Extracting prog: 15m53.268520513s
Minimizing prog: 50m45.339333854s
Simplifying prog options: 0s
Extracting C: 1m22.735078348s
Simplifying C: 6m29.283453709s


6 programs, timeouts [30s 1m40s 6m0s]
extracting reproducer from 6 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$uac1-ioctl$HIDIOCGRDESC
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x13, 0xf, 0xd3, 0x40, 0x187f, 0x10, 0x48f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0x18, 0x12, 0x64, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x400}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x8028c003, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600030109022400020908b006090405090184435f07090501030000c003000904d40100f3a0ed070000000000"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCGRAB-syz_open_dev$evdev-ioctl$EVIOCSCLOCKID-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_connect-ioctl$EVIOCGREP-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103)
syz_usb_connect(0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed522005000000786b8d7ade0000000001090209000000000000"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x1f, {0x1f, 0x0, "bf0fa7d69c8bc8b96bf0b9a7b9a841d31fe38fad7b95289ed8bf9d227a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x3)
r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x84, {0x84, 0x0, "ad56f1d8c88153b6280c84d5a56b4fea30dd0321ddb7a1132f09886cf86ecd30370e90bb9fc736462459928c02220d9d8412e6b06850bd7a62ea576a43f3b77123ad5faae94120ede4e848e9f99da1a54d496f88788d01d044ae477aef73f21f3524224435b8fcf38a5fd82d417fbb0f97ab7984e2907c520e7dbe27728f94cf13d1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, &(0x7f0000006800)="10", 0x1)
write$char_usb(r5, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x8a, 0xad, 0xc, 0x20, 0xb48, 0x1009, 0x5533, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x22, 0x36}}]}}]}}, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/22)
syz_usb_connect(0x3, 0xcb9, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x19, 0xa9, 0x9b, 0x20, 0x7d1, 0x3c10, 0x6d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca7, 0x4, 0x9d, 0x7, 0xa0, 0xfe, [{{0x9, 0x4, 0x84, 0x0, 0xa, 0x15, 0x51, 0x7, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x5, 0x4, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, '\t'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x2, 0x0, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0xf9c1, 0x40, "e930077a91bd"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x5, 0x3, 0x0], 0xe}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xb, "7b3ef799"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x81, 0x8, 0x80}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x2, 0xd0, [@generic={0x10, 0x21, "9d9323d3abeeeff345dfc1287d83"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x73, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x7f, 0x9e, 0x4, [@generic={0xde, 0x7, "d0d7b9afa8b04ca615ae692a1953be42fc4266b730a1088691abed61d731c4428fbea0b7882342bf7de732eab6a786e2240370a175a874bf753168c689e0d76326cd514eb4c7f97035952c433f9c96f607fc0cb3a51e62330dd96d4107dcd18b7934194eed299de265070a8ea0885190229b23f0c3dfe3abc0af557527a27e492a6cd2a8e4404816ac757ad6ac3da3604b090cc5a70f007dc468c12c74c831853165fc262d811915e7d5a1e5f78f8d72b8e244677e6be9f3cc090e646e50552dbec8c2a50523601a1aa310ce92b22ae7951fa136325f2a038198c655"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xb, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x4, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x52, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xa, 0xfa, 0x1, [@generic={0xf, 0x23, "426bfd9d0c3fca0fb09dc8d2f1"}]}}]}}, {{0x9, 0x4, 0xbb, 0xf2, 0x10, 0x9f, 0x70, 0xfb, 0xff, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0xe, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x10, 0x9, 0x9, [@generic={0xa1, 0x23, "502ecb1a3fad3b8d1cc13e8657618a9e7e430145652a16ad0d89457181f499e8a5092ce4ec2e88a57b9434ff37457c0c161890e6aaf955c3854797369176dac59934e44a0161b11115185557a5d82f682bf995b4e9c55a4f4c912be835baea67b8f034862addda5ebc28c3991a0c72bd92c907ef6f35ab82614bc8081e3d1087897116aed9e1b724dacdf57847a4845395d638427904561c31057333e8940b"}, @generic={0x39, 0xd, "57b0a607dc782140ee2cadf381666c8df9c834a59a5df0959303bb161d6ab3be4926e008b774084c9cae2d50f9ecc2bcc98eedcee2bd8d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x1b, 0x4, 0x6, [@generic={0x63, 0x23, "9383b92e496583cff71bfba0000484dce9f52070fea1e97500dec4c206c6df26530c5be8d7bc25c80c71615db8ed67780549fa798e41b588664184b81c659649ad2669ad8d0f97a4974e4993cb811a44839236a6232f011199fe5f698791b4dfd3"}, @generic={0xc, 0x6, "127150937e43e2641718"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x71, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3e7, 0x23, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x1, 0x5, [@generic={0x85, 0x22, "b2a95d198c288467a69b57d7dfc3555248c751f9d417243c7fc0c41448bfeac914a860eeacb35a28bb3090e93af2fa0bf6d6a65892138855f3ce6d7f7d7e8802a8900fe044207a571975a81c314a8155093448bda449c7e7116a04ee221426d248109ed2e3e1b04bc2501f56c0f4250ff8e119f6efe9d9fa7f975b9366ea7b244d0e49"}, @generic={0xde, 0x1f, "5acae6f35b8652b90fa567d2e905ce926aca929ed29132d50dbad44ae7c5c6f78703d7b7042606d48f896d4266774d32d1a09544037e010809573a8cbc58c1fbcde3931d2d3df6bc615d2763c9335de82720a0f1187dd69aab9198a6d0ce5a1c545160fd6da7bb6818768732a8760a1111afa52bc4861a224c9c4b35b4c77556580e5fe4bcad92604b1c8878391d945b98f665a24cb1687de91689134d76c938d626ae6cf03357b0f2cf063c4df882932520f70e88c7e3f425364007f01a3df602e98ded760609cd96de2c65a4ee269902bb3d310ed084cb254ca014"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0xd, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0x3ff}, @generic={0x60, 0x22, "5b5771fd7e2727f8cd459a7a430adaec1bf018216f3fd850c65f834222a9f86aed9902c3681c69f18bc823fa1a57fe763db8bfd53883cfdba05402f3722fe510096dc99e3eff420d43a382609d6ebf862aa92ae37a1c12c0c2f30c1db5e1"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x80, 0x10, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0x23, 0xf, "ec029c273147ff5b0670dc8445ce7e119ab04b4b9bc08d17e7b370903fc93b86c2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe, 0x6, 0xf}}, {{0x9, 0x5, 0x5, 0x13, 0x20, 0xf, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x64, 0x8}}, {{0x9, 0x5, 0x3, 0x1f, 0x8, 0x5, 0x28, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x6, 0xeb, 0xcd}}]}}, {{0x9, 0x4, 0xdc, 0x7f, 0x2, 0x3f, 0xaa, 0x6b, 0xd9, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x9, 0x1, [@generic={0x14, 0x23, "1ff46a787f98b70dac00d6ea91eef1f8b2c0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x43, 0xc, 0xc, 0xfd, 0xdb, 0x6, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x1, 0xbf, 0x4, 0xff, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0xd, 0x800, 0x40, 0x3e}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x9, "4ff791d164"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xe5, "7115bc89b390"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x40, "ac"}]}, @generic={0x43, 0x22, "f66de9f4082d458157d06fca663edbc09f5af03248bc4ddf26f2c0090f728eb8997e00ebd109899aacf49bceae047f47f67d75b9c686189196cf4b72a7167cb0f7"}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xb, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x6, 0x47}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3, 0x6, 0xc0, [@generic={0xed, 0x5, "0e868fc51044749253ea5efef73d4a6939d163e521e7f22c4c6796e0c11b73946589dabfd479215b532466e3edb00b7837c4b533b1fdc2399ae24523635aebe6f10d817f5c978c0fa66bab00156609548ae8d4d8621fb4971cab8c3ef8df155442978ad95a45970b6d8834c0c77696b67125107ccec1028ba46fb2f4b653b9f58fe807f402dd14386de0d29b6c67f89c5f95e955c0062359ae8ac69c4334a6631c961b749e4edcccc60be728766210a795094e87a69a0c3e5f7ff963d19b6ff574a85cf0c3d8a5f3c20b84c08e50c3fe3cb73331a1a20abebb531d506a911607a55ac3d9b72fe3b8bf4e22"}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x16, 0x3, 0xfe}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xff, 0xe, 0x9, [@generic={0x5f, 0xe, "50e1a262a384f04548bb0dda6bfa808dfc647d2c3f840c5d8c6105a7892252196b2238399623092a386d7ec5dc5c11120e9feb541f06fe5e1343524f81d3405676efc501975f2af595a0f7a9c9df381c87849f7316708862343118b774"}, @generic={0xb0, 0x23, "12bb99c56efdc9cba821dd64fd9330e0f8fca4bacc14d5a70df973134a48d12dc50555f754161169ba168062712d252ef0c9ff9905a08dcf6c8775333caa8fe100f69d051c99bc50c86db82ef6c0ad67e4eb3703f748e4df4702f3fa2479d9de9bcefd98f2db580a7b64f7e78c2ad84cc58e7914ed3f69de6d9568111c804bb8f71cd1d7189bfb4c17311f30e80c4e7c82c517085e217527bcd2cd1a57b3ce125330b13ad33e8c77ac96a99fd794"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x9, 0x4, [@generic={0x57, 0x24, "6851b92051d7143aee4fd2c576727df643c4bfd1efded52a9c9233c84ed45f88bd860478cda7c01d0b39b592dc3153279452881a9fc775274009322189a4410626c3359c9a4f62a6f10b95071fd7f5a329f9d4a5f3"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8dd3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x7, 0x4}, @generic={0xd2, 0x7, "758ff151421d0653c26f3bd95937b6e4fb5406c3fc1aa1f982a50e9956305caaa94ee09ecc048ef7f132dcefa2d6824f873ac86dd9c91c5209b66f3ced193679ae6a8270c513fd9bccb6bfe16897726028a508013d8e7131aaecaf61a4a0f2a4f866147c6921e7d12f74e1ec73d52af25950ce0642115338a140ab079e32bf1bb6608420b48dc228e9c740ab2c6b5a20c84b305e30b36276ac73b9ffaa805b3fdef4013c3d26f574d16f63ec567ebae17a16718699423481cb2e19e04ce7e77e599ed7aea0f1100e46bc004dd5e2fe53"}]}}, {{0x9, 0x5, 0x72580cfb5d397ee2, 0x0, 0x8, 0x3, 0x7f, 0x4, [@generic={0x9e, 0xf, "9d6ed21cec577115ab3df2499191a66b2df76ddbd9561c302869cf1ae41dc9e68b09bb45fe8140849908bdd00a3b45774b7890a75d98725629c37bccaece1415b3dd5a1833fabf9f1e81596e64ef71ca3c5989610e4ab2fed6efca75e5eee3eebd105f5e0499ee7cb9c9b9586e04f728184f50a8ad5e7dc51e80c4078da7f9f63a98d63d8d46f1848630b4037d181331e7c90c5358f6a904dfefcbd0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x25, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf9, 0x80, 0xd, [@generic={0x98, 0x21, "0385f9ece32c07e2e745b3c9e1d131fbb001f9c7c4b584432fc4bb41f80f30c3f76ce9e22f3ce21dc131c955bd820913d97e631b7e778fb5d0b9eed72f278059e142e9b1b92b0158863ffc1610f916021852d7c7e454de9f9f9059b4c056465614e1c2641461f38f97fd60c17449ea7c2b8296a2addc09ef25ad69e647863d319d3fc831d978f1b336625ffc682cb8c4eb3f4a9e22e2"}, @generic={0x33, 0x21, "df97ac6b383edf8752a08b354ade06013344ce9b2b0fa5ed8a67a24c7732f39ec97f4f8b8abdef9002b0d4a59b45ffb0cd"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x8, 0x7, 0xff, 0x3}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x1, [@generic={0x29, 0x10, 0x1, "92e3be5024fb8cc97d3a59716cd2ec5c1da46b5204e39a1971659ef58014ab090958b44b283a"}]}, 0x3, [{0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2403149ab945ac5a885a50e6fe2a82990ad804d4e10351"]}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "8cb17611f5"}}, {0x43, &(0x7f0000000240)=@string={0x43, 0x3, "156b2a94a0be2c94ee4e361be11ae2add9eef5bfef2b0eeb54a1248358b0bc6c2c148bfcd991387d8aa1b21c28b5c09bbcbc145899eeca90537bfa5c001e7cfa86"}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 6 programs with base timeout 30s
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 28, 6, 26, 1, 11]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
executing program 4:
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000010000000524050000082407000000009e0c240700000000c80975f9070d240701000000fab8f86300cf0924030000000001000904010000010206000904010101010200000905010900000000000725010000000009040200000102000009040201010102000600058209000000000007250100000000"], 0x0) (async)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000010000000524050000082407000000009e0c240700000000c80975f9070d240701000000fab8f86300cf0924030000000001000904010000010206000904010101010200000905010900000000000725010000000009040200000102000009040201010102000600058209000000000007250100000000"], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="5bff007e"])
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000d00)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000040)={0x20, 0x31, 0xa1, {0xa1, 0xb, "58e9536d5704ff00717ad26f78e161f333c8f2154c041efdd27806c3af4002d1fe6e5cd04078689ddbc5cd83e352a5a844c078dceb7ff7376389c0048c7a198a2c9a5c035ceddca063b478d73c786e7ea6d8824db0c780ff924b437936fea143e42590e374344ae251228355546816e080e95f7ec11bbf6aa2f6876aaccdb6cb364d749f20da92c4eee3b949c7b7497cc489eb16a4778abda1f076ec80b88f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, "be"}, @main=@item_012={0x1, 0x0, 0xa, "d6"}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x2, "314caf19"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4474, 0x53, 0x1, {0x22, 0xbdf}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x38, "530f0171572e2d35fe67f6d44238ed99604164c6c8992b46d1c0e7b27ea31fb45759fa9db31f036e07f0435ae4bfcffb5c60f00448c47c18"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000040)={0x20, 0x31, 0xa1, {0xa1, 0xb, "58e9536d5704ff00717ad26f78e161f333c8f2154c041efdd27806c3af4002d1fe6e5cd04078689ddbc5cd83e352a5a844c078dceb7ff7376389c0048c7a198a2c9a5c035ceddca063b478d73c786e7ea6d8824db0c780ff924b437936fea143e42590e374344ae251228355546816e080e95f7ec11bbf6aa2f6876aaccdb6cb364d749f20da92c4eee3b949c7b7497cc489eb16a4778abda1f076ec80b88f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, "be"}, @main=@item_012={0x1, 0x0, 0xa, "d6"}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x2, "314caf19"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4474, 0x53, 0x1, {0x22, 0xbdf}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x38, "530f0171572e2d35fe67f6d44238ed99604164c6c8992b46d1c0e7b27ea31fb45759fa9db31f036e07f0435ae4bfcffb5c60f00448c47c18"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000004c0)={0x1, 0x0, 0x2, 0xfdf, 0x7f, 0x3})
read$char_usb(r3, 0x0, 0x0) (async)
read$char_usb(r3, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0xf0, &(0x7f0000000180)={0x5, 0xf, 0xf0, 0x2, [@generic={0xdf, 0x10, 0xb, "776c345b8b85a69c7e27c9030153ff7f984ee0404c5aa702130c3f7ac72de4aad41771e25d77a24ab6f8fab7eba5a78203126b51aeaefd0c1c0174ce23e83d2f5e2bc93f8504eeff170198cf08a2acbcce7d56125e24de5e37eeb2bbebb4209e542c641d93e552bc59fa64135b65586b79114c758154bc3166474d28ae2535fa6d06c5abd1ce2a8285fa056a1f9f6af44a057fe1bd2e2aaa9041016159dff3ad2f701fe3497a04dd5685996a3fe6003acc63d7aba9ed69b7a9a4b6432a78b08f86d6d41955adbc7a1a528d4ca2c6d5312030db7a5169ff2ebc8018bd"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00f, 0x1}]}, 0x1, [{0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "04842093bf22e6567026563378535823f46b95e712d833a6e68892fe1d90db693653664866eebdafff10ec1666e8096b69e6c83d3733c238"}}]}) (async)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0xf0, &(0x7f0000000180)={0x5, 0xf, 0xf0, 0x2, [@generic={0xdf, 0x10, 0xb, "776c345b8b85a69c7e27c9030153ff7f984ee0404c5aa702130c3f7ac72de4aad41771e25d77a24ab6f8fab7eba5a78203126b51aeaefd0c1c0174ce23e83d2f5e2bc93f8504eeff170198cf08a2acbcce7d56125e24de5e37eeb2bbebb4209e542c641d93e552bc59fa64135b65586b79114c758154bc3166474d28ae2535fa6d06c5abd1ce2a8285fa056a1f9f6af44a057fe1bd2e2aaa9041016159dff3ad2f701fe3497a04dd5685996a3fe6003acc63d7aba9ed69b7a9a4b6432a78b08f86d6d41955adbc7a1a528d4ca2c6d5312030db7a5169ff2ebc8018bd"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00f, 0x1}]}, 0x1, [{0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "04842093bf22e6567026563378535823f46b95e712d833a6e68892fe1d90db693653664866eebdafff10ec1666e8096b69e6c83d3733c238"}}]})
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3b, &(0x7f00000005c0)=@string={0x3b, 0x3, "c2e38a20451f00c8fa29149bda4e5502ec34e0227a76313d35fcd32e6f0d699372bf2841ec88fe0f4f005ad51c8bf03f22f54aea3341f512f1"}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12014000f2"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffddf, &(0x7f0000000040)=ANY=[])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x202000) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x202000)
executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103)
syz_usb_connect(0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed522005000000786b8d7ade0000000001090209000000000000"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x1f, {0x1f, 0x0, "bf0fa7d69c8bc8b96bf0b9a7b9a841d31fe38fad7b95289ed8bf9d227a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x3)
r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x84, {0x84, 0x0, "ad56f1d8c88153b6280c84d5a56b4fea30dd0321ddb7a1132f09886cf86ecd30370e90bb9fc736462459928c02220d9d8412e6b06850bd7a62ea576a43f3b77123ad5faae94120ede4e848e9f99da1a54d496f88788d01d044ae477aef73f21f3524224435b8fcf38a5fd82d417fbb0f97ab7984e2907c520e7dbe27728f94cf13d1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, &(0x7f0000006800)="10", 0x1)
write$char_usb(r5, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x8a, 0xad, 0xc, 0x20, 0xb48, 0x1009, 0x5533, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x22, 0x36}}]}}]}}, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/22)
syz_usb_connect(0x3, 0xcb9, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x19, 0xa9, 0x9b, 0x20, 0x7d1, 0x3c10, 0x6d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca7, 0x4, 0x9d, 0x7, 0xa0, 0xfe, [{{0x9, 0x4, 0x84, 0x0, 0xa, 0x15, 0x51, 0x7, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x5, 0x4, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, '\t'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x2, 0x0, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0xf9c1, 0x40, "e930077a91bd"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x5, 0x3, 0x0], 0xe}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xb, "7b3ef799"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x81, 0x8, 0x80}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x2, 0xd0, [@generic={0x10, 0x21, "9d9323d3abeeeff345dfc1287d83"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x73, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x7f, 0x9e, 0x4, [@generic={0xde, 0x7, "d0d7b9afa8b04ca615ae692a1953be42fc4266b730a1088691abed61d731c4428fbea0b7882342bf7de732eab6a786e2240370a175a874bf753168c689e0d76326cd514eb4c7f97035952c433f9c96f607fc0cb3a51e62330dd96d4107dcd18b7934194eed299de265070a8ea0885190229b23f0c3dfe3abc0af557527a27e492a6cd2a8e4404816ac757ad6ac3da3604b090cc5a70f007dc468c12c74c831853165fc262d811915e7d5a1e5f78f8d72b8e244677e6be9f3cc090e646e50552dbec8c2a50523601a1aa310ce92b22ae7951fa136325f2a038198c655"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xb, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x4, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x52, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xa, 0xfa, 0x1, [@generic={0xf, 0x23, "426bfd9d0c3fca0fb09dc8d2f1"}]}}]}}, {{0x9, 0x4, 0xbb, 0xf2, 0x10, 0x9f, 0x70, 0xfb, 0xff, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0xe, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x10, 0x9, 0x9, [@generic={0xa1, 0x23, "502ecb1a3fad3b8d1cc13e8657618a9e7e430145652a16ad0d89457181f499e8a5092ce4ec2e88a57b9434ff37457c0c161890e6aaf955c3854797369176dac59934e44a0161b11115185557a5d82f682bf995b4e9c55a4f4c912be835baea67b8f034862addda5ebc28c3991a0c72bd92c907ef6f35ab82614bc8081e3d1087897116aed9e1b724dacdf57847a4845395d638427904561c31057333e8940b"}, @generic={0x39, 0xd, "57b0a607dc782140ee2cadf381666c8df9c834a59a5df0959303bb161d6ab3be4926e008b774084c9cae2d50f9ecc2bcc98eedcee2bd8d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x1b, 0x4, 0x6, [@generic={0x63, 0x23, "9383b92e496583cff71bfba0000484dce9f52070fea1e97500dec4c206c6df26530c5be8d7bc25c80c71615db8ed67780549fa798e41b588664184b81c659649ad2669ad8d0f97a4974e4993cb811a44839236a6232f011199fe5f698791b4dfd3"}, @generic={0xc, 0x6, "127150937e43e2641718"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x71, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3e7, 0x23, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x1, 0x5, [@generic={0x85, 0x22, "b2a95d198c288467a69b57d7dfc3555248c751f9d417243c7fc0c41448bfeac914a860eeacb35a28bb3090e93af2fa0bf6d6a65892138855f3ce6d7f7d7e8802a8900fe044207a571975a81c314a8155093448bda449c7e7116a04ee221426d248109ed2e3e1b04bc2501f56c0f4250ff8e119f6efe9d9fa7f975b9366ea7b244d0e49"}, @generic={0xde, 0x1f, "5acae6f35b8652b90fa567d2e905ce926aca929ed29132d50dbad44ae7c5c6f78703d7b7042606d48f896d4266774d32d1a09544037e010809573a8cbc58c1fbcde3931d2d3df6bc615d2763c9335de82720a0f1187dd69aab9198a6d0ce5a1c545160fd6da7bb6818768732a8760a1111afa52bc4861a224c9c4b35b4c77556580e5fe4bcad92604b1c8878391d945b98f665a24cb1687de91689134d76c938d626ae6cf03357b0f2cf063c4df882932520f70e88c7e3f425364007f01a3df602e98ded760609cd96de2c65a4ee269902bb3d310ed084cb254ca014"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0xd, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0x3ff}, @generic={0x60, 0x22, "5b5771fd7e2727f8cd459a7a430adaec1bf018216f3fd850c65f834222a9f86aed9902c3681c69f18bc823fa1a57fe763db8bfd53883cfdba05402f3722fe510096dc99e3eff420d43a382609d6ebf862aa92ae37a1c12c0c2f30c1db5e1"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x80, 0x10, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0x23, 0xf, "ec029c273147ff5b0670dc8445ce7e119ab04b4b9bc08d17e7b370903fc93b86c2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe, 0x6, 0xf}}, {{0x9, 0x5, 0x5, 0x13, 0x20, 0xf, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x64, 0x8}}, {{0x9, 0x5, 0x3, 0x1f, 0x8, 0x5, 0x28, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x6, 0xeb, 0xcd}}]}}, {{0x9, 0x4, 0xdc, 0x7f, 0x2, 0x3f, 0xaa, 0x6b, 0xd9, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x9, 0x1, [@generic={0x14, 0x23, "1ff46a787f98b70dac00d6ea91eef1f8b2c0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x43, 0xc, 0xc, 0xfd, 0xdb, 0x6, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x1, 0xbf, 0x4, 0xff, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0xd, 0x800, 0x40, 0x3e}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x9, "4ff791d164"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xe5, "7115bc89b390"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x40, "ac"}]}, @generic={0x43, 0x22, "f66de9f4082d458157d06fca663edbc09f5af03248bc4ddf26f2c0090f728eb8997e00ebd109899aacf49bceae047f47f67d75b9c686189196cf4b72a7167cb0f7"}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xb, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x6, 0x47}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3, 0x6, 0xc0, [@generic={0xed, 0x5, "0e868fc51044749253ea5efef73d4a6939d163e521e7f22c4c6796e0c11b73946589dabfd479215b532466e3edb00b7837c4b533b1fdc2399ae24523635aebe6f10d817f5c978c0fa66bab00156609548ae8d4d8621fb4971cab8c3ef8df155442978ad95a45970b6d8834c0c77696b67125107ccec1028ba46fb2f4b653b9f58fe807f402dd14386de0d29b6c67f89c5f95e955c0062359ae8ac69c4334a6631c961b749e4edcccc60be728766210a795094e87a69a0c3e5f7ff963d19b6ff574a85cf0c3d8a5f3c20b84c08e50c3fe3cb73331a1a20abebb531d506a911607a55ac3d9b72fe3b8bf4e22"}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x16, 0x3, 0xfe}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xff, 0xe, 0x9, [@generic={0x5f, 0xe, "50e1a262a384f04548bb0dda6bfa808dfc647d2c3f840c5d8c6105a7892252196b2238399623092a386d7ec5dc5c11120e9feb541f06fe5e1343524f81d3405676efc501975f2af595a0f7a9c9df381c87849f7316708862343118b774"}, @generic={0xb0, 0x23, "12bb99c56efdc9cba821dd64fd9330e0f8fca4bacc14d5a70df973134a48d12dc50555f754161169ba168062712d252ef0c9ff9905a08dcf6c8775333caa8fe100f69d051c99bc50c86db82ef6c0ad67e4eb3703f748e4df4702f3fa2479d9de9bcefd98f2db580a7b64f7e78c2ad84cc58e7914ed3f69de6d9568111c804bb8f71cd1d7189bfb4c17311f30e80c4e7c82c517085e217527bcd2cd1a57b3ce125330b13ad33e8c77ac96a99fd794"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x9, 0x4, [@generic={0x57, 0x24, "6851b92051d7143aee4fd2c576727df643c4bfd1efded52a9c9233c84ed45f88bd860478cda7c01d0b39b592dc3153279452881a9fc775274009322189a4410626c3359c9a4f62a6f10b95071fd7f5a329f9d4a5f3"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8dd3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x7, 0x4}, @generic={0xd2, 0x7, "758ff151421d0653c26f3bd95937b6e4fb5406c3fc1aa1f982a50e9956305caaa94ee09ecc048ef7f132dcefa2d6824f873ac86dd9c91c5209b66f3ced193679ae6a8270c513fd9bccb6bfe16897726028a508013d8e7131aaecaf61a4a0f2a4f866147c6921e7d12f74e1ec73d52af25950ce0642115338a140ab079e32bf1bb6608420b48dc228e9c740ab2c6b5a20c84b305e30b36276ac73b9ffaa805b3fdef4013c3d26f574d16f63ec567ebae17a16718699423481cb2e19e04ce7e77e599ed7aea0f1100e46bc004dd5e2fe53"}]}}, {{0x9, 0x5, 0x72580cfb5d397ee2, 0x0, 0x8, 0x3, 0x7f, 0x4, [@generic={0x9e, 0xf, "9d6ed21cec577115ab3df2499191a66b2df76ddbd9561c302869cf1ae41dc9e68b09bb45fe8140849908bdd00a3b45774b7890a75d98725629c37bccaece1415b3dd5a1833fabf9f1e81596e64ef71ca3c5989610e4ab2fed6efca75e5eee3eebd105f5e0499ee7cb9c9b9586e04f728184f50a8ad5e7dc51e80c4078da7f9f63a98d63d8d46f1848630b4037d181331e7c90c5358f6a904dfefcbd0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x25, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf9, 0x80, 0xd, [@generic={0x98, 0x21, "0385f9ece32c07e2e745b3c9e1d131fbb001f9c7c4b584432fc4bb41f80f30c3f76ce9e22f3ce21dc131c955bd820913d97e631b7e778fb5d0b9eed72f278059e142e9b1b92b0158863ffc1610f916021852d7c7e454de9f9f9059b4c056465614e1c2641461f38f97fd60c17449ea7c2b8296a2addc09ef25ad69e647863d319d3fc831d978f1b336625ffc682cb8c4eb3f4a9e22e2"}, @generic={0x33, 0x21, "df97ac6b383edf8752a08b354ade06013344ce9b2b0fa5ed8a67a24c7732f39ec97f4f8b8abdef9002b0d4a59b45ffb0cd"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x8, 0x7, 0xff, 0x3}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x1, [@generic={0x29, 0x10, 0x1, "92e3be5024fb8cc97d3a59716cd2ec5c1da46b5204e39a1971659ef58014ab090958b44b283a"}]}, 0x3, [{0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2403149ab945ac5a885a50e6fe2a82990ad804d4e10351"]}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "8cb17611f5"}}, {0x43, &(0x7f0000000240)=@string={0x43, 0x3, "156b2a94a0be2c94ee4e361be11ae2add9eef5bfef2b0eeb54a1248358b0bc6c2c148bfcd991387d8aa1b21c28b5c09bbcbc145899eeca90537bfa5c001e7cfa86"}}]})
executing program 1:
syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600030109022400020908b006090405090184435f07090501030000c003000904d40100f3a0ed070000000000"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x13, 0xf, 0xd3, 0x40, 0x187f, 0x10, 0x48f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0x18, 0x12, 0x64, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x400}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x8028c003, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$uac1-ioctl$HIDIOCGRDESC
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x13, 0xf, 0xd3, 0x40, 0x187f, 0x10, 0x48f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0x18, 0x12, 0x64, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x400}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x8028c003, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600030109022400020908b006090405090184435f07090501030000c003000904d40100f3a0ed070000000000"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCGRAB-syz_open_dev$evdev-ioctl$EVIOCSCLOCKID-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io-syz_open_dev$char_usb-write$char_usb-write$char_usb-syz_usb_disconnect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_connect-ioctl$EVIOCGREP-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103)
syz_usb_connect(0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed522005000000786b8d7ade0000000001090209000000000000"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x1f, {0x1f, 0x0, "bf0fa7d69c8bc8b96bf0b9a7b9a841d31fe38fad7b95289ed8bf9d227a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x3)
r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x84, {0x84, 0x0, "ad56f1d8c88153b6280c84d5a56b4fea30dd0321ddb7a1132f09886cf86ecd30370e90bb9fc736462459928c02220d9d8412e6b06850bd7a62ea576a43f3b77123ad5faae94120ede4e848e9f99da1a54d496f88788d01d044ae477aef73f21f3524224435b8fcf38a5fd82d417fbb0f97ab7984e2907c520e7dbe27728f94cf13d1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, &(0x7f0000006800)="10", 0x1)
write$char_usb(r5, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x8a, 0xad, 0xc, 0x20, 0xb48, 0x1009, 0x5533, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x22, 0x36}}]}}]}}, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/22)
syz_usb_connect(0x3, 0xcb9, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x19, 0xa9, 0x9b, 0x20, 0x7d1, 0x3c10, 0x6d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca7, 0x4, 0x9d, 0x7, 0xa0, 0xfe, [{{0x9, 0x4, 0x84, 0x0, 0xa, 0x15, 0x51, 0x7, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x5, 0x4, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, '\t'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x2, 0x0, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0xf9c1, 0x40, "e930077a91bd"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x5, 0x3, 0x0], 0xe}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xb, "7b3ef799"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x81, 0x8, 0x80}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x2, 0xd0, [@generic={0x10, 0x21, "9d9323d3abeeeff345dfc1287d83"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x73, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x7f, 0x9e, 0x4, [@generic={0xde, 0x7, "d0d7b9afa8b04ca615ae692a1953be42fc4266b730a1088691abed61d731c4428fbea0b7882342bf7de732eab6a786e2240370a175a874bf753168c689e0d76326cd514eb4c7f97035952c433f9c96f607fc0cb3a51e62330dd96d4107dcd18b7934194eed299de265070a8ea0885190229b23f0c3dfe3abc0af557527a27e492a6cd2a8e4404816ac757ad6ac3da3604b090cc5a70f007dc468c12c74c831853165fc262d811915e7d5a1e5f78f8d72b8e244677e6be9f3cc090e646e50552dbec8c2a50523601a1aa310ce92b22ae7951fa136325f2a038198c655"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xb, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x4, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x52, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xa, 0xfa, 0x1, [@generic={0xf, 0x23, "426bfd9d0c3fca0fb09dc8d2f1"}]}}]}}, {{0x9, 0x4, 0xbb, 0xf2, 0x10, 0x9f, 0x70, 0xfb, 0xff, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0xe, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x10, 0x9, 0x9, [@generic={0xa1, 0x23, "502ecb1a3fad3b8d1cc13e8657618a9e7e430145652a16ad0d89457181f499e8a5092ce4ec2e88a57b9434ff37457c0c161890e6aaf955c3854797369176dac59934e44a0161b11115185557a5d82f682bf995b4e9c55a4f4c912be835baea67b8f034862addda5ebc28c3991a0c72bd92c907ef6f35ab82614bc8081e3d1087897116aed9e1b724dacdf57847a4845395d638427904561c31057333e8940b"}, @generic={0x39, 0xd, "57b0a607dc782140ee2cadf381666c8df9c834a59a5df0959303bb161d6ab3be4926e008b774084c9cae2d50f9ecc2bcc98eedcee2bd8d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x1b, 0x4, 0x6, [@generic={0x63, 0x23, "9383b92e496583cff71bfba0000484dce9f52070fea1e97500dec4c206c6df26530c5be8d7bc25c80c71615db8ed67780549fa798e41b588664184b81c659649ad2669ad8d0f97a4974e4993cb811a44839236a6232f011199fe5f698791b4dfd3"}, @generic={0xc, 0x6, "127150937e43e2641718"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x71, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3e7, 0x23, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x1, 0x5, [@generic={0x85, 0x22, "b2a95d198c288467a69b57d7dfc3555248c751f9d417243c7fc0c41448bfeac914a860eeacb35a28bb3090e93af2fa0bf6d6a65892138855f3ce6d7f7d7e8802a8900fe044207a571975a81c314a8155093448bda449c7e7116a04ee221426d248109ed2e3e1b04bc2501f56c0f4250ff8e119f6efe9d9fa7f975b9366ea7b244d0e49"}, @generic={0xde, 0x1f, "5acae6f35b8652b90fa567d2e905ce926aca929ed29132d50dbad44ae7c5c6f78703d7b7042606d48f896d4266774d32d1a09544037e010809573a8cbc58c1fbcde3931d2d3df6bc615d2763c9335de82720a0f1187dd69aab9198a6d0ce5a1c545160fd6da7bb6818768732a8760a1111afa52bc4861a224c9c4b35b4c77556580e5fe4bcad92604b1c8878391d945b98f665a24cb1687de91689134d76c938d626ae6cf03357b0f2cf063c4df882932520f70e88c7e3f425364007f01a3df602e98ded760609cd96de2c65a4ee269902bb3d310ed084cb254ca014"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0xd, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0x3ff}, @generic={0x60, 0x22, "5b5771fd7e2727f8cd459a7a430adaec1bf018216f3fd850c65f834222a9f86aed9902c3681c69f18bc823fa1a57fe763db8bfd53883cfdba05402f3722fe510096dc99e3eff420d43a382609d6ebf862aa92ae37a1c12c0c2f30c1db5e1"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x80, 0x10, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0x23, 0xf, "ec029c273147ff5b0670dc8445ce7e119ab04b4b9bc08d17e7b370903fc93b86c2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe, 0x6, 0xf}}, {{0x9, 0x5, 0x5, 0x13, 0x20, 0xf, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x64, 0x8}}, {{0x9, 0x5, 0x3, 0x1f, 0x8, 0x5, 0x28, 0x4}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x6, 0xeb, 0xcd}}]}}, {{0x9, 0x4, 0xdc, 0x7f, 0x2, 0x3f, 0xaa, 0x6b, 0xd9, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x9, 0x1, [@generic={0x14, 0x23, "1ff46a787f98b70dac00d6ea91eef1f8b2c0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x43, 0xc, 0xc, 0xfd, 0xdb, 0x6, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x1, 0xbf, 0x4, 0xff, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0xd, 0x800, 0x40, 0x3e}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x9, "4ff791d164"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xe5, "7115bc89b390"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x40, "ac"}]}, @generic={0x43, 0x22, "f66de9f4082d458157d06fca663edbc09f5af03248bc4ddf26f2c0090f728eb8997e00ebd109899aacf49bceae047f47f67d75b9c686189196cf4b72a7167cb0f7"}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xb, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x6, 0x47}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3, 0x6, 0xc0, [@generic={0xed, 0x5, "0e868fc51044749253ea5efef73d4a6939d163e521e7f22c4c6796e0c11b73946589dabfd479215b532466e3edb00b7837c4b533b1fdc2399ae24523635aebe6f10d817f5c978c0fa66bab00156609548ae8d4d8621fb4971cab8c3ef8df155442978ad95a45970b6d8834c0c77696b67125107ccec1028ba46fb2f4b653b9f58fe807f402dd14386de0d29b6c67f89c5f95e955c0062359ae8ac69c4334a6631c961b749e4edcccc60be728766210a795094e87a69a0c3e5f7ff963d19b6ff574a85cf0c3d8a5f3c20b84c08e50c3fe3cb73331a1a20abebb531d506a911607a55ac3d9b72fe3b8bf4e22"}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x16, 0x3, 0xfe}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xff, 0xe, 0x9, [@generic={0x5f, 0xe, "50e1a262a384f04548bb0dda6bfa808dfc647d2c3f840c5d8c6105a7892252196b2238399623092a386d7ec5dc5c11120e9feb541f06fe5e1343524f81d3405676efc501975f2af595a0f7a9c9df381c87849f7316708862343118b774"}, @generic={0xb0, 0x23, "12bb99c56efdc9cba821dd64fd9330e0f8fca4bacc14d5a70df973134a48d12dc50555f754161169ba168062712d252ef0c9ff9905a08dcf6c8775333caa8fe100f69d051c99bc50c86db82ef6c0ad67e4eb3703f748e4df4702f3fa2479d9de9bcefd98f2db580a7b64f7e78c2ad84cc58e7914ed3f69de6d9568111c804bb8f71cd1d7189bfb4c17311f30e80c4e7c82c517085e217527bcd2cd1a57b3ce125330b13ad33e8c77ac96a99fd794"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x9, 0x4, [@generic={0x57, 0x24, "6851b92051d7143aee4fd2c576727df643c4bfd1efded52a9c9233c84ed45f88bd860478cda7c01d0b39b592dc3153279452881a9fc775274009322189a4410626c3359c9a4f62a6f10b95071fd7f5a329f9d4a5f3"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8dd3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x7, 0x4}, @generic={0xd2, 0x7, "758ff151421d0653c26f3bd95937b6e4fb5406c3fc1aa1f982a50e9956305caaa94ee09ecc048ef7f132dcefa2d6824f873ac86dd9c91c5209b66f3ced193679ae6a8270c513fd9bccb6bfe16897726028a508013d8e7131aaecaf61a4a0f2a4f866147c6921e7d12f74e1ec73d52af25950ce0642115338a140ab079e32bf1bb6608420b48dc228e9c740ab2c6b5a20c84b305e30b36276ac73b9ffaa805b3fdef4013c3d26f574d16f63ec567ebae17a16718699423481cb2e19e04ce7e77e599ed7aea0f1100e46bc004dd5e2fe53"}]}}, {{0x9, 0x5, 0x72580cfb5d397ee2, 0x0, 0x8, 0x3, 0x7f, 0x4, [@generic={0x9e, 0xf, "9d6ed21cec577115ab3df2499191a66b2df76ddbd9561c302869cf1ae41dc9e68b09bb45fe8140849908bdd00a3b45774b7890a75d98725629c37bccaece1415b3dd5a1833fabf9f1e81596e64ef71ca3c5989610e4ab2fed6efca75e5eee3eebd105f5e0499ee7cb9c9b9586e04f728184f50a8ad5e7dc51e80c4078da7f9f63a98d63d8d46f1848630b4037d181331e7c90c5358f6a904dfefcbd0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x25, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf9, 0x80, 0xd, [@generic={0x98, 0x21, "0385f9ece32c07e2e745b3c9e1d131fbb001f9c7c4b584432fc4bb41f80f30c3f76ce9e22f3ce21dc131c955bd820913d97e631b7e778fb5d0b9eed72f278059e142e9b1b92b0158863ffc1610f916021852d7c7e454de9f9f9059b4c056465614e1c2641461f38f97fd60c17449ea7c2b8296a2addc09ef25ad69e647863d319d3fc831d978f1b336625ffc682cb8c4eb3f4a9e22e2"}, @generic={0x33, 0x21, "df97ac6b383edf8752a08b354ade06013344ce9b2b0fa5ed8a67a24c7732f39ec97f4f8b8abdef9002b0d4a59b45ffb0cd"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x8, 0x7, 0xff, 0x3}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x1, [@generic={0x29, 0x10, 0x1, "92e3be5024fb8cc97d3a59716cd2ec5c1da46b5204e39a1971659ef58014ab090958b44b283a"}]}, 0x3, [{0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2403149ab945ac5a885a50e6fe2a82990ad804d4e10351"]}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "8cb17611f5"}}, {0x43, &(0x7f0000000240)=@string={0x43, 0x3, "156b2a94a0be2c94ee4e361be11ae2add9eef5bfef2b0eeb54a1248358b0bc6c2c148bfcd991387d8aa1b21c28b5c09bbcbc145899eeca90537bfa5c001e7cfa86"}}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

program crashed: KASAN: use-after-free Read in em28xx_init_extension
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_init_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x31}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x61}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x0, 0xc, 0x7fff, 0xa, 0x3ff, 0x1ff, 0x68b, 0xb, 0x7, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000040)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}})

program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110034bab1c841afcc2c801004099041e1054c4010203ff930212009213124c02ef67a7090800309509049a8ae5343a08cbf728fc83b1d58990093edce0a79966c2045027f751da"], 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002208000000a7f2904fbd0a02c4"], 0x0}, 0x0)

program crashed: BUG: corrupted list in em28xx_init_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)

program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x10, 0x10, 0x11, 0x800, 0x10, 0x10, 0x816, 0x10, 0x7fb, 0xd}}, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)

program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r1)

program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xf2, 0xbb, 0x40, 0x424, 0x12c, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x2, 0xc3, 0x9c, 0x2a, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in em28xx_init_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)

program crashed: BUG: corrupted list in em28xx_init_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3101002e0100dccd5e08cb06070000080000ff010000ccca0d24000100003e001904340102d469e7000905b80ee84c929fad0d0e0946", @ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Read in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$hid
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008e506c020000402505a1a44000010203010902620002010000000904000001020d0000012406000105240000000d240f01000000000000f7000000241a0000280905810310000000000904010000020d00000904010102020d000073f50746aa1f81b66a2c42090582020002000003090503020002"], 0x0)

program crashed: KASAN: use-after-free Read in em28xx_init_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="9f01000083667d1040206502d14e0102030109021b000100000000090400000190f19c000905f3ede8e9384088477da5163aeacac5aef6b35899848f884763144ec6a2aeada635e54cdc8fb569daf4797849ac735823c41a718ab016b0c1ec7613250780", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)

program crashed: BUG: corrupted list in em28xx_close_extension
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)

program did not crash
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0)

program did not crash
testing program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m51.47978641s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in em28xx_close_extension
simplifying C reproducer
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: use-after-free Read in em28xx_close_extension
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: BUG: corrupted list in em28xx_init_extension
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: BUG: corrupted list in em28xx_init_extension
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: BUG: corrupted list in em28xx_init_extension
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: BUG: corrupted list in em28xx_init_extension
testing compiled C program (duration=1m51.47978641s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: BUG: corrupted list in em28xx_init_extension
reproducing took 1h14m30.626408523s
repro crashed as (corrupted=false):
em28xx 1-1:0.0: No AC97 audio processor
list_add corruption. prev->next should be next (ffffffff89df38a0), but was ffffffff83305c6e. (prev=ffff888121c74250).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:32!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:__list_add_valid_or_report+0xbe/0x100 lib/list_debug.c:32
Code: e1 fe 90 0f 0b 48 89 d9 48 c7 c7 c0 9b 46 87 e8 98 b2 e1 fe 90 0f 0b 48 89 f1 48 c7 c7 40 9c 46 87 48 89 de e8 83 b2 e1 fe 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 9c 46 87 e8 6b b2 e1
RSP: 0018:ffffc9000009ef08 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff89df38a0 RCX: ffffffff813560b9
RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005
RBP: ffff8881222cc250 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881222cc250
R13: ffff8881222cc000 R14: ffff8881222cd9d4 R15: ffff888112f82800
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c40416e9e0 CR3: 0000000124190000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_add_valid include/linux/list.h:88 [inline]
 __list_add include/linux/list.h:150 [inline]
 list_add_tail include/linux/list.h:183 [inline]
 em28xx_init_extension+0x48/0x200 drivers/media/usb/em28xx/em28xx-core.c:1114
 em28xx_init_dev.constprop.0+0x197b/0x3090 drivers/media/usb/em28xx/em28xx-cards.c:3679
 em28xx_usb_probe+0x10db/0x3730 drivers/media/usb/em28xx/em28xx-cards.c:4034
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xbe/0x100 lib/list_debug.c:32
Code: e1 fe 90 0f 0b 48 89 d9 48 c7 c7 c0 9b 46 87 e8 98 b2 e1 fe 90 0f 0b 48 89 f1 48 c7 c7 40 9c 46 87 48 89 de e8 83 b2 e1 fe 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 9c 46 87 e8 6b b2 e1
RSP: 0018:ffffc9000009ef08 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff89df38a0 RCX: ffffffff813560b9
RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005
RBP: ffff8881222cc250 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881222cc250
R13: ffff8881222cc000 R14: ffff8881222cd9d4 R15: ffff888112f82800
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c40416e9e0 CR3: 0000000124190000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
em28xx 1-1:0.0: No AC97 audio processor
list_add corruption. prev->next should be next (ffffffff89df38a0), but was ffffffff83305c6e. (prev=ffff888121c74250).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:32!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:__list_add_valid_or_report+0xbe/0x100 lib/list_debug.c:32
Code: e1 fe 90 0f 0b 48 89 d9 48 c7 c7 c0 9b 46 87 e8 98 b2 e1 fe 90 0f 0b 48 89 f1 48 c7 c7 40 9c 46 87 48 89 de e8 83 b2 e1 fe 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 9c 46 87 e8 6b b2 e1
RSP: 0018:ffffc9000009ef08 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff89df38a0 RCX: ffffffff813560b9
RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005
RBP: ffff8881222cc250 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881222cc250
R13: ffff8881222cc000 R14: ffff8881222cd9d4 R15: ffff888112f82800
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c40416e9e0 CR3: 0000000124190000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_add_valid include/linux/list.h:88 [inline]
 __list_add include/linux/list.h:150 [inline]
 list_add_tail include/linux/list.h:183 [inline]
 em28xx_init_extension+0x48/0x200 drivers/media/usb/em28xx/em28xx-core.c:1114
 em28xx_init_dev.constprop.0+0x197b/0x3090 drivers/media/usb/em28xx/em28xx-cards.c:3679
 em28xx_usb_probe+0x10db/0x3730 drivers/media/usb/em28xx/em28xx-cards.c:4034
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:657
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3682
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xbe/0x100 lib/list_debug.c:32
Code: e1 fe 90 0f 0b 48 89 d9 48 c7 c7 c0 9b 46 87 e8 98 b2 e1 fe 90 0f 0b 48 89 f1 48 c7 c7 40 9c 46 87 48 89 de e8 83 b2 e1 fe 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 c0 9c 46 87 e8 6b b2 e1
RSP: 0018:ffffc9000009ef08 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff89df38a0 RCX: ffffffff813560b9
RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005
RBP: ffff8881222cc250 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881222cc250
R13: ffff8881222cc000 R14: ffff8881222cd9d4 R15: ffff888112f82800
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c40416e9e0 CR3: 0000000124190000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400