd2, 0xb, 0x9, 0x3, 0x7, 0x8, 0xeb, 0x9, 0x3, 0x3, 0x5, 0x60c, 0x81, 0x6, 0x8, 0x1, 0x8, 0xfffffffb, 0x1, 0x1ff, 0x81, 0x8001, 0x3, 0x7fff, 0x5, 0xd275, 0x7, 0x8, 0x7, 0x7, 0x2, 0x7, 0x80, 0x80000000, 0x6d, 0x1, 0x1, 0xffffa257, 0x4, 0x4, 0x1, 0x4, 0x6, 0x1000, 0xc, 0x80, 0xffffffff, 0x8, 0x208, 0x0, 0x8c7e, 0x6, 0x1, 0x2, 0x3, 0x6, 0x8001, 0xfffffffe, 0x1, 0x6, 0x6, 0x101, 0xff, 0x0, 0x80000001, 0x4, 0x0, 0x8, 0x5, 0x7f, 0x7, 0x6, 0x6, 0x3, 0x7, 0x3a9, 0xa3, 0x7, 0x9, 0x1, 0xef94, 0x1ff, 0x7fffffff, 0x3, 0xfffffffa, 0x0, 0x1, 0x2, 0x101, 0xdb2, 0x2, 0x1, 0x1, 0x5, 0x9, 0x1, 0xbc, 0x3, 0x4, 0xa, 0x3, 0x1, 0x5, 0x2, 0x3, 0x3, 0x0, 0x7, 0xd, 0xc4168aa9, 0x4, 0xfffffffa, 0x7, 0xfff, 0x81, 0xb, 0x10, 0x3, 0x0, 0x7, 0x9cee, 0xd, 0x5d3, 0x9, 0x5, 0xfffffe01, 0x2492, 0x88, 0xfff, 0x6, 0x1, 0x1, 0xe, 0x7, 0xc, 0xffffff1a, 0x0, 0xe0b0, 0x4, 0x15, 0x3ff, 0x6, 0x712, 0xfffffff8, 0x6, 0x8, 0xa, 0x66305077, 0xd2, 0x2, 0x9, 0x7, 0x1, 0x5, 0x6, 0x400, 0x9, 0x7, 0xe, 0x6, 0x80000001, 0x3538bb26, 0x7, 0x1, 0xffff, 0x0, 0x80000001, 0x5, 0x2, 0x9, 0x3, 0x4138, 0x5fce, 0xc7, 0x5, 0x2, 0x1, 0x80, 0x7, 0x4a8, 0x9, 0x1, 0x80000001, 0x6, 0x0, 0x30c, 0xc, 0x81, 0x8001, 0x3, 0x5, 0x0, 0x7, 0x1, 0x1ff, 0x2, 0x9c, 0x5, 0x8, 0x1, 0x3, 0x1ff, 0xd, 0x65c, 0x5, 0x1, 0x2, 0x4, 0x5, 0xe, 0x4, 0x80, 0x81, 0x6, 0x6, 0x5, 0x241e, 0x4b28, 0xbf1, 0x6, 0x10000, 0x1, 0x80000000, 0x7, 0x7f, 0x925a, 0x800, 0x2, 0x80, 0x0, 0xfd64, 0x8, 0x4a, 0x40, 0x4, 0xffffffff, 0xe3c5, 0x8, 0x8, 0x11e, 0x8, 0x2, 0x800, 0x7fffffff, 0x3, 0x433, 0x4, 0x6, 0x5, 0x1, 0x8cbe, 0x200, 0xa1ae, 0xf, 0x209, 0x800, 0x9, 0x800, 0x6, 0x4, 0xa0c, 0x0, 0x4, 0x0, 0x3, 0xda1, 0x2, 0x0, 0x5, 0x8, 0x400, 0x6, 0x9, 0x75, 0xc0, 0x2, 0x7, 0x1, 0x7, 0x80000000, 0x8, 0x4b78, 0x9e, 0x3, 0x7, 0x6, 0x101, 0x1, 0x3, 0x1, 0x2, 0x2, 0x8, 0x7fffffff, 0x0, 0x7, 0x8, 0x1000, 0x5, 0x0, 0x0, 0x5, 0x5, 0x40, 0x2, 0x7, 0xd, 0x25b0, 0x4, 0x3, 0xeb, 0x1, 0x5, 0x3ff, 0xffff, 0x7ff, 0x9, 0x80000001, 0x3c, 0xb, 0x0, 0x8, 0xffffff23, 0x6, 0x28d, 0x400, 0x6, 0x3, 0x0, 0x2f, 0x7, 0x4, 0x2, 0x4, 0x1, 0x277, 0x3, 0xa, 0x3, 0x5, 0xae, 0x9, 0x2, 0x0, 0x5, 0x1a77, 0xf9, 0x8, 0x1000, 0x4, 0x7fffffff, 0x7, 0x8, 0x6000000, 0x8, 0x8, 0x1, 0x8, 0x96a8, 0x0, 0x1, 0xa3, 0x800, 0xb2, 0x5, 0x0, 0x7ff, 0x100, 0x7, 0x0, 0x2, 0xd08, 0x7, 0x8, 0x8, 0x6, 0x9, 0x1, 0xfffffffe, 0x4, 0x90, 0x9d, 0x8, 0x4, 0xe, 0x9, 0x5, 0x79, 0x2, 0x5, 0x8, 0x10, 0x4, 0x8, 0x1, 0x0, 0x2, 0x7, 0x10000, 0x5, 0xfffffffb, 0x4, 0x48d, 0x1, 0x1, 0x9, 0xffff, 0x5, 0x6, 0x5, 0x651, 0x4, 0xd7f, 0x0, 0x8, 0x450d, 0x4, 0x7fffffff, 0x2, 0x1e99, 0x40, 0x8, 0x6, 0x8, 0xfffffff2, 0x5, 0x8, 0x7, 0xd, 0xffff0000, 0x3ff, 0xb7, 0x1000, 0x5, 0x5, 0x2, 0x1, 0x2, 0x759, 0x0, 0x3, 0x7, 0xe, 0x10, 0x6, 0x3, 0x4, 0x4cb8, 0x4, 0x2, 0x6, 0x6, 0x9, 0x2, 0x1ba8, 0x5, 0x0, 0x1000, 0x7, 0x378c, 0x8c, 0x81, 0x9, 0x200, 0x9, 0x3, 0x9, 0xff, 0x5, 0x2, 0x84e6, 0x4, 0x34, 0x1, 0x6, 0x10000, 0x3, 0x0, 0x4, 0xa, 0x101, 0x4, 0xb0a, 0x4, 0xa, 0x1, 0x0, 0x4, 0x103e4fe5, 0x8, 0x81, 0xc, 0x4000, 0x735b6fc3, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1, 0x59, 0x1, 0x8, 0x2, 0x65, 0x4, 0x7, 0xdb, 0x6ef, 0x7, 0x0, 0x6, 0x9, 0x2, 0x2353666c, 0x0, 0x3, 0xb6, 0x458, 0x5, 0xaf, 0x8, 0x6, 0x80000000, 0x8, 0x3d, 0x15d, 0x4, 0x8, 0x628, 0x5, 0xb, 0x1, 0x2, 0x56, 0x7ff, 0x971, 0xf2c, 0x5ce, 0xff, 0x2, 0x8, 0x9, 0x6, 0x0, 0x6, 0x7, 0x400, 0x0, 0x9, 0x8, 0x8, 0x9, 0x6, 0x1, 0x10, 0x1, 0x0, 0x2, 0x2, 0x57, 0xe0d, 0x0, 0x8, 0x6, 0x5, 0x8, 0x1, 0x6, 0x7, 0x4, 0x200, 0x7ff, 0x9, 0x5, 0xfffffff9, 0x5, 0x8, 0x10001, 0x4, 0x43, 0xa5c, 0x6, 0x6b3, 0xffffffff, 0xff, 0x8, 0x48, 0x1, 0x80000000, 0x1, 0x1ff, 0x3, 0x80000001, 0x0, 0xe4, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7, 0x2, 0x9, 0x4, 0x80, 0x2, 0x100, 0x80000001, 0x5bf8, 0x64e, 0x2, 0x2, 0x1, 0x8001, 0x4, 0x2, 0xb, 0xeb, 0xfff, 0x81, 0x8, 0x6, 0xf6, 0x0, 0x12a400, 0x5, 0x939e, 0x400, 0x9, 0x1ff, 0x6, 0x6, 0x4, 0x18, 0x7, 0x1, 0x2, 0x401, 0xfffffffe, 0x8, 0x2, 0x8, 0xc00, 0xfcee, 0xffffa651, 0x1, 0x1, 0x7, 0x5a8a, 0x30, 0x5, 0x6, 0x10001, 0x6bc4, 0xfffffff4, 0xd9800000, 0xd, 0x4, 0x16f3, 0xa, 0xa, 0x80, 0x5, 0x6, 0xfff, 0x0, 0x8, 0x240, 0x90caedb4, 0x8, 0x4, 0x5, 0x9, 0x3, 0x9, 0x80000001, 0x100, 0x736, 0x6, 0x8, 0xfffffffd, 0x7fff, 0xf235, 0x4, 0xf, 0x3, 0x9, 0x2, 0x10001, 0x8, 0x5, 0xe5b, 0xc00, 0x2, 0x4, 0xf, 0xfffffafe, 0x13c, 0x3df1c095, 0x2, 0x7, 0x62, 0x10001, 0x9, 0x8, 0x0, 0xc, 0x5, 0x6, 0x3, 0x3, 0xffff, 0x7f, 0x1, 0x8, 0x10, 0x5, 0x3, 0x8001, 0xfffffffe, 0x3, 0xffffffff, 0xfffffffd, 0x8, 0x6, 0x80000001, 0xc, 0x4, 0xa324, 0x2, 0x7, 0x6, 0x80, 0x7fff, 0x80, 0x7, 0x5, 0x5, 0x10001, 0x400, 0xe2ec, 0xfffff001, 0x3, 0x2, 0xc, 0xfffffffe, 0x8, 0xa, 0x9, 0x1, 0x6, 0xb, 0x800, 0x2, 0x80000000, 0x5, 0x10001, 0x7fffffff, 0x8f, 0x8258, 0x7, 0x4, 0x6, 0x5, 0x800, 0x101, 0x7, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x7, 0x0, 0x9, 0x7ff, 0x9, 0x505c, 0xfffffff9, 0x7, 0x4, 0x541, 0x4, 0x5, 0x40, 0xff, 0x8000, 0xe2, 0x8, 0x9, 0x2, 0x800, 0x8, 0x6, 0xa0, 0x6, 0x7, 0xe, 0x10001, 0x0, 0x8, 0x100, 0x6, 0x2, 0x2, 0x3ff, 0x1ff, 0x5, 0xff, 0x1, 0x7f, 0x0, 0x0, 0x5290a766, 0x8001, 0x8, 0xa93a, 0x5, 0x5, 0xd, 0x7, 0x8, 0x1, 0xf, 0x7, 0xff, 0x4a, 0x704c, 0x80000000, 0x400, 0x8, 0x0, 0x10, 0x3d6b, 0x8, 0x7, 0x18, 0x4, 0x2, 0x2, 0x6]})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d60000000000090502026b"], 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x2000) (async)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000140)={{0x3, 0x101, 0xffffffff, 0x9, 0x6, 0x7}, 0x348, [0x8, 0x8, 0xfffffffb, 0x3f450734, 0x5, 0x9, 0x3, 0x6, 0x5f, 0xefa5, 0xfffffffa, 0x3, 0x1, 0x4, 0x0, 0xfffffff7, 0x7, 0xfee, 0x7f, 0x7, 0x91, 0x2a1, 0x1, 0x8, 0x8001, 0xfffffffb, 0x7, 0x10001, 0x0, 0x8c6, 0x0, 0x9, 0xe, 0x1c5b, 0x6, 0x200, 0x0, 0x1, 0x4, 0x1, 0x5912, 0x0, 0xfffffff0, 0x7, 0x3, 0xfffffffb, 0xb, 0x6, 0x741, 0xfffffffb, 0x1000, 0x5, 0x8, 0x800, 0x9, 0x10, 0xf, 0xeb, 0x6, 0x8, 0x7, 0x8001, 0x80000000, 0x0, 0x10001, 0xfffff67d, 0x2, 0x9fde, 0x6, 0x6, 0x4, 0x2, 0x8, 0x1, 0xf03e, 0x5, 0xffffff81, 0x4, 0x3, 0x0, 0x61c97833, 0x0, 0x8, 0x5, 0xffff, 0x1ff, 0xfffff001, 0x0, 0x6, 0x0, 0xd40d, 0x9, 0x9, 0x101, 0x8d, 0x0, 0xff, 0x3, 0x2, 0x4, 0x9, 0x1, 0x6, 0x5, 0x9, 0x1, 0x326f, 0x4, 0xffffffff, 0x5, 0x8, 0xff, 0xfffffbff, 0xb5bb, 0xc, 0x139, 0x1, 0x0, 0x8001, 0x8, 0x0, 0x7fffffff, 0x6, 0x6, 0x6, 0x3a, 0xd, 0x8, 0x9, 0x2, 0x1, 0xb, 0x9, 0x8, 0x8, 0x5776, 0x0, 0x1, 0x9, 0x5, 0x1, 0xd4f, 0x1f, 0x10001, 0x1, 0x7, 0x2, 0x4, 0x9, 0x6, 0x2, 0x8, 0x4, 0x9, 0x3fffc00, 0x7ff, 0x1ff, 0x800, 0x4, 0x1, 0x1ff, 0x0, 0x1, 0x80, 0x1, 0x3, 0x5, 0x10, 0x101, 0x0, 0x5, 0xc6, 0x0, 0xffff, 0xb4000, 0x7, 0x1, 0xa56, 0x1, 0x1, 0xfffffff8, 0x80000001, 0xd2, 0xb, 0x9, 0x3, 0x7, 0x8, 0xeb, 0x9, 0x3, 0x3, 0x5, 0x60c, 0x81, 0x6, 0x8, 0x1, 0x8, 0xfffffffb, 0x1, 0x1ff, 0x81, 0x8001, 0x3, 0x7fff, 0x5, 0xd275, 0x7, 0x8, 0x7, 0x7, 0x2, 0x7, 0x80, 0x80000000, 0x6d, 0x1, 0x1, 0xffffa257, 0x4, 0x4, 0x1, 0x4, 0x6, 0x1000, 0xc, 0x80, 0xffffffff, 0x8, 0x208, 0x0, 0x8c7e, 0x6, 0x1, 0x2, 0x3, 0x6, 0x8001, 0xfffffffe, 0x1, 0x6, 0x6, 0x101, 0xff, 0x0, 0x80000001, 0x4, 0x0, 0x8, 0x5, 0x7f, 0x7, 0x6, 0x6, 0x3, 0x7, 0x3a9, 0xa3, 0x7, 0x9, 0x1, 0xef94, 0x1ff, 0x7fffffff, 0x3, 0xfffffffa, 0x0, 0x1, 0x2, 0x101, 0xdb2, 0x2, 0x1, 0x1, 0x5, 0x9, 0x1, 0xbc, 0x3, 0x4, 0xa, 0x3, 0x1, 0x5, 0x2, 0x3, 0x3, 0x0, 0x7, 0xd, 0xc4168aa9, 0x4, 0xfffffffa, 0x7, 0xfff, 0x81, 0xb, 0x10, 0x3, 0x0, 0x7, 0x9cee, 0xd, 0x5d3, 0x9, 0x5, 0xfffffe01, 0x2492, 0x88, 0xfff, 0x6, 0x1, 0x1, 0xe, 0x7, 0xc, 0xffffff1a, 0x0, 0xe0b0, 0x4, 0x15, 0x3ff, 0x6, 0x712, 0xfffffff8, 0x6, 0x8, 0xa, 0x66305077, 0xd2, 0x2, 0x9, 0x7, 0x1, 0x5, 0x6, 0x400, 0x9, 0x7, 0xe, 0x6, 0x80000001, 0x3538bb26, 0x7, 0x1, 0xffff, 0x0, 0x80000001, 0x5, 0x2, 0x9, 0x3, 0x4138, 0x5fce, 0xc7, 0x5, 0x2, 0x1, 0x80, 0x7, 0x4a8, 0x9, 0x1, 0x80000001, 0x6, 0x0, 0x30c, 0xc, 0x81, 0x8001, 0x3, 0x5, 0x0, 0x7, 0x1, 0x1ff, 0x2, 0x9c, 0x5, 0x8, 0x1, 0x3, 0x1ff, 0xd, 0x65c, 0x5, 0x1, 0x2, 0x4, 0x5, 0xe, 0x4, 0x80, 0x81, 0x6, 0x6, 0x5, 0x241e, 0x4b28, 0xbf1, 0x6, 0x10000, 0x1, 0x80000000, 0x7, 0x7f, 0x925a, 0x800, 0x2, 0x80, 0x0, 0xfd64, 0x8, 0x4a, 0x40, 0x4, 0xffffffff, 0xe3c5, 0x8, 0x8, 0x11e, 0x8, 0x2, 0x800, 0x7fffffff, 0x3, 0x433, 0x4, 0x6, 0x5, 0x1, 0x8cbe, 0x200, 0xa1ae, 0xf, 0x209, 0x800, 0x9, 0x800, 0x6, 0x4, 0xa0c, 0x0, 0x4, 0x0, 0x3, 0xda1, 0x2, 0x0, 0x5, 0x8, 0x400, 0x6, 0x9, 0x75, 0xc0, 0x2, 0x7, 0x1, 0x7, 0x80000000, 0x8, 0x4b78, 0x9e, 0x3, 0x7, 0x6, 0x101, 0x1, 0x3, 0x1, 0x2, 0x2, 0x8, 0x7fffffff, 0x0, 0x7, 0x8, 0x1000, 0x5, 0x0, 0x0, 0x5, 0x5, 0x40, 0x2, 0x7, 0xd, 0x25b0, 0x4, 0x3, 0xeb, 0x1, 0x5, 0x3ff, 0xffff, 0x7ff, 0x9, 0x80000001, 0x3c, 0xb, 0x0, 0x8, 0xffffff23, 0x6, 0x28d, 0x400, 0x6, 0x3, 0x0, 0x2f, 0x7, 0x4, 0x2, 0x4, 0x1, 0x277, 0x3, 0xa, 0x3, 0x5, 0xae, 0x9, 0x2, 0x0, 0x5, 0x1a77, 0xf9, 0x8, 0x1000, 0x4, 0x7fffffff, 0x7, 0x8, 0x6000000, 0x8, 0x8, 0x1, 0x8, 0x96a8, 0x0, 0x1, 0xa3, 0x800, 0xb2, 0x5, 0x0, 0x7ff, 0x100, 0x7, 0x0, 0x2, 0xd08, 0x7, 0x8, 0x8, 0x6, 0x9, 0x1, 0xfffffffe, 0x4, 0x90, 0x9d, 0x8, 0x4, 0xe, 0x9, 0x5, 0x79, 0x2, 0x5, 0x8, 0x10, 0x4, 0x8, 0x1, 0x0, 0x2, 0x7, 0x10000, 0x5, 0xfffffffb, 0x4, 0x48d, 0x1, 0x1, 0x9, 0xffff, 0x5, 0x6, 0x5, 0x651, 0x4, 0xd7f, 0x0, 0x8, 0x450d, 0x4, 0x7fffffff, 0x2, 0x1e99, 0x40, 0x8, 0x6, 0x8, 0xfffffff2, 0x5, 0x8, 0x7, 0xd, 0xffff0000, 0x3ff, 0xb7, 0x1000, 0x5, 0x5, 0x2, 0x1, 0x2, 0x759, 0x0, 0x3, 0x7, 0xe, 0x10, 0x6, 0x3, 0x4, 0x4cb8, 0x4, 0x2, 0x6, 0x6, 0x9, 0x2, 0x1ba8, 0x5, 0x0, 0x1000, 0x7, 0x378c, 0x8c, 0x81, 0x9, 0x200, 0x9, 0x3, 0x9, 0xff, 0x5, 0x2, 0x84e6, 0x4, 0x34, 0x1, 0x6, 0x10000, 0x3, 0x0, 0x4, 0xa, 0x101, 0x4, 0xb0a, 0x4, 0xa, 0x1, 0x0, 0x4, 0x103e4fe5, 0x8, 0x81, 0xc, 0x4000, 0x735b6fc3, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1, 0x59, 0x1, 0x8, 0x2, 0x65, 0x4, 0x7, 0xdb, 0x6ef, 0x7, 0x0, 0x6, 0x9, 0x2, 0x2353666c, 0x0, 0x3, 0xb6, 0x458, 0x5, 0xaf, 0x8, 0x6, 0x80000000, 0x8, 0x3d, 0x15d, 0x4, 0x8, 0x628, 0x5, 0xb, 0x1, 0x2, 0x56, 0x7ff, 0x971, 0xf2c, 0x5ce, 0xff, 0x2, 0x8, 0x9, 0x6, 0x0, 0x6, 0x7, 0x400, 0x0, 0x9, 0x8, 0x8, 0x9, 0x6, 0x1, 0x10, 0x1, 0x0, 0x2, 0x2, 0x57, 0xe0d, 0x0, 0x8, 0x6, 0x5, 0x8, 0x1, 0x6, 0x7, 0x4, 0x200, 0x7ff, 0x9, 0x5, 0xfffffff9, 0x5, 0x8, 0x10001, 0x4, 0x43, 0xa5c, 0x6, 0x6b3, 0xffffffff, 0xff, 0x8, 0x48, 0x1, 0x80000000, 0x1, 0x1ff, 0x3, 0x80000001, 0x0, 0xe4, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7, 0x2, 0x9, 0x4, 0x80, 0x2, 0x100, 0x80000001, 0x5bf8, 0x64e, 0x2, 0x2, 0x1, 0x8001, 0x4, 0x2, 0xb, 0xeb, 0xfff, 0x81, 0x8, 0x6, 0xf6, 0x0, 0x12a400, 0x5, 0x939e, 0x400, 0x9, 0x1ff, 0x6, 0x6, 0x4, 0x18, 0x7, 0x1, 0x2, 0x401, 0xfffffffe, 0x8, 0x2, 0x8, 0xc00, 0xfcee, 0xffffa651, 0x1, 0x1, 0x7, 0x5a8a, 0x30, 0x5, 0x6, 0x10001, 0x6bc4, 0xfffffff4, 0xd9800000, 0xd, 0x4, 0x16f3, 0xa, 0xa, 0x80, 0x5, 0x6, 0xfff, 0x0, 0x8, 0x240, 0x90caedb4, 0x8, 0x4, 0x5, 0x9, 0x3, 0x9, 0x80000001, 0x100, 0x736, 0x6, 0x8, 0xfffffffd, 0x7fff, 0xf235, 0x4, 0xf, 0x3, 0x9, 0x2, 0x10001, 0x8, 0x5, 0xe5b, 0xc00, 0x2, 0x4, 0xf, 0xfffffafe, 0x13c, 0x3df1c095, 0x2, 0x7, 0x62, 0x10001, 0x9, 0x8, 0x0, 0xc, 0x5, 0x6, 0x3, 0x3, 0xffff, 0x7f, 0x1, 0x8, 0x10, 0x5, 0x3, 0x8001, 0xfffffffe, 0x3, 0xffffffff, 0xfffffffd, 0x8, 0x6, 0x80000001, 0xc, 0x4, 0xa324, 0x2, 0x7, 0x6, 0x80, 0x7fff, 0x80, 0x7, 0x5, 0x5, 0x10001, 0x400, 0xe2ec, 0xfffff001, 0x3, 0x2, 0xc, 0xfffffffe, 0x8, 0xa, 0x9, 0x1, 0x6, 0xb, 0x800, 0x2, 0x80000000, 0x5, 0x10001, 0x7fffffff, 0x8f, 0x8258, 0x7, 0x4, 0x6, 0x5, 0x800, 0x101, 0x7, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x7, 0x0, 0x9, 0x7ff, 0x9, 0x505c, 0xfffffff9, 0x7, 0x4, 0x541, 0x4, 0x5, 0x40, 0xff, 0x8000, 0xe2, 0x8, 0x9, 0x2, 0x800, 0x8, 0x6, 0xa0, 0x6, 0x7, 0xe, 0x10001, 0x0, 0x8, 0x100, 0x6, 0x2, 0x2, 0x3ff, 0x1ff, 0x5, 0xff, 0x1, 0x7f, 0x0, 0x0, 0x5290a766, 0x8001, 0x8, 0xa93a, 0x5, 0x5, 0xd, 0x7, 0x8, 0x1, 0xf, 0x7, 0xff, 0x4a, 0x704c, 0x80000000, 0x400, 0x8, 0x0, 0x10, 0x3d6b, 0x8, 0x7, 0x18, 0x4, 0x2, 0x2, 0x6]}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d60000000000090502026b"], 0x0) (async)
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000206a050000000000000001090224000100007008090400fcdf03000300092181003f0122280009058103"], 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x12, 0x68, {0x68, 0x23, "1a5cff1beb5674846a64e7b229beabafe34ff20563c8d7ea6872b6a0a03a98b8e61eb73aff6e32642737610f72f943d644710646d45dd0433d5b1be8262d0254912666da6bef7a2b18d2317363583ecb2db8ac57c2bdaaba513987aead337eae28883769585e"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="00030400050004030a28"]}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x30, 0x7a, "23737b0af2b26e454f6550190f41b37264446e1ffe8234306d436dab3aed3da95156aabd1053f785e7c335e0b5f107183d4348cc5dbab2f25c7390ed83f16f393770ac7a96f05cccfb3a9f6033df50a6e1b1b16cbc349868a43ee022da803ddb518866d6c69d4fcd1245a3e5b27c5d091cf042febc2ca3955bb4"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x81, 0x2, "942b"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, 'bW'}, &(0x7f0000000300)={0x20, 0x83, 0x2, 'R/'}, &(0x7f0000000340)={0x20, 0x84, 0x4, "60cd0ce2"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "16cffe"}})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r5 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
syz_usb_disconnect(r5)
syz_usb_disconnect(r4)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201ff722030109021b0001000500ea09040002018cf63200090512"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x20, 0x21, 0x24, {0x24, 0x79e14dcbddbaec7e, "1bc20eef2e6a5ca7a59ad6d1c07e580bafdce2fc776fd9dc1a04389486d3adbc6dae"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000740)={0x0, 0x11, 0xd4, "05f9a972023bd3fda6d3cf9ed5b9923565fb193e45c340b96334b4709030764bd56d3f18a0ff04f3f70fbe7201fd51104101ba3c16a1a1661cced5927070d02391983884c5ee7e25fabb97ece0411cfd6840ea13ebf2e1efc2c07b8bceca96bb39ebe9c2da4faaab0f877e61a9d4eb85952633cc80e3bb29953e931ccc007fcaf4a49d9aa0cbc2a85bca9c5932a49439061378073688506dff2b79099f7123b5b3950d22060544f77350ad45cd6fda8b6ef1d0257a0fd7251ae33b2c25492bcd8a25a79e954c4b97a6a96dcfc584ab5e5a0eaf0d"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x2, 0x2, 0x4, 0x6, 0x7f, 0x3, 0x5, 0xffffffff, 0x37c, 0x6, 0x8, 0x3}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000009c0)={0x20, 0x89, 0x2}})
syz_usb_control_io$uac3(r1, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x0, 0x6, 0xdf, {0xdf, 0x1, "eea97ccbe6b7a6e23d9aacd6f7be6a65ee30be8a57b2908371118c956d7c57fc569d70a940b091ccf9e78df9bd1b3bb50590a406f27766f1bb7bc5c79b070aeba1cb5a70b2b2445231634a70ca59da8972ca1a61a5c9c40fe01d90b9acfc4dbe686323dd6efa549c130e9653f7e16dd8a43c6214336f680c683b77a44c94461f3cd7aef43f706c4758f5023af24725449da1465f5d9ab039e8d6b85931d57209922b0609438df959d006aef10c546fae9d76ce4f3522cbc50c8bf5a97cc0463c0b7a6e86a1eb777e4918101780310a7b69a37886a56aaad304885d2247"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x20, 0x16, 0x12, "5c75e6c6b2f7e1a18a849634efe48c10151a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x81, 0x1, "f1"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "91ac20"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "b7"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "460f"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "d0f00f"}})
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x4, 0xd7, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x12, 0x120, 0xf2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb, 0xb, 0x24}, [@source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x0, 0x1, 0x1}, @effect_unit={0x13, 0x24, 0x7, 0x5, 0x3, 0x5, [0x0, 0x3, 0x3, 0x1, 0x1, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x10, 0x3, {0x8, 0x25, 0x1, 0x2, 0x60, 0x80, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x7, 0x80, "97"}, @as_header={0x10, 0x24, 0x1, 0x6b, 0x81, 0x0, 0x5, 0x8, 0xffc00000, 0xfb}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x6, "e8d9c89442"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xf3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0x4, 0x2}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x7, 0x5, 'wt'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x4f, 0x7f, {0x8, 0x25, 0x1, 0x81, 0xc, 0xcf, 0xfffb}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x0, 0x9, 0x7, 0x4, 0x40, 0x3}, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x20, 0x474adfe0fd6c22d5, 0x24, "06c917913779b4ef0bcb2e7bb864ef374730fe0f25c7528644f4f56379daebb79a413d39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x20, 0x15, 0x6, "9a232de3b831"}, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f80600b040000102030109026e000301051004080b0202012630c00904000000010130000a24010f0a0009000000090401000001023000090401010101023000090501091000b108000a2525010000090402000001023000090402010101023000090582090800060a040a25250e000000000800"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0x28, "3636371202e8af5faf3bfd2d42cca1d93d09666ce59710f6ad53efe4eeb621c023610b492e3d21fb"}, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc9, 0x79, 0xa9, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x4, 0x80, 0xf, "", [{{0x9, 0x4, 0x3b, 0x80, 0x0, 0xa6, 0x14, 0xa4, 0x80}}]}}]}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000000c0)="4e2af1ffe6e7993b")
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="0005ce000000ce02792fda1645b902c48dd1841d5910ce987863caff45bfa5ab9ee39511fd961299a266e6de3f98f42d89e4f245d71071544eb2be759eaf79731095e73d2afcc14dd1a8c29ff960431d92cdce1eb5e340bf72d1c611d75d7850512af9c60e977d80bf46a93bf812ada3ffd4efdb2631e2dd35ff2bfddeef711a61807a4219b5ad017c1dd4d10ebdd895a0a518077751bfb7736040f363150e5d36de9048d8c5664e9e463f70a4be19f14c0d1442d275e7b370c886e72ca1847d5327000000000000000000000000000000000000dc34c5c748f4932e29828f13f83825d4469871c0761bcd4ecf82ceb15c58436eecb493c454a80e4d28659a4b2e2afad49db7ce82700e1299ebb81118f079e4c532f855756fe3ed0579e615bc3e80f32ff9701cbe60d7c5000015362d6c01a94ae20c52ad09f3459048364b107e5308d459"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000000480)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="401767000000146b433b47ed158ee0a012cbd7e5fa79e792778621128f1cb65273a379377a78e2b0dab699187ef1d4db0dfc11a57846aa900f9d07122a31ce6b0d968bb7e277c3b98e06ed3c934073980825b38fbfaf21be6125c94141a8d12920710ec39fb379cc8053e90c088a21560b45837bb240bfc2999cb4"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)=ANY=[@ANYBLOB="2000530000000051e52b4395dbdb70078799243996a0d7d6e668484199de927925b9d0debe5900bd4d85a8d9047ba71483132c20770ac2982e688978e7e1fc57cf2e68fc33b3243ed4570bd39f3e6ba26d1cb05567710add79"], &(0x7f0000000400)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x40, 0xe, 0xcb, {0xcb, 0xc, "79271a61c6ab46b57376f8303a18dcd4a7b658d88bd835082ea7b27ec0570d4beaee629a4cd8733df2c79dba2da4895ff12634d248b7ef4f2b5feaf43d67050316cba507f663cced22f281b501c527e8ee136a1f39a85c8cf0430c23cec970a53540c3e926af701a20569d73fcc8b235ec3f9ffffdef38dc607c81854bdd539775a412c81fb6bdfdf275ead66a9b1fdb8b9868d1c5ea9616ba3b0c3ffd70b612debda4a0d62b9c2c13675c6625d94ad664d2688bd1889526e3dca38a41801275bf280d7dc4b23e0df6"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000900)={0x34, &(0x7f00000006c0)={0x40, 0x8, 0xda, "eb8fa6904a1a00466cd73cf74f2d7439f6e36960f16ae4cda91820db16c6c3079756642c3a5edc3d3afdd6220d1c062c130666222b52ec80b065f28626183411218726f016792c408bfca0bbf05b4937fb137e00e455573cc34a4e100bf8d0ba38408a39042e3b9f1583fedd64ba3f8a07083eeafe8fb2387e7d84df7c3fa8d428a43e5e6366f51bfaf041750be217e730cbda151e7bea54f8c4b682455224098093536a186403588e04dc756fa0f0198e7091e2a53943c541ec3710e7fe7e75f8c1a6645f074ba891888432caa8d3488bb19e279f4eb479faab"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0xc0, 0xa1, 0x4}, &(0x7f0000000880)={0x40, 0xa0, 0x4, 0x39fc1ba9}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "dd5b820bbfcb43d18c52c24c05d8424841c5df7d4d488d886687d370a2e719486843a08b61362385800d9522d5035f"}})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b1c1b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="0fa125b0ffdc8ad483023f803e94ed04a3cb12a230e0e95eb872c29ffa0638c302b89baf6cd6c40e8e36ea96b4a39d4ce7860adc2d7058a6ba02532e3edfa0d559a9a131dbe5604740196acc4c1819b871d30023fec2a7735b497d98ab329e562b6fb8046399fe5c3a07c0655599553293bad238e971cacbd35e7056784af299c6ae7e70a6492c399f9bcfe112", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b1c1b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="0fa125b0ffdc8ad483023f803e94ed04a3cb12a230e0e95eb872c29ffa0638c302b89baf6cd6c40e8e36ea96b4a39d4ce7860adc2d7058a6ba02532e3edfa0d559a9a131dbe5604740196acc4c1819b871d30023fec2a7735b497d98ab329e562b6fb8046399fe5c3a07c0655599553293bad238e971cacbd35e7056784af299c6ae7e70a6492c399f9bcfe112", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="1dab357bd33088d0c5048551031e38a7b16f0b43641d76c1d7a45ca9"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="1dab357bd33088d0c5048551031e38a7b16f0b43641d76c1d7a45ca9"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x7, 0x74, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x1, 0x16}}]}}}]}}]}}, &(0x7f0000000cc0)={0xfffffffffffffc8c, 0x0, 0xfffffffffffffe86, 0x0, 0x1, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x83e}}, {0x0, &(0x7f0000000b80)=@string={0x0, 0x3, "290516e5656481ed2c89118df1607e51eb17db23a1c5318e1f6eb6d484253c685a75896577fefa06c3d1c35dc94e"}}, {0x0, &(0x7f0000000bc0)=@string={0x0, 0x3, "58d3b2e9e06318993546159f57dbe4e79614757c396370744457b3d6a76497ab404c5f51ba2640f748703757d6f5dbedf8011a8ed22c95b7531cb8eb9360cb936983909fd69070debcb805a16c9a3967fb41f53e43190d854fbe656e7209f25539f53aaf99ab3a11d89c0103a989007336417b225cd8fd4b40f745f6c237888c609d8d6fc25f9be609d67144d9086028c2c0af764e9faf2b28468456dd2401a77eec7a7b4c65"}}, {0x0, &(0x7f0000000c80)=@lang_id={0x0, 0x3, 0xf0ff}}]})
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r2, 0x1, 0x1f, &(0x7f0000001000))
syz_usb_ep_write(r2, 0x82, 0x1, &(0x7f0000002000)="03")
syz_usb_ep_write(r2, 0x82, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0x6, 0xd, "4b78e3b53934bd0540681fea81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x61, {0x61, 0xc, "42072ec22ece0e5de968b2f264dd383bfc74e6b8cf49daeb756a51e60ec31ddd55ea55ba0feb7d29946d309137a0ee0a7d8b47d4c0d7e3b9f1d1e7ad6c3d98b74c93d56ab1b0196aaaf384d3771554d1b65965ce4c5df277456fc2104c2b10"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="00030a00d3000a034ae6b1ca4de24694"], &(0x7f0000000140)={0x0, 0xf, 0x241, {0x5, 0xf, 0x241, 0x5, [@generic={0xf5, 0x10, 0x9d9b0c2ac92e26ed, "88bf943d2d93bcfa7333458e47823d3a578454474fbc8deaef6c6c7f2db857d409f14ca349b2536e4c3154466687946901778a296abf74c49f1901834785e0e6d75b490fd112a29efd10d9df60e0b43aab5c25bd0b97e1c33dfa806028983681970dcc3f43b09c41629975d7bf9ee727194588100e2c5f69ffb3ca473c98edc6306b5b8ba4979b7f80f1d4e03adff70db0371a3b52a072ff228cbe7bb507c3bb5a97a625d86ca346353fd0d074cff352742ec19e2d106af40dcbb57ca594500940e97fe5f5c9d2e654bf2f81df6658ace435b8a50fa277886adfc8b971a559da00b1d5de8cc7acef1b48e1aa294a40ef86d9"}, @ptm_cap={0x3}, @generic={0x76, 0x10, 0xb, "880bf63884b2f7f6b699a801c2bb8855fc59f32a254e7297da5af84ac48d894778e2412198cd416d81be5c3d88d605f40e2bef18d1b30cc606ebb9992856494c7fa6fec0ffefb5fdb71b1b85572fa8cf5e48dc0532e10e9d79f5f71eb0d97a2c955e6c621f5af16788901d71188633a619a401"}, @generic={0xc4, 0x10, 0x1, "bc43eb8ec90f4cfa20d2b0dfb6e532f1f803b2e5f5023faf1c7f37caabae96dfd32143c922af6a22c92e29d33b684af941b24dfc00b2fc96392f6b3cc01ca2328e29a66cda6ad5dfcd4e5c822fddeb63e7152bfec116e292f33a934c2461c63960ac8dd7820423ccffd1194bf0f7f9cda321d0e833d428e85e9a3e917e2c8a2856455590e11a89c9714e8bc0508331f244515adec6062301db8b64e72bdfa1b0c605e1432eb30209076368c20865875c44d5db4d4df3d1b237eb600591d453dda8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0xf, 0x9bd1}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x4, 0x3, 0x6, "a4ae38b6", "6085f2b3"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x10, 0x81, 0x2, 0x2, 0x4}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x4e, "b9b381247e5c5ac647873ac0b4fea64579a1dbe532814a096378731cd8017f3ca766e8455301841b68de5c88e299dd9e2e2f51c3eb88464eee7fde2be8a3e1b70d41e76dce90b55ae73b23babdef"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0xb, 0x2, "cf66"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="b180ef9bb252"}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "0300"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000840)={0x40, 0x1e, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x20}})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="383574fb112f67f0fbc033c7d8f7f1f71383a7de150100000000000092cf2b59d3fe73d5eaa9caa9a7332222c6c13c6459f6aba92c1b52c3273df8bde937732148671d0226d34e12ee869eb64b2dd0185832cd85daeb9346dd62495a14da156f837104f93b7f93f4b254a0fca4ee19bd136d148bd5a1e01447c62b3763ce25498ad97f83b5d8510b091c38b2"], 0x0}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
executing program 0:
r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_ep_read(r0, 0xd, 0x0, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca01a551e880060905012a0008000206090502000002f803070905061000041c0d090705c17a"], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x8, 0x4, 0xa8df, 0x6, 0x8001, 0x7, 0x41, 0x8, 0xeb2, 0xeba7, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_ep_read(r2, 0x1, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0xf, &(0x7f0000000080)="010000000080000000040000008000")
syz_usb_control_io$uac3(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000001240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "62649dd78b20cef2e16029d9dd4832acaf60193c6a7c4691422c07672e993451861ec165f85954a6f597831959d36b2816f04d4707350edfd406"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_read(r0, 0xd, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x7f)
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x10, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3d}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x5, 0x45, 0x8, 0x4, 0x7}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x6, "ea74"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x6d, "53daa1d4043f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x2, 0x8, 0x104b, 0x7d, 0xc4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x420, 0x1, 0xab, 0x8, {0x7, 0x25, 0x1, 0x4, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x5, 0x3, 0x7, 0x10, 0x9}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "509b724758df0c884e0297ffa5f0e48c"}]}, 0x3, [{0x0, 0x0}, {0xd8, &(0x7f0000000600)=@string={0xd8, 0x3, "bf2ed38e7b98f96ec7fea1f16804f1f838e9977b16baab8dbeb4d84b5248a8e40012ef939c60e15006c75ee6a49ec45f8cd3c565e29d93881c6ba4d00130863911f086457ee4cea1a3b8d74548c34735a19ee1a71a8a8330e3b9dab35f3a2037ac6fcac7b25d772fb674f63ba4fe7bb70f22938434c9313fd25234597196a3a0a76d97bb02cab578fe9c00db928b17302b48fe3a981181bca16ef1968df07cfac4143e5912a74677f9627231e7c2f55eab60ac5fbc67e1b9df8fcc33b65f7d8d1435597fd276b8b7cbed313044677a7c8179f9d7fddb"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x241e}}]})
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$evdev(0x0, 0x0, 0x200)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0)
r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x0, 0x3, 0x3, "15a399"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x5, 0x0, 0x0})
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000f40)={0x14, &(0x7f0000000140)={0x40, 0x7, 0xd8, {0xd8, 0x8, "7502996af4ca3e374e1c0f2c3d85e9e489c8c325627645bac4a993a86cd3b7a723a8f61412a580fb758b844ffb86ebf0fd4cd1e13edc701f05aaee67860a1fe8b9dd35c2adfe047027be96eaa2281018fc021fc8df87861aebdf5992cfeb68f023a29015978230b276e8d93e6527e7b368d8b074009c2b8c6683e53e2874b8e85bca6378dab0ec34a922f51d980b80c109687c3e82771ee9c3230b490835a52d1a81c93445bb933464621a92fcc0949cef9845b91ab1713971cba53c8b82a23c55ba9366e4d9cae50d1daf49de9a37faba9a07f2862b"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "52bd9fbf88a7dddf08d672d5d098fefa32ba1ff61b67654f056c4c810478d38d1e145722de1ba3f07d0d8b2315cc8eb3cede5cd12358ec4413b7f972e3fb3b31b8f152d16b3800d47d0b5c6e9659657f5fcd1b05e2b34487540352ff0cc88b6b805f8042c7b6af336a5b20d7236cce346f57a10dcf351b879d18e48497171b0affe85f4bc278367979b032c194c70cc49e5c998b71774fe86f64e924547d31e1d11fca11193275e076c99082352c6ece5e25b20d7db58664f0706de881f876790e8f008838e77170625856d3a35c44cf68de381281ac53bcc8232e7d6cc9da5bf49f"}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f80)={0x20, 0xe, 0xa2, "a52577ec8b36cc97da86c909669471b6670f1e7a5057d86e0835e3fca9476bdd094406e81640d74033ff8bd0589efaf0a527bbcd3a4ac072cd6535268ae69ea6d7ff4466ea3cc2eab0b9ade3b581f34306f7e8461a2985f034b2013d4c58862a1c2ed57da7d7f39cecb5864e1cd3ae5dac2efcf6dfd219468ff1ed6ff54182362a413bc13c486b5b9a48d18e976a2b7e107bec852683d2cf857c68561bd3b4264848"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0xc0, 0x5, 0x4, "b5307214"}, &(0x7f0000001100)={0x40, 0x5, 0x3, "63fb14"}})
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0)
r1 = syz_usb_connect(0x0, 0x23c, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xa4, 0xe5, 0xe8, 0x8, 0x19d2, 0x5, 0x1624, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22a, 0x1, 0x8, 0x0, 0x30, 0x7f, "", [{{0x9, 0x4, 0xeb, 0xa, 0x2, 0xff, 0xff, 0xff, 0x5, [@generic={0x90, 0x24, "a0a4edc49b4c0797cafab1067622e3645c57c7c22fda9e1330b8e4ca53bbb31f45d0989f8bb9fa990b44e5f09113d13b31cfac422ef46a4461728fd34877d8e7d4ea6a0d817e45be8b64a87250cb1aa979cd2b76769918afc561d092e0cadfe66baaec55966473b8de685b89bebe87c4615f750175c8bbf30ebc89eeed4dcb19037753c9240d547ebf3df5f10c4e"}], [{{0x9, 0x5, 0x0, 0x7, 0x3ff, 0xf7, 0x6, 0x9, [@generic={0x8c, 0xe, "d996ec341788cce1e4e63bb1c5c455de8e426d283d6d77d42d5f799b5145fbd8eb2e9f6322af2940231b6d248d039a51ce7e05a5ec423dabbb014dcff6ba6407369c338baa32d221f80e5212dceb180d93e9af7f1bddb73fc71b5c6854a65306cb72fc72976d55fc742fb147854cb4720c1a0b5ae190911de9536a1a201819dc296f0eb1af4cd61a21d2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf1, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x4, 0x0, 0xe, [@generic={0xe3, 0x2, "41916e0e64a383559d92a70d2e5473338d514bea6a13d7b198f155848f0ae00012cf7dfce091e3708aa05853ab8a78bbf2a3ca511e1a4c264162a82c7108f72bd4480226999c6f8af38cea6752dea3250cbbf1da5e3f4891ded7a03aba0bcac6bcdafd705f3dc18d02787025b373170bef6437633fc3de168975e4ab2c931aeba2372dd51bf43374a2c947e7374db11de55141ec4a2975096a04a55f26f4957d448d0b99ff4bf10fd3c44e52b2640e1f78f6bbd752c1c4b88dc013a85f8bc7c71a5b018b529a2ecfc195135a9f7609e5fa32c14b9308dd18896c74c3421199cd8d"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x2, 0x7, 0x66, 0x20, 0x3}, 0x118, &(0x7f0000000740)={0x5, 0xf, 0x118, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0xf, 0x7fff}, @generic={0xe6, 0x10, 0x3, "164063a64faab35ace3d45f496f940a8d15b33391d8a70e465def860b591d32b8e9ceb66eaf8cd588a4a4977ee548f7d467d7bd7b41df7a69c5f8515e8b3bd07cfd4c9ad8902db5ec6bb632bdeb3019f34cf850bb45403b330bebdd8ebf0f981f5fc313537726ba7034df9beb3b784b6901adaf29577c18bb3d1855874170a5aefa5b66b237bd324c0b1b64907761f1e6f4d5fa097ae3dfa4e1859dd867b01e8d4fae4a1acfadc95452000edce9045ead00f640a15037d40822ebd6c7e652ad627db7e51af5a1e2cb63d7abfc29f2aebafc61ea8f0f44651d4e8c0973a849ce91e6aec"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x2, 0x0, 0x200, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x1, 0x90}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f900b7e6ba2f36101c509274bd7d3114"}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc09}}, {0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "eaf958ae1a72aa2d0fed8ba92b285184f8e749f028bf6456f8245858b76903ee2d44b844bcc2238c408d2330962c0ff556fb0fdbf338173be49d28a23d2e9d3ff00573925a23"}}, {0x8d, &(0x7f0000000980)=@string={0x8d, 0x3, "822dd0389dcd47a4ace497bda9e93290e07177ee418ffebd221587c8032196df721313afba2d5f857b99a165928b5db8a61134c7e57ecd73f51ce20205e8b417f69c57c6216391c31a0895f46f95dbcd3ba44644d762bac2d6790ab3affeb0fd18d10cff13bf478fbf1358ff3c29a932134bea7b963b8353fa25c959f85ee9d0a4e827f30f461f082d328c"}}]})
syz_usb_control_io$printer(r1, &(0x7f0000000c00)={0x14, &(0x7f0000000a80)={0x40, 0x4, 0xfe, {0xfe, 0x23, "898d03355f014cb62b889638c0e6c943b2a5914ed4de52487fc8e00f55fc9c7e0c4a5a9faaf9b367d0fcbe965a7d0257725a75dd11b16670707c57b4b2a0fb227b975ccaa8036bc3d22c73384e3efd6bf5e773c640ba061175d44e5cc56cc663a5d7d003139b0a87288a3a7d62e7eaa088f6be51364bc8df392dcdb9959755c478bdfb3e6973534c084b62e801c8886838f11beb26671663ebeb1c5e67899be787878eeddd839f6ee8ccc731a9d467b895038e0a8c141951d435171b8f1fa04e5f3a91385e2019699814700cdef02ad21e4b0f9eb07f4afa61d7a16c468f5ae710238ed3bf46c711db5b8441c9b50f44c86d4ddab9eca5339175dd74"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000f00)={0x34, &(0x7f0000000c40)={0x0, 0x17, 0xb6, "69744fabab2653489e8a14492d734482b3621d91f103a3ff7a9aee9b0f3a7e99f03b55930b89d444a0aeb29b418033660a0f87107ce9c2a1af97d8109b0ee3bfd2d166561d92fd42a55a3dbdba8da338fe23dba2a2fc51d657a3ea91cc8dd999e22e73715af2a398197122e2e898d59117b07581687d5f9c4cd82177bde255fcabbd9d1554f5d376417a4c04a7a5c3ec15a9c5144b8153760cb9e6faf8519fa1d6cb24af312b0c21df5eee40598bcd16dffc0f85bbdb"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d80)={0x20, 0x0, 0xe9, {0xe7, "a96755368693a6f44b69febd22b160397759e7523a0eac21e544c9c99f08872b45de4f51a124cbbaf8f8e064e9327f0d08c5548fe50aa0074b79e68a99c4cc2a998df8923794c3cc571972677db8256708e519d45c857281ac5d9530dddb7f393bfeeee9c1d99476f8d90cfa7c327de38bbfb6e0cecd4725d9803b6008948f421ff362258dc98ba9495fd59bb61fdeb36e2ef0767ea057e7eba3b42a76814e99562083f9e6c92a57a62d89131b53a50b68162fb93d659a2d047226529219e4cf0cc82fd6295ddd7777431967bd576197486ded8553e6a22fe1fd1c8b55068864ece00842bf6417"}}, &(0x7f0000000e80)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x1, 0x3}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0)
syz_usb_connect$midi(0x4, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x1, 0x1, 0x7, 0x80, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x3, 0x2, [{0x3, 0xf}, {0x9, 0x6}], 0x2}], [{{0x9, 0x5, 0x8e, 0x11, 0x40, 0x9, 0x40, 0xff, {0x7, 0x25, 0x1, 0x3, "eebfea"}}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xa0, 0x8, 0x7, {0x4}}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x3, 0x97, 0x4, {0x13, 0x25, 0x1, 0xf, "a8608bee3d052769f60b889f9ef12a"}}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x7f, 0x2, 0x3, {0xa, 0x25, 0x1, 0x6, "89977aad1436"}}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3, 0x3, 0x4, {0xf, 0x25, 0x1, 0xb, "61d4189b91f69f55131355"}}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x1, 0x43, 0x3, {0x5, 0x25, 0x1, 0x1, "f9"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0xd, 0x8, 0xff, 0x6}, 0x1d, &(0x7f0000000140)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x6, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x1, 0xa, 0x3}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
executing program 0:
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, 0x0)
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab080905"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0xfffffffffffffd2f, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c4be41a5001f1e710000"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x735, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xf1, 0x2a, 0xa, 0x10, 0x3340, 0x426, 0x1d09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x723, 0x3, 0xd2, 0x37, 0x20, 0x7, "", [{{0x9, 0x4, 0x46, 0xb, 0x0, 0x85, 0x52, 0xe8, 0x6, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "ae2b"}, {0x5, 0x24, 0x0, 0xf691}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xe00, 0x7, 0x59}, {0x6, 0x24, 0x1a, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x2, 0x1, 0x6, 0x4, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x9}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x5, 0x7}, {0x6, 0x24, 0x1a, 0x400, 0x10}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4}, @obex={0x5, 0x24, 0x15, 0x7f}]}]}}, {{0x9, 0x4, 0xaa, 0x7, 0x9, 0xe1, 0x22, 0xe1, 0x7f, [@generic={0x10, 0x24, "f084b614663768005122ba2862bf"}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0xc, 0xa, 0x16}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x3, 0x2, 0xd, [@generic={0x60, 0x23, "16d343e7d3708215bd59212cfdf0915440840fa3d6c86727208559000e41844ccb999ac446c31e7f53c01f8af28c30fa137d461f9098c26015034ce60a12af33ccf327b8cc3e215f03ab9c82315fc06dc2dc154318e29a8f141c6c377caf"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x29, 0x4a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x2, 0x3, 0x4, [@generic={0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6f07}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xf8, 0x7, 0x5, [@generic={0x6f, 0x24, "e451888c6f79568ec376882b43705f87083c19d4635488e9040bfc52168c90f0df2512e095fee7db09410a669148e124add69301ee1024a3bb5abd56ba249836529066146f382ad174f399fefb67e973de20278789a1a57628c1776b7658013402b5e77c9b0e304df6214914fb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x4, 0x0, 0x7f}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x10, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x3, 0xe, 0xb, [@generic={0x2f, 0x23, "fca75c23fb758a2458556cdbac36bb4f64b83a47ceff590df1b803c0617e2a93a752cfdae64beb23ebf124eb78"}]}}]}}, {{0x9, 0x4, 0x6f, 0x0, 0xd, 0xff, 0x5d, 0x1, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0xb5, 0x1, {0x22, 0x782}}, @generic={0xe0, 0x5, "3d074be2b89ed9bd1dc493d63a1648051f807c6571d612f981e97fbce1c98e679a8e8854db6cea9e1707469dbaec1d24eea6174d47048ce971c9058af1b170079b403504b0c9d6400b7c861bb1db7398110185f41a22ae2320df085ae9c6574c779c5f187cc95e0b8a07a85efe35d114208f1f2eab2836e16c1e36f32b1e306616b9b997dc441caee3b60b0dc7115fe728c3fb3587e901c0678a9feba7577be6e3c065b2d4b561314652b54fe68aa435337a9847023695087a5200728c002781334d376e237913cce5895df58b1b41f8e11ac40559670a0b46ce3aba54fa"}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0xf, 0x7, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x40, 0x8, 0x3, [@generic={0x90, 0x23, "9609a8a9e1369901be02541f3552786ca68bda6b67fcda7d3d192632b9d4f92e2fb07edf8fe6b196475d077801d613c2f6fd8bbed5610c939be29b8bea06450d049a83ef820b2202410690e38a6ccd743913ca8fd5ca930e40ee25fa0c651e0a41d8332940597bd853391ffb0b9aea411a5b41e9d08300993a212361e0cfa04d92ea91b3b1f66381a1e2ce8193b9"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}, @generic={0x85, 0xe, "6ce369239c6f5aea8051a963063a6e92f224dabc796c38cbd1a4ee234303bc4d20ad85eed5aa102efe765b42044404e0f4880ede0216c9230178cac6531d195eeb7798ef4dbcd199b436f43e2705919f90c1babbf5216b2f05f2b145d386695f1b105a2216f010d64463b83df9c2574e4fee34549f1eea4c18a0dc480c905505141a0e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x1, 0xaa, 0x0, [@generic={0x57, 0x30, "9a55dda811183154c5228f1f38b629cb45ddde2bd16c12362a761e0c0abf118e7c1f55d3ffd578e0a2d38605b362d517428afccc94d8e031b0582db0e5c1b8fe7c5c4a82e1d1b0c718d80fa18af3584ef7601c915a"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x38, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}, @generic={0xa, 0x32, "5076cdcf056c8614"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x3, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6e, 0x8b, 0x10, [@generic={0x73, 0x1, "00a7692b244c2733ee1e45b7d11daab9bbcf3212ed909b7c4b0ed61c1dacea5fade7d7f9563354f11fb47b0f62e6115f8375a06eaf1e67bf12a2e4572ca87fd52c2702dde16ccba42a5fbbe1bd051a85e53c577587bf84d758491ae05701a6546ac423bc85b054c73e6b81448f47f0bb09"}, @generic={0xf1, 0x23, "3080189cf5220a33dac715599471fe8b53a434d155f1dc9a1a6f525d7bd49cf2edbf169f17ca4e8ae6a7ef3da2431dfda8063da57631ab6190a88a67ed1842d2b6b3d532083153a8ee8cd1b7e9a40aceb449b1f84ecbf5a929d70ca39e472f89e777e801b4a7db614c90d0691a3e24d639012fab6ef48889cae851cf909c01e56d4947d1308610159e17b4b12ad176296b00487c6e59537df0f425fcbd005d272c464b4971ae6b7477c4537e1d958d2e90e15c857dc7fbb9cffec8092d78b7aa5cae3e66b035ff93d815be58fc37089c5bae75ad32bc9ae304dd2d7573eb9cca9c7c6cb4ad2adf104e48b277024d90"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0xfa, 0x54, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x87e}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x90, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x40, 0x6c, 0xf7}}, {{0x9, 0x5, 0xe606763bc599bd42, 0xc, 0x10, 0x1, 0x8, 0x6, [@generic={0xb2, 0x11, "d42c627e1443d0d89ef090cf57bbf491e839ec78b23d4eb35744c8d0919f92dd47335c4ce9bd6fa78eae5f8e1a39a8ecda9d84ced6bf6800fff83e83d8a714c0fe06ac4b5a7f02306081a20e608f606594b6a3fbac28fdd1eeb7f51531c01c8e575adcb5c7bdbfe38916bc424c3002799ca7d9ba10534e895e67e6af42613542137f989f2f724f203da8b6eb29f2098d8aeab0a4982b76796d201f2b7d07bf6357cac257f2d788fa04845874842fc83f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x60, 0x5, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x1, 0x8, 0x4}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x300, 0x2, 0x0, 0x62, 0x8, 0xb}, 0x5, &(0x7f0000000ec0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3001}}, {0x87, &(0x7f0000000100)=@string={0x87, 0x3, "121334664f646c6a80d1f935241035e54b6cd8998e1104a16b72346d623e8453cfc353ab5fe21db9cefaea39956b789586c22efba573b759dda4b5659d3c146c56a05ec3a59a36862a455e1b5e174603404967d348e55c60a2f1291d63c961b5b76228ea43462aee0e4e4d92a7517320cf5e34bec3b97abc1a6d0425b6c8dd9d6bafe6df5e"}}]})
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, 0x0) (async)
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab080905"], 0x0) (async)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) (async)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) (async)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000003c0)={0xfffffffffffffd2f, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c4be41a5001f1e710000"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x735, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xf1, 0x2a, 0xa, 0x10, 0x3340, 0x426, 0x1d09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x723, 0x3, 0xd2, 0x37, 0x20, 0x7, "", [{{0x9, 0x4, 0x46, 0xb, 0x0, 0x85, 0x52, 0xe8, 0x6, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "ae2b"}, {0x5, 0x24, 0x0, 0xf691}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xe00, 0x7, 0x59}, {0x6, 0x24, 0x1a, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x2, 0x1, 0x6, 0x4, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x9}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x5, 0x7}, {0x6, 0x24, 0x1a, 0x400, 0x10}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4}, @obex={0x5, 0x24, 0x15, 0x7f}]}]}}, {{0x9, 0x4, 0xaa, 0x7, 0x9, 0xe1, 0x22, 0xe1, 0x7f, [@generic={0x10, 0x24, "f084b614663768005122ba2862bf"}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0xc, 0xa, 0x16}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x3, 0x2, 0xd, [@generic={0x60, 0x23, "16d343e7d3708215bd59212cfdf0915440840fa3d6c86727208559000e41844ccb999ac446c31e7f53c01f8af28c30fa137d461f9098c26015034ce60a12af33ccf327b8cc3e215f03ab9c82315fc06dc2dc154318e29a8f141c6c377caf"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x29, 0x4a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x2, 0x3, 0x4, [@generic={0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6f07}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xf8, 0x7, 0x5, [@generic={0x6f, 0x24, "e451888c6f79568ec376882b43705f87083c19d4635488e9040bfc52168c90f0df2512e095fee7db09410a669148e124add69301ee1024a3bb5abd56ba249836529066146f382ad174f399fefb67e973de20278789a1a57628c1776b7658013402b5e77c9b0e304df6214914fb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x4, 0x0, 0x7f}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x10, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x3, 0xe, 0xb, [@generic={0x2f, 0x23, "fca75c23fb758a2458556cdbac36bb4f64b83a47ceff590df1b803c0617e2a93a752cfdae64beb23ebf124eb78"}]}}]}}, {{0x9, 0x4, 0x6f, 0x0, 0xd, 0xff, 0x5d, 0x1, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0xb5, 0x1, {0x22, 0x782}}, @generic={0xe0, 0x5, "3d074be2b89ed9bd1dc493d63a1648051f807c6571d612f981e97fbce1c98e679a8e8854db6cea9e1707469dbaec1d24eea6174d47048ce971c9058af1b170079b403504b0c9d6400b7c861bb1db7398110185f41a22ae2320df085ae9c6574c779c5f187cc95e0b8a07a85efe35d114208f1f2eab2836e16c1e36f32b1e306616b9b997dc441caee3b60b0dc7115fe728c3fb3587e901c0678a9feba7577be6e3c065b2d4b561314652b54fe68aa435337a9847023695087a5200728c002781334d376e237913cce5895df58b1b41f8e11ac40559670a0b46ce3aba54fa"}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0xf, 0x7, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x40, 0x8, 0x3, [@generic={0x90, 0x23, "9609a8a9e1369901be02541f3552786ca68bda6b67fcda7d3d192632b9d4f92e2fb07edf8fe6b196475d077801d613c2f6fd8bbed5610c939be29b8bea06450d049a83ef820b2202410690e38a6ccd743913ca8fd5ca930e40ee25fa0c651e0a41d8332940597bd853391ffb0b9aea411a5b41e9d08300993a212361e0cfa04d92ea91b3b1f66381a1e2ce8193b9"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}, @generic={0x85, 0xe, "6ce369239c6f5aea8051a963063a6e92f224dabc796c38cbd1a4ee234303bc4d20ad85eed5aa102efe765b42044404e0f4880ede0216c9230178cac6531d195eeb7798ef4dbcd199b436f43e2705919f90c1babbf5216b2f05f2b145d386695f1b105a2216f010d64463b83df9c2574e4fee34549f1eea4c18a0dc480c905505141a0e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x1, 0xaa, 0x0, [@generic={0x57, 0x30, "9a55dda811183154c5228f1f38b629cb45ddde2bd16c12362a761e0c0abf118e7c1f55d3ffd578e0a2d38605b362d517428afccc94d8e031b0582db0e5c1b8fe7c5c4a82e1d1b0c718d80fa18af3584ef7601c915a"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x38, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}, @generic={0xa, 0x32, "5076cdcf056c8614"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x3, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6e, 0x8b, 0x10, [@generic={0x73, 0x1, "00a7692b244c2733ee1e45b7d11daab9bbcf3212ed909b7c4b0ed61c1dacea5fade7d7f9563354f11fb47b0f62e6115f8375a06eaf1e67bf12a2e4572ca87fd52c2702dde16ccba42a5fbbe1bd051a85e53c577587bf84d758491ae05701a6546ac423bc85b054c73e6b81448f47f0bb09"}, @generic={0xf1, 0x23, "3080189cf5220a33dac715599471fe8b53a434d155f1dc9a1a6f525d7bd49cf2edbf169f17ca4e8ae6a7ef3da2431dfda8063da57631ab6190a88a67ed1842d2b6b3d532083153a8ee8cd1b7e9a40aceb449b1f84ecbf5a929d70ca39e472f89e777e801b4a7db614c90d0691a3e24d639012fab6ef48889cae851cf909c01e56d4947d1308610159e17b4b12ad176296b00487c6e59537df0f425fcbd005d272c464b4971ae6b7477c4537e1d958d2e90e15c857dc7fbb9cffec8092d78b7aa5cae3e66b035ff93d815be58fc37089c5bae75ad32bc9ae304dd2d7573eb9cca9c7c6cb4ad2adf104e48b277024d90"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0xfa, 0x54, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x87e}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x90, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x40, 0x6c, 0xf7}}, {{0x9, 0x5, 0xe606763bc599bd42, 0xc, 0x10, 0x1, 0x8, 0x6, [@generic={0xb2, 0x11, "d42c627e1443d0d89ef090cf57bbf491e839ec78b23d4eb35744c8d0919f92dd47335c4ce9bd6fa78eae5f8e1a39a8ecda9d84ced6bf6800fff83e83d8a714c0fe06ac4b5a7f02306081a20e608f606594b6a3fbac28fdd1eeb7f51531c01c8e575adcb5c7bdbfe38916bc424c3002799ca7d9ba10534e895e67e6af42613542137f989f2f724f203da8b6eb29f2098d8aeab0a4982b76796d201f2b7d07bf6357cac257f2d788fa04845874842fc83f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x60, 0x5, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x1, 0x8, 0x4}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x300, 0x2, 0x0, 0x62, 0x8, 0xb}, 0x5, &(0x7f0000000ec0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3001}}, {0x87, &(0x7f0000000100)=@string={0x87, 0x3, "121334664f646c6a80d1f935241035e54b6cd8998e1104a16b72346d623e8453cfc353ab5fe21db9cefaea39956b789586c22efba573b759dda4b5659d3c146c56a05ec3a59a36862a455e1b5e174603404967d348e55c60a2f1291d63c961b5b76228ea43462aee0e4e4d92a7517320cf5e34bec3b97abc1a6d0425b6c8dd9d6bafe6df5e"}}]}) (async)
executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x8001, 0x800, 0x7fff, 0x409, 0x8001, 0x6, 0x3, 0x80, 0xfffe, 0xeba9, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x8001, 0x800, 0x7fff, 0x409, 0x8001, 0x6, 0x3, 0x80, 0xfffe, 0xeba9, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
write$char_usb(r3, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x40, 0x22, 0x3f, {0x3f, 0x7, "2da3d0511c104c94f6328b5b4ad897adb2d2044ff74162486074147cb013d525bd3fedde8257d7c201032610671340a784a57a401d560fc95f2c7ef718"}}, &(0x7f00000002c0)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "8140d6acd460968a5db6fd14e14ebf6a98712a312c5af7562d44c067abb8ff389fec53ef0b5821f8ca6ff5430b21bbc9bef1e1f91f21a8ed448f1a18105809ea52888b1071f6aabffed854f0760846d64af6afec6b348a1d8b6526869887f9f33ed8cacdc0b3e35b7b66e63ac0b0c7e8db2fda19892962318e3ba826dc6b753809dfcb00dbe2e476741a3b57"}}, &(0x7f0000000400)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x4, [@generic={0xd2, 0x10, 0x2, "94018a30934b1b5a1392ac7b6da82e3d5c8ded8accd20d41e1465c3a2898141f5e036dad4ff3c1b60969aa936d7e93967c05401dbf7268f4d052a5d91f9d4d827c9ce389c60f63e36ff9df6ed12e3a9e59f55e59f73a91fc73e81c640e1f028bbb38ae467f41a11544d257797081119de1ccc0b244bfc460b5b99e41743b740b9f193d3bbe735a8d6c3795f3d52fc4eb02a7ab13984a0137b8e887e626e848a72db78efc6e79241ef2c6113dd6968560855814e670c13df5ea4b82987474f2435f5b343aeee329f7ab2e874f19b632"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x40, 0x7f, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x2, 0x3}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x40, 0x6, "f09308d9", "c670062a"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0x9, 0x20, 0x7f, 0x10, 0x1}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x0, 0x88, "776c1d513c2cae31e676d05191016f76415603609c3994430e7ef41b14f95beb1a77d47638eca4311af203850abb51c1d06a3e2b75881356200d6070878c353877256017245b276d70be77a6c6093efdab49ab54c8f610af21a8c46c072f94e55fe58c04502c2b5f8427bc6c8c594548d488cebd11324fcf32e961439fb1804511290d47448b58a9"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "00f3"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="28df4b93df0d"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="40af9167a503"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "a785"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000005c0)={0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="0023940000009421d681329a00524e20"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003d28caaaa617e97e402000000e1b4095c49ab49317ff746ce5439abe42000010000800209040000000301020009210000000122000009058103000000000209050203100010070600"/88], 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xf, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, "e3"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x2, 0x1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xfb, 0x3, 0x7, {0x7, 0x25, 0x1, 0x0, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x19, 0x9, 0x62, {0x7, 0x25, 0x1, 0x0, 0xc, 0x3}}}}}}}}]}}, 0x0)
r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x3f, 0x4c, 0x68, 0x40, 0x10b8, 0x2383, 0xe695, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x13, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0xa, 0x9, "30488f7416bcb063e5"}, 0x0, 0x0})
executing program 0:
syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000003f20630712204000010203010902b7942ad06eea8dfb7852a109736043c021d5f40a3b0c8fd39240778c1bbfc800000000000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x10, 0x4, "7098615c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2001e7000000e70244f04d071ba71604d65d4ec9f2c4ff906995ac8f3fd9bf6ace83c76fa7666a42c7456d1a1495433f0c7fbbca11d3bc9bd1e878d89efc901c875c39f9aae45d25757b0735596aff7e37a6551eec3627255051fa32465e961eefb623ab73bf44abccdabf7d9a3a10da93c8abb485977aee3b9262b15f56454af40c37d87f3277c4b5051298655e7cd0caf20ae5af9aa69c5644dbed36a88e33f6f47164441bda33f5a31f6084a1a53712fd8a757163638e522aee2cc3ae1dc21fbb2628c0c6c2a6b45eca1282b4af6939a8a9ef9b37bfc65f251e2be6611d4b40dfd2d6869df1a8bf302e8e9c"], &(0x7f00000002c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "35b818d7e39fedccc5135dc50828a8c49cc2bbcb934797557e7dfc385634ed099fb7ce610e0819cd22d92ad1bacf3700c2bf1c3b6b4dabe92684feb48a97863dc944462fe7122776f68cf9be82c57e7684853490469c5f05848d2db4ecf2bfa6438d4480f44f4e9947fe1d14988e"}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="000f68000000050f680004461002e1369d67ba5190eeebdb0357d2165f81ba4d951d19ace971a863b0c0a6f876e4da0b7758ab984e7a7b6559c1a07aafb6c2c7fe9ee7219b77e4b5320d7a7418ee79415cc3de6034b6b92abf7f00000000000000060104780008b8ff07b800"/119], &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0xcd, 0xe, "72e3b649", "4c81fe63"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x7, 0x6, 0x7, 0xc, 0x6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x16, 0xb9, "409ca062a533186eec381c738f0734006c73de20105dd188d4585d93426d99995ccc9bcee2d85c252ba53c1d4b15466a37f354035552bc010befbc71e3fb0d96167e1a0f9c0cf9abbf43972e92ea04b086b0ec701dcbaf74f2fb2efb5fd00928e71e498acda8820d1499a7c17695f6d2f3bc8afe1c2e18c8f095dec85f84ea4ae0b9a1b6deb855dfc5fd508235ea9e184e26c9735550f00989d6476d60c0871e69377a61544727e1a44fb6d7175b81ed626d22615105acba84"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xb2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "2a1f"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="bae2d4da02e6"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "a016"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0x1e, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x5, 0x1, '\x00'}})
r3 = syz_open_dev$evdev(0x0, 0x2, 0x20580)
write$char_usb(r3, &(0x7f0000000040), 0x0)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfa, 0x47, 0x59, 0x8, 0x124a, 0x4023, 0x234a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0x8c, 0x8, 0x2, 0xc2, 0xbe, 0x19, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0xa1, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x7, 0x0, 0xd}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000001c0)={0x9, 0x4, 0x9, 0x8, 0x10000, 0x5})
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x3, &(0x7f0000000080)="113205")
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8])
executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
r1 = syz_usb_connect$rtl8150(0x4, 0x3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x60, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x21, 0x8}, [@power_domain={0xa, 0x24, 0x10, 0x18, 0xd, 0x2, 0xf9, "cd"}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x2, [0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0xe, 0x1, 0xad, {0xa, 0x25, 0x25, 0xfffffffc, 0x1, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0xc, {0xa, 0x25, 0x25, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0xf, 0xa1, 0x8, 0x6}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6a6c089f013d27a0f71739167cae0d62"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x415}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)={0x0, 0xe, 0x3, "30c05f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 7 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_connect$rtl8150-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
r1 = syz_usb_connect$rtl8150(0x4, 0x3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x60, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x21, 0x8}, [@power_domain={0xa, 0x24, 0x10, 0x18, 0xd, 0x2, 0xf9, "cd"}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x2, [0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0xe, 0x1, 0xad, {0xa, 0x25, 0x25, 0xfffffffc, 0x1, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0xc, {0xa, 0x25, 0x25, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0xf, 0xa1, 0x8, 0x6}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6a6c089f013d27a0f71739167cae0d62"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x415}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)={0x0, 0xe, 0x3, "30c05f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8])

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 23 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$printer-syz_usb_control_io-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$printer-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$printer-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc3, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xe, 0x3, 0xff, 0xc}, 0x56, &(0x7f0000000200)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af73d41b96ab1f9586d062b608ecc629"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf00, 0x4, [0x808000, 0xff37, 0xc000, 0xffff00]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7ffc625, 0xf, 0x1, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x40}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000380)=@string={0x86, 0x3, "24063543fb13c0df8a79c6a0ac4f3ed6d59cf2ec7cef335c16a8d9eb1376953274b38940e922a1660dbf74d4e56d2646f23d7f94302e7c712078258b1ba4bb4b8aa120256da407ba2ded511994fb79ac6fa7524eb7ddaed5266bc52ff2c9bc3a775a19a20ec2cd617cad26b92d61e271d4f2ffeb766bb1328a14b9ff42997a9f3454d940"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x41, &(0x7f0000000480)=@string={0x41, 0x3, "5e95ec2157b62dad19be57d0b7c002c3ec0fc56ff1413ccc1e521a6f2725007986eca2e4f58d92bacc3a6a14a823a5da4152d243e52cc4969f791fc31679e0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x36, &(0x7f0000000540)=@string={0x36, 0x3, "1f1ab07b8e3060b9ed3bf4d5107cbfd6a286705d961e575b569b75b2cc9a49a5a4d7e798700ba4dab8b6152e68848a4e133ea43e"}}]}) (rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r0, 0x40044583, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8000004e61feda5dd1c7373b569e21a13acd962f96a858698f0ee3e3a1f3114da4234dae874f07ad63bd55c5f55d69666d84f54b3176f3918d947722d8e6e39489be9f9b885c25947e74ae24e6e45553c11e6d88caa9de946d349a86cf5fe5263a5ed4bc44cceac1e558289a44e4f0135ab5fb303bdc5d5480218be02d860cb7c490360b"])
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_open_dev$evdev-ioctl$EVIOCGPROP-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x91a00000000000, 0x40000)
ioctl$EVIOCGPROP(r1, 0x40044583, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)

program did not crash
validation run: crashed=false
reproducing took 2h14m13.087548007s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888105a93071 by task kworker/1:2/880

CPU: 1 UID: 0 PID: 880 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 38:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 38:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105a93000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888105a93000, ffff888105a93800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a90
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3178775703
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 acpi_ds_create_walk_state+0x95/0x300 drivers/acpi/acpica/dswstate.c:518
 acpi_ps_execute_method+0x2c1/0xe90 drivers/acpi/acpica/psxface.c:134
 acpi_ns_evaluate+0x640/0x1670 drivers/acpi/acpica/nseval.c:205
 acpi_ut_evaluate_object+0xf7/0x610 drivers/acpi/acpica/uteval.c:60
 acpi_rs_get_method_data+0xa1/0x160 drivers/acpi/acpica/rsutils.c:650
 acpi_walk_resources+0x178/0x270 drivers/acpi/acpica/rsxface.c:616
 __acpi_dev_get_resources drivers/acpi/resource.c:966 [inline]
 acpi_dev_get_resources+0x1d2/0x260 drivers/acpi/resource.c:1004
 acpi_device_enumeration_by_parent drivers/acpi/scan.c:1800 [inline]
 acpi_init_device_object+0x1155/0x1a70 drivers/acpi/scan.c:1829
 acpi_add_single_object+0xe8/0x1ab0 drivers/acpi/scan.c:1874
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105a92f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888105a92f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888105a93000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888105a93080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888105a93100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888105a93071 by task kworker/1:2/880

CPU: 1 UID: 0 PID: 880 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 38:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 38:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105a93000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888105a93000, ffff888105a93800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a90
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3178775703
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 acpi_ds_create_walk_state+0x95/0x300 drivers/acpi/acpica/dswstate.c:518
 acpi_ps_execute_method+0x2c1/0xe90 drivers/acpi/acpica/psxface.c:134
 acpi_ns_evaluate+0x640/0x1670 drivers/acpi/acpica/nseval.c:205
 acpi_ut_evaluate_object+0xf7/0x610 drivers/acpi/acpica/uteval.c:60
 acpi_rs_get_method_data+0xa1/0x160 drivers/acpi/acpica/rsutils.c:650
 acpi_walk_resources+0x178/0x270 drivers/acpi/acpica/rsxface.c:616
 __acpi_dev_get_resources drivers/acpi/resource.c:966 [inline]
 acpi_dev_get_resources+0x1d2/0x260 drivers/acpi/resource.c:1004
 acpi_device_enumeration_by_parent drivers/acpi/scan.c:1800 [inline]
 acpi_init_device_object+0x1155/0x1a70 drivers/acpi/scan.c:1829
 acpi_add_single_object+0xe8/0x1ab0 drivers/acpi/scan.c:1874
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105a92f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888105a92f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888105a93000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888105a93080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888105a93100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================