Extracting prog: 5h24m39.565467338s
Minimizing prog: 3m4.116620118s
Simplifying prog options: 0s
Extracting C: 1m10.609826848s
Simplifying C: 8m34.820309932s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_open_dev$hiddev-syz_usb_ep_read-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
syz_open_dev$hidraw(0x0, 0x243c2917, 0x120842)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0xe, 0x24, 0x13, 0xfe, "3390854270bd7c53ab22"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x5, "7ae1bcb87dd1"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x1, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x4, 0x6, 0x9a, 0xf3, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x9, 0x6, "4bf2fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x19c4, 0xf6, "90"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4a, 0x9, "e9c3", "a17af0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdb, 0x1, 0xe8, 0x7, "890d", "7bc221"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x2, "0035769c441836c9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x8, 0x9, "fd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x40, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xb6, 0x8, 0x4, 0x10}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0xb, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000300)=@string={0x15, 0x3, "bf1c29ce837670cbbd8c8afee36d379c85ad02"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, &(0x7f0000000880)={0x0, 0x8, 0xe6, {0xe6, 0x31, "ab6a8ef2707c246d3d4ec50d58c76508a7a2727d85b57fa15c1029d3efeed20ed7f88d07c5886b32fe06a037f8a070a834f429747d362e1ce1fb3c5e8bc304c13b28b736a830372beac5cb6bf18d9ad1a046a29c1103dba2776655d437c1f34779c0272dfa124d4e33a8a2224ac291a4217b5f9426a60bb50f637c4040997b828653ad23b4ffd946eeb2fa8f755e5003450ef126ca778ba6d6c18db8324959be8f75bf152a6ec3c91ded923194f5a49da49ca4c376cf181bcdac0964a30a51629a1ab2e3b462253eb949a2de340fed2a57da76b1df63c9eb037664b9459665847d2e0cee"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x10, 0xb2, "5958493446d0b001f6f7014b96a7ea33442ff49fd8b1912e6a646ac2f6ba86f29904e3337fbd2f997085f22a6ea3f115271745d4049ec38f4dfe58c22c4ac2669ef501a7592cb56488bb23525aa57c616327e018c2b3e388f24a4917d78a23f258d72c811b1920d676bbd0a1c143cacdee89c164b633f833d632a991ba2a12b2327489e48a1521a0d9c9dac4a95db5a6402caca895760aa4f198ed5c579f00ebd97eaa74af458d640eca9dfd4fe707c9a96e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "ddd8"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "73f3bd"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "8f1a"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "14f33b"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000) (async)
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x74, {0x74, 0x22, "b453f1f3cda8ecd6604349df37d2adcbd6f8a851fbf495b263cd307bcc636ed6ea8f06bb3d60775d8e1877b1faaaa473d64d965c6e4789dc5d9ff320dc0d9656ce7c9fd498e584647fab98102742e0852cbdba65a61f591cc124e9a19a490b5d255cee1af44f56dc0b6bee8279802410ef0c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x20, 0x9}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xff}})
syz_usb_connect(0x1, 0x0, 0xfffffffffffffffd, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x5, 0x0, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f7f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7f}, 0x0})
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x0, 0xb, 0x2, 'N\r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224010100000009050202000202000009058202000200"/54], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0xcab4995275c5e336, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed4300000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000994730899112168"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902460001010010000904005d12020600000724060000371705240000000d240f01000000ef2f000000000905810310003c7e0109058202600000060009050302ff03fe107f0e3d431b6bae2c50031f1c47096d3e48d5a91d95d6bb68f11cff3cede27f2d34732ae7de733edd"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079e84c1021040e003da80102030109024900010000000009047e00000202ff000b2402010401f705a4892b0b24020100e006e617f0400724010b06"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503c120"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x64, 0x7e, 0x3, 0x20, 0x547, 0x201, 0x66c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x4b, 0x91, 0x67, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1f9, 0x3, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4000, 0x5, 0x6, 0x7, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x4, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfbff, 0x8, 0x0, 0x9, 0x1}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$printer-syz_usb_disconnect-ioctl$EVIOCGNAME-syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_disconnect-ioctl$EVIOCGABS2F-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_connect$cdc_ecm-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 6, 9, 4, 11, 30, 7, 11, 30, 16, 26, 8, 6, 12, 23, 3, 6, 16, 19, 15, 29, 11, 26, 27, 22, 10, 7, 9, 18]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00fa040000216c2bc21775c672938fdac23e5bd63299369445dc83993dcf6be304fcb49ba5e7b9edc6b71ab3f1b0a854eebf28a4063d93c0e4126f1a04bc55ee41e75a456c6db1a0a28900a264acac7e5472090e107919f6edfef11083c265222502ef945c921f62cc97e36de622aeb25e9731277e50a7e6db9018cc52350ddfcab5baef541b655b34de7d76a523a9865647a0037c49a5be43998b95416e79945ec6a56ab3a8bb1f84ca4c53fe6cf800000000358d9439f5951538e6d6b6e2a1c45d08d9af5231f432e83b95"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x1f)
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00130400000004030204"]}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0, 0x0}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000002c0)={0x1b2, "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"})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0) (async)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0xb6, 0x7d, 0x62, 0x40, 0x55f, 0xc420, 0x4587, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd3, 0x74}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "8bc17139"}]}}, 0x0}, 0x0)
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x1, 0x4000)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xf0, 0x26, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x4, 0xd, 0x1, {0x22, 0xe97}}, {{{0x9, 0x5, 0x81, 0x3, 0x140c846443d9c035, 0x3, 0x45, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x5, 0xa}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0xc, 0x8, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000e80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x70, 0x6, 0x7}]}, 0x1, [{0xb, &(0x7f0000000ec0)=@string={0xb, 0x3, "6760374a0173fbea22"}}]})
syz_usb_control_io(r1, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x20, 0x3b, 0xaa, {0xaa, 0x23, "f355d9a5a81565de623384b7ca9f7d26bba5a20eca123b9aaa88d71057b812976447cf16f4bed1b8054d918390abb9ae25daf399945f7dd30febdc0f79ca7fb704b993e96b445881d85e6935d03457ec35295a9aafe3760bf86107654fc83df18252237198dea41508b98ee81c5a688af14f75b2a3c08e91346340193c43d2d6f51a1bb2e1c45f228168fc799ff01e6c81bcc6e1540cef8c64f5624bd54d1516657afdd11e7f67a9"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000001040)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xf1, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x1, 0x100}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x7f, 0xe, 'loNr', "ba04eb5c"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x56, 0x82, 0xff, 0x5}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x20, 0x16, 0x4d, "dbf14b84f90b0eed50e2c39361cb552be4168a20657efb92ea9f9df1196821d6bc275c5acdc4ada763a24b083b124f493dc27cdbb23d6e5296d116371ff73406b8af6052a94db3e76e71a95811"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001340)={0x40, 0xb, 0x2, "bcb8"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000013c0)={0x40, 0x13, 0x6}, &(0x7f0000001400)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x19, 0x2, "da54"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xb}})
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000d00)={0x3, 0x1, 0x6, 0x0, 0x6, 0xffffffff})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x9d, 0xc3, 0x20, 0x12d1, 0x7ef3, 0x5468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x10, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0xff, 0x6, 0x3d, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7f9, 0x400802)
r3 = syz_open_dev$evdev(&(0x7f0000000d40), 0x5000000000000, 0xa0000)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000d80)=""/69)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000080)={0xbfe, "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"})
executing program 2:
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100157993310d80408fd6135010203010902240001050940190904ab07020ad1a5980905eb02"], 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x52, 0x28, 0x91, 0x20, 0x1bcf, 0xb40, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x24, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x0, 0x31, 0x4a, {0x4a, 0xf, "4f6ca027379237e62c5a1c5cb5dbe121ba0ebba731893fecb0119ed5604325dee65b599eb9e9a344c6bbb1c670bec7a38797ad6eabc5c5eea4482051cb176f39ee29164e56caf3e6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "abae5454eb84f63d466b93133ee42a0acd96ec900a44edd2051638ca66ae81a34f8b19b8c5348d3212df92f837ad39140ad151a4272b884247778c763d97175b20790dd106ccf485435d019a28f19057f009118d4a62826bdc110998abb3f539d8483f59dda47c76c15cde78408f3c2d9b90b1a115adef7e60e1fcacb81547eeed389bc6ba7a9b08bd"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x20, 0x7, 0xa1, "f8aaa4568767ea5ad52845a1b74382e9891ddbbfa6345b537803a9153fe1f3bf497ff00f2e333736dca41c49b0ae51b31523cd4b40a2bc5a169332108f8a6decb595e485e3efc5f1bfa43ba7d07fc62d16d699b5359e3342c05251d2fdfc29d2fb07195fb7c5678b6de90d6f8f507b24d0cb492fc1c1d263d62274627bddd596d09d1d65823ca868331b0c13284876ba9ae41d5c4bf4053a16ed53fcaf25ef7ced"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0x29, {0x27, "6262a89df589279ad72ffb3b5cf9437f8f7041c6f50b15d41aa9cc8b16d5f415fec1a92d8e2986"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xa2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xb4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa2, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x310, 0x7, 0x5, 0xbc, 0x10, 0xa}, 0xf4, &(0x7f0000000ac0)={0x5, 0xf, 0xf4, 0x5, [@generic={0xbc, 0x10, 0xb, "2e19b204961d8a997dc85add0a1694db7dc87741ebf983a215748388622306a6cbaad4b5f68346d25d27b367070a1a6eb8bf3f36a97cc0910ab82d9b846b5abb7f93daa98fb1e5c876ccb6ad590949fafe24766278a7e03903d0c6bf665890342ca5c211ba14d5049201178ea8d45fddf6f84f004358cf4f1401dbaaefdfdd1f384a9606c6f3a43cb1bba5413802df22f309bfdf0c0bcc143d82487c1ab3bbf7015009ce1143ac7bff6bf3d616b818dbbbab256568e0d7ad79"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x9, 0x0, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5, 0x4, 0x3ff, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9}, @generic={0x16, 0x10, 0x2, "93208a764e12addfc0fadb859a21031f116ac0"}]}, 0x6, [{0x33, &(0x7f0000000bc0)=@string={0x33, 0x3, "005748661dfca6b3f2ad18cd6440121ecc72a6dba1cdafc5f9f8e462d5025c5c453dbe92a1073d246d867c9913ea1b3096"}}, {0x5c, &(0x7f0000000c00)=@string={0x5c, 0x3, "8a8bc11d9bd3e7ee230a5b5eca4a19f8bec0df0351f2341a7d61f63b5405bc68dd96be1432b2bd9ed0331779b44e3485f2000a7233acf3819b4d4dd7f9cbbf95d6b50121cad5e6afd6a5a15dbd6a88f166dee1487c80ae81cffe"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x430}}, {0x7, &(0x7f0000000cc0)=@string={0x7, 0x3, "41aca2674a"}}, {0xb4, &(0x7f0000000dc0)=@string={0xb4, 0x3, "b450261cc5ba5651ba0cac732314b962749290ee16aadd59dabfdfc33dd807fd2717d955f3092895f752947e78ae8a18a9a03e0b8fb3fb14ecb9f87d1afe80bc700403afb98c957bb958039eddbb2b7ad2ca2afd17aa77c80a76b63c9c096e03e831b21dfc62e9b578d30e6acb47ffceea20a650f58644ea9739cd265b2e4bcb26056fc1ea9b3fc5d831b878236cd844a69e5aae060345f3f0f531c4712e79a65b1c840f633210576f504610012a751fcfee"}}, {0x3e, &(0x7f0000000d00)=@string={0x3e, 0x3, "a59b21887c65f41345f2125a57501eeadf58223c8ed3f84828dd14a3e5d3e80063a0dba49648d51e42220d7d953a249b9ca5162f36d58a622d9aac7b"}}]}) (async, rerun: 64)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0025060000000f619a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0xb8, {0xb8, 0x3, "34b93d382396cb46d8cffa4f94d24a7d96a40115683ffd5c2b7cf85633987e01ea3038a27a71f4912cb04444228436fb631d295903b91431a6a245c891511d98ea2ee59b8d2c7c81c24cdef4b51c8c3fbc7d4cf410e8ac4e355898404bfda77d7e7515f618648280413a77d8f062c73f5a822ff8f742daf49aa2608d307ccbffb7b5e374de3ef8fd32875da2733a3ab8b152a0a5544138d150211461a19dca3a3518e4d74b1537e66fe625962193148ee8573589ecdb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "b541e65a0f6d603dfb9a05be3c4314ceeb66f924601b22b9b59e29ebebd4ca5011ac565b7646cf212c03ff35c9733256f4b05316885316889171fc372a7e4b54e5d14fed98eef11969ac0c1fd49371c15ef290d63404e7f84c89993cd9baf3c88c41ff2399a36903413126863e990c91faf44036f434dca0c9fdb90993acf87086f58b9c555cf3da73a137f30cb107505564e20e9de2dd6a64ed361a94d38bc8bff8c02113cb74186b4e49b4a21e526191d0f0181559b96a3e62651ea6ef76184f316f4c8ffab233fda4e240b1adf3dd6b5cf47055df8e8a0fb99d996033a76e7d0ba323be33429da0"}}}, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0x75, "ec704fdca580779fa321f3f8510c019797b4af863d04786bc41327e9f20c6434fd0c6aed46b28161e801fc278c19e2c52fa139b077dd8a217f30057519ef0516ae91d52c8cf79092258298c222c04ef8945296ad7641d1d8ef093bdc4c46356ec40ec62043d096ed0253dbe5125002c71384014774"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0xfd, {0xfb, "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"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0xfd}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, "848166304fe2d781"}, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)={0x0, 0x11, 0x6, "437955b79e1c"}, 0x0, 0x0}) (async)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0xc018480b, &(0x7f0000000080)={0x2, 0x100}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=<r4=>r0], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0xfffffe5d, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0xfffffffffffffffc, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0xe, 0x36, "177bda62a28a952457282f74299b1c80a9107088ad1a5a0342a63108f8e7db70a12e766ac8128e411f376d3877fae41e05e1226a3d6f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xdd}}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="8c701483929988042b55aad42f92a5b0d2b36c59ba3dee0d22ddde7234997add0f9110830c8f5c76218dcab04ecb0009577472891d05d3170b23c2a6a477946c940000007cdf45043d4d417f346bc72e62000000000006bb115c55153451b6153a095ced2615705a538474d33da2dc769299a2f1165cfccc92ff883389fd81a1379863564bba06366fb9f07573c419415e312dc81168"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x6)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000140)="005bc0")
executing program 4:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007a7918085f0500a8ffb3010202f90902120001002d00000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x11, {0x11, 0xb, "be35c5cc77e716d4d27c1db17d5dd6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="0023630000006301e218e0f2e853fa03e45cc76051cbdc7f8c5e699f7b2a49b49bff4e287d4b5befd1d297a86800000000000000056d9414a9fc5d274ac25f73f50b6982382f2acd06764b382a75e2f8b5a585502d09bcded0397b3bb9379dc6f1"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000900)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x9, 'N'}, @global=@item_4={0x3, 0x1, 0x4, "8a08e489"}, @local=@item_012={0x1, 0x2, 0x3, "a4"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "5929f4c2"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xd27}}}}, &(0x7f0000000c40)={0x2c, &(0x7f00000009c0)={0x40, 0xf, 0x3b, "ab514dd2ba3ef886f89fc5b18b96b28e6c1f160f1652ada0f459f70eeb4cdad7e43ecfe8be3354c27690ab3955cb276f427517f5eca7b894fe7d1f"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000ac0)={0x20, 0x1, 0xff, "03a6e799235d0eddfb3472cf342add9eefea6314478f9eedf402178783a610265940857205e9c4015cdb9a9ef68641c374464bc778a0b213bc391cb257af85000c0ee49df3049ec823a449c1e7893146cab63e79ba4adad829226126d46937624d2e7b99cf8aeb7b4ad873d9bd4d4900b2c0d3f85aa074952967f4a66090f36124bb2b1e4b8715624c0b3a28e7bd39923f306f22544b7019b317a625e4b6568568e62b492392cfa8453caa35f745488f890ebd946a94d003b4703087e72e83b2b3822d75eb05402ec522683726e50ffea507fb3082cafa5f74c0e15b09c4f21a9c9e0532aa9dd59e2d422e6b0ca150a8c0fe5b08b20a48679b54c8d420c9f1"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0xa8, {0xa8, 0x10, "7b67904d936eb6cabbb1fea1032aee0b8469597916d8f3a0807badcf082b2a9fefa15c95c435741cf3e83a2f59e4ac87a8f79fff7412e77ae294f9a2eb9b80e5cdebc18f729c8b7fe55409e45eb55e8afbefb3e5941c1a6531fbe5aee5a2fa89270a6d703f22d3659738c7bc8dba484186fbc7858292e4573cc9621fef890741d92a6cac2aba4ce6874e4830fee9e08d29b7aabfc2fb65938a7e96c18cde244756ed22cff114"}}, &(0x7f0000000100)={0x0, 0x3, 0x95, @string={0x95, 0x3, "b822666b608b016dfec2069a0780a280fea4f47bd6c4987328503cc16e75b8a50963fad03c1a88f5d6d162c2ffce421f71f271068a1833ffc224be3bb3ce32d7c13abf30f2ce5bf60ae1de76a172a5fe3f88cfc17c48701447a38a61299788ce3e67130b24f49d3dfa009b746c3d2c7f19bae5f227fe0d05761e78d54bf8ba56de530aa3342191c2e7231dd8877eeaf377ca99"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000fda000000050fda00040c100a056000000000f000000710020a4705009d1003190c85889522ba072fd0431d424b8ab0dd97dd89d7e253858177db44c88a900c8f33cff9b2813c206e44ee6d4f5045393fdb9a581fea7660a0339da71b7ee24b1aadf9d05857d30182d5f192d561e5ce9bfbd5c73643930faa8725b5ba34f5749a4c37757a66680fd98456012a07e9f364722a922f94e0d5c5e4292c579acfacb4cd755d4288ff428a3379ffdb2e868d87a7ccda1b8cbc213213251003446f476c583ff042367c18fa965980c273e271034f3200282eb5e37dedb3ec14f490"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x9, 0x5, "37a13c9a", "7e8e3e4d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x2, 0x6, 0x0, 0x1, 0x100}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40110fe90000471807bf468614254d01a001e83bd987"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x2, [0x11ff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000540)={0x40, 0xb, 0x2, "93c4"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, '\x00V'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xfa}})
executing program 2:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xb6ac5fbeacf460d9)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYRES32=r0], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/253)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0xf3, 0xa8, 0xd3, 0x8, 0x20b7, 0x713, 0x54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0xb, 0xb7, 0x7}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x28, 0xc, {0xc, 0x7, "7d5aaaede3cfcf8033ac"}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x413, 0xc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000000c0)="100d")
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xcf6e, 0x80)
ioctl$EVIOCSKEYCODE_V2(r6, 0x5450, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x20, 0x30, 0x12, "b5b7cbea82619da2dae6530b10158b1fac7c"}, &(0x7f0000000e00)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000e80), 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0xc, "56579902999843f13bba6bff"}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x1, 0xef6, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x3c, 0xe4, 0xfd, 0x20, 0x10c4, 0x814a, 0xa76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee4, 0x4, 0x6, 0x9, 0xc0, 0x9, [{{0x9, 0x4, 0xe2, 0xff, 0x1, 0x64, 0x55, 0x81, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xcb1}}], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0x3c, 0x5, 0x1, [@generic={0x16, 0xc, "b1f9b223415b8158fd14ddfe03341992f1d9cdff"}]}}]}}, {{0x9, 0x4, 0x57, 0x92, 0x1, 0xfa, 0x5b, 0x16, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x94, 0x3}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x5, "5041bd640c4d"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0xe, 0x3, 0x9, 0xa, 0x7], 0x6}]}], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0x2, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x410}]}}]}}, {{0x9, 0x4, 0x8, 0x1, 0xc, 0xdb, 0xa9, 0x3c, 0x5b, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "dc22c25bd243"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3c, 0x5, 0xd, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0xfe00, 0xff, 0x61, 0x9, 0xb}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x3, 0x7}]}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0xd, 0x6, 0x35, [@generic={0x53, 0x9, "2fa5f184382bb2e4e40a5cc3e9d6e03929a15045d056a4a85a8de499d87039567410b4ed70569846a058094ae1f29ef2a655c97df288297a1aa8a4fbfc90a81d95037cdf3a2251e21739b4b77c47fb3edf"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x8, 0xe, [@generic={0xa6, 0x11, "d1b886d22d52f314c75ff03c9725238fcc3f0c8da196e38b1dc9feda760b8115144a6b518a8ea9cfc3ead08662eabcf326022732cc062436368c08346c0c646c3f5b82661e9ba09e97dd486b7e7f0e02a42dcadf815e696711d99c12e60bea0a3c26e8fec78b0208e1faa6a097d50a4c2279a94d5e573e97843d14b77e669403f6e45e7cad0940dbba897039399b8909c0919b143bb439c6b05628a808a98021943dd239"}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x6, 0x200}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x2, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xe, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xfffc}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x59, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x4690}, @generic={0x3, 0x2f, "a0"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xc0, 0x3, 0x85, [@generic={0xc4, 0x22, "2fdbd8f8ca29c2c4c217b187d7d85b4ff9acf214ac0e556e31af677245b5159faa4dcb52bc967aa3d7fa5950898f9e4d64a2dd2f78e055fd0b41fd747570714314ef051ac26d1e82ad05fd38fd4ecfc333b4cde703499201dd8ef28fd52d81ca83f57bbbe514e37ad0813e1558132215e064b33e55bb947a70671c4a0c968f3f5c0c6d878d5f65153b2240c3e3c6cd693b29f2fa6bc1c8fd2c91f82fc079af3248c6717934aa64b8f69fc6f9a3ba19f0951c9c812a20503e8f43af439c4efb51ed8d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0xa, 0x4d, [@generic={0x8c, 0xf, "a842f3c949b19d37405a57b29626db838e49f744e19d9e4a3e0702f1c2a95b33bf8d2f3da48b71481a2da363fad30bbc6b62ae869123fbd5f9470a495344929383e82dce0748abf9fe26fbd492985003131133f5da924f30e879de92683e90ab25b349a6f59704ae164db982950d0d3e91dc5648cc9eac409f654aaffc72a0c106efe943b3f0282155b0"}, @generic={0x100, 0x4, "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"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x5, 0x3, [@generic={0xf8, 0x30, "3fd8135c2dd705e0971b714e14deb121c73c49e394c60d930946fe0c1a6b39e097cf89af9c38d8e411ad28005901daf2e7555ebc624b8c4f509e57162b72570443f0bd848cb454254bef5d0470436b2cc53961133547af473af4d3312a893d12fdebb1cf99280eacb73815b322c8d1459bd5cf1213e28de30e0a1724ca1a47fa8ac7b2aaf4bc6c77731dc56b8d42467eb26c95ca38f52098249411564d60e2612d524057b7133d3105c9f5521cfde6eef7dbcd3c50e564b99e3c6a76a4c38ef96bf59581558970f9aaf2a634264aafa4627e9c3640ab9fa526f2ad98bc0b5368807199b9bb2ab35e71e468079b32b2fb3b13ae99dafe"}, @generic={0x62, 0x1, "22064b7d22a6aec13b1f61e8984ed3e4ba2f800e828f43ca25496cde076a55ecc99a0b080ae9b7a96571ffaa694e6e56010304887a03b000823f82b96c2ad3839435f972b67c8f2aad94cb4b80ee60c6fff1c2e3891a1a042f268b0374fd5984"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x28, 0x40, 0x2, [@generic={0xd1, 0x10, "c26b32976b1c99e5b2c1b68cee032870d65918382a91b7ea2c79b74077f235779df174884a3e0285673d1d7cffeedc60cf1c1a0fbc0aa13923cfca67eaef2221f100a58711694d7d44f6a316ef0ece5f830649dd78e19d3b9dfb2a76835b5e984ba0f612f1cfc461f09641ad051ef08b8a81f5c29f0590f5421f447533d1007aac6ff1300a7974f4d0d043093582a803963738eb03c0b316fd68a66379be820934a771016e9564a76fb2b89eb7b7f60a39c3010e689a5a61044665b52bc3b7808ef3bf36f58dacf729a3a24ce611fb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xf2, 0xfd, 0x5f, [@generic={0xd4, 0x5, "c2c5e2b99a5c2453d153393d3f3de51f402602ce6935ae3411bcd1ef81470c3db604a649738fdcc4fca407962e02fb55593ff0a28a277c26e52c695b7c698cc2793b092dce88046e7cd353246f2d6a0b686ba037fc0204aed40fb09e353368c43e816ac899028bccfa7a67a2e46fdf821cae970c4d9354b8e4c58b23481c254351c393ee5cd504c8bc86bfb8f1218edc301620436f22e5de660e2e9a811d3782ca3b389eb6d7317390e12b9138e7fec5a2ca2500b0fe2ea9dacd64af065170fbd8332a37717321be9835e5766f368c130081"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x5, 0x8d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xa}, @generic={0xad, 0x30, "4a5da793540ca56813c179553a98b94bf85f5cc8dd0852dde20e0b2e79e82f638d930bea87a87c9487869976428959b470ce8e5948acaa30ac4bbad5aa26c91a497545fa91123608b57ca9b8d818739aa4c570e16c7acc371be5297acb6f6df109d8e4e533a4f95ace9c59395d258941c431452d6c10ca26ce846261cdc282cabca520e3cb42ca592b455ea798000f659114e684ed1f97e7fe622d26e02b476d155b38bd6e5a0c2f7385f9"}]}}]}}, {{0x9, 0x4, 0x2d, 0x0, 0xf, 0xc6, 0x49, 0xf9, 0x6f, [@generic={0x3c, 0x22, "b35ad4ea076578ac5876b54b643f4a26f48bd9b9554d5bde5d3924a2179056f4893ed8f7fe052ad1fb1ec10ace70b828886bbf39ae0e17285e43"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xb00a}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8c, 0x3, 0x9, [@generic={0xb1, 0x23, "8c33b290fe9e6afb910bce2b21f336efb2f8c436adc947d0fd126a40e8f5348b55cb50c3a0ae90a9c449f8e255b224103e7b0ff5a1a788259b14b3012e942c0f085099ab92c9d074951e2bc5ba287312c60c9541a9c278ba246e4a1eb03522255bd68dd0251a95d8da7a4903e7d6b4cf10defccbcc9c201e7109fd1992f6ec1ac68a1e09ef5c897ad9987ee4b6a024e91196ca25007b2185b6aecb40341fa6aba4255f796c533c0fae6972b07ea8e0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x8, 0x4, [@generic={0xe2, 0xe, "d4cd14210b84e7309ba6da3765346629f76875f27a08a5a1b4350538de224f86161550787190d8b95c31695e5a81ef9b382284b421804c445f1d41f8387e6d66a8c43416da801426b3066cf767746eef86e2bb6ba2d7da21556f01c370b1793d6b1efe9ace22ddc789561d6b0d17682ffecd12666045f82e9ba4f635d6d4fc0d608c533e52c34ba8866a3d6cf151f3e842c3881fb68230a29d54ba0d5939baf60545dd46f0d581c15531c1fe8464f5bbe5eaa07dba53ccba7eb51f8e2ecc24467594d2a1d696219811750ef0760e767d76306deaf6f8f235bff95f01f2813ed6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xe, 0xa, 0x7f, [@generic={0xf8, 0x3b, "5fe3d44dfae6402c97a29882ca18122b52a5db4f1c3196dcaf4bf7997e653e36cd1f09aae6e02c6fceecaeee6faed9db408488f618095648684d8ced1e0c855a5577c7ad5a8258e0e43b313eaa2d6464b47aae07d4b06c1607c84ea75e8001fb679df766b4532918c2310d0259fe7ec3244b5b6ac4633129e867d29a785c1d5e0c7ee53fde751d353128ffbd2f12c19a8af66b25d729a9855e1cda6987ae0a263ed32b33e5666f3c0d7a059d440a85b430bb8161e68ebe7027da5eee17e92af0cd9b50490b233b1a85b7b839f63055db3414a92757e554368ec2a6596c7f52597042a73dee8c91b6c03c85aee6654faa1040f886e09c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0xd, 0x6, 0x7, [@generic={0x9e, 0x3, "ecbedac67c9d0324842fe29d241c7b73142fc21ceb9e3837d41f5dcbceebe4258b5aaa3f74db0b4bca66cf6489031bd060ba332e90de3ca7635434babe144b6528a71f1fde6c591b623cdae94a38564f64bdaef8738b405753971eb1839ab2cc4625ddb29f437190ba88055c6aa755cd7b5fac72f8de21a499464b6d84a99f17859feb7d63716418c095d9ec1a37d85a46878549d9481b9ab48a03d1"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x1, 0x1, 0x8, [@generic={0x70, 0x9, "a0fbfc7e500c5d64b7477c12f3ae7049b9ac9f49c5422ef103fc6faf8a161ab6f86b9987e209fdddfa773cff2b7f05674a1d95d097f6bf393581813b136b75360ea961e9147385e7d5d7ee54a77ce7cae7b5639d01053d053de00506a60edd2f42baf2d0d542502e2cb95ece82c5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x2, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9, 0x101}]}}, {{0x9, 0x5, 0x0, 0x10, 0x448, 0x4, 0x62, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x66, 0x6, 0x7e, [@generic={0x9d, 0x8, "761f3b12c57e3ee005fa70525964556207c0c16592108241a4bc5699232d6f05dab7c548882f0f2dbd428b353f8e245435b6f77147e4432c6c97bc664a63dd281f417ae58249b40c56af08c5c930905896f1145b949e5241a8a49c8361f0e8f29fa324522d8ba87f47d3fbec626f9a8c0b0736e874a7ccd71a30f8d3150a441f90e6e783fec96a0a9bff92796595d4fae6347395fe6f97cd782868"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x7, 0x2, [@generic={0x65, 0x6, "7ba99de1b5895e07c2101cb5dca2ad01c9921c0c8e90a8559f329e6fb95628606df1d6bb8b218b3f1b8a1f685e40cf2a259039c6a484b820b00eb0ec345b410e3b24be92e805353cb09b45bcc98eb4764124d0cd2e3d757ed6e6368a35eac313c4286c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x45cb}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x4, 0x9, 0x81, [@generic={0x15, 0x21, "026396d4ee50e3b74a25fe2a0d0c73eeb288d2"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0xf1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x9}, @generic={0x5, 0x8, "0cc7dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x3, [@generic={0xce, 0x21, "0c16043e2fa4da0abeffabac09fb2157522454aade56c24754fcf8a200166408c80aa4873e27a8ac7e378bd05f1c7dc2768acc33a13f699663380ed7fa330809f6402f4994362b9d05c6ec37cfe7b1d703bc45313a956e0e000e7f88344490c8903ff6707f4695eb1411f7015cc6eb7cd48873837655e6e99379e3170ac490d455333f2a757401a1fca0d8492f20d95f249071dc9e5bb4217f545831def5699b278a39e07fe3786a4aab826637da78e1e48e4a9a17cc96fa85c0412e559dea9fc15a16f2489c5eb9cf707441"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xed, 0x5, 0x4, 0x20, 0xf3}, 0xe3, &(0x7f0000000400)={0x5, 0xf, 0xe3, 0x3, [@generic={0x54, 0x10, 0xa, "535e50aecefa3fb8d7407669ed5e3156ad21204fc24c2945e276563845f2a62de1d66a013af3c721bf8e392079ec099e7a1b2f112e9b2151c19246199079314aca97544384235e1250ca4e94f97a9868f8"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4fd46fd2ca5ba389aca03c57ad47e29f"}, @generic={0x76, 0x10, 0x3, "e5c3e20d284257435ca7ef11a298c03ffa7dcd1a8a6102d359fab17bcbb03c245076630a73d7d8e3ed76963ad45486226e5ae8036b95a4ea0c854b5461b1d34af6c25a81afdcd6bec68c8a7e5d7379c7c7ffb20bbb12094022f78a5fd8df31d652135e93eaceaaff684d5aca14924d013dba21"}]}, 0x5, [{0x17, &(0x7f0000000040)=@string={0x17, 0x3, "4f4c50d8d858f121919b4ef721d7539a690843bef5"}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "86df35f46571e8179a7952bc087852c224fa8ddd768fb404f9743594dcc5fa59804cd4f1eb72788f9816fad8c02c2d498eefbfc4bfa49d2942f7ad26b943d8beadd2ad2120afc3dc0603fd7e6cd7bddae75c6dea4afd569df0bac7b28c9fc296a48bb0e1af378646d587a1d4c3410f4a57bcc76bd37e74827c5668b44c50ed1bfad4d90e840943c03130639519eea7298ef7b131942592a8af2ef0a540243dc54d163c53a3f8b2421206081673af3b43edae4034498a0d85330f8535e1954bb4416ddce8e6b74e9faa1ad418743f0fc14cbff33a11b0f3e0e352a052207c90902183d3d5f9ced0b2ead888"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2801}}, {0xe, &(0x7f0000000100)=@string={0xe, 0x3, "89778948a1563c7532e98a43"}}, {0xac, &(0x7f00000001c0)=@string={0xac, 0x3, "067f1a0bdea68092d7dabed1ea2efcf8314a6e4c6d1b5cc9fedd48c8bd7f11e5244ab450dfa2b13e57ed3cb620ca450247bcc9e50f356e38c00542ec9ed4ba4b812d7339e8517cfb4bd9200ac832cc490e34a7e34d7e575ccf1aa5b819a033ae60b3ebb5cf4667e8d2db610ec0e96e2737e77d79ec0369773fc47b0311787b55a4f3f8618c1bd184e35d7f883d4b966c559e99bdf17cfbfae95c72cb88a1477c7f291f0d401726593d3a"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000700)={0x0, 0x23, 0x72, {0x72, 0x22, "8ad04d7a18037725f777dc8f8d117b0f974e951f402a13f68fbbbd6dd9b43a8d8f6749543ce40aee915e1d508e45cc07f32cf7abaeddbb464924acdcd92e62f55e57dec44173840e94f6b8ee487ddf4d9de3ce84dbc545a6955c04f30b9ea1bd84f6ea0f01716c66d6cdf43cfad42f5b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f0000000380)={0x0, 0x22, 0x1e, {[@global=@item_012={0x1, 0x1, 0x5, "ec"}, @main=@item_012={0x2, 0x0, 0x9, "c629"}, @global=@item_4={0x3, 0x1, 0x6, "967c7ca7"}, @local=@item_4={0x3, 0x2, 0x5, "32baf64c"}, @main=@item_4={0x3, 0x0, 0xb, "b3a67daa"}, @global=@item_4={0x3, 0x1, 0x5, "cd35e25a"}, @main=@item_4={0x3, 0x0, 0x8, "db29a36d"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9db, 0x6, 0x1, {0x22, 0x3b4}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000780)={0x20, 0x12, 0x11, "5927f58b9179d6c70fc707cab3f8ffd067"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001840)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x10}}) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)={0x40, 0x7, 0x28, "eb4b4e5efd059553f1dd9dbae6df744147c0a7e03ec07edb9141e61f7278283721dfb224e03e9d5d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7b, 0xdb, 0x9c, 0x10, 0xa5c, 0x2033, 0xa8de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x49, 0x2, 0x0, 0x8e, 0x3, 0x26}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x4, "3b53ec3d"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000e0400000004030120"], 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0)
executing program 0:
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xac, 0x71, 0xfb, 0x40, 0x460, 0x8, 0xeff0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xf8, 0x0, 0x2, 0x0, 0x2b, 0x3d, 0x0, [], [{{0x9, 0x5, 0x6, 0x22}}, {{0x9, 0x5, 0x8, 0xc, 0x0, 0x0, 0x5}}]}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0x37, 0xa7, 0x8, 0xbda, 0x1724, 0xab8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) (async, rerun: 64)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0xf3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (rerun: 64)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) (async, rerun: 64)
syz_usb_connect(0x2, 0x55, &(0x7f0000000080)={{0x12, 0x1, 0xf4209b0dca782c7b, 0xd0, 0x5e, 0xf9, 0x10, 0xeb1a, 0x5006, 0xa0fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4d, 0x2, 0x0, 0x6f, 0x46, 0xfe, 0x0, [@hid_hid={0x9, 0x21, 0x89, 0x4, 0x1, {0x22, 0x84d}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x1, 0x2, 0x10}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x4, 0x2, "401bb8"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x3, 0x8, 0x4, 0x6, 0x6}]}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "c568ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100000000090400000103000000092100000001220800090581030000000000dbc137b6274caa20c5b5a2e85850ff1cd0ab84b5"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x100, 0x4, 0x4c, 0x8c, 0x8, 0x413c, 0x8185, 0x29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0x6, 0x0, 0xd0, [{{0x9, 0x4, 0x4c, 0xe, 0x1, 0x5, 0xbc, 0xb2, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x5, 0x0, 0x6}}]}}, {{0x9, 0x4, 0x2, 0x0, 0x0, 0x55, 0xc0, 0x8a, 0x82}}]}}]}}, 0xfffffffffffffffd) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3) (async)
write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xd1, 0x1, 0x7, 0x1, 0xfc, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x2, 0x6, 0x20, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x371}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x27, 0xc, 0xc2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x80, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x15, &(0x7f00000003c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xe3, 0x1, 0xffff, 0x0, 0xa8, [0x1706978dba883858]}]}, 0x6, [{0x52, &(0x7f0000000480)=@string={0x52, 0x3, "9597b99b2e5695d43d68569ee81f0c245e5723aaf13256dc7226fc9b9fb2982d93bd9241f46a03daa2160a74d3c9de4eddaed4f8c35ec039f625b1a48dbfaf7e90c8e0acdaa73702f94002f425ad4cc6"}}, {0xc3, &(0x7f00000006c0)=@string={0xc3, 0x3, "a8c385c992df2f3487921c84e851b22a550e26f82858ac2ebb535c6bd9373708be17f9b57b52c91c370bf1d4d7a4e479e50b1fbb5e3829a5bf470f58d2950f8a020e9600cbd8e6149dce1ee987c63028e7f931d5b9ac3cdb47f3e0ba5f9f8f0670a3dd500afc94f7494dc5a4c778be08f5173ab9a98f0dec323fd37efdf69b29f37e8e0ef28658ec86cf4623aedafb2a1dca48040d21cd8ac91cb7b9c1fbd062e95433a2fb567cfd9b832b911e08cc2e8a48fa6c540800000013200d0d77e45608"}}, {0x5b, &(0x7f00000007c0)=ANY=[]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0xce, &(0x7f0000000e40)=@string={0xce, 0x3, "7de12d27b05dabb779928b56ec791b7aa6f163738c8d542175c19582d66248df8b0e675f2c4d8ce1d318f5bea494356fc014e02f09b3fef85bd80e6da8b6c771ede5701d0e401c354183b28b28b70eb63f83dde30c4171325dc442a8baed013b3ee61115c5188e1042bb709f24e1603cbdad618da14f953da0a5ad825bfcdf30585a0f5b0adfd311cb71b3297ac33056f3a50c464c4aa45ae6fee44ba43c1659f48c3a7fbdc07cb533f91886a078b4274d16ef174f608e75ef19d7ae3f8704af9f64d2505710db5baddc4b0a"}}]})
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) (async)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) (async)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x2, "d11ca8b5"}, @global=@item_012={0x1, 0x1, 0x0, "d2"}, @local=@item_4={0x3, 0x2, 0x9, '\n>H]'}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c", @ANYRES16], 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c107000000000001090224f40000000010090400000103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x0, 0xf, 0x5, {0xfffffffffffffcb7, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d)
syz_usb_disconnect(r1)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/194)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa8175ddbd06d58480b05"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="40370d00000056579902"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x28, "3b53ec3d8a23028150a405fad965dae1455b4f60a5c4163a846bb5613497edb04f7757b3daac0e40"}, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500254300510b00d6968b373010203010902120001000000000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001181000000199efb72e71cfd118a02ed66d5e6312e2851407ba64fffe5ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000f4b63040050bd31792d70102030109022400010003000009041400023c77ed080905e802"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x13, 0x90, 0x6c, 0x8, 0xfe9, 0xdb58, 0xe99b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x4f, 0x7b}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x31, 0x86, {0x86, 0x5, "cacbb1dcf94ccb5f5cc8504baf587067c612f70b14e8470835b012799db9374bd7756ea5df2431c0201e92b021cee8f0d22b77a10ff29b619b9a23c292a42837fd27dd602478f4648ab83ae37b309a22e31596931313e1c6caaf098b075624e1d8275a506a287f1551129165967e0ceab9dc34112c7dd98a8765ca83fd24fd2b8b1b1322"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000700)=ANY=[@ANYRES64=r4], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3, 0x83, 0x9, 0xfffe, 0x9a, 0xd, 0x1ff, 0x1f9, 0xfff, 0x8, 0xa, 0x81}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x81}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x0, 0x31, 0x28, "6610417f6d9c56bec730a3db123204a088788e426b3988fdffcc200586942339c751bd964aaf9155"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x41, 0x21, 0xb8, 0x8, 0x77d, 0x410, 0xfbbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x1, 0xbb, 0x31, 0xb5, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x1, 0xfa, 0xff}}]}}]}}]}}, 0x0)
executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001d6db940192017edc8de01020301090224000102400000010009058a32080000020000000000000000000000000000000000ce8e08481b51448269f45d6dd96773d1f612c8d1360db92c34cfc8e042feea00dbb55a73ae5922118a0b2800a48bde86844b5cae0abd6fd09b137cd060c438e0c91b72e66091c8bbcbd13c35457785a2a172d1e7508c16d88b17ecb092"], 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2917, 0x14a042)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x0)
read$char_usb(r4, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_disconnect(r3)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0xcbe, 0x0)
ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000500))
syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffed5)
write$hidraw(r1, 0x0, 0x0)
write$hidraw(r1, &(0x7f0000000080)="74690450b305eccd493b9a710aca3b5a5b32e5902b976a0e20706bdc5b92711b036e211b725fbe5bda8c8b05aae9791d6e2556ea46ac48b629eb83f0fe940e0739c45e7446df1ef8162636e751d804d0ed2bef6dae072b235bd5ee3b7787e973f39e5ee7c6c84bbb9ba6b65fd435a8eb63fa08d8a9ac290cdf226e6988baa547c250b4e39118cafacc7bcf6776a3b9f9cef00c", 0x93)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000004c0)={0xf98, "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"})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x4ca, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x9c, 0xc0, 0x8c, 0x10, 0x731, 0x2003, 0x653a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b8, 0x2, 0xe, 0x3, 0x60, 0x6, [{{0x9, 0x4, 0xf1, 0x5, 0x0, 0x76, 0xd7, 0x14, 0xf4}}, {{0x9, 0x4, 0x18, 0x1b, 0xf, 0xff, 0xa3, 0xc1, 0x9, [@generic={0x5, 0x30, "985d22"}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0x8d, 0x4, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x9, 0x3, 0xd4, [@generic={0x35, 0x22, "0ebfc46c499f00c6b58e76ad5b8eedd2b067805ec341fda0863b801236c74644d0265c38fb4bdd5a22b11aeb1d91823ea50d02"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x5, 0xf3, [@generic={0xca, 0x4, "ee793cbb8f4c5b989e149693ea8880dee9fa905ecd6269c357940f0c408b8582af48bd8483a1e86880f45d98b52d62f1a25df58267d0e2ecd7f6f7112eeb5b2ddf92a4b5c2a9f02cf2efe9adac4da53b0fcc2abd8ca88b641a259d800f403c6396e5c76e0c3fe349ff94d77e471f34d2d6a1d5eabf89f02d3620bd81a6d461466068c5e2c6f057d63a955fb978d94578e4da49e23d53ef9dcd1934a2225e490b1d1d3a42222d4dba8536f8f68a4886b7d42b963766d9b0d1ca8baa554123c2c1a4787571f8992890"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1e, 0x99}]}}, {{0x9, 0x5, 0x82, 0x0, 0x200, 0x6, 0xc}}, {{0x9, 0x5, 0x88, 0x2, 0x10, 0x2, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0xa, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0xfffe}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x4, 0x3d, 0x3, [@generic={0x4, 0x24, "9510"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7, 0x81, 0x40}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0x7, 0x4, [@generic={0x91, 0x6, "85c560fc9e0a0e52391c3bb9a6db4c69fff6650e8abc4f1f762b289f34bf675f9e068fe1fb1a62b7e97873b385bec3bd29ce1813edc3fca8bff94548f9d3d4bc4dd54786922500300f5de2faf04a85a1614b97a31beeb3c957382727e95c40452eb0414ce47624ac12e404cfb94fa568ebd4e65f86f64785623178004bc469bafb039894fafcc1b1a82fec52bd98b7"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0xc2, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}, @generic={0xa9, 0xf, "90873dde28c85e85a1adec7b3aeaa14c6c1174cd3f979a74321af9ad6f9be26d91bc1937d7d6fe042aadd8e8085f016ee3838306d50d9fa4225603aab15f0bcfe707c9fcddbb9ebe7ba54c973203973e96991d07fadda5589fee90cccf48873322ef7d5b73617413f2604e3c0433c16323c232343e6953d250f8aa21effda4a0cfbe8b45c44fc31086c909353de9e3a97ce816b39c58e7049aa7348a1fa4c925bf54ba7fe0ad56"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x5, 0x0, 0x6, [@generic={0xf4, 0x10, "e0c05048bdccb572ff4c986c92ddb157d6ad26fd250258595afd154202d00f4dff05b339eea05d3373df6c5ffc0263296f265087f76027a84ed44bc3627ac7ebf042d2be40700d5f0b5af46626dec40f65eb2141c8ead6b9304f06b4c70d69583893afd4ea9f218bacab5337f4dfcd5692ae76d99722c926923eea7db5dcf72727fd88346143fd7542bb6fff7f2244996b77bed99daf8dc228994cf41022706fd54a8e3263072e5c92d5a64bde733eb381a8f16ea16d3a11e5ccb046aa0042662ed0689d9cf97ca18fc666407c1467bde4c06fad90baa366cb4c257e80524bf82b50705ea3dec92e0c4f6aa8ecda2dad7668"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x34, 0x9c, 0x9, [@generic={0xa8, 0x11, "47ad5e0ebe3eeee9f7728592d4298782d9b45bdc472b6d7f4783b2f174c2e8329e9468975b471330af2e6b911d824a09a3a9b1b655b1731fbb99739e20396457c1c7194309c63411fde432de3f61d7325feaf018cdbda0a2da6572dcffb47509d8d8a2cb49917c50c346a99796662ad85eafcfd5a496c2e0f6c61d5d344c18ba74292cfa2da2ca792cbd203393973639f11666261a2034555d196bd02a3a4d7464c784bfd5e5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0xf9, 0xe2, 0x20, 0x9e}, 0x9a, &(0x7f0000000400)={0x5, 0xf, 0x9a, 0x6, [@ptm_cap={0x3}, @generic={0xf, 0x10, 0x4, "41dc3820026db7b9adf32159"}, @generic={0x62, 0x10, 0x3, "f406e6ff22adc94e513808b335877b72e1a0f2eefd395a4eed40021cee90788d8d9b414ceeb4308e859611731a0ee30a73506773f9011861af971602bbdc884ee59d6cd2d0ea9f797119b6ec3236ff3d8c383d77193430f93d18d270da907b"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cb3a70e10347246d51e66bb1ed3bd977"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x8, 0x1, 0x80}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x10c0}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "27e5ddc1b70bbfabb8e0bd01b99384f0ba9d7776ce1a7ff120835e161571f12ab01a40e8d2b7765a59175cbffce499a7f2ee6d68650adbceeda161cbb21a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x17, &(0x7f0000000a40)=@string={0x17, 0x3, "fa2908891724c54597a302b24cc0520c7ea2001546"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x200a}}, {0x43, &(0x7f0000000b00)=@string={0x43, 0x3, "a88cc7bf4612833c2b6e5deb7c48ebd40ec9ece655d2e17fa7465ea5b93fc1dd6429109c51d9b3822d7b197e49ae38af07a0e3a5bc9111b6bfc050cd900c416985"}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000e00)={0x14, &(0x7f0000000c40)={0x0, 0xb, 0x9c, {0x9c, 0x1, "3a80fff94497c87671208246df9a814f29e3cc9ae640633c275f179d3204a4bdf9ab1c7d4d448573e230ebd00779b527c5eff7f409a98669af743d2606f2472b766df99c27e26ef5e2ac697aa161889ed1a2bf6cafadeec761c02d002e11b353492ecf2f2e21edd9e02633592a19ccc7e5419ad64a4e4dd21c4413d2d0d07936942f67b2816ac0fc0c1b4553a6818e502f4b0922f8bedca4d5c4"}}, &(0x7f0000000d00)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "37aae1c1d69e09d9114ed1afbb665d87cfc141025200c7aa4a215da28a4a23cfb6b431137d7907014d83610f6c05205a742936a47c3a47582e689cc70d05fbe21fa21e8e04d03aa300d7a19cfbcc392cf0f7c633075df4c292e1625043c67a5893c5d0f59aa55d4c592e7bd9c7e974b6327e430a171e09dc5f1974d3cf0632a600f129f913176fb974158ea4b78a23613ba60d3318e1f5d14c3329426e0d33e712124238e2c91872724f05461fa5ad39a6d030adba798c0b7f9134861cfccedca21c1a50f81bb74ed16c1e523fb6eed10321d93b1198b473a53724936bc1632a8b3154b432e899efde05cffa9ea60246cecd81bf"}}}, &(0x7f0000001100)={0x34, &(0x7f0000000e40)={0x20, 0xa, 0xa8, "b9165755ea490c9bf80f549d59858101abea67593ded2dcc51e0becf9ccbf0a2470852927c25a7abec96d5f4f3b6bf599f01bad76e538e10ce4994d3db05dda952b9ba52a6c560b95ee90ed74877759c8a23f517922a5f6e747756483fcd670a8ef41b3b06a3c88292f1dc4728ceab99c8669e6ce34f5f85af36f05b51f5c810645dc0fb24aa4e0e267b40bced43b4515ef94ad427390145051dfea5ea923bab3da28352d6871aa1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f80)={0x20, 0x0, 0xd4, {0xd2, "27d029f15141027d9f147a65b67e1d0586e9b437387ff4763084bb85435aabcbaf3d5788551d2856d522f49ae4778af07b2849bddc6f029e5242f50191ed2dbc3cc61de7168eb053917f1bc19b92123a33579691ae13554a5ec249e8280aa83477dcca273041773aabb45ad6033420232fc8a29c2e0ca1b80f037418d9ccc810540e5e6e0096f0ffd204ad468349279e9f9833c6077178b0c920c56d8e068950a62190fcf2e8e996492557f0807ce6536b62c0753e0193602a0994d817ebf2bad5dcff0cf8dd95ab30ba06cd86f9e10d8504"}}, &(0x7f0000001080)={0x20, 0x1, 0x1, 0x9c}, &(0x7f00000010c0)={0x20, 0x0, 0x1}})
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="66d440000000004043552205000080715cb67e0000000109022400010000000009040000010300000009210000000122f6000905810300000000006f04aafeafa8aa85a5d83927745b63930f7aa8ab45385c805620805e44730be9b587066eae8b4bc6a02ce617f2a9a8ffadf165d4a973ac"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "c71a4713"}, 0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x0, 0x6, 0x8, 0x4}, 0x1e, &(0x7f00000000c0)={0x5, 0xf, 0x1e, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x9d, 0x0, 0x51c7, 0xff0f, 0x800}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x6, 0x9}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x827}}, {0xff, &(0x7f0000000200)=@string={0xff, 0x3, "a7311fe3be53e5120cf6e27052ad0b8fc769917c147a0ed170757aa60cbb74499cbda5c63f270bcb91ff7fee1b6b8985c467b769702f49bd4a038ce51cc97d0a78c570137763e73dd441841d76417e9fe81e0a1e2b8740b0a6c72d80385fabe5a8df092aec6b59b3dfd14a7c406a7a53f5e1322672bd1139f7f381c1ca543eb8e6d05c5600bd53cd0653e83a484c277b512df7a2afa4ab698bb41ad4dfa0b583602e254b7b29fd8d838b3e2d6fa32717587f5a526f2aad84179c5eddd57843f1cce89f4488966a5968c66f9e44fff714c8b2a341808bdef549633d33241914cf4d3115d956242cafbe36cb633b8c1f6968cff4e0e45df148b07f6d5c82"}}, {0x97, &(0x7f00000003c0)=@string={0x97, 0x3, "6b1675daefbb09076be9f052f5be46d1ebe9a689842440e4a64ae966ec0583eeee91477896fa2717dde59aa90d282523c22284d827faae6456f9ca49e581dfa8afd8d216fa54772296ef93730ed86d918c595f32ae240c974d14998f9cdfab8267e6c02b5af8fd79e73693fbaa6bf5d4a1abcc816ec252c0ebb0a8305cc0df2afde8cc9c19328134e09d17a4ee0b0e4c1609c8fdb9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000480)=@string={0x9c, 0x3, "de7ee2acfb8ca2073971158801266d9b8d2a598f3fd06e4101d3223b9df4849f6f899873039d79b21c0132da664cbf277d01aaca56067b2020c97e9defc56ac5c87d0dc0e6f9aefed584f1ff54cf4d1daca7212899c73935580d3704c706e588af635f123cab61e2aa8025f84c7a376510f5f79724ef834b5748e00be172a22b412ebe9dfad164736766417739d0cb128134a60fe1c3a19494c8"}}, {0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a037fd1a67fb1882988fd5c7e35a1e30670af201f690e3792ecb6098d744bac4444bb1bee079fc1a41e64483dff7c60cffdcb7c93f14a62c74155608378573298b9196d7720f4f1084446299b9ae1d2d84d00c2d2ae071b32b6202796936d17155963360e1afd6695ae66d07e608d6daf3a8d85a45659adb20356bf2409c1f10bff1b0ca67200000000"]}]})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x7, 0x8, {0x8, 0xabb1528b0798117c, "4047bcd11cba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="fd3105000000c15e9e77d1"], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x2000)
ioctl$EVIOCGMASK(r1, 0x40049409, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902460001010010000904005d12020600000724060000371705240000000d240f01000000ef2f000000000905810310003c7e0109058202600000060009050302ff03fe107f0e3d431b6bae2c50031f1c47096d3e48d5a91d95d6bb68f11cff3cede27f2d34732ae7de733edd"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079e84c1021040e003da80102030109024900010000000009047e00000202ff000b2402010401f705a4892b0b24020100e006e617f0400724010b06"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503c120"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x64, 0x7e, 0x3, 0x20, 0x547, 0x201, 0x66c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x4b, 0x91, 0x67, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1f9, 0x3, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4000, 0x5, 0x6, 0x7, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x4, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfbff, 0x8, 0x0, 0x9, 0x1}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224010100000009050202000202000009058202000200"/54], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0xcab4995275c5e336, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed4300000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000994730899112168"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x0, 0xb, 0x2, 'N\r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
syz_open_dev$hidraw(0x0, 0x243c2917, 0x120842)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0xe, 0x24, 0x13, 0xfe, "3390854270bd7c53ab22"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x5, "7ae1bcb87dd1"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x1, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x4, 0x6, 0x9a, 0xf3, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x9, 0x6, "4bf2fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x19c4, 0xf6, "90"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4a, 0x9, "e9c3", "a17af0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdb, 0x1, 0xe8, 0x7, "890d", "7bc221"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x2, "0035769c441836c9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x8, 0x9, "fd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x40, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xb6, 0x8, 0x4, 0x10}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0xb, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000300)=@string={0x15, 0x3, "bf1c29ce837670cbbd8c8afee36d379c85ad02"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, &(0x7f0000000880)={0x0, 0x8, 0xe6, {0xe6, 0x31, "ab6a8ef2707c246d3d4ec50d58c76508a7a2727d85b57fa15c1029d3efeed20ed7f88d07c5886b32fe06a037f8a070a834f429747d362e1ce1fb3c5e8bc304c13b28b736a830372beac5cb6bf18d9ad1a046a29c1103dba2776655d437c1f34779c0272dfa124d4e33a8a2224ac291a4217b5f9426a60bb50f637c4040997b828653ad23b4ffd946eeb2fa8f755e5003450ef126ca778ba6d6c18db8324959be8f75bf152a6ec3c91ded923194f5a49da49ca4c376cf181bcdac0964a30a51629a1ab2e3b462253eb949a2de340fed2a57da76b1df63c9eb037664b9459665847d2e0cee"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x10, 0xb2, "5958493446d0b001f6f7014b96a7ea33442ff49fd8b1912e6a646ac2f6ba86f29904e3337fbd2f997085f22a6ea3f115271745d4049ec38f4dfe58c22c4ac2669ef501a7592cb56488bb23525aa57c616327e018c2b3e388f24a4917d78a23f258d72c811b1920d676bbd0a1c143cacdee89c164b633f833d632a991ba2a12b2327489e48a1521a0d9c9dac4a95db5a6402caca895760aa4f198ed5c579f00ebd97eaa74af458d640eca9dfd4fe707c9a96e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "ddd8"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "73f3bd"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "8f1a"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "14f33b"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000) (async)
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x74, {0x74, 0x22, "b453f1f3cda8ecd6604349df37d2adcbd6f8a851fbf495b263cd307bcc636ed6ea8f06bb3d60775d8e1877b1faaaa473d64d965c6e4789dc5d9ff320dc0d9656ce7c9fd498e584647fab98102742e0852cbdba65a61f591cc124e9a19a490b5d255cee1af44f56dc0b6bee8279802410ef0c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x20, 0x9}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xff}})
syz_usb_connect(0x1, 0x0, 0xfffffffffffffffd, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x5, 0x0, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f7f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7f}, 0x0})
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_open_dev$hiddev-syz_usb_ep_read-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
syz_open_dev$hidraw(0x0, 0x243c2917, 0x120842)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0xe, 0x24, 0x13, 0xfe, "3390854270bd7c53ab22"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x5, "7ae1bcb87dd1"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x1, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x4, 0x6, 0x9a, 0xf3, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x9, 0x6, "4bf2fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x19c4, 0xf6, "90"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4a, 0x9, "e9c3", "a17af0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdb, 0x1, 0xe8, 0x7, "890d", "7bc221"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x2, "0035769c441836c9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x8, 0x9, "fd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x40, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xb6, 0x8, 0x4, 0x10}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0xb, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000300)=@string={0x15, 0x3, "bf1c29ce837670cbbd8c8afee36d379c85ad02"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, &(0x7f0000000880)={0x0, 0x8, 0xe6, {0xe6, 0x31, "ab6a8ef2707c246d3d4ec50d58c76508a7a2727d85b57fa15c1029d3efeed20ed7f88d07c5886b32fe06a037f8a070a834f429747d362e1ce1fb3c5e8bc304c13b28b736a830372beac5cb6bf18d9ad1a046a29c1103dba2776655d437c1f34779c0272dfa124d4e33a8a2224ac291a4217b5f9426a60bb50f637c4040997b828653ad23b4ffd946eeb2fa8f755e5003450ef126ca778ba6d6c18db8324959be8f75bf152a6ec3c91ded923194f5a49da49ca4c376cf181bcdac0964a30a51629a1ab2e3b462253eb949a2de340fed2a57da76b1df63c9eb037664b9459665847d2e0cee"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x10, 0xb2, "5958493446d0b001f6f7014b96a7ea33442ff49fd8b1912e6a646ac2f6ba86f29904e3337fbd2f997085f22a6ea3f115271745d4049ec38f4dfe58c22c4ac2669ef501a7592cb56488bb23525aa57c616327e018c2b3e388f24a4917d78a23f258d72c811b1920d676bbd0a1c143cacdee89c164b633f833d632a991ba2a12b2327489e48a1521a0d9c9dac4a95db5a6402caca895760aa4f198ed5c579f00ebd97eaa74af458d640eca9dfd4fe707c9a96e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "ddd8"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "73f3bd"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "8f1a"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "14f33b"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000) (async)
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x74, {0x74, 0x22, "b453f1f3cda8ecd6604349df37d2adcbd6f8a851fbf495b263cd307bcc636ed6ea8f06bb3d60775d8e1877b1faaaa473d64d965c6e4789dc5d9ff320dc0d9656ce7c9fd498e584647fab98102742e0852cbdba65a61f591cc124e9a19a490b5d255cee1af44f56dc0b6bee8279802410ef0c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x20, 0x9}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xff}})
syz_usb_connect(0x1, 0x0, 0xfffffffffffffffd, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x5, 0x0, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f7f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7f}, 0x0})
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x0, 0xb, 0x2, 'N\r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224010100000009050202000202000009058202000200"/54], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0xcab4995275c5e336, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed4300000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000994730899112168"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902460001010010000904005d12020600000724060000371705240000000d240f01000000ef2f000000000905810310003c7e0109058202600000060009050302ff03fe107f0e3d431b6bae2c50031f1c47096d3e48d5a91d95d6bb68f11cff3cede27f2d34732ae7de733edd"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079e84c1021040e003da80102030109024900010000000009047e00000202ff000b2402010401f705a4892b0b24020100e006e617f0400724010b06"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503c120"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x64, 0x7e, 0x3, 0x20, 0x547, 0x201, 0x66c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x4b, 0x91, 0x67, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1f9, 0x3, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4000, 0x5, 0x6, 0x7, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x4, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfbff, 0x8, 0x0, 0x9, 0x1}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$printer-syz_usb_disconnect-ioctl$EVIOCGNAME-syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_disconnect-ioctl$EVIOCGABS2F-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_connect$cdc_ecm-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "12b32f54e6ba69a996dc14f319bcfe57ea17c9055a8bd8b402c98539308ff7446279b771a8b11f7199caded431937dbec8b2c9642d4d0c4b4ec07b480c3529f5043b69e6a7a3aa197d8e46f4df74f4820dbd8175b89ab0b9d604b2aef122b2f5229c88359392a98a2520056bf35a45557cbd56af0d75842c8726d27fff1731d8d8a540ead07a4204efcf08629762e55a329a1092f86b251536c999ab8d5a4da157a4de9ff5c1967bce68829dc9b3ef134324ac71e6899ab33e67ea84dc3e5f3eb18ebf6504f428a2f0eb76db2c8d08ea2238e0aeee4fc195f750d58c7d8adbba83c28ce3cd8f8bd13cb0189d5429b5163bceb933cbccb0b44986faba6156ecd8"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 6, 9, 4, 11, 30, 7, 11, 30, 16, 26, 8, 6, 12, 23, 3, 6, 16, 19, 15, 29, 11, 26, 27, 22, 10, 7, 9, 18]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00fa040000216c2bc21775c672938fdac23e5bd63299369445dc83993dcf6be304fcb49ba5e7b9edc6b71ab3f1b0a854eebf28a4063d93c0e4126f1a04bc55ee41e75a456c6db1a0a28900a264acac7e5472090e107919f6edfef11083c265222502ef945c921f62cc97e36de622aeb25e9731277e50a7e6db9018cc52350ddfcab5baef541b655b34de7d76a523a9865647a0037c49a5be43998b95416e79945ec6a56ab3a8bb1f84ca4c53fe6cf800000000358d9439f5951538e6d6b6e2a1c45d08d9af5231f432e83b95"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x1f)
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00130400000004030204"]}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0, 0x0}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000002c0)={0x1b2, "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"})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0) (async)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0xb6, 0x7d, 0x62, 0x40, 0x55f, 0xc420, 0x4587, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd3, 0x74}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "8bc17139"}]}}, 0x0}, 0x0)
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x1, 0x4000)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xf0, 0x26, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x4, 0xd, 0x1, {0x22, 0xe97}}, {{{0x9, 0x5, 0x81, 0x3, 0x140c846443d9c035, 0x3, 0x45, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x5, 0xa}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0xc, 0x8, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000e80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x70, 0x6, 0x7}]}, 0x1, [{0xb, &(0x7f0000000ec0)=@string={0xb, 0x3, "6760374a0173fbea22"}}]})
syz_usb_control_io(r1, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x20, 0x3b, 0xaa, {0xaa, 0x23, "f355d9a5a81565de623384b7ca9f7d26bba5a20eca123b9aaa88d71057b812976447cf16f4bed1b8054d918390abb9ae25daf399945f7dd30febdc0f79ca7fb704b993e96b445881d85e6935d03457ec35295a9aafe3760bf86107654fc83df18252237198dea41508b98ee81c5a688af14f75b2a3c08e91346340193c43d2d6f51a1bb2e1c45f228168fc799ff01e6c81bcc6e1540cef8c64f5624bd54d1516657afdd11e7f67a9"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000001040)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xf1, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x1, 0x100}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x7f, 0xe, 'loNr', "ba04eb5c"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x56, 0x82, 0xff, 0x5}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x20, 0x16, 0x4d, "dbf14b84f90b0eed50e2c39361cb552be4168a20657efb92ea9f9df1196821d6bc275c5acdc4ada763a24b083b124f493dc27cdbb23d6e5296d116371ff73406b8af6052a94db3e76e71a95811"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001340)={0x40, 0xb, 0x2, "bcb8"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000013c0)={0x40, 0x13, 0x6}, &(0x7f0000001400)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x19, 0x2, "da54"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xb}})
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000d00)={0x3, 0x1, 0x6, 0x0, 0x6, 0xffffffff})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x9d, 0xc3, 0x20, 0x12d1, 0x7ef3, 0x5468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x10, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0xff, 0x6, 0x3d, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7f9, 0x400802)
r3 = syz_open_dev$evdev(&(0x7f0000000d40), 0x5000000000000, 0xa0000)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000d80)=""/69)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000080)={0xbfe, "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"})
executing program 2:
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100157993310d80408fd6135010203010902240001050940190904ab07020ad1a5980905eb02"], 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x52, 0x28, 0x91, 0x20, 0x1bcf, 0xb40, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x24, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x0, 0x31, 0x4a, {0x4a, 0xf, "4f6ca027379237e62c5a1c5cb5dbe121ba0ebba731893fecb0119ed5604325dee65b599eb9e9a344c6bbb1c670bec7a38797ad6eabc5c5eea4482051cb176f39ee29164e56caf3e6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "abae5454eb84f63d466b93133ee42a0acd96ec900a44edd2051638ca66ae81a34f8b19b8c5348d3212df92f837ad39140ad151a4272b884247778c763d97175b20790dd106ccf485435d019a28f19057f009118d4a62826bdc110998abb3f539d8483f59dda47c76c15cde78408f3c2d9b90b1a115adef7e60e1fcacb81547eeed389bc6ba7a9b08bd"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x20, 0x7, 0xa1, "f8aaa4568767ea5ad52845a1b74382e9891ddbbfa6345b537803a9153fe1f3bf497ff00f2e333736dca41c49b0ae51b31523cd4b40a2bc5a169332108f8a6decb595e485e3efc5f1bfa43ba7d07fc62d16d699b5359e3342c05251d2fdfc29d2fb07195fb7c5678b6de90d6f8f507b24d0cb492fc1c1d263d62274627bddd596d09d1d65823ca868331b0c13284876ba9ae41d5c4bf4053a16ed53fcaf25ef7ced"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0x29, {0x27, "6262a89df589279ad72ffb3b5cf9437f8f7041c6f50b15d41aa9cc8b16d5f415fec1a92d8e2986"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xa2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xb4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa2, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x310, 0x7, 0x5, 0xbc, 0x10, 0xa}, 0xf4, &(0x7f0000000ac0)={0x5, 0xf, 0xf4, 0x5, [@generic={0xbc, 0x10, 0xb, "2e19b204961d8a997dc85add0a1694db7dc87741ebf983a215748388622306a6cbaad4b5f68346d25d27b367070a1a6eb8bf3f36a97cc0910ab82d9b846b5abb7f93daa98fb1e5c876ccb6ad590949fafe24766278a7e03903d0c6bf665890342ca5c211ba14d5049201178ea8d45fddf6f84f004358cf4f1401dbaaefdfdd1f384a9606c6f3a43cb1bba5413802df22f309bfdf0c0bcc143d82487c1ab3bbf7015009ce1143ac7bff6bf3d616b818dbbbab256568e0d7ad79"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x9, 0x0, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5, 0x4, 0x3ff, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9}, @generic={0x16, 0x10, 0x2, "93208a764e12addfc0fadb859a21031f116ac0"}]}, 0x6, [{0x33, &(0x7f0000000bc0)=@string={0x33, 0x3, "005748661dfca6b3f2ad18cd6440121ecc72a6dba1cdafc5f9f8e462d5025c5c453dbe92a1073d246d867c9913ea1b3096"}}, {0x5c, &(0x7f0000000c00)=@string={0x5c, 0x3, "8a8bc11d9bd3e7ee230a5b5eca4a19f8bec0df0351f2341a7d61f63b5405bc68dd96be1432b2bd9ed0331779b44e3485f2000a7233acf3819b4d4dd7f9cbbf95d6b50121cad5e6afd6a5a15dbd6a88f166dee1487c80ae81cffe"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x430}}, {0x7, &(0x7f0000000cc0)=@string={0x7, 0x3, "41aca2674a"}}, {0xb4, &(0x7f0000000dc0)=@string={0xb4, 0x3, "b450261cc5ba5651ba0cac732314b962749290ee16aadd59dabfdfc33dd807fd2717d955f3092895f752947e78ae8a18a9a03e0b8fb3fb14ecb9f87d1afe80bc700403afb98c957bb958039eddbb2b7ad2ca2afd17aa77c80a76b63c9c096e03e831b21dfc62e9b578d30e6acb47ffceea20a650f58644ea9739cd265b2e4bcb26056fc1ea9b3fc5d831b878236cd844a69e5aae060345f3f0f531c4712e79a65b1c840f633210576f504610012a751fcfee"}}, {0x3e, &(0x7f0000000d00)=@string={0x3e, 0x3, "a59b21887c65f41345f2125a57501eeadf58223c8ed3f84828dd14a3e5d3e80063a0dba49648d51e42220d7d953a249b9ca5162f36d58a622d9aac7b"}}]}) (async, rerun: 64)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0025060000000f619a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0xb8, {0xb8, 0x3, "34b93d382396cb46d8cffa4f94d24a7d96a40115683ffd5c2b7cf85633987e01ea3038a27a71f4912cb04444228436fb631d295903b91431a6a245c891511d98ea2ee59b8d2c7c81c24cdef4b51c8c3fbc7d4cf410e8ac4e355898404bfda77d7e7515f618648280413a77d8f062c73f5a822ff8f742daf49aa2608d307ccbffb7b5e374de3ef8fd32875da2733a3ab8b152a0a5544138d150211461a19dca3a3518e4d74b1537e66fe625962193148ee8573589ecdb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "b541e65a0f6d603dfb9a05be3c4314ceeb66f924601b22b9b59e29ebebd4ca5011ac565b7646cf212c03ff35c9733256f4b05316885316889171fc372a7e4b54e5d14fed98eef11969ac0c1fd49371c15ef290d63404e7f84c89993cd9baf3c88c41ff2399a36903413126863e990c91faf44036f434dca0c9fdb90993acf87086f58b9c555cf3da73a137f30cb107505564e20e9de2dd6a64ed361a94d38bc8bff8c02113cb74186b4e49b4a21e526191d0f0181559b96a3e62651ea6ef76184f316f4c8ffab233fda4e240b1adf3dd6b5cf47055df8e8a0fb99d996033a76e7d0ba323be33429da0"}}}, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0x75, "ec704fdca580779fa321f3f8510c019797b4af863d04786bc41327e9f20c6434fd0c6aed46b28161e801fc278c19e2c52fa139b077dd8a217f30057519ef0516ae91d52c8cf79092258298c222c04ef8945296ad7641d1d8ef093bdc4c46356ec40ec62043d096ed0253dbe5125002c71384014774"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0xfd, {0xfb, "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"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0xfd}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, "848166304fe2d781"}, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)={0x0, 0x11, 0x6, "437955b79e1c"}, 0x0, 0x0}) (async)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0xc018480b, &(0x7f0000000080)={0x2, 0x100}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=<r4=>r0], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0xfffffe5d, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0xfffffffffffffffc, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0xe, 0x36, "177bda62a28a952457282f74299b1c80a9107088ad1a5a0342a63108f8e7db70a12e766ac8128e411f376d3877fae41e05e1226a3d6f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xdd}}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="8c701483929988042b55aad42f92a5b0d2b36c59ba3dee0d22ddde7234997add0f9110830c8f5c76218dcab04ecb0009577472891d05d3170b23c2a6a477946c940000007cdf45043d4d417f346bc72e62000000000006bb115c55153451b6153a095ced2615705a538474d33da2dc769299a2f1165cfccc92ff883389fd81a1379863564bba06366fb9f07573c419415e312dc81168"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x6)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000140)="005bc0")
executing program 4:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007a7918085f0500a8ffb3010202f90902120001002d00000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x11, {0x11, 0xb, "be35c5cc77e716d4d27c1db17d5dd6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="0023630000006301e218e0f2e853fa03e45cc76051cbdc7f8c5e699f7b2a49b49bff4e287d4b5befd1d297a86800000000000000056d9414a9fc5d274ac25f73f50b6982382f2acd06764b382a75e2f8b5a585502d09bcded0397b3bb9379dc6f1"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000900)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x9, 'N'}, @global=@item_4={0x3, 0x1, 0x4, "8a08e489"}, @local=@item_012={0x1, 0x2, 0x3, "a4"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "5929f4c2"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xd27}}}}, &(0x7f0000000c40)={0x2c, &(0x7f00000009c0)={0x40, 0xf, 0x3b, "ab514dd2ba3ef886f89fc5b18b96b28e6c1f160f1652ada0f459f70eeb4cdad7e43ecfe8be3354c27690ab3955cb276f427517f5eca7b894fe7d1f"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000ac0)={0x20, 0x1, 0xff, "03a6e799235d0eddfb3472cf342add9eefea6314478f9eedf402178783a610265940857205e9c4015cdb9a9ef68641c374464bc778a0b213bc391cb257af85000c0ee49df3049ec823a449c1e7893146cab63e79ba4adad829226126d46937624d2e7b99cf8aeb7b4ad873d9bd4d4900b2c0d3f85aa074952967f4a66090f36124bb2b1e4b8715624c0b3a28e7bd39923f306f22544b7019b317a625e4b6568568e62b492392cfa8453caa35f745488f890ebd946a94d003b4703087e72e83b2b3822d75eb05402ec522683726e50ffea507fb3082cafa5f74c0e15b09c4f21a9c9e0532aa9dd59e2d422e6b0ca150a8c0fe5b08b20a48679b54c8d420c9f1"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0xa8, {0xa8, 0x10, "7b67904d936eb6cabbb1fea1032aee0b8469597916d8f3a0807badcf082b2a9fefa15c95c435741cf3e83a2f59e4ac87a8f79fff7412e77ae294f9a2eb9b80e5cdebc18f729c8b7fe55409e45eb55e8afbefb3e5941c1a6531fbe5aee5a2fa89270a6d703f22d3659738c7bc8dba484186fbc7858292e4573cc9621fef890741d92a6cac2aba4ce6874e4830fee9e08d29b7aabfc2fb65938a7e96c18cde244756ed22cff114"}}, &(0x7f0000000100)={0x0, 0x3, 0x95, @string={0x95, 0x3, "b822666b608b016dfec2069a0780a280fea4f47bd6c4987328503cc16e75b8a50963fad03c1a88f5d6d162c2ffce421f71f271068a1833ffc224be3bb3ce32d7c13abf30f2ce5bf60ae1de76a172a5fe3f88cfc17c48701447a38a61299788ce3e67130b24f49d3dfa009b746c3d2c7f19bae5f227fe0d05761e78d54bf8ba56de530aa3342191c2e7231dd8877eeaf377ca99"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000fda000000050fda00040c100a056000000000f000000710020a4705009d1003190c85889522ba072fd0431d424b8ab0dd97dd89d7e253858177db44c88a900c8f33cff9b2813c206e44ee6d4f5045393fdb9a581fea7660a0339da71b7ee24b1aadf9d05857d30182d5f192d561e5ce9bfbd5c73643930faa8725b5ba34f5749a4c37757a66680fd98456012a07e9f364722a922f94e0d5c5e4292c579acfacb4cd755d4288ff428a3379ffdb2e868d87a7ccda1b8cbc213213251003446f476c583ff042367c18fa965980c273e271034f3200282eb5e37dedb3ec14f490"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x9, 0x5, "37a13c9a", "7e8e3e4d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x2, 0x6, 0x0, 0x1, 0x100}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40110fe90000471807bf468614254d01a001e83bd987"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x2, [0x11ff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000540)={0x40, 0xb, 0x2, "93c4"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, '\x00V'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xfa}})
executing program 2:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "12b32f54e6ba69a996dc14f319bcfe57ea17c9055a8bd8b402c98539308ff7446279b771a8b11f7199caded431937dbec8b2c9642d4d0c4b4ec07b480c3529f5043b69e6a7a3aa197d8e46f4df74f4820dbd8175b89ab0b9d604b2aef122b2f5229c88359392a98a2520056bf35a45557cbd56af0d75842c8726d27fff1731d8d8a540ead07a4204efcf08629762e55a329a1092f86b251536c999ab8d5a4da157a4de9ff5c1967bce68829dc9b3ef134324ac71e6899ab33e67ea84dc3e5f3eb18ebf6504f428a2f0eb76db2c8d08ea2238e0aeee4fc195f750d58c7d8adbba83c28ce3cd8f8bd13cb0189d5429b5163bceb933cbccb0b44986faba6156ecd8"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xb6ac5fbeacf460d9)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYRES32=r0], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/253)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0xf3, 0xa8, 0xd3, 0x8, 0x20b7, 0x713, 0x54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0xb, 0xb7, 0x7}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x28, 0xc, {0xc, 0x7, "7d5aaaede3cfcf8033ac"}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x413, 0xc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000000c0)="100d")
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xcf6e, 0x80)
ioctl$EVIOCSKEYCODE_V2(r6, 0x5450, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x20, 0x30, 0x12, "b5b7cbea82619da2dae6530b10158b1fac7c"}, &(0x7f0000000e00)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000e80), 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0xc, "56579902999843f13bba6bff"}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x1, 0xef6, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x3c, 0xe4, 0xfd, 0x20, 0x10c4, 0x814a, 0xa76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee4, 0x4, 0x6, 0x9, 0xc0, 0x9, [{{0x9, 0x4, 0xe2, 0xff, 0x1, 0x64, 0x55, 0x81, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xcb1}}], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0x3c, 0x5, 0x1, [@generic={0x16, 0xc, "b1f9b223415b8158fd14ddfe03341992f1d9cdff"}]}}]}}, {{0x9, 0x4, 0x57, 0x92, 0x1, 0xfa, 0x5b, 0x16, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x94, 0x3}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x5, "5041bd640c4d"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0xe, 0x3, 0x9, 0xa, 0x7], 0x6}]}], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0x2, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x410}]}}]}}, {{0x9, 0x4, 0x8, 0x1, 0xc, 0xdb, 0xa9, 0x3c, 0x5b, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "dc22c25bd243"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3c, 0x5, 0xd, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0xfe00, 0xff, 0x61, 0x9, 0xb}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x3, 0x7}]}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0xd, 0x6, 0x35, [@generic={0x53, 0x9, "2fa5f184382bb2e4e40a5cc3e9d6e03929a15045d056a4a85a8de499d87039567410b4ed70569846a058094ae1f29ef2a655c97df288297a1aa8a4fbfc90a81d95037cdf3a2251e21739b4b77c47fb3edf"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x8, 0xe, [@generic={0xa6, 0x11, "d1b886d22d52f314c75ff03c9725238fcc3f0c8da196e38b1dc9feda760b8115144a6b518a8ea9cfc3ead08662eabcf326022732cc062436368c08346c0c646c3f5b82661e9ba09e97dd486b7e7f0e02a42dcadf815e696711d99c12e60bea0a3c26e8fec78b0208e1faa6a097d50a4c2279a94d5e573e97843d14b77e669403f6e45e7cad0940dbba897039399b8909c0919b143bb439c6b05628a808a98021943dd239"}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x6, 0x200}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x2, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xe, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xfffc}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x59, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x4690}, @generic={0x3, 0x2f, "a0"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xc0, 0x3, 0x85, [@generic={0xc4, 0x22, "2fdbd8f8ca29c2c4c217b187d7d85b4ff9acf214ac0e556e31af677245b5159faa4dcb52bc967aa3d7fa5950898f9e4d64a2dd2f78e055fd0b41fd747570714314ef051ac26d1e82ad05fd38fd4ecfc333b4cde703499201dd8ef28fd52d81ca83f57bbbe514e37ad0813e1558132215e064b33e55bb947a70671c4a0c968f3f5c0c6d878d5f65153b2240c3e3c6cd693b29f2fa6bc1c8fd2c91f82fc079af3248c6717934aa64b8f69fc6f9a3ba19f0951c9c812a20503e8f43af439c4efb51ed8d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0xa, 0x4d, [@generic={0x8c, 0xf, "a842f3c949b19d37405a57b29626db838e49f744e19d9e4a3e0702f1c2a95b33bf8d2f3da48b71481a2da363fad30bbc6b62ae869123fbd5f9470a495344929383e82dce0748abf9fe26fbd492985003131133f5da924f30e879de92683e90ab25b349a6f59704ae164db982950d0d3e91dc5648cc9eac409f654aaffc72a0c106efe943b3f0282155b0"}, @generic={0x100, 0x4, "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"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x5, 0x3, [@generic={0xf8, 0x30, "3fd8135c2dd705e0971b714e14deb121c73c49e394c60d930946fe0c1a6b39e097cf89af9c38d8e411ad28005901daf2e7555ebc624b8c4f509e57162b72570443f0bd848cb454254bef5d0470436b2cc53961133547af473af4d3312a893d12fdebb1cf99280eacb73815b322c8d1459bd5cf1213e28de30e0a1724ca1a47fa8ac7b2aaf4bc6c77731dc56b8d42467eb26c95ca38f52098249411564d60e2612d524057b7133d3105c9f5521cfde6eef7dbcd3c50e564b99e3c6a76a4c38ef96bf59581558970f9aaf2a634264aafa4627e9c3640ab9fa526f2ad98bc0b5368807199b9bb2ab35e71e468079b32b2fb3b13ae99dafe"}, @generic={0x62, 0x1, "22064b7d22a6aec13b1f61e8984ed3e4ba2f800e828f43ca25496cde076a55ecc99a0b080ae9b7a96571ffaa694e6e56010304887a03b000823f82b96c2ad3839435f972b67c8f2aad94cb4b80ee60c6fff1c2e3891a1a042f268b0374fd5984"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x28, 0x40, 0x2, [@generic={0xd1, 0x10, "c26b32976b1c99e5b2c1b68cee032870d65918382a91b7ea2c79b74077f235779df174884a3e0285673d1d7cffeedc60cf1c1a0fbc0aa13923cfca67eaef2221f100a58711694d7d44f6a316ef0ece5f830649dd78e19d3b9dfb2a76835b5e984ba0f612f1cfc461f09641ad051ef08b8a81f5c29f0590f5421f447533d1007aac6ff1300a7974f4d0d043093582a803963738eb03c0b316fd68a66379be820934a771016e9564a76fb2b89eb7b7f60a39c3010e689a5a61044665b52bc3b7808ef3bf36f58dacf729a3a24ce611fb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xf2, 0xfd, 0x5f, [@generic={0xd4, 0x5, "c2c5e2b99a5c2453d153393d3f3de51f402602ce6935ae3411bcd1ef81470c3db604a649738fdcc4fca407962e02fb55593ff0a28a277c26e52c695b7c698cc2793b092dce88046e7cd353246f2d6a0b686ba037fc0204aed40fb09e353368c43e816ac899028bccfa7a67a2e46fdf821cae970c4d9354b8e4c58b23481c254351c393ee5cd504c8bc86bfb8f1218edc301620436f22e5de660e2e9a811d3782ca3b389eb6d7317390e12b9138e7fec5a2ca2500b0fe2ea9dacd64af065170fbd8332a37717321be9835e5766f368c130081"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x5, 0x8d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xa}, @generic={0xad, 0x30, "4a5da793540ca56813c179553a98b94bf85f5cc8dd0852dde20e0b2e79e82f638d930bea87a87c9487869976428959b470ce8e5948acaa30ac4bbad5aa26c91a497545fa91123608b57ca9b8d818739aa4c570e16c7acc371be5297acb6f6df109d8e4e533a4f95ace9c59395d258941c431452d6c10ca26ce846261cdc282cabca520e3cb42ca592b455ea798000f659114e684ed1f97e7fe622d26e02b476d155b38bd6e5a0c2f7385f9"}]}}]}}, {{0x9, 0x4, 0x2d, 0x0, 0xf, 0xc6, 0x49, 0xf9, 0x6f, [@generic={0x3c, 0x22, "b35ad4ea076578ac5876b54b643f4a26f48bd9b9554d5bde5d3924a2179056f4893ed8f7fe052ad1fb1ec10ace70b828886bbf39ae0e17285e43"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xb00a}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8c, 0x3, 0x9, [@generic={0xb1, 0x23, "8c33b290fe9e6afb910bce2b21f336efb2f8c436adc947d0fd126a40e8f5348b55cb50c3a0ae90a9c449f8e255b224103e7b0ff5a1a788259b14b3012e942c0f085099ab92c9d074951e2bc5ba287312c60c9541a9c278ba246e4a1eb03522255bd68dd0251a95d8da7a4903e7d6b4cf10defccbcc9c201e7109fd1992f6ec1ac68a1e09ef5c897ad9987ee4b6a024e91196ca25007b2185b6aecb40341fa6aba4255f796c533c0fae6972b07ea8e0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x8, 0x4, [@generic={0xe2, 0xe, "d4cd14210b84e7309ba6da3765346629f76875f27a08a5a1b4350538de224f86161550787190d8b95c31695e5a81ef9b382284b421804c445f1d41f8387e6d66a8c43416da801426b3066cf767746eef86e2bb6ba2d7da21556f01c370b1793d6b1efe9ace22ddc789561d6b0d17682ffecd12666045f82e9ba4f635d6d4fc0d608c533e52c34ba8866a3d6cf151f3e842c3881fb68230a29d54ba0d5939baf60545dd46f0d581c15531c1fe8464f5bbe5eaa07dba53ccba7eb51f8e2ecc24467594d2a1d696219811750ef0760e767d76306deaf6f8f235bff95f01f2813ed6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xe, 0xa, 0x7f, [@generic={0xf8, 0x3b, "5fe3d44dfae6402c97a29882ca18122b52a5db4f1c3196dcaf4bf7997e653e36cd1f09aae6e02c6fceecaeee6faed9db408488f618095648684d8ced1e0c855a5577c7ad5a8258e0e43b313eaa2d6464b47aae07d4b06c1607c84ea75e8001fb679df766b4532918c2310d0259fe7ec3244b5b6ac4633129e867d29a785c1d5e0c7ee53fde751d353128ffbd2f12c19a8af66b25d729a9855e1cda6987ae0a263ed32b33e5666f3c0d7a059d440a85b430bb8161e68ebe7027da5eee17e92af0cd9b50490b233b1a85b7b839f63055db3414a92757e554368ec2a6596c7f52597042a73dee8c91b6c03c85aee6654faa1040f886e09c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0xd, 0x6, 0x7, [@generic={0x9e, 0x3, "ecbedac67c9d0324842fe29d241c7b73142fc21ceb9e3837d41f5dcbceebe4258b5aaa3f74db0b4bca66cf6489031bd060ba332e90de3ca7635434babe144b6528a71f1fde6c591b623cdae94a38564f64bdaef8738b405753971eb1839ab2cc4625ddb29f437190ba88055c6aa755cd7b5fac72f8de21a499464b6d84a99f17859feb7d63716418c095d9ec1a37d85a46878549d9481b9ab48a03d1"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x1, 0x1, 0x8, [@generic={0x70, 0x9, "a0fbfc7e500c5d64b7477c12f3ae7049b9ac9f49c5422ef103fc6faf8a161ab6f86b9987e209fdddfa773cff2b7f05674a1d95d097f6bf393581813b136b75360ea961e9147385e7d5d7ee54a77ce7cae7b5639d01053d053de00506a60edd2f42baf2d0d542502e2cb95ece82c5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x2, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9, 0x101}]}}, {{0x9, 0x5, 0x0, 0x10, 0x448, 0x4, 0x62, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x66, 0x6, 0x7e, [@generic={0x9d, 0x8, "761f3b12c57e3ee005fa70525964556207c0c16592108241a4bc5699232d6f05dab7c548882f0f2dbd428b353f8e245435b6f77147e4432c6c97bc664a63dd281f417ae58249b40c56af08c5c930905896f1145b949e5241a8a49c8361f0e8f29fa324522d8ba87f47d3fbec626f9a8c0b0736e874a7ccd71a30f8d3150a441f90e6e783fec96a0a9bff92796595d4fae6347395fe6f97cd782868"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x7, 0x2, [@generic={0x65, 0x6, "7ba99de1b5895e07c2101cb5dca2ad01c9921c0c8e90a8559f329e6fb95628606df1d6bb8b218b3f1b8a1f685e40cf2a259039c6a484b820b00eb0ec345b410e3b24be92e805353cb09b45bcc98eb4764124d0cd2e3d757ed6e6368a35eac313c4286c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x45cb}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x4, 0x9, 0x81, [@generic={0x15, 0x21, "026396d4ee50e3b74a25fe2a0d0c73eeb288d2"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0xf1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x9}, @generic={0x5, 0x8, "0cc7dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x3, [@generic={0xce, 0x21, "0c16043e2fa4da0abeffabac09fb2157522454aade56c24754fcf8a200166408c80aa4873e27a8ac7e378bd05f1c7dc2768acc33a13f699663380ed7fa330809f6402f4994362b9d05c6ec37cfe7b1d703bc45313a956e0e000e7f88344490c8903ff6707f4695eb1411f7015cc6eb7cd48873837655e6e99379e3170ac490d455333f2a757401a1fca0d8492f20d95f249071dc9e5bb4217f545831def5699b278a39e07fe3786a4aab826637da78e1e48e4a9a17cc96fa85c0412e559dea9fc15a16f2489c5eb9cf707441"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xed, 0x5, 0x4, 0x20, 0xf3}, 0xe3, &(0x7f0000000400)={0x5, 0xf, 0xe3, 0x3, [@generic={0x54, 0x10, 0xa, "535e50aecefa3fb8d7407669ed5e3156ad21204fc24c2945e276563845f2a62de1d66a013af3c721bf8e392079ec099e7a1b2f112e9b2151c19246199079314aca97544384235e1250ca4e94f97a9868f8"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4fd46fd2ca5ba389aca03c57ad47e29f"}, @generic={0x76, 0x10, 0x3, "e5c3e20d284257435ca7ef11a298c03ffa7dcd1a8a6102d359fab17bcbb03c245076630a73d7d8e3ed76963ad45486226e5ae8036b95a4ea0c854b5461b1d34af6c25a81afdcd6bec68c8a7e5d7379c7c7ffb20bbb12094022f78a5fd8df31d652135e93eaceaaff684d5aca14924d013dba21"}]}, 0x5, [{0x17, &(0x7f0000000040)=@string={0x17, 0x3, "4f4c50d8d858f121919b4ef721d7539a690843bef5"}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "86df35f46571e8179a7952bc087852c224fa8ddd768fb404f9743594dcc5fa59804cd4f1eb72788f9816fad8c02c2d498eefbfc4bfa49d2942f7ad26b943d8beadd2ad2120afc3dc0603fd7e6cd7bddae75c6dea4afd569df0bac7b28c9fc296a48bb0e1af378646d587a1d4c3410f4a57bcc76bd37e74827c5668b44c50ed1bfad4d90e840943c03130639519eea7298ef7b131942592a8af2ef0a540243dc54d163c53a3f8b2421206081673af3b43edae4034498a0d85330f8535e1954bb4416ddce8e6b74e9faa1ad418743f0fc14cbff33a11b0f3e0e352a052207c90902183d3d5f9ced0b2ead888"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2801}}, {0xe, &(0x7f0000000100)=@string={0xe, 0x3, "89778948a1563c7532e98a43"}}, {0xac, &(0x7f00000001c0)=@string={0xac, 0x3, "067f1a0bdea68092d7dabed1ea2efcf8314a6e4c6d1b5cc9fedd48c8bd7f11e5244ab450dfa2b13e57ed3cb620ca450247bcc9e50f356e38c00542ec9ed4ba4b812d7339e8517cfb4bd9200ac832cc490e34a7e34d7e575ccf1aa5b819a033ae60b3ebb5cf4667e8d2db610ec0e96e2737e77d79ec0369773fc47b0311787b55a4f3f8618c1bd184e35d7f883d4b966c559e99bdf17cfbfae95c72cb88a1477c7f291f0d401726593d3a"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000700)={0x0, 0x23, 0x72, {0x72, 0x22, "8ad04d7a18037725f777dc8f8d117b0f974e951f402a13f68fbbbd6dd9b43a8d8f6749543ce40aee915e1d508e45cc07f32cf7abaeddbb464924acdcd92e62f55e57dec44173840e94f6b8ee487ddf4d9de3ce84dbc545a6955c04f30b9ea1bd84f6ea0f01716c66d6cdf43cfad42f5b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f0000000380)={0x0, 0x22, 0x1e, {[@global=@item_012={0x1, 0x1, 0x5, "ec"}, @main=@item_012={0x2, 0x0, 0x9, "c629"}, @global=@item_4={0x3, 0x1, 0x6, "967c7ca7"}, @local=@item_4={0x3, 0x2, 0x5, "32baf64c"}, @main=@item_4={0x3, 0x0, 0xb, "b3a67daa"}, @global=@item_4={0x3, 0x1, 0x5, "cd35e25a"}, @main=@item_4={0x3, 0x0, 0x8, "db29a36d"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9db, 0x6, 0x1, {0x22, 0x3b4}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000780)={0x20, 0x12, 0x11, "5927f58b9179d6c70fc707cab3f8ffd067"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001840)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x10}}) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)={0x40, 0x7, 0x28, "eb4b4e5efd059553f1dd9dbae6df744147c0a7e03ec07edb9141e61f7278283721dfb224e03e9d5d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7b, 0xdb, 0x9c, 0x10, 0xa5c, 0x2033, 0xa8de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x49, 0x2, 0x0, 0x8e, 0x3, 0x26}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x4, "3b53ec3d"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000e0400000004030120"], 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0)
executing program 0:
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xac, 0x71, 0xfb, 0x40, 0x460, 0x8, 0xeff0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xf8, 0x0, 0x2, 0x0, 0x2b, 0x3d, 0x0, [], [{{0x9, 0x5, 0x6, 0x22}}, {{0x9, 0x5, 0x8, 0xc, 0x0, 0x0, 0x5}}]}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0x37, 0xa7, 0x8, 0xbda, 0x1724, 0xab8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) (async, rerun: 64)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0xf3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (rerun: 64)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) (async, rerun: 64)
syz_usb_connect(0x2, 0x55, &(0x7f0000000080)={{0x12, 0x1, 0xf4209b0dca782c7b, 0xd0, 0x5e, 0xf9, 0x10, 0xeb1a, 0x5006, 0xa0fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4d, 0x2, 0x0, 0x6f, 0x46, 0xfe, 0x0, [@hid_hid={0x9, 0x21, 0x89, 0x4, 0x1, {0x22, 0x84d}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x1, 0x2, 0x10}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x4, 0x2, "401bb8"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x3, 0x8, 0x4, 0x6, 0x6}]}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "c568ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100000000090400000103000000092100000001220800090581030000000000dbc137b6274caa20c5b5a2e85850ff1cd0ab84b5"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x100, 0x4, 0x4c, 0x8c, 0x8, 0x413c, 0x8185, 0x29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0x6, 0x0, 0xd0, [{{0x9, 0x4, 0x4c, 0xe, 0x1, 0x5, 0xbc, 0xb2, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x5, 0x0, 0x6}}]}}, {{0x9, 0x4, 0x2, 0x0, 0x0, 0x55, 0xc0, 0x8a, 0x82}}]}}]}}, 0xfffffffffffffffd) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3) (async)
write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xd1, 0x1, 0x7, 0x1, 0xfc, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x2, 0x6, 0x20, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x371}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x27, 0xc, 0xc2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x80, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x15, &(0x7f00000003c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xe3, 0x1, 0xffff, 0x0, 0xa8, [0x1706978dba883858]}]}, 0x6, [{0x52, &(0x7f0000000480)=@string={0x52, 0x3, "9597b99b2e5695d43d68569ee81f0c245e5723aaf13256dc7226fc9b9fb2982d93bd9241f46a03daa2160a74d3c9de4eddaed4f8c35ec039f625b1a48dbfaf7e90c8e0acdaa73702f94002f425ad4cc6"}}, {0xc3, &(0x7f00000006c0)=@string={0xc3, 0x3, "a8c385c992df2f3487921c84e851b22a550e26f82858ac2ebb535c6bd9373708be17f9b57b52c91c370bf1d4d7a4e479e50b1fbb5e3829a5bf470f58d2950f8a020e9600cbd8e6149dce1ee987c63028e7f931d5b9ac3cdb47f3e0ba5f9f8f0670a3dd500afc94f7494dc5a4c778be08f5173ab9a98f0dec323fd37efdf69b29f37e8e0ef28658ec86cf4623aedafb2a1dca48040d21cd8ac91cb7b9c1fbd062e95433a2fb567cfd9b832b911e08cc2e8a48fa6c540800000013200d0d77e45608"}}, {0x5b, &(0x7f00000007c0)=ANY=[]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0xce, &(0x7f0000000e40)=@string={0xce, 0x3, "7de12d27b05dabb779928b56ec791b7aa6f163738c8d542175c19582d66248df8b0e675f2c4d8ce1d318f5bea494356fc014e02f09b3fef85bd80e6da8b6c771ede5701d0e401c354183b28b28b70eb63f83dde30c4171325dc442a8baed013b3ee61115c5188e1042bb709f24e1603cbdad618da14f953da0a5ad825bfcdf30585a0f5b0adfd311cb71b3297ac33056f3a50c464c4aa45ae6fee44ba43c1659f48c3a7fbdc07cb533f91886a078b4274d16ef174f608e75ef19d7ae3f8704af9f64d2505710db5baddc4b0a"}}]})
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) (async)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) (async)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x2, "d11ca8b5"}, @global=@item_012={0x1, 0x1, 0x0, "d2"}, @local=@item_4={0x3, 0x2, 0x9, '\n>H]'}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c", @ANYRES16], 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c107000000000001090224f40000000010090400000103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x0, 0xf, 0x5, {0xfffffffffffffcb7, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d)
syz_usb_disconnect(r1)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/194)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa8175ddbd06d58480b05"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="40370d00000056579902"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x28, "3b53ec3d8a23028150a405fad965dae1455b4f60a5c4163a846bb5613497edb04f7757b3daac0e40"}, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500254300510b00d6968b373010203010902120001000000000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r2)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001181000000199efb72e71cfd118a02ed66d5e6312e2851407ba64fffe5ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000f4b63040050bd31792d70102030109022400010003000009041400023c77ed080905e802"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x13, 0x90, 0x6c, 0x8, 0xfe9, 0xdb58, 0xe99b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x4f, 0x7b}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x31, 0x86, {0x86, 0x5, "cacbb1dcf94ccb5f5cc8504baf587067c612f70b14e8470835b012799db9374bd7756ea5df2431c0201e92b021cee8f0d22b77a10ff29b619b9a23c292a42837fd27dd602478f4648ab83ae37b309a22e31596931313e1c6caaf098b075624e1d8275a506a287f1551129165967e0ceab9dc34112c7dd98a8765ca83fd24fd2b8b1b1322"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000700)=ANY=[@ANYRES64=r4], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3, 0x83, 0x9, 0xfffe, 0x9a, 0xd, 0x1ff, 0x1f9, 0xfff, 0x8, 0xa, 0x81}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x81}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x0, 0x31, 0x28, "6610417f6d9c56bec730a3db123204a088788e426b3988fdffcc200586942339c751bd964aaf9155"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x41, 0x21, 0xb8, 0x8, 0x77d, 0x410, 0xfbbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x1, 0xbb, 0x31, 0xb5, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x1, 0xfa, 0xff}}]}}]}}]}}, 0x0)
executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001d6db940192017edc8de01020301090224000102400000010009058a32080000020000000000000000000000000000000000ce8e08481b51448269f45d6dd96773d1f612c8d1360db92c34cfc8e042feea00dbb55a73ae5922118a0b2800a48bde86844b5cae0abd6fd09b137cd060c438e0c91b72e66091c8bbcbd13c35457785a2a172d1e7508c16d88b17ecb092"], 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2917, 0x14a042)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x0)
read$char_usb(r4, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_disconnect(r3)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0xcbe, 0x0)
ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000500))
syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffed5)
write$hidraw(r1, 0x0, 0x0)
write$hidraw(r1, &(0x7f0000000080)="74690450b305eccd493b9a710aca3b5a5b32e5902b976a0e20706bdc5b92711b036e211b725fbe5bda8c8b05aae9791d6e2556ea46ac48b629eb83f0fe940e0739c45e7446df1ef8162636e751d804d0ed2bef6dae072b235bd5ee3b7787e973f39e5ee7c6c84bbb9ba6b65fd435a8eb63fa08d8a9ac290cdf226e6988baa547c250b4e39118cafacc7bcf6776a3b9f9cef00c", 0x93)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000004c0)={0xf98, "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"})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x4ca, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x9c, 0xc0, 0x8c, 0x10, 0x731, 0x2003, 0x653a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b8, 0x2, 0xe, 0x3, 0x60, 0x6, [{{0x9, 0x4, 0xf1, 0x5, 0x0, 0x76, 0xd7, 0x14, 0xf4}}, {{0x9, 0x4, 0x18, 0x1b, 0xf, 0xff, 0xa3, 0xc1, 0x9, [@generic={0x5, 0x30, "985d22"}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0x8d, 0x4, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x9, 0x3, 0xd4, [@generic={0x35, 0x22, "0ebfc46c499f00c6b58e76ad5b8eedd2b067805ec341fda0863b801236c74644d0265c38fb4bdd5a22b11aeb1d91823ea50d02"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x5, 0xf3, [@generic={0xca, 0x4, "ee793cbb8f4c5b989e149693ea8880dee9fa905ecd6269c357940f0c408b8582af48bd8483a1e86880f45d98b52d62f1a25df58267d0e2ecd7f6f7112eeb5b2ddf92a4b5c2a9f02cf2efe9adac4da53b0fcc2abd8ca88b641a259d800f403c6396e5c76e0c3fe349ff94d77e471f34d2d6a1d5eabf89f02d3620bd81a6d461466068c5e2c6f057d63a955fb978d94578e4da49e23d53ef9dcd1934a2225e490b1d1d3a42222d4dba8536f8f68a4886b7d42b963766d9b0d1ca8baa554123c2c1a4787571f8992890"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1e, 0x99}]}}, {{0x9, 0x5, 0x82, 0x0, 0x200, 0x6, 0xc}}, {{0x9, 0x5, 0x88, 0x2, 0x10, 0x2, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0xa, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0xfffe}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x4, 0x3d, 0x3, [@generic={0x4, 0x24, "9510"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7, 0x81, 0x40}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0x7, 0x4, [@generic={0x91, 0x6, "85c560fc9e0a0e52391c3bb9a6db4c69fff6650e8abc4f1f762b289f34bf675f9e068fe1fb1a62b7e97873b385bec3bd29ce1813edc3fca8bff94548f9d3d4bc4dd54786922500300f5de2faf04a85a1614b97a31beeb3c957382727e95c40452eb0414ce47624ac12e404cfb94fa568ebd4e65f86f64785623178004bc469bafb039894fafcc1b1a82fec52bd98b7"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0xc2, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}, @generic={0xa9, 0xf, "90873dde28c85e85a1adec7b3aeaa14c6c1174cd3f979a74321af9ad6f9be26d91bc1937d7d6fe042aadd8e8085f016ee3838306d50d9fa4225603aab15f0bcfe707c9fcddbb9ebe7ba54c973203973e96991d07fadda5589fee90cccf48873322ef7d5b73617413f2604e3c0433c16323c232343e6953d250f8aa21effda4a0cfbe8b45c44fc31086c909353de9e3a97ce816b39c58e7049aa7348a1fa4c925bf54ba7fe0ad56"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x5, 0x0, 0x6, [@generic={0xf4, 0x10, "e0c05048bdccb572ff4c986c92ddb157d6ad26fd250258595afd154202d00f4dff05b339eea05d3373df6c5ffc0263296f265087f76027a84ed44bc3627ac7ebf042d2be40700d5f0b5af46626dec40f65eb2141c8ead6b9304f06b4c70d69583893afd4ea9f218bacab5337f4dfcd5692ae76d99722c926923eea7db5dcf72727fd88346143fd7542bb6fff7f2244996b77bed99daf8dc228994cf41022706fd54a8e3263072e5c92d5a64bde733eb381a8f16ea16d3a11e5ccb046aa0042662ed0689d9cf97ca18fc666407c1467bde4c06fad90baa366cb4c257e80524bf82b50705ea3dec92e0c4f6aa8ecda2dad7668"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x34, 0x9c, 0x9, [@generic={0xa8, 0x11, "47ad5e0ebe3eeee9f7728592d4298782d9b45bdc472b6d7f4783b2f174c2e8329e9468975b471330af2e6b911d824a09a3a9b1b655b1731fbb99739e20396457c1c7194309c63411fde432de3f61d7325feaf018cdbda0a2da6572dcffb47509d8d8a2cb49917c50c346a99796662ad85eafcfd5a496c2e0f6c61d5d344c18ba74292cfa2da2ca792cbd203393973639f11666261a2034555d196bd02a3a4d7464c784bfd5e5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0xf9, 0xe2, 0x20, 0x9e}, 0x9a, &(0x7f0000000400)={0x5, 0xf, 0x9a, 0x6, [@ptm_cap={0x3}, @generic={0xf, 0x10, 0x4, "41dc3820026db7b9adf32159"}, @generic={0x62, 0x10, 0x3, "f406e6ff22adc94e513808b335877b72e1a0f2eefd395a4eed40021cee90788d8d9b414ceeb4308e859611731a0ee30a73506773f9011861af971602bbdc884ee59d6cd2d0ea9f797119b6ec3236ff3d8c383d77193430f93d18d270da907b"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cb3a70e10347246d51e66bb1ed3bd977"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x8, 0x1, 0x80}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x10c0}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "27e5ddc1b70bbfabb8e0bd01b99384f0ba9d7776ce1a7ff120835e161571f12ab01a40e8d2b7765a59175cbffce499a7f2ee6d68650adbceeda161cbb21a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x17, &(0x7f0000000a40)=@string={0x17, 0x3, "fa2908891724c54597a302b24cc0520c7ea2001546"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x200a}}, {0x43, &(0x7f0000000b00)=@string={0x43, 0x3, "a88cc7bf4612833c2b6e5deb7c48ebd40ec9ece655d2e17fa7465ea5b93fc1dd6429109c51d9b3822d7b197e49ae38af07a0e3a5bc9111b6bfc050cd900c416985"}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000e00)={0x14, &(0x7f0000000c40)={0x0, 0xb, 0x9c, {0x9c, 0x1, "3a80fff94497c87671208246df9a814f29e3cc9ae640633c275f179d3204a4bdf9ab1c7d4d448573e230ebd00779b527c5eff7f409a98669af743d2606f2472b766df99c27e26ef5e2ac697aa161889ed1a2bf6cafadeec761c02d002e11b353492ecf2f2e21edd9e02633592a19ccc7e5419ad64a4e4dd21c4413d2d0d07936942f67b2816ac0fc0c1b4553a6818e502f4b0922f8bedca4d5c4"}}, &(0x7f0000000d00)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "37aae1c1d69e09d9114ed1afbb665d87cfc141025200c7aa4a215da28a4a23cfb6b431137d7907014d83610f6c05205a742936a47c3a47582e689cc70d05fbe21fa21e8e04d03aa300d7a19cfbcc392cf0f7c633075df4c292e1625043c67a5893c5d0f59aa55d4c592e7bd9c7e974b6327e430a171e09dc5f1974d3cf0632a600f129f913176fb974158ea4b78a23613ba60d3318e1f5d14c3329426e0d33e712124238e2c91872724f05461fa5ad39a6d030adba798c0b7f9134861cfccedca21c1a50f81bb74ed16c1e523fb6eed10321d93b1198b473a53724936bc1632a8b3154b432e899efde05cffa9ea60246cecd81bf"}}}, &(0x7f0000001100)={0x34, &(0x7f0000000e40)={0x20, 0xa, 0xa8, "b9165755ea490c9bf80f549d59858101abea67593ded2dcc51e0becf9ccbf0a2470852927c25a7abec96d5f4f3b6bf599f01bad76e538e10ce4994d3db05dda952b9ba52a6c560b95ee90ed74877759c8a23f517922a5f6e747756483fcd670a8ef41b3b06a3c88292f1dc4728ceab99c8669e6ce34f5f85af36f05b51f5c810645dc0fb24aa4e0e267b40bced43b4515ef94ad427390145051dfea5ea923bab3da28352d6871aa1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f80)={0x20, 0x0, 0xd4, {0xd2, "27d029f15141027d9f147a65b67e1d0586e9b437387ff4763084bb85435aabcbaf3d5788551d2856d522f49ae4778af07b2849bddc6f029e5242f50191ed2dbc3cc61de7168eb053917f1bc19b92123a33579691ae13554a5ec249e8280aa83477dcca273041773aabb45ad6033420232fc8a29c2e0ca1b80f037418d9ccc810540e5e6e0096f0ffd204ad468349279e9f9833c6077178b0c920c56d8e068950a62190fcf2e8e996492557f0807ce6536b62c0753e0193602a0994d817ebf2bad5dcff0cf8dd95ab30ba06cd86f9e10d8504"}}, &(0x7f0000001080)={0x20, 0x1, 0x1, 0x9c}, &(0x7f00000010c0)={0x20, 0x0, 0x1}})
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="66d440000000004043552205000080715cb67e0000000109022400010000000009040000010300000009210000000122f6000905810300000000006f04aafeafa8aa85a5d83927745b63930f7aa8ab45385c805620805e44730be9b587066eae8b4bc6a02ce617f2a9a8ffadf165d4a973ac"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "c71a4713"}, 0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x0, 0x6, 0x8, 0x4}, 0x1e, &(0x7f00000000c0)={0x5, 0xf, 0x1e, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x9d, 0x0, 0x51c7, 0xff0f, 0x800}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x6, 0x9}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x827}}, {0xff, &(0x7f0000000200)=@string={0xff, 0x3, "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"}}, {0x97, &(0x7f00000003c0)=@string={0x97, 0x3, "6b1675daefbb09076be9f052f5be46d1ebe9a689842440e4a64ae966ec0583eeee91477896fa2717dde59aa90d282523c22284d827faae6456f9ca49e581dfa8afd8d216fa54772296ef93730ed86d918c595f32ae240c974d14998f9cdfab8267e6c02b5af8fd79e73693fbaa6bf5d4a1abcc816ec252c0ebb0a8305cc0df2afde8cc9c19328134e09d17a4ee0b0e4c1609c8fdb9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000480)=@string={0x9c, 0x3, "de7ee2acfb8ca2073971158801266d9b8d2a598f3fd06e4101d3223b9df4849f6f899873039d79b21c0132da664cbf277d01aaca56067b2020c97e9defc56ac5c87d0dc0e6f9aefed584f1ff54cf4d1daca7212899c73935580d3704c706e588af635f123cab61e2aa8025f84c7a376510f5f79724ef834b5748e00be172a22b412ebe9dfad164736766417739d0cb128134a60fe1c3a19494c8"}}, {0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a037fd1a67fb1882988fd5c7e35a1e30670af201f690e3792ecb6098d744bac4444bb1bee079fc1a41e64483dff7c60cffdcb7c93f14a62c74155608378573298b9196d7720f4f1084446299b9ae1d2d84d00c2d2ae071b32b6202796936d17155963360e1afd6695ae66d07e608d6daf3a8d85a45659adb20356bf2409c1f10bff1b0ca67200000000"]}]})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x7, 0x8, {0x8, 0xabb1528b0798117c, "4047bcd11cba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc7, 0x72, 0xb6, 0x10, 0x2304, 0x243, 0x23d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x69, 0x6, 0xa0}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="fd3105000000c15e9e77d1"], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x2000)
ioctl$EVIOCGMASK(r1, 0x40049409, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902460001010010000904005d12020600000724060000371705240000000d240f01000000ef2f000000000905810310003c7e0109058202600000060009050302ff03fe107f0e3d431b6bae2c50031f1c47096d3e48d5a91d95d6bb68f11cff3cede27f2d34732ae7de733edd"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079e84c1021040e003da80102030109024900010000000009047e00000202ff000b2402010401f705a4892b0b24020100e006e617f0400724010b06"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503c120"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x64, 0x7e, 0x3, 0x20, 0x547, 0x201, 0x66c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x4b, 0x91, 0x67, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1f9, 0x3, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4000, 0x5, 0x6, 0x7, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x4, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfbff, 0x8, 0x0, 0x9, 0x1}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224010100000009050202000202000009058202000200"/54], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0xcab4995275c5e336, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed4300000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000994730899112168"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x0, 0xb, 0x2, 'N\r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
syz_open_dev$hidraw(0x0, 0x243c2917, 0x120842)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0xe, 0x24, 0x13, 0xfe, "3390854270bd7c53ab22"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x5, "7ae1bcb87dd1"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x1, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x4, 0x6, 0x9a, 0xf3, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x9, 0x6, "4bf2fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x19c4, 0xf6, "90"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4a, 0x9, "e9c3", "a17af0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdb, 0x1, 0xe8, 0x7, "890d", "7bc221"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x2, "0035769c441836c9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x8, 0x9, "fd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x40, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xb6, 0x8, 0x4, 0x10}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0xb, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000300)=@string={0x15, 0x3, "bf1c29ce837670cbbd8c8afee36d379c85ad02"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, &(0x7f0000000880)={0x0, 0x8, 0xe6, {0xe6, 0x31, "ab6a8ef2707c246d3d4ec50d58c76508a7a2727d85b57fa15c1029d3efeed20ed7f88d07c5886b32fe06a037f8a070a834f429747d362e1ce1fb3c5e8bc304c13b28b736a830372beac5cb6bf18d9ad1a046a29c1103dba2776655d437c1f34779c0272dfa124d4e33a8a2224ac291a4217b5f9426a60bb50f637c4040997b828653ad23b4ffd946eeb2fa8f755e5003450ef126ca778ba6d6c18db8324959be8f75bf152a6ec3c91ded923194f5a49da49ca4c376cf181bcdac0964a30a51629a1ab2e3b462253eb949a2de340fed2a57da76b1df63c9eb037664b9459665847d2e0cee"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x10, 0xb2, "5958493446d0b001f6f7014b96a7ea33442ff49fd8b1912e6a646ac2f6ba86f29904e3337fbd2f997085f22a6ea3f115271745d4049ec38f4dfe58c22c4ac2669ef501a7592cb56488bb23525aa57c616327e018c2b3e388f24a4917d78a23f258d72c811b1920d676bbd0a1c143cacdee89c164b633f833d632a991ba2a12b2327489e48a1521a0d9c9dac4a95db5a6402caca895760aa4f198ed5c579f00ebd97eaa74af458d640eca9dfd4fe707c9a96e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "ddd8"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "73f3bd"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "8f1a"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "14f33b"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000) (async)
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x74, {0x74, 0x22, "b453f1f3cda8ecd6604349df37d2adcbd6f8a851fbf495b263cd307bcc636ed6ea8f06bb3d60775d8e1877b1faaaa473d64d965c6e4789dc5d9ff320dc0d9656ce7c9fd498e584647fab98102742e0852cbdba65a61f591cc124e9a19a490b5d255cee1af44f56dc0b6bee8279802410ef0c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x20, 0x9}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xff}})
syz_usb_connect(0x1, 0x0, 0xfffffffffffffffd, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x5, 0x0, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f7f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7f}, 0x0})
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_open_dev$hiddev-syz_usb_ep_read-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
syz_open_dev$hidraw(0x0, 0x243c2917, 0x120842)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0xe, 0x24, 0x13, 0xfe, "3390854270bd7c53ab22"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x5, "7ae1bcb87dd1"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x1, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x4, 0x6, 0x9a, 0xf3, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x9, 0x6, "4bf2fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x19c4, 0xf6, "90"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4a, 0x9, "e9c3", "a17af0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdb, 0x1, 0xe8, 0x7, "890d", "7bc221"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x2, "0035769c441836c9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x8, 0x9, "fd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x40, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xb6, 0x8, 0x4, 0x10}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0xb, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000300)=@string={0x15, 0x3, "bf1c29ce837670cbbd8c8afee36d379c85ad02"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, &(0x7f0000000880)={0x0, 0x8, 0xe6, {0xe6, 0x31, "ab6a8ef2707c246d3d4ec50d58c76508a7a2727d85b57fa15c1029d3efeed20ed7f88d07c5886b32fe06a037f8a070a834f429747d362e1ce1fb3c5e8bc304c13b28b736a830372beac5cb6bf18d9ad1a046a29c1103dba2776655d437c1f34779c0272dfa124d4e33a8a2224ac291a4217b5f9426a60bb50f637c4040997b828653ad23b4ffd946eeb2fa8f755e5003450ef126ca778ba6d6c18db8324959be8f75bf152a6ec3c91ded923194f5a49da49ca4c376cf181bcdac0964a30a51629a1ab2e3b462253eb949a2de340fed2a57da76b1df63c9eb037664b9459665847d2e0cee"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x0, 0x10, 0xb2, "5958493446d0b001f6f7014b96a7ea33442ff49fd8b1912e6a646ac2f6ba86f29904e3337fbd2f997085f22a6ea3f115271745d4049ec38f4dfe58c22c4ac2669ef501a7592cb56488bb23525aa57c616327e018c2b3e388f24a4917d78a23f258d72c811b1920d676bbd0a1c143cacdee89c164b633f833d632a991ba2a12b2327489e48a1521a0d9c9dac4a95db5a6402caca895760aa4f198ed5c579f00ebd97eaa74af458d640eca9dfd4fe707c9a96e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "ddd8"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "73f3bd"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000b40)={0x20, 0x84, 0x2, "8f1a"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "14f33b"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000) (async)
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x74, {0x74, 0x22, "b453f1f3cda8ecd6604349df37d2adcbd6f8a851fbf495b263cd307bcc636ed6ea8f06bb3d60775d8e1877b1faaaa473d64d965c6e4789dc5d9ff320dc0d9656ce7c9fd498e584647fab98102742e0852cbdba65a61f591cc124e9a19a490b5d255cee1af44f56dc0b6bee8279802410ef0c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x20, 0x9}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xff}})
syz_usb_connect(0x1, 0x0, 0xfffffffffffffffd, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x5, 0x0, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f7f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7f}, 0x0})
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x0, 0xb, 0x2, 'N\r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224010100000009050202000202000009058202000200"/54], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0xcab4995275c5e336, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed4300000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000994730899112168"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902460001010010000904005d12020600000724060000371705240000000d240f01000000ef2f000000000905810310003c7e0109058202600000060009050302ff03fe107f0e3d431b6bae2c50031f1c47096d3e48d5a91d95d6bb68f11cff3cede27f2d34732ae7de733edd"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079e84c1021040e003da80102030109024900010000000009047e00000202ff000b2402010401f705a4892b0b24020100e006e617f0400724010b06"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503c120"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x64, 0x7e, 0x3, 0x20, 0x547, 0x201, 0x66c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x4b, 0x91, 0x67, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1f9, 0x3, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4000, 0x5, 0x6, 0x7, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x4, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfbff, 0x8, 0x0, 0x9, 0x1}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io$printer-syz_usb_disconnect-ioctl$EVIOCGNAME-syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_disconnect-ioctl$EVIOCGABS2F-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_connect$cdc_ecm-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 6m0s
testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 6, 9, 4, 11, 30, 7, 11, 30, 16, 26, 8, 6, 12, 23, 3, 6, 16, 19, 15, 29, 11, 26, 27, 22, 10, 7, 9, 18]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00fa040000216c2bc21775c672938fdac23e5bd63299369445dc83993dcf6be304fcb49ba5e7b9edc6b71ab3f1b0a854eebf28a4063d93c0e4126f1a04bc55ee41e75a456c6db1a0a28900a264acac7e5472090e107919f6edfef11083c265222502ef945c921f62cc97e36de622aeb25e9731277e50a7e6db9018cc52350ddfcab5baef541b655b34de7d76a523a9865647a0037c49a5be43998b95416e79945ec6a56ab3a8bb1f84ca4c53fe6cf800000000358d9439f5951538e6d6b6e2a1c45d08d9af5231f432e83b95"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x1f)
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00130400000004030204"]}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0, 0x0}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000002c0)={0x1b2, "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"})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000007010902240001000000000904000002030000000921c43781cc150d00000001220500095ccdc10581030000000000aa948cce"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x4, 0xf2, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x3, 0x7, 0xfc00, 0x3, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9c, "049119c4"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xd2d, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x14, 0x3, 0x4, 0x7, "f6"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x90, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x0, 0x6, "4905"}]}, {{0x9, 0x5, 0x1, 0x9, 0x650, 0xd, 0x30, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x5, 0xf7, "c0649ac92426e5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x124, 0x3, 0x0, "9c8b08153b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0xff, "c77339d82737888c"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0x16, {0x7, 0x25, 0x1, 0x80, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0x20, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x56, 0xc, 0xfc, 0x7, 0x8}]}, 0x5, [{0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "edb97a8edfc64c138e19d93c4ce0307d7620decab3cf57f00b3dc6b3c586e668e71fc3ca58fbcdf3c0769c7865f589e42f41b9962db5284d359381a715757f49d7daee8936c257ce5f59be79401486c05ba20c3dfb4c1f4d408099cc9b5131355adaf4189c83b01e9260cbf746bfbdf07a53a8d56a174d09fdfa89568bf46a51a46a81320b77f0130358294812e3d6da01b52570b82ecc0af004322a899120bbf358a1397a78f616b97f3b2af3bf3a9b918bbbe3172ca7"}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "65cbb668a88a4a1a22ddcf8e7da77ef5f6fab85912322044ece98f69a66975c63f9cb6f97fdbed295e5fafa85b8dd320ec618a83f96b00008aeb779371dd3f2fce03ba12e4b1bdc654b154b05fc96a5518b0ffd629"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "2d955161d17bd24cde0f263c1728cfe05ea1a1e43383d3b4ee7c908f1a8ba086a9b43184f0e2c6325a26f3faacac468121e849e13d5cd92948130cbb2528072e148aa32ea3782abb54b8adf84b43cbcfdebe0dd61080d50f1867d3753c00d27c8e3a412cbfeaa8ee87c8c7c062ff6d1746f4139063059e63b773ef65ce1bfb309ed6630ed4818a92e893a46b5e4b434969c9534c6bcfb591a75c53da915fdc734c069d84a151bca5f53cc44bf956ab8a657f8cc74e5413a86768f2e40c33cdd44a15ca5175fa99b7173cbc90d746903e0a6334f9e2d4a7f6fef5d6908c11dbf6edaea2456b3216624c6994288126167549db"}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8a45eeaf566073523098"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}]}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cff5ef12"}]}}, 0x0}, 0x0) (async)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0xb6, 0x7d, 0x62, 0x40, 0x55f, 0xc420, 0x4587, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd3, 0x74}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "8bc17139"}]}}, 0x0}, 0x0)
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x1, 0x4000)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xf0, 0x26, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x4, 0xd, 0x1, {0x22, 0xe97}}, {{{0x9, 0x5, 0x81, 0x3, 0x140c846443d9c035, 0x3, 0x45, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x5, 0xa}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0xc, 0x8, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000e80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x70, 0x6, 0x7}]}, 0x1, [{0xb, &(0x7f0000000ec0)=@string={0xb, 0x3, "6760374a0173fbea22"}}]})
syz_usb_control_io(r1, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x20, 0x3b, 0xaa, {0xaa, 0x23, "f355d9a5a81565de623384b7ca9f7d26bba5a20eca123b9aaa88d71057b812976447cf16f4bed1b8054d918390abb9ae25daf399945f7dd30febdc0f79ca7fb704b993e96b445881d85e6935d03457ec35295a9aafe3760bf86107654fc83df18252237198dea41508b98ee81c5a688af14f75b2a3c08e91346340193c43d2d6f51a1bb2e1c45f228168fc799ff01e6c81bcc6e1540cef8c64f5624bd54d1516657afdd11e7f67a9"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000001040)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xf1, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x1, 0x100}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x7f, 0xe, 'loNr', "ba04eb5c"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x56, 0x82, 0xff, 0x5}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x20, 0x16, 0x4d, "dbf14b84f90b0eed50e2c39361cb552be4168a20657efb92ea9f9df1196821d6bc275c5acdc4ada763a24b083b124f493dc27cdbb23d6e5296d116371ff73406b8af6052a94db3e76e71a95811"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001340)={0x40, 0xb, 0x2, "bcb8"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000013c0)={0x40, 0x13, 0x6}, &(0x7f0000001400)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x19, 0x2, "da54"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xb}})
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000d00)={0x3, 0x1, 0x6, 0x0, 0x6, 0xffffffff})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x9d, 0xc3, 0x20, 0x12d1, 0x7ef3, 0x5468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x10, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0xff, 0x6, 0x3d, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7f9, 0x400802)
r3 = syz_open_dev$evdev(&(0x7f0000000d40), 0x5000000000000, 0xa0000)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000d80)=""/69)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000080)={0xbfe, "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"})
executing program 2:
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100157993310d80408fd6135010203010902240001050940190904ab07020ad1a5980905eb02"], 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x52, 0x28, 0x91, 0x20, 0x1bcf, 0xb40, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x24, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x0, 0x31, 0x4a, {0x4a, 0xf, "4f6ca027379237e62c5a1c5cb5dbe121ba0ebba731893fecb0119ed5604325dee65b599eb9e9a344c6bbb1c670bec7a38797ad6eabc5c5eea4482051cb176f39ee29164e56caf3e6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "abae5454eb84f63d466b93133ee42a0acd96ec900a44edd2051638ca66ae81a34f8b19b8c5348d3212df92f837ad39140ad151a4272b884247778c763d97175b20790dd106ccf485435d019a28f19057f009118d4a62826bdc110998abb3f539d8483f59dda47c76c15cde78408f3c2d9b90b1a115adef7e60e1fcacb81547eeed389bc6ba7a9b08bd"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x20, 0x7, 0xa1, "f8aaa4568767ea5ad52845a1b74382e9891ddbbfa6345b537803a9153fe1f3bf497ff00f2e333736dca41c49b0ae51b31523cd4b40a2bc5a169332108f8a6decb595e485e3efc5f1bfa43ba7d07fc62d16d699b5359e3342c05251d2fdfc29d2fb07195fb7c5678b6de90d6f8f507b24d0cb492fc1c1d263d62274627bddd596d09d1d65823ca868331b0c13284876ba9ae41d5c4bf4053a16ed53fcaf25ef7ced"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0x29, {0x27, "6262a89df589279ad72ffb3b5cf9437f8f7041c6f50b15d41aa9cc8b16d5f415fec1a92d8e2986"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xa2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xb4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa2, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x310, 0x7, 0x5, 0xbc, 0x10, 0xa}, 0xf4, &(0x7f0000000ac0)={0x5, 0xf, 0xf4, 0x5, [@generic={0xbc, 0x10, 0xb, "2e19b204961d8a997dc85add0a1694db7dc87741ebf983a215748388622306a6cbaad4b5f68346d25d27b367070a1a6eb8bf3f36a97cc0910ab82d9b846b5abb7f93daa98fb1e5c876ccb6ad590949fafe24766278a7e03903d0c6bf665890342ca5c211ba14d5049201178ea8d45fddf6f84f004358cf4f1401dbaaefdfdd1f384a9606c6f3a43cb1bba5413802df22f309bfdf0c0bcc143d82487c1ab3bbf7015009ce1143ac7bff6bf3d616b818dbbbab256568e0d7ad79"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x9, 0x0, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5, 0x4, 0x3ff, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9}, @generic={0x16, 0x10, 0x2, "93208a764e12addfc0fadb859a21031f116ac0"}]}, 0x6, [{0x33, &(0x7f0000000bc0)=@string={0x33, 0x3, "005748661dfca6b3f2ad18cd6440121ecc72a6dba1cdafc5f9f8e462d5025c5c453dbe92a1073d246d867c9913ea1b3096"}}, {0x5c, &(0x7f0000000c00)=@string={0x5c, 0x3, "8a8bc11d9bd3e7ee230a5b5eca4a19f8bec0df0351f2341a7d61f63b5405bc68dd96be1432b2bd9ed0331779b44e3485f2000a7233acf3819b4d4dd7f9cbbf95d6b50121cad5e6afd6a5a15dbd6a88f166dee1487c80ae81cffe"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x430}}, {0x7, &(0x7f0000000cc0)=@string={0x7, 0x3, "41aca2674a"}}, {0xb4, &(0x7f0000000dc0)=@string={0xb4, 0x3, "b450261cc5ba5651ba0cac732314b962749290ee16aadd59dabfdfc33dd807fd2717d955f3092895f752947e78ae8a18a9a03e0b8fb3fb14ecb9f87d1afe80bc700403afb98c957bb958039eddbb2b7ad2ca2afd17aa77c80a76b63c9c096e03e831b21dfc62e9b578d30e6acb47ffceea20a650f58644ea9739cd265b2e4bcb26056fc1ea9b3fc5d831b878236cd844a69e5aae060345f3f0f531c4712e79a65b1c840f633210576f504610012a751fcfee"}}, {0x3e, &(0x7f0000000d00)=@string={0x3e, 0x3, "a59b21887c65f41345f2125a57501eeadf58223c8ed3f84828dd14a3e5d3e80063a0dba49648d51e42220d7d953a249b9ca5162f36d58a622d9aac7b"}}]}) (async, rerun: 64)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0025060000000f619a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0xb8, {0xb8, 0x3, "34b93d382396cb46d8cffa4f94d24a7d96a40115683ffd5c2b7cf85633987e01ea3038a27a71f4912cb04444228436fb631d295903b91431a6a245c891511d98ea2ee59b8d2c7c81c24cdef4b51c8c3fbc7d4cf410e8ac4e355898404bfda77d7e7515f618648280413a77d8f062c73f5a822ff8f742daf49aa2608d307ccbffb7b5e374de3ef8fd32875da2733a3ab8b152a0a5544138d150211461a19dca3a3518e4d74b1537e66fe625962193148ee8573589ecdb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "b541e65a0f6d603dfb9a05be3c4314ceeb66f924601b22b9b59e29ebebd4ca5011ac565b7646cf212c03ff35c9733256f4b05316885316889171fc372a7e4b54e5d14fed98eef11969ac0c1fd49371c15ef290d63404e7f84c89993cd9baf3c88c41ff2399a36903413126863e990c91faf44036f434dca0c9fdb90993acf87086f58b9c555cf3da73a137f30cb107505564e20e9de2dd6a64ed361a94d38bc8bff8c02113cb74186b4e49b4a21e526191d0f0181559b96a3e62651ea6ef76184f316f4c8ffab233fda4e240b1adf3dd6b5cf47055df8e8a0fb99d996033a76e7d0ba323be33429da0"}}}, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0x75, "ec704fdca580779fa321f3f8510c019797b4af863d04786bc41327e9f20c6434fd0c6aed46b28161e801fc278c19e2c52fa139b077dd8a217f30057519ef0516ae91d52c8cf79092258298c222c04ef8945296ad7641d1d8ef093bdc4c46356ec40ec62043d096ed0253dbe5125002c71384014774"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0xfd, {0xfb, "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"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0xfd}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, "848166304fe2d781"}, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)={0x0, 0x11, 0x6, "437955b79e1c"}, 0x0, 0x0}) (async)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0xc018480b, &(0x7f0000000080)={0x2, 0x100}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=<r4=>r0], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0xfffffe5d, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0xfffffffffffffffc, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0xe, 0x36, "177bda62a28a952457282f74299b1c80a9107088ad1a5a0342a63108f8e7db70a12e766ac8128e411f376d3877fae41e05e1226a3d6f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xdd}}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="8c701483929988042b55aad42f92a5b0d2b36c59ba3dee0d22ddde7234997add0f9110830c8f5c76218dcab04ecb0009577472891d05d3170b23c2a6a477946c940000007cdf45043d4d417f346bc72e62000000000006bb115c55153451b6153a095ced2615705a538474d33da2dc769299a2f1165cfccc92ff883389fd81a1379863564bba06366fb9f07573c419415e312dc81168"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x6)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000140)="005bc0")
executing program 4:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007a7918085f0500a8ffb3010202f90902120001002d00000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x11, {0x11, 0xb, "be35c5cc77e716d4d27c1db17d5dd6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="0023630000006301e218e0f2e853fa03e45cc76051cbdc7f8c5e699f7b2a49b49bff4e287d4b5befd1d297a86800000000000000056d9414a9fc5d274ac25f73f50b6982382f2acd06764b382a75e2f8b5a585502d09bcded0397b3bb9379dc6f1"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000900)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x9, 'N'}, @global=@item_4={0x3, 0x1, 0x4, "8a08e489"}, @local=@item_012={0x1, 0x2, 0x3, "a4"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "5929f4c2"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xd27}}}}, &(0x7f0000000c40)={0x2c, &(0x7f00000009c0)={0x40, 0xf, 0x3b, "ab514dd2ba3ef886f89fc5b18b96b28e6c1f160f1652ada0f459f70eeb4cdad7e43ecfe8be3354c27690ab3955cb276f427517f5eca7b894fe7d1f"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000ac0)={0x20, 0x1, 0xff, "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"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0xa8, {0xa8, 0x10, "7b67904d936eb6cabbb1fea1032aee0b8469597916d8f3a0807badcf082b2a9fefa15c95c435741cf3e83a2f59e4ac87a8f79fff7412e77ae294f9a2eb9b80e5cdebc18f729c8b7fe55409e45eb55e8afbefb3e5941c1a6531fbe5aee5a2fa89270a6d703f22d3659738c7bc8dba484186fbc7858292e4573cc9621fef890741d92a6cac2aba4ce6874e4830fee9e08d29b7aabfc2fb65938a7e96c18cde244756ed22cff114"}}, &(0x7f0000000100)={0x0, 0x3, 0x95, @string={0x95, 0x3, "b822666b608b016dfec2069a0780a280fea4f47bd6c4987328503cc16e75b8a50963fad03c1a88f5d6d162c2ffce421f71f271068a1833ffc224be3bb3ce32d7c13abf30f2ce5bf60ae1de76a172a5fe3f88cfc17c48701447a38a61299788ce3e67130b24f49d3dfa009b746c3d2c7f19bae5f227fe0d05761e78d54bf8ba56de530aa3342191c2e7231dd8877eeaf377ca99"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000fda000000050fda00040c100a056000000000f000000710020a4705009d1003190c85889522ba072fd0431d424b8ab0dd97dd89d7e253858177db44c88a900c8f33cff9b2813c206e44ee6d4f5045393fdb9a581fea7660a0339da71b7ee24b1aadf9d05857d30182d5f192d561e5ce9bfbd5c73643930faa8725b5ba34f5749a4c37757a66680fd98456012a07e9f364722a922f94e0d5c5e4292c579acfacb4cd755d4288ff428a3379ffdb2e868d87a7ccda1b8cbc213213251003446f476c583ff042367c18fa965980c273e271034f3200282eb5e37dedb3ec14f490"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x9, 0x5, "37a13c9a", "7e8e3e4d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x2, 0x6, 0x0, 0x1, 0x100}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40110fe90000471807bf468614254d01a001e83bd987"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x2, [0x11ff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000540)={0x40, 0xb, 0x2, "93c4"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, '\x00V'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xfa}})
executing program 2:
r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x73}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x19, 0x0, 0x10, 0x40, 0x4}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "04ac27faf02d5f6d0a1d92dee631fe277f8611f0f83427cdb66c43fb97e7ad3844ac5211210d27d52f6f4b175636f4ba54b2049d73"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "2786c5baf1f7960cf8fbbef3f4279bfc972c998fbf4f28b2e76e0370a4f53730328359d3280f89c1d09a83155ca650863bd3034dac542f7cc7341ae4bfb277a64bfe9f5fc24c2682138ab46584a1037629b156e40cc37277826816c9b61916e727531331374d0d55d4"}}, {0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "1c6393f12beea013e57da95dbd983601f368e02c55533f678852cc78fd479ecb8463e0cf2dd397d6e4868955f6f9d3f7622cf3ae35906830d5d2cb8e894423370880238c55fe60846c8ff52bddf5706bee8665020cd148e0c64787242e4a90f28b0a1c7db69d39dd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "755ebb398a7340fb4b04ca579673d60967e8eec832dc785024fa7f69066a5ebcbdafcff1d8f12647ed755d849aa39be73deb04bf16ff88f7de59bee4640d140df3dca9fece989e50f41c1cd509775e2b79a1c04bdf7af4fdc672c6a069652aab6b710ab869298199021e292b095825abfc30391f98b4a8b0bf7f12"}}, {0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "c61d17c900af82b647f38386cf2dfeef3b6ae156e027e101a24079d1c4c0644ed54871ea4bdfaa028a10754aada15cec06df313210efb3a0043adf4a72e42fcd11a099463019bcbcc8b093722664b25be10979e8ff9266b052caf09505da3f0634f7dabaf3b6b8bd96ec4873201f5e66e228a74a221f4c33005066a3880e01853c0fa190a38f79e19dcc8c1d359543a7f65c66283ba09eaf12113e6571011c28c7ecc890072b588a1b52c95a2c417a6d71f071ae190e725c4b64920932839e4fc2e12e19632c201d1ad6c48abd0be49426feec10d0cc8405e24c8c04c90d4e24"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x57fd0fdf005028e8, 0xce, {0xce, 0x4, "171e53901ddf9df3c7461894739ba5e71a0fc61ab86f856c407ce81e8626ebe8bab602b058c3637a6b18b0c16516fee7ca570094689b819da0661313c5e74ac2edf1f8a0fb4bc92b57b42379680588dce3c09b9585b21e640bbeb282d3867fc9a95a4db7c68d1857863ed4ec6642b6e65428f6062ea748dd5863517351f497dfb0534c75b1a649b1f9169b1d93d2cbd5c983573bd41c12f3271af98573b5952eb911e4cad310263239f3ca29e2d24a19bf89fd561b894b58588532094dfa86414fbf2e4e4cb551b7b8353d3c"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x41, "385630a394550985ba269a440c8050e716e39b3ce4588b992c63e1c3995f0e3a9486af25b87ad4df17d01957219b44d87797b1c2ee775bcba2b3dd46a08c51f564"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0x1f, {0x1d, "bec42e60dcd16424c64b92a5bf2b88c58733bc2b3fd30d8c550a9094ac"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9)
read$char_usb(r1, &(0x7f00000008c0)=""/187, 0xbb)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfe, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xa, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x10, 0xfd}, 0x4f, &(0x7f0000000a00)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xb, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "63bb62157f21d763b10227985c003893"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "52111a6b120be65a7ce5d4483180e1f1"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x5, 0x1}]}, 0x5, [{0x8f, &(0x7f0000000a80)=@string={0x8f, 0x3, "85eb8e8e86dfaba9f5e15d13b8993c4bd33b482457d385f2ab8445bd2e30e5623241aaab94d5e34339d76bdac116d6c3aa3ccdeef261a2d489ccc5340f4e06b8c1bd3293180815a0f7aad4f0bb699d8290e43719f34dade4d03c7a2755b175f4164308e21d64d0e7fc51883e524b5854b36011a33ecf52b6475bb1e4a9a1c1ef1cc66aaa4fd6853bd3eef79dad"}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "483bf32855ef1677477a22ffc36e1b48a0aaf1730759548c9a5115c9aacebea65b5c9b6bb0c56cb8ba87e1bef64444136b50d1eae20eb06adeaa47cef3cf80b98b1f68cfe0a59a6ba83a9f82684973fa2cd03e70cf542ffec2c98b9f218f04112d5c34dc1ec6ae134336117c187ad44841d2bd6d89ebfd6382647a71241a8d2fb1745315b99cd6e9c8efea69c229d1f89b40bc124e1da33ea30048091e99b18d5bc645b665b45e9fdda053407d573f8d7046d387c8bae0c7ba3b356bbd6edc476879ba3e2d955b7c6dc30619f378f180f14f1aa645fde6616214f6e83d7cb016e4f41d2aca18f5347108e16293"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x812}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "926324e4c11676fc3b6cc88a4ac9ea9f88c7e652fde9bbee5638c08b355597738546eda416fbd745df5856f38b691f2f8ecbd7c5827598ea793a1be01b08572410f76b2b35d785303864a4fb9e58cf9a735caf33d47b5d2d1d356c63b429970a38c3d6efc8d061f4fde0fb03b2e88b1f66e0584cad917f1ff3c07442dc56b38177b03adb9211b4ac953e0348198f399c3e0e7ded7785587e977203faa5d3f7ab7031717a3edcba2111c8bf745e4f53d584a0278f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0x8, 0x86, {0x86, 0x11, "200b8f244f6be01d6614bd542df3c7d6f7ff9ae9d78a3cda817b9f553f4b2cc816a6ee2b38a86ba61f4326cea0aef2c08f89f30d0e52cca04cc9f83857cc4a6fc69b7b9b301c5f2859f40f1d2ebef99f5ca253df8b96339bd60e66873d7e3b70da7f82037c44c2c114f9c871cc5b22603910f03a062be0531517cdceed9ed94cbf1feb5b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "d5d798754cfece4f4a75dd0a6d62534ce083e1f6b46670608c0919ae"}}}, &(0x7f0000001200)={0x34, &(0x7f0000000f40)={0x20, 0x14, 0xe9, "ba41e0ab01316e15585f3ec64f1c0fae8d1c203a32381c9a8956f9bf008fd432fc9dea061cb9c4bc6b54d93822926cc985799117196c10fca7252d1b3d99fee52da383d4466ab32f662072b5a375924884b537648f80936ac332629f5fa1018d947b21b2ed4498d739d7e15da53b290cb936c0c1532cc4ea3ec92638e76d8528f50bce774c6bef2962c07f2d0ab80546efa76cae2f6df38c474f78e43d91424e64357bf8d69a5ec5b27df97627725a9ad0e93b0704f7a1ef02df79be708b8b80c480eadda6d6b7fc374421e240177d63db082f3a9ce83578aaf0dd8f768265b87b7eed7190506a664b"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0xa9, {0xa7, "2e75f1a6b5237d9ff46f2455f4c5d01dd49391165696e9d0ab82c6b3e3ae42d978e12f381806b12d17a65e6ef31fb98e5e64fb2d2c01961146b6508e401a98720ea58647956190b255ee0834e05e9b220d16404be7714c0a642c921744ae85143229e652e8fb062de89f6a13a51e6fc8a0a2a7ba90c730b92f30dbbc1d30b86e54609fe0fd0465a7f232cd6aa0a55fdaeff75bcbd47cca8f6f9edcb080960536988b761ef4d040"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x96}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x10000)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000012c0)={0x16, 0x31, &(0x7f0000001280)="79abfd285584c61adecad8f313a2d0a17071ea5bfcdae9b22db102bc27ff3c1ee054ab9b4c9ae94479847a92cd80712b6c"})
syz_usb_control_io$printer(r2, &(0x7f0000001440)={0x14, &(0x7f0000001300)={0x0, 0x24, 0xe5, {0xe5, 0xb, "65912c4035cca106909d14b1fe98de81b29be0b2c4a14f2373151c99c0f633458c94068d2cb446a20a0c04749903311221104dd87f051351af0f123394e7f7bf1edad8c09803b7052951f80b959aa86fa4ec4c634f3994df041b416021bb059dfb182fc83076dab62eb137d6e9f59827720af191e7cc686677967dc05e42ca11c5d37b1888f641f978009fd5d9520b16a109bbd90d1dbea2aa07a58336c387dbdf7c3dcde829eb314d93668ea1ae14e8f2fb3d16fc762a2c2b4469c7a4a671b10b6b7912130baf2784797475c073ef7c9e4a05fdcca8169018dd988a69ce75f97c29e6"}}, &(0x7f0000001400)={0x0, 0x3, 0x6, @string={0x6, 0x3, "16d0a471"}}}, &(0x7f0000001680)={0x34, &(0x7f0000001480)={0x20, 0x18, 0x39, "34c7b0910f1ac596389860ff2ad035a8a37e68386d80566287746c57b2307d0fbfd7b19a331189718f2b5735295acaa26186ade92b5d7e1960"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x7b, {0x79, "c3ca26bb36cf4e048157e9dcbc903caf6b51af594eeff9fc7ad2497e56b27d652e9388519b903233e7be8faf2457897693c45da3db4d40f7ed267735b2c0e51896182e62c9f629eb6bc8932328ace8e09258d3ddb2458264cc68f196b99cb53ce4bf5f06b9a9d7f045ed4a69a64ba71ddf75a3b9b26107c397"}}, &(0x7f0000001600)={0x20, 0x1, 0x1, 0xc1}, &(0x7f0000001640)={0x20, 0x0, 0x1, 0x5}})
syz_usb_disconnect(r0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000016c0)=""/233)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xeb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xc5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x0, 0x9, 0x3, 0x0, 0x20, 0x5}, 0xf0, &(0x7f0000001840)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0xb, "033d8ef96710613aa6e8188b1d543f0bd5ea371101f3e764be7a704d565059e76399ddac8d02843e4f92f336691e43ebc50e9296de5f200ce98cfde268afd8582b91e9c2655c8795903daeefae318d46ee768fca8c2f5d5a0bd4b859374386628f9d45cd68c37e06c214803cb402dffad50e90504fa8b65cca81d4f12b965827f5a747b9761fcfeb95345268bf53893c7e00f525810f46ddeb7228706c1dd6207f1aaf941944269c5fea666fd1983d07fb02149c5b9db2383040"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf6, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x401, 0xf, 0x1, [0x30, 0x3f30]}]}, 0x1, [{0xa0, &(0x7f0000001940)=@string={0xa0, 0x3, "2ca7285b870424c2b4442368290c65cbe83a15b07a5b290287cdf5ca1e56b646621eda905d52b3fb16244bcc226e4fb4eb361edebb7d14f6d5a80229b42efcf1f5e86a5334af2b3309206812b13619283171cd0caa255e96bfc74224f242d10bc14a3bdebb982a6aa651c077c5c6525c395a4912c99ca7fd9edec85c8181c5811a0cd7acd45e2a2d0cfd069e273e23a028e2d1a7ac4ba1acfcbafa0e60bc"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001b80)={0x24, &(0x7f0000001a40)={0x0, 0x11, 0x74, {0x74, 0x8, "09d93065764f928fe6c56976477eb85ed8228bd458f1e4c41c699acb25056e9bddc11c2a122ecb1e24ce827fdfe3c30dcc3ae01097902b7072caa0fb9729edded74acbacfbcc110d1659a7e835e68dbf34a07d08fdaee775ecd09c05d8553faca814f9dced785dad1a7752e101c638e5ddc1"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x306819ce65c8691e}}, &(0x7f0000001b00)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0xb, '['}, @global=@item_4={0x3, 0x1, 0x2, "f0bc70fc"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "b35c491b"}, @local=@item_4={0x3, 0x2, 0xe, "63eddb25"}, @main=@item_012={0x1, 0x0, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x5, "0558aab2"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x90, 0x1, {0x22, 0x341}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001bc0)={0x20, 0xb, 0x59, "ce99b857f788d9258bf75ed86dd23792e7b49c8f7e583c3b6972350a607b53003bf69eaca3d8c330c76ecc7d56550f574de8c63505e48fdaf9c016f8d93c8dc9cf2e925ea4810e80f12af14b48d676924d89103a0d5bd7d8bd"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001cc0)={0x20, 0x1, 0x98, "ba69a383bbcc78236ac01e9b343d9fd0279afe9761c23d44976ca1c6584e6514caccaac928eec8240f6bafb25efdcaf24b906d883c49c930a72205aafd01b4084c238466f496c1dc69aee73e9829a8fabbcc8b0c4c98737196bda153c73e7d3977541c0bd64c02b1ddb729e315c1078d57f14ca1ad5ad467afb1aab9344efddecda4702bc99ce2c3bdf4047273680a9a875792b31f4bec2e"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0xc7}})
r5 = syz_open_dev$hidraw(&(0x7f0000001e00), 0x2, 0x400)
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000001e40)=""/85)
syz_usb_disconnect(r4)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001ec0)=""/4096)
syz_usb_control_io$hid(r4, &(0x7f0000003140)={0x24, &(0x7f0000002ec0)={0x40, 0x9, 0xee, {0xee, 0x11, "d810b24dbd1006e7e95c992f30c9a1e005c2fe55251ba15d498681f1eed38587c8513e4c58072dceebd5144d3761530a716201bdd46e844b791124fa60e1dcd9c022d0d7fe0a9d2be452db05c7a133055a59d94ea186e6cfadbff7dea180a9d19fde4778c3a3a193c400dd9cd8c9d649cf979e36b824fd4deeb923a707feda6953c8e3b05bf2a046e9a53617f74ac8eea735cfcd4b712e088312b596fda07f54e2857cf92bdf1352186af4c8ad230cd5355c728bf389027bfa017d35d2279fa63a25ec8f456bcfff981a821977fa8e384ca869b7e471d8f81a6145727e4cbb3dd41119eef5587f6033c57fd7"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "90731f65fb66a2687926e0beb74c3f944c25a97100e7f4df2411f9727c2e5c27aa47453472ac95664199d498a2feab418116fe901bb94d00214ab1b85c9f03de1d61959940ce63d3d065ef46f7774ce4adf0cb8d0200e3effb1fa5eb8ad2272297996224871bd8393f2ab3c2e38a8b69e358ee8063f1ac34749a9c980a242c8d6b566be283c23cc8029fadc373c76eaa91d5e2cd24c6c4a63d1f3872d3a8a392429008c0c7a152a4e66f286288b7502af0ff00746d76d90584c6bee32125e649"}}, &(0x7f00000030c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "8379"}]}}, &(0x7f0000003100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfe, 0x3, 0x1, {0x22, 0xdf0}}}}, &(0x7f0000003340)={0x2c, &(0x7f0000003180)={0x40, 0x14, 0x3e, "30e5a77cd067961b912d695e243f23bde70771f3ddace95cf2d49bcf195ecffe23df6f7ca13037927b4377ab2e8ab1f23a9cb4291c8091f6d9a620bfb5bc"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000003280)={0x20, 0x1, 0x40, "a89b923deeb381dc75a2b92d2177693c2f81d1aae5d5f43da2c44df27b2b5d417b5057f92beb9c1ac3e2a4746f44ab38d5e456722a6e0434d36f5a7d64c4904e"}, &(0x7f0000003300)={0x20, 0x3, 0x1, 0xe}})
r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x6ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x82}}]}}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0x10, 0x9}, 0x118, &(0x7f0000003400)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x9}, @generic={0x8, 0x10, 0xb, "82053ebbbf"}, @generic={0xfa, 0x10, 0x0, "c12cbd5521a3cb6c56801b19c91fc0d445cda708fc7b1005116466c999c470c15c7c661fe510226f0ae06150f04173257d77cb95cd856261e6c277ddac51355f3bf56f230aec76d0005fc43d162d362bc5cf34ae1b5422f7f502f3bf04780771993399fb7264ba7f2f1bfbd38ebf40358ef174a25e80c86d0f85a3d2adcfe3a5562ea0535a5d2b23d90368f74a315fe863c974d4a2118983df65b5e935b96fa4246ba1e47ceaa5c018b3ddccf8841126b86fb7e7f6eb84c70250361c215588f6c6fc7759a59ad4d5b48726b06c1c04a6e91639aaa1f77bc3664f4d7d558dc3072d229b6ee6b311718746aa437b47b024821675abea24bf"}]}, 0x3, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x23, &(0x7f0000003580)=@string={0x23, 0x3, "0d34f8795773d383a5544ebac6ec81e179fb93cfdecb308074fa7182f1908b7716"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000003640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xff, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "37688532"}, {0x5, 0x24, 0x0, 0x5a6f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x7626, 0x818}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xde, 0xe1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x7, 0x1, 0xd4, 0x20, 0x3}, 0x9f, &(0x7f0000003700)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9b, 0x1, 0x1, 0x1}, @generic={0x8f, 0x10, 0xa, "720eee737e1cbd02a3144bc5cbfdccb98d0a02f972532964b07ce173bc885ebcee2fc1fe8057285a7838a63d262d22e5f6d5c5f71ac152870fb68d1ea21a3d745b19ab37bab05605eacade7395081c3e9f5c923ddc455a7d4bafe0b1b9a718d9c7514a30a8a98c687dd49dfd1c928d2819367ade0bb44be3773b3c8345452beede844ddd4c9a119b9f556239"}]}, 0xa, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf3, &(0x7f0000003800)=@string={0xf3, 0x3, "1fc5c4c6fefadd890c5a0b4b9fe355e81c97fd276630d3a56c7cc6472fc44c4a839850d38c12fb4ad31f6c31d3be5eec15dd757da5cd8a9e9b585b8f4a2107d03ac7b20503bb3b820b62d9600567af27fa8cc7c629d05a893f9db7f2a95f447f68dc6269032e36225111dc563a89b928122cb5a31d300580f0e504e85f6d91dea888b7bba759fac376232d608ea84dc00ef050315e5a6f4f573d871eb035f9f1d919ea03b0bc7265eae693a3cb69af67079ebe0eec215f00939c13e8cbb76d80e607cd2d8f9c858febc01cd77604467433aba1694ac544083fc77fac0882982edbf667b2fe4f10fc77fd8748b777c0d067"}}, {0xe3, &(0x7f0000003900)=@string={0xe3, 0x3, "469d49976439c64fbcc02c0764ae7d1ce6f395a9a441d9e91ffea41fd9365274b99de64ffee0fedd1a39919f21004c28a49b03c9a004e54d6b08be288b3bd7a66e846af93d7176efae8fc4fd79cb0cd7150e4307cfe063688a5d273fd2255a882f9d72b45298c46bbc245fc1587f22f7bdb3537020179209397238abd0c791e7635c9575cf06cebca28d70e520199b37cf4795d930fa09ceda1f61cab11519528f9087e85003e4a4999f339dbde076eaf01e49a1fa98680ca3dbcd272081aa531efc12bafb76d9e2accbb79b94464329485283f906aa015b4ad32b82891c19f35a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x444c}}, {0xc5, &(0x7f0000003a40)=@string={0xc5, 0x3, "064da2c52df740ab88dac088532f0def247c33e26dd24c40d1391257763c97959a60dbbef27de5fe0a6c1731f22e8cf1b2ee0fd34901d416c56458226a8916032d60b5bf16502b2f86c3c5fa1df59e4a4437282ce3d67ec4581f54a29fc7775aecb4af59d7c2be533b49a1609dce2d469006196a818a0b3cef997ded0398245566b8a9ccbf9d37a8c0a440f7be7fe552ca6220d0366746565684f6d0fba353a3e3ae2fb4e201da8d1b8fa34d5a9dbe69c16de2ed35c0452bd6ab59287db718d58d119b"}}, {0xe6, &(0x7f0000003b40)=@string={0xe6, 0x3, "4c54c19ac065840a4744795ee658ed41c8502243a98a8a85d889404e239752b1639bd4dee3513764732ec94269fdef096eec287cb43a45c372ed1e117576d959c71fa96560291586dd4d55a4df4c4ba875a47ab4da7357dfca628a671976119eb6f03941b1168528b8f59bf477d1da499c6b8a531eff20bd297641dacfef2078d95c3a9803c4d4d3db48369f7d3ec358adc7b49fbc61d0f3ed5a41ae26b32b8df6842987daac16bfbdf8364b13939d117a146750050e1beb133925afbeac5a732a3a94b85623560dddf24c08a8adbe7a51e1524462f80aa78aeece2cc0d51cb5b25f15ac"}}, {0xcb, &(0x7f0000003c40)=@string={0xcb, 0x3, "c2274ea76d2658f0881de08c1d186775d4770475b2cd9829cf89feea2b4ed740477200c5ed81861cc570b382f23f877bc7fa98e97efeebf77b3b88ce14701b72e9351eb61e29660e53f10cb9fefced6f34bbc3a2736307bee48e4df22ec953975202750661785a7ef366524723409fff76fb96f69f78b5584b5172a1d45c1daafec77444628f4ff34b81a7d5d6f859ae710a7894fa22d336936f970ddc3b181318c3c88a539b0ef26031cd137c2c46b2da28eafbcd757f6fe188883cf2eb6fc018698d231bf9006c5f"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1042}}]})
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003f80)={0x14, &(0x7f0000003ec0)={0x0, 0x22, 0x46, {0x46, 0x10, "d8ee0115a64c61579655ecc116fa0f9753e00ed2b4b74b49832d3676d7a77f2fe4ac2cd1be402aec46ad05da916ff73cd9d5196806eceec4722ca6001ccd858ab82fdd6a"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004280)={0x44, &(0x7f0000003fc0)={0x0, 0x13, 0xe2, "4dff3159cab8c4bf559765d3981f04f32ae2955a149cbb5630a29db1d834a8339490e7766fe5e12825649d5fc81282a6d2b40013aca74be644ef597d4f8cb97ea96e951b2c5ee1f6333e1697dcb441b38e20608b270d5ccddd3b4de192ea2c4222bbec4b4722ff8a0136d43d002df5d61109972d3c91b223ff2fcdca48191df5135b3c62af49cb3a22a2d1a7992c98b65d99724997833ffca1f5124bc618da1507a63a499863f1c483dfdd19e919375acd7427977bf7b315a270dd254be25186b6b5b463ae314b83af2d703dad3b244a6537598e64610840266dc1eb3b1d415fc094"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000004140)={0x20, 0x80, 0x1c, {0x68, 0x8, 0x2, 0x0, 0x5, 0x3, 0xcad, 0xfffffff7, 0x4, 0x4, 0x8, 0x2}}, &(0x7f0000004180)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000041c0)={0x20, 0x83, 0x2}, &(0x7f0000004200)={0x20, 0x87, 0x2, 0xfc}, &(0x7f0000004240)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r6, &(0x7f0000004400)={0x24, &(0x7f0000004300)={0x0, 0xb, 0x25, {0x25, 0xc, "9088a0ddc1459aa810d070ae1a159bb9518d773d36b65babe83d6450ba6edc91291f96"}}, &(0x7f0000004340)={0x0, 0x3, 0x29, @string={0x29, 0x3, "694685fd10bfcdf3c90297e73437e920e338046e4841f132b107198a0c6e994e6d859fb41785b1"}}, &(0x7f0000004380)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x2, "c2a9"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc6, 0x6, 0x1, {0x22, 0x55a}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x20, 0x16, 0x5a, "9dc2e993a365433d4a9f0c8dc6ff27bd5332061fb77d106b3aa00772df0e6573921daac9561af7fce9ca39fdbe4bbd01dd9d3c5ece4b9a9eb929176a5fa40f8d584676e0c37f69d83773cc2ab7f3af15997e0db2c8317866780e"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000004540)={0x20, 0x1, 0x44, "266291258e54c536ed773af5eefb436bad322651b5f5edcd3da1b8e71d00f7c4deb52ad6054838017d9d3e77fc62b9c3d519791376f9fc7c1ad7dba12a6fa0c32708182e"}, &(0x7f00000045c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000046c0)={0x14, &(0x7f0000004640)={0x0, 0x20, 0x29, {0x29, 0xb, "76e5a9bd0c57b5c3b8bf648f4aa1a2f11a571405bee4eab9cf64041cec464fdbe4a4ae59704527"}}, &(0x7f0000004680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004980)={0x44, &(0x7f0000004700)={0x40, 0x15, 0xaa, "490e9c46f7905ebb3be03bf05f417c6aec4b090fd9e8bcd41a2b41b6bd5034e21dbca097dd82e122e47e590529f1a7bea986da423d5ed181929ae076141043f4aebf603d5c562400208eaea98792c0327c6ef31aa38e3d60dcd5c48128d67d92d986365bb72033e19df2a365d8eec9a1631e7f645247f8e7ec686a0dd33ae24a76d02652658acf1ccbac6426215f05dfb5b65478801903d531ca3085cba5b3f2528eb27d31354d13852d"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004840)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x8, 0x42b2, 0x4, 0x101, 0x5, 0x6, 0x1, 0x9, 0x1, 0x101}}, &(0x7f0000004880)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000004940)={0x20, 0x89, 0x2}})
syz_usb_control_io(r6, &(0x7f0000004c00)={0x2c, &(0x7f0000004a00)={0x0, 0x5, 0xba, {0xba, 0x31, "42e727af7c69493319ab8d856e546b481b587f9a798927676888eb08be263a93a08349ffe7898433eb72406877bd5d2327f0fa89445dd94db51459c05a39c22521c346ba70470f65889ab68cf84c19540580764ed999db6e9fd5ad145f65fc1da1b11643828b2293253d9a865903286dc9454d4e85a3e4d8f24b16f88fca4fd28532e2354d98423eee08a2fbec114e304e6720d91ae77e7966ce819e8ca1b63d9a857b3fccf45b1680626d02800b2e85dc4c63c8f58cf65b"}}, &(0x7f0000004ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000004b00)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x55, 0x80, 0x80, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "a4057fc5b07232093fad8977140454b3"}, @generic={0x48, 0x10, 0x2, "327f450b64499b0edd9761e6b2fecdb5bd7dd34999e4f6d6e7a25acd339e055f4694569a3aa83a7b7332a8dd620137a368324946ba4184c3ee466edd344d6c6bb27e936782"}]}}, &(0x7f0000004b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0xc, 0x2, 'MVg/', "0c060885"}}, &(0x7f0000004bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xd0, 0x23, 0xf8, 0x5, 0x6}}}, &(0x7f0000005100)={0x84, &(0x7f0000004c40)={0x0, 0x9, 0xf7, "290a6d2386eabfcbb788a0b2d2952eb2cc5e5646ce4c1705b813f847bac64b4a4bc5157da9b324ececd339e0487384294b5b148ece2024c1520e60dcaa5e8d29c05368fbf30c5c8c4401d76c56c47a4e2a630378dea677e4f13e4251b45c9d3a3df165682cfd19877dbde3d8de6b0b340c64cdd75f1c94cc21bf8b83358c14cb2fe618784242eb27b4e1004e56811ce4f49a078d4a4f527cd4ce48bec57219326295eca9e4d1a907a3dd6874be778bcbb7810380c472d8cd29a806b6a77e03061a76a106cbf993c99a777286c6d02257a72cec2c1444cf4aba29a8b99bd6eff4caca276debe906e8fb1328d95dfbeed35933a463d2d0fb"}, &(0x7f0000004d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004d80)={0x0, 0x8, 0x1}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004e00)={0x20, 0x0, 0x8, {0x10, 0x8, [0xf00]}}, &(0x7f0000004e40)={0x40, 0x7, 0x2, 0x180}, &(0x7f0000004e80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000004ec0)={0x40, 0xb, 0x2, "18b1"}, &(0x7f0000004f00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f40)={0x40, 0x13, 0x6}, &(0x7f0000004f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000004fc0)={0x40, 0x19, 0x2, "f460"}, &(0x7f0000005000)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000005040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005080)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000050c0)={0x40, 0x21, 0x1, 0x80}})
r8 = syz_usb_connect$cdc_ecm(0x5, 0x95, &(0x7f00000051c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "0bf8"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfcab, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xa3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdf}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1, 0xf9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xb1, 0x9, 0xa9, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x32, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2c, 0xf, 0x6}}}}}]}}]}}, &(0x7f0000005380)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x250, 0x9, 0x40, 0x1a, 0xff, 0x5}, 0x48, &(0x7f00000052c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x71a, 0x0, 0x5, [0x3f00, 0xffc0, 0xfe8f, 0xf, 0xffc0c0, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x4, 0x10, 0x401, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "44158d828b85634baa212a6d819e86a9"}]}, 0x1, [{0x2b, &(0x7f0000005340)=@string={0x2b, 0x3, "52492ebd343f0891b9bc2d8c55a5c2b80de03f96699312c133c7c6516f748d7528e1d3d5bd0cb78f1a"}}]})
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000005500)={0x14, &(0x7f00000053c0)={0x0, 0x21, 0xd4, {0xd4, 0x31, "707f54b3328b04cd31e0c4841f2ac511d35c0e39c71212f38c31e2a53ea090dcc59161d19b5393360d3af0017861ac9db09375e212e2bf56dab23019e992fd7e6d39d65ad1f96765a2f7a350522418ff5250406ecdd38462f149f70c03e1967cfffeea4ee52365ca5543235482127a3ce772c247b757529fc8c152013ce28bfb2976afc6cf1aac870f02c1a80748cb3080158b70b5b180b55a466c47f74826dd45c4be7f7a8ccd072bfbde5c1fa1f8831de5772ef091969ebc7c8ac386c892522c305a41d38087d1da4a565a2eab1e5ebfc1"}}, &(0x7f00000054c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005680)={0x1c, &(0x7f0000005540)={0x0, 0x11, 0x95, "79caca4dd57027e4805460f59360cf11695686cab3b77211b7eb748247f03bf7a5e29b792b2a1d17eecb84ecbdc31034a3ec8b1e5a4ccabce5673d3efdb194748a58f6420214bc52e6ce3b050fe52fc5c179d92cb75110feecab1e4d688975392212fad363189576af2fa6ac43d87ae9bdd24f659520b70788d6baef176862098d4bcb29533acfc991a8241bf03f19804c69a7bb41"}, &(0x7f0000005600)={0x0, 0xa, 0x1}, &(0x7f0000005640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$printer(r8, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x20, 0x22, 0xba, {0xba, 0x22, "3971b66f83369c9fd941b45f25994726abdc42e7f4ea6fc9b527921317a92d75cd6aa5532d50d828f92a7dc0e08ed0753e8f73775f0545bdbb36d058bb6332243b93932dcd3d12f44d6c0e0062f35f4a4f59ccd8ad4df07fe4115d5502b2f8937ae886c703d425ac17654ea1849b720a59fe1c8ee808e9f828fbb6b0806299edaf593f6197dd459722b9089e14eaa29b7c478e6b51a117ad9c05ba229d917c37ce18d118f78c13e94eb92d79f1d1c2682a05f7a4de1e09a7"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000005a80)={0x34, &(0x7f0000005800)={0x40, 0x10, 0x86, "acbbd5b9b77f733693271a60a8d9631b4ce2bc1dd907c02edfaa5d12fb098cdd6680f1e96ddd9bfbc6f834e4fe37c692109be3883e5d53a94470228dedaacca828a3f0c6a1f68ac4db878289ecdf470e87e3888a911db8df237d70ea6db4030cb679e2fe719921ecb7ce6a374beb40e2d5137f5792c740cc55035a2ebb6d8105eb04427234e5"}, &(0x7f00000058c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005940)={0x20, 0x0, 0xad, {0xab, "a6b7975015fe8a92b53d638ce92209def472d70728c086f10a244656df372257ef951d85e5203b351a5269cf3737523de3440988ea7ff59d060e9278d8b7fc704135f3ce7ae51b6b64830c2d9fa2f1f172ca2ee7e2824e12dd9c052c3f31dd4644b01a40ef4ac1b983d294766db8f73d2211895a2b5704644badefe384912212f8b43008aa1e7f10a3aaee1f6d33b0f823e8edf0f4a123373eb35a9cdb532c0f37d5671035e80a2fb86250"}}, &(0x7f0000005a00)={0x20, 0x1, 0x1}, &(0x7f0000005a40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x86, 0xc0, 0xf0, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x814}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005b00)={0xa, 0x6, 0x201, 0x3, 0x9, 0xfc, 0xff, 0x1}, 0x1e6, &(0x7f0000005b40)={0x5, 0xf, 0x1e6, 0x4, [@generic={0xc7, 0x10, 0x3, "099c9c8605b68ef86f33be8e3f429c594c352caca96410bdffafe8c73bba06e780b50c85f8e0d48ead16943a3ccd0cee53f1b29811b81a87c2f51f4f7e79e9e56b2e94150b4a773f856a312a2aeff213e7c87b27165b66fa953764b466b03c7cbe82e221318c2e71b97b19ac33efc366b7d03863e25e2ab9530add09e3fbbd239302a5d86c3bc56181d6508b366b78daa09b817cdf78bc00d0e4595db1611cfbb5eadb094be986f18591c118cd4bcef99fb0e49a2b17771bb5c59a5fd64a5e983f182167"}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xa, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2fe71f7563b945f9b030c5c4f17d249d"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f0000005dc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "2c5b63fcd0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x2, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0xd5, 0xfb}}}}}]}}]}}, &(0x7f0000006000)={0xa, &(0x7f0000005e40)={0xa, 0x6, 0x310, 0xb, 0x4, 0x1, 0x40, 0xca}, 0x3b, &(0x7f0000005e80)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf, 0x6, [0x0, 0xc000, 0xc000, 0x7, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x6, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000005ec0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x240a}}, {0x81, &(0x7f0000005f40)=@string={0x81, 0x3, "35bbbffe399485ff81cb9e5ce5ebebb551c490f53fd4a867841ce2bfb35baf49b63a3bada3c14b73193af6f90e178fdfe2e8bd125aa14087dd2ca2df7da37efbe1502f6f5f0fab2b3cd15265c4c709e3d7753a42ceecc6025a8de198bd2db156803170fd86d9dc1db115a8b0e578019fdf6f5eeb8fd8a2ba6b454ab9a43074"}}]})
syz_usb_disconnect(r9)
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xb6ac5fbeacf460d9)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYRES32=r0], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/253)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0xf3, 0xa8, 0xd3, 0x8, 0x20b7, 0x713, 0x54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0xb, 0xb7, 0x7}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x28, 0xc, {0xc, 0x7, "7d5aaaede3cfcf8033ac"}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x413, 0xc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000000c0)="100d")
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xcf6e, 0x80)
ioctl$EVIOCSKEYCODE_V2(r6, 0x5450, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x20, 0x30, 0x12, "b5b7cbea82619da2dae6530b10158b1fac7c"}, &(0x7f0000000e00)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000e80), 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0xc, "56579902999843f13bba6bff"}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x1, 0xef6, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x3c, 0xe4, 0xfd, 0x20, 0x10c4, 0x814a, 0xa76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee4, 0x4, 0x6, 0x9, 0xc0, 0x9, [{{0x9, 0x4, 0xe2, 0xff, 0x1, 0x64, 0x55, 0x81, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xcb1}}], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0x3c, 0x5, 0x1, [@generic={0x16, 0xc, "b1f9b223415b8158fd14ddfe03341992f1d9cdff"}]}}]}}, {{0x9, 0x4, 0x57, 0x92, 0x1, 0xfa, 0x5b, 0x16, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x94, 0x3}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x5, "5041bd640c4d"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0xe, 0x3, 0x9, 0xa, 0x7], 0x6}]}], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0x2, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x410}]}}]}}, {{0x9, 0x4, 0x8, 0x1, 0xc, 0xdb, 0xa9, 0x3c, 0x5b, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "dc22c25bd243"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3c, 0x5, 0xd, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0xfe00, 0xff, 0x61, 0x9, 0xb}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x3, 0x7}]}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0xd, 0x6, 0x35, [@generic={0x53, 0x9, "2fa5f184382bb2e4e40a5cc3e9d6e03929a15045d056a4a85a8de499d87039567410b4ed70569846a058094ae1f29ef2a655c97df288297a1aa8a4fbfc90a81d95037cdf3a2251e21739b4b77c47fb3edf"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x8, 0xe, [@generic={0xa6, 0x11, "d1b886d22d52f314c75ff03c9725238fcc3f0c8da196e38b1dc9feda760b8115144a6b518a8ea9cfc3ead08662eabcf326022732cc062436368c08346c0c646c3f5b82661e9ba09e97dd486b7e7f0e02a42dcadf815e696711d99c12e60bea0a3c26e8fec78b0208e1faa6a097d50a4c2279a94d5e573e97843d14b77e669403f6e45e7cad0940dbba897039399b8909c0919b143bb439c6b05628a808a98021943dd239"}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x6, 0x200}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x2, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xe, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xfffc}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x59, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x4690}, @generic={0x3, 0x2f, "a0"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xc0, 0x3, 0x85, [@generic={0xc4, 0x22, "2fdbd8f8ca29c2c4c217b187d7d85b4ff9acf214ac0e556e31af677245b5159faa4dcb52bc967aa3d7fa5950898f9e4d64a2dd2f78e055fd0b41fd747570714314ef051ac26d1e82ad05fd38fd4ecfc333b4cde703499201dd8ef28fd52d81ca83f57bbbe514e37ad0813e1558132215e064b33e55bb947a70671c4a0c968f3f5c0c6d878d5f65153b2240c3e3c6cd693b29f2fa6bc1c8fd2c91f82fc079af3248c6717934aa64b8f69fc6f9a3ba19f0951c9c812a20503e8f43af439c4efb51ed8d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0xa, 0x4d, [@generic={0x8c, 0xf, "a842f3c949b19d37405a57b29626db838e49f744e19d9e4a3e0702f1c2a95b33bf8d2f3da48b71481a2da363fad30bbc6b62ae869123fbd5f9470a495344929383e82dce0748abf9fe26fbd492985003131133f5da924f30e879de92683e90ab25b349a6f59704ae164db982950d0d3e91dc5648cc9eac409f654aaffc72a0c106efe943b3f0282155b0"}, @generic={0x100, 0x4, "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"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x5, 0x3, [@generic={0xf8, 0x30, "3fd8135c2dd705e0971b714e14deb121c73c49e394c60d930946fe0c1a6b39e097cf89af9c38d8e411ad28005901daf2e7555ebc624b8c4f509e57162b72570443f0bd848cb454254bef5d0470436b2cc53961133547af473af4d3312a893d12fdebb1cf99280eacb73815b322c8d1459bd5cf1213e28de30e0a1724ca1a47fa8ac7b2aaf4bc6c77731dc56b8d42467eb26c95ca38f52098249411564d60e2612d524057b7133d3105c9f5521cfde6eef7dbcd3c50e564b99e3c6a76a4c38ef96bf59581558970f9aaf2a634264aafa4627e9c3640ab9fa526f2ad98bc0b5368807199b9bb2ab35e71e468079b32b2fb3b13ae99dafe"}, @generic={0x62, 0x1, "22064b7d22a6aec13b1f61e8984ed3e4ba2f800e828f43ca25496cde076a55ecc99a0b080ae9b7a96571ffaa694e6e56010304887a03b000823f82b96c2ad3839435f972b67c8f2aad94cb4b80ee60c6fff1c2e3891a1a042f268b0374fd5984"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x28, 0x40, 0x2, [@generic={0xd1, 0x10, "c26b32976b1c99e5b2c1b68cee032870d65918382a91b7ea2c79b74077f235779df174884a3e0285673d1d7cffeedc60cf1c1a0fbc0aa13923cfca67eaef2221f100a58711694d7d44f6a316ef0ece5f830649dd78e19d3b9dfb2a76835b5e984ba0f612f1cfc461f09641ad051ef08b8a81f5c29f0590f5421f447533d1007aac6ff1300a7974f4d0d043093582a803963738eb03c0b316fd68a66379be820934a771016e9564a76fb2b89eb7b7f60a39c3010e689a5a61044665b52bc3b7808ef3bf36f58dacf729a3a24ce611fb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xf2, 0xfd, 0x5f, [@generic={0xd4, 0x5, "c2c5e2b99a5c2453d153393d3f3de51f402602ce6935ae3411bcd1ef81470c3db604a649738fdcc4fca407962e02fb55593ff0a28a277c26e52c695b7c698cc2793b092dce88046e7cd353246f2d6a0b686ba037fc0204aed40fb09e353368c43e816ac899028bccfa7a67a2e46fdf821cae970c4d9354b8e4c58b23481c254351c393ee5cd504c8bc86bfb8f1218edc301620436f22e5de660e2e9a811d3782ca3b389eb6d7317390e12b9138e7fec5a2ca2500b0fe2ea9dacd64af065170fbd8332a37717321be9835e5766f368c130081"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x5, 0x8d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xa}, @generic={0xad, 0x30, "4a5da793540ca56813c179553a98b94bf85f5cc8dd0852dde20e0b2e79e82f638d930bea87a87c9487869976428959b470ce8e5948acaa30ac4bbad5aa26c91a497545fa91123608b57ca9b8d818739aa4c570e16c7acc371be5297acb6f6df109d8e4e533a4f95ace9c59395d258941c431452d6c10ca26ce846261cdc282cabca520e3cb42ca592b455ea798000f659114e684ed1f97e7fe622d26e02b476d155b38bd6e5a0c2f7385f9"}]}}]}}, {{0x9, 0x4, 0x2d, 0x0, 0xf, 0xc6, 0x49, 0xf9, 0x6f, [@generic={0x3c, 0x22, "b35ad4ea076578ac5876b54b643f4a26f48bd9b9554d5bde5d3924a2179056f4893ed8f7fe052ad1fb1ec10ace70b828886bbf39ae0e17285e43"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xb00a}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8c, 0x3, 0x9, [@generic={0xb1, 0x23, "8c33b290fe9e6afb910bce2b21f336efb2f8c436adc947d0fd126a40e8f5348b55cb50c3a0ae90a9c449f8e255b224103e7b0ff5a1a788259b14b3012e942c0f085099ab92c9d074951e2bc5ba287312c60c9541a9c278ba246e4a1eb03522255bd68dd0251a95d8da7a4903e7d6b4cf10defccbcc9c201e7109fd1992f6ec1ac68a1e09ef5c897ad9987ee4b6a024e91196ca25007b2185b6aecb40341fa6aba4255f796c533c0fae6972b07ea8e0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x8, 0x4, [@generic={0xe2, 0xe, "d4cd14210b84e7309ba6da3765346629f76875f27a08a5a1b4350538de224f86161550787190d8b95c31695e5a81ef9b382284b421804c445f1d41f8387e6d66a8c43416da801426b3066cf767746eef86e2bb6ba2d7da21556f01c370b1793d6b1efe9ace22ddc789561d6b0d17682ffecd12666045f82e9ba4f635d6d4fc0d608c533e52c34ba8866a3d6cf151f3e842c3881fb68230a29d54ba0d5939baf60545dd46f0d581c15531c1fe8464f5bbe5eaa07dba53ccba7eb51f8e2ecc24467594d2a1d696219811750ef0760e767d76306deaf6f8f235bff95f01f2813ed6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xe, 0xa, 0x7f, [@generic={0xf8, 0x3b, "5fe3d44dfae6402c97a29882ca18122b52a5db4f1c3196dcaf4bf7997e653e36cd1f09aae6e02c6fceecaeee6faed9db408488f618095648684d8ced1e0c855a5577c7ad5a8258e0e43b313eaa2d6464b47aae07d4b06c1607c84ea75e8001fb679df766b4532918c2310d0259fe7ec3244b5b6ac4633129e867d29a785c1d5e0c7ee53fde751d353128ffbd2f12c19a8af66b25d729a9855e1cda6987ae0a263ed32b33e5666f3c0d7a059d440a85b430bb8161e68ebe7027da5eee17e92af0cd9b50490b233b1a85b7b839f63055db3414a92757e554368ec2a6596c7f52597042a73dee8c91b6c03c85aee6654faa1040f886e09c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0xd, 0x6, 0x7, [@generic={0x9e, 0x3, "ecbedac67c9d0324842fe29d241c7b73142fc21ceb9e3837d41f5dcbceebe4258b5aaa3f74db0b4bca66cf6489031bd060ba332e90de3ca7635434babe144b6528a71f1fde6c591b623cdae94a38564f64bdaef8738b405753971eb1839ab2cc4625ddb29f437190ba88055c6aa755cd7b5fac72f8de21a499464b6d84a99f17859feb7d63716418c095d9ec1a37d85a46878549d9481b9ab48a03d1"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x1, 0x1, 0x8, [@generic={0x70, 0x9, "a0fbfc7e500c5d64b7477c12f3ae7049b9ac9f49c5422ef103fc6faf8a161ab6f86b9987e209fdddfa773cff2b7f05674a1d95d097f6bf393581813b136b75360ea961e9147385e7d5d7ee54a77ce7cae7b5639d01053d053de00506a60edd2f42baf2d0d542502e2cb95ece82c5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x2, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9, 0x101}]}}, {{0x9, 0x5, 0x0, 0x10, 0x448, 0x4, 0x62, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x66, 0x6, 0x7e, [@generic={0x9d, 0x8, "761f3b12c57e3ee005fa70525964556207c0c16592108241a4bc5699232d6f05dab7c548882f0f2dbd428b353f8e245435b6f77147e4432c6c97bc664a63dd281f417ae58249b40c56af08c5c930905896f1145b949e5241a8a49c8361f0e8f29fa324522d8ba87f47d3fbec626f9a8c0b0736e874a7ccd71a30f8d3150a441f90e6e783fec96a0a9bff92796595d4fae6347395fe6f97cd782868"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x7, 0x2, [@generic={0x65, 0x6, "7ba99de1b5895e07c2101cb5dca2ad01c9921c0c8e90a8559f329e6fb95628606df1d6bb8b218b3f1b8a1f685e40cf2a259039c6a484b820b00eb0ec345b410e3b24be92e805353cb09b45bcc98eb4764124d0cd2e3d757ed6e6368a35eac313c4286c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x45cb}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x4, 0x9, 0x81, [@generic={0x15, 0x21, "026396d4ee50e3b74a25fe2a0d0c73eeb288d2"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0xf1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x9}, @generic={0x5, 0x8, "0cc7dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x3, [@generic={0xce, 0x21, "0c16043e2fa4da0abeffabac09fb2157522454aade56c24754fcf8a200166408c80aa4873e27a8ac7e378bd05f1c7dc2768acc33a13f699663380ed7fa330809f6402f4994362b9d05c6ec37cfe7b1d703bc45313a956e0e000e7f88344490c8903ff6707f4695eb1411f7015cc6eb7cd48873837655e6e99379e3170ac490d455333f2a757401a1fca0d8492f20d95f249071dc9e5bb4217f545831def5699b278a39e07fe3786a4aab826637da78e1e48e4a9a17cc96fa85c0412e559dea9fc15a16f2489c5eb9cf707441"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xed, 0x5, 0x4, 0x20, 0xf3}, 0xe3, &(0x7f0000000400)={0x5, 0xf, 0xe3, 0x3, [@generic={0x54, 0x10, 0xa, "535e50aecefa3fb8d7407669ed5e3156ad21204fc24c2945e276563845f2a62de1d66a013af3c721bf8e392079ec099e7a1b2f112e9b2151c19246199079314aca97544384235e1250ca4e94f97a9868f8"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4fd46fd2ca5ba389aca03c57ad47e29f"}, @generic={0x76, 0x10, 0x3, "e5c3e20d284257435ca7ef11a298c03ffa7dcd1a8a6102d359fab17bcbb03c245076630a73d7d8e3ed76963ad45486226e5ae8036b95a4ea0c854b5461b1d34af6c25a81afdcd6bec68c8a7e5d7379c7c7ffb20bbb12094022f78a5fd8df31d652135e93eaceaaff684d5aca14924d013dba21"}]}, 0x5, [{0x17, &(0x7f0000000040)=@string={0x17, 0x3, "4f4c50d8d858f121919b4ef721d7539a690843bef5"}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "86df35f46571e8179a7952bc087852c224fa8ddd768fb404f9743594dcc5fa59804cd4f1eb72788f9816fad8c02c2d498eefbfc4bfa49d2942f7ad26b943d8beadd2ad2120afc3dc0603fd7e6cd7bddae75c6dea4afd569

<<cut 662820 bytes out>>

00000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES16], 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='a')
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e146"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 26, 27, 10]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x31, 0x69, 0x3b, 0x8, 0x133e, 0x815, 0xf286, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x6}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0xb9, 0x9a, 0x9, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 26, 27, 10]
detailed listing:
executing program 0:
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x0, 0x0, 0x1e, "7ad08f9e671ec62edb7ff61b146bf5a7fb769aec23c2c75742f927fe061a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
minimized 29 calls -> 0 calls
minimizing program #1 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 25, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 24, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001001000000fd"], 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 22, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 21, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: general protection fault in em28xx_resolution_set
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in __video_register_device
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xf1, {0xf1, 0xe, "d45a15b6313b3721c3ea45b82c3a9b3e07ad5289088029379709d0f82518b38f37bf7d325bd90d5fb071cc44e12ad42964a6c9af9f1a09a8f4ecea9b295530ac5f49be1176b7c212496bfac8dda0724ffbc0579ca854d11875fd7148ab948db2ca38df9b48df6e1bed81ed12b8067f564e22b07c62e2146f9e15ba5f758ca231e17387f6e29ec286820156767ef95c63682804c1bd18b6c508afe2db157bd20e46fb421cdfa28f57955d55386bd50a5eb442d20a395d5af4d7d41d6e67ee90930277fb109c43274474b949cb14386fb9d8982b53438427fcc838864b16bdfce705a448ad7608780df31dbfd51e238c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x20, 0x15, 0x69, "b2f292e4964e0bf568ed87b901da5a02449e92414a36fb0adce777d0e816216616e5164f8d18984490c55472494ffb3bbd04c7c6569ab99fa876e55dc66451d1729be50e5321f117191a9dbfe2626ee5869c2c84811e120fdf12cb1c4806be8f9d7a90df8ba5d3ea7c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 32)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 27, 10]
detailed listing:
executing program 4:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 1, 27, 10]
detailed listing:
executing program 4:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 27, 10]
detailed listing:
executing program 4:
executing program 0:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x7, 0x82, "7a564ac5246063b73a3d98e5e64e67536a72c416356aa51e7226a71a5f021ae57084634b809ae3ac82db3658abd2ff80809c87e921c3622f06a45d8f9d56bc4558d64f95a16067394fd66a3ba525f704e9b190c6fcc953d374b2f77d8a3c9df493a4e5b40a28162562deed69e7b0e935bf8217b7af66fc14a425648773829a013df4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
minimized 26 calls -> 0 calls
minimizing program #2 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 26, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 25, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 24, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x5, "fc624c9705"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 23, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 22, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 21, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 20, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 19, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 18, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
syz_usb_disconnect(r3)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 17, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102e1"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 16, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_disconnect(r0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 15, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x38, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x9, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x80, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x94, 0xd, 0x20, 0xfb}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x2, 0xea, 0xe, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x1, 0xdc, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8001, 0x780, 0x10}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb3, 0x1, 0x9, 0xf0f, 0x4, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xd1, 0x8b8}]}, 0x5, [{0x23, &(0x7f0000000180)=@string={0x23, 0x3, "29044869456ae3f02738794a2434041707d218018d9e80529448f884fa4616234b"}}, {0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "97eb3de53008fbcb699f84aa03ba8b21e144ed14e96e088d2b4be84ef3c9b7379e260141564e35cee041b1b2142a1a2eac25c331d34d8d92cfcbb91d7d2b80571387c3807fd0a7f85d5ccdf8588d1ea48a685c26f3020d5a063408f42216b261d78c2b8b3f175a6e1ef4a46bf44e3fc1d949b57f2ba99b5b289b60c613ccb030c6b11cfc918e2ca9329d510bb42039532b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 14, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 13, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 12, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 11, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 10, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 9, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 6, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 5, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 4, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 3, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 2, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 0, 10]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xd, 0x71, "1ab132acd7bc0c252b0c2c50c0fa4e0b3c43014df35ecb986b4fa22c590f42bc3c876ad32c14979d9e6e667f40a41bf9a5807ac9ec3a8e7844046a71111971932589c1b0cb75910c19446daa0c68df3da8671ed8b2bd1fcd76e176605881f7486948a355b810eabc86ee11ca812e130d8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}})

program did not crash
minimized 27 calls -> 1 calls
minimizing program #3 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 9]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 8]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 7]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 6]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 5]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000080)=""/108)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 4]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 3]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 2]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 1]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 1, 0]
detailed listing:
executing program 4:
executing program 1:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
executing program 0:

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
minimized 10 calls -> 0 calls
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0x6b, 0x12, 0x40, 0x1b80, 0xe309, 0x4a52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x1, 0x2b, 0x1c, 0x20, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
bisect: concatenation succeeded
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=2m45.591455072s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m45.591455072s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
simplifying C reproducer
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m45.591455072s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
reproducing took 5h37m29.112241496s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811dbcc730 by task v4l_id/3072

CPU: 1 UID: 0 PID: 3072 Comm: v4l_id Not tainted 6.14.0-rc6-syzkaller-g3a85c1011540 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x250/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2a5273d9a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffc06a3df30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc06a3e148 RCX: 00007f2a5273d9a4
RDX: 0000000000000000 RSI: 00007ffc06a3ff26 RDI: 00000000ffffff9c
RBP: 00007ffc06a3ff26 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc06a3e160 R14: 00005558e1a98670 R15: 00007f2a52b8ca80
 </TASK>

Allocated by task 2958:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2958:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22a4/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

The buggy address belongs to the object at ffff88811dbcc000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811dbcc000, ffff88811dbce000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dbc8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000476f201 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2958, tgid 2958 (kworker/0:4), ts 54221751028, free_ts 53987285343
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4740
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __kmalloc_cache_noprof+0x217/0x3e0 mm/slub.c:4320
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page last free pid 2957 tgid 2957 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 do_sys_openat2+0x104/0x1e0 fs/open.c:1422
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811dbcc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811dbcc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811dbcc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811dbcc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811dbcc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811dbcc730 by task v4l_id/3072

CPU: 1 UID: 0 PID: 3072 Comm: v4l_id Not tainted 6.14.0-rc6-syzkaller-g3a85c1011540 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xd9/0x110 mm/kasan/report.c:634
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x250/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2a5273d9a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffc06a3df30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc06a3e148 RCX: 00007f2a5273d9a4
RDX: 0000000000000000 RSI: 00007ffc06a3ff26 RDI: 00000000ffffff9c
RBP: 00007ffc06a3ff26 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc06a3e160 R14: 00005558e1a98670 R15: 00007f2a52b8ca80
 </TASK>

Allocated by task 2958:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 2958:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x294/0x480 mm/slub.c:4757
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22a4/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

The buggy address belongs to the object at ffff88811dbcc000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811dbcc000, ffff88811dbce000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dbc8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea000476f201 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2958, tgid 2958 (kworker/0:4), ts 54221751028, free_ts 53987285343
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x21c/0x2290 mm/page_alloc.c:4740
 alloc_pages_mpol+0xe7/0x410 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xc41/0x1670 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __kmalloc_cache_noprof+0x217/0x3e0 mm/slub.c:4320
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page last free pid 2957 tgid 2957 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x653/0xde0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x154/0x3b0 mm/slub.c:4171
 getname_flags.part.0+0x4c/0x550 fs/namei.c:139
 getname_flags include/linux/audit.h:322 [inline]
 getname+0x8d/0xe0 fs/namei.c:223
 do_sys_openat2+0x104/0x1e0 fs/open.c:1422
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1454
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811dbcc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811dbcc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811dbcc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811dbcc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811dbcc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================