last executing test programs: 16.447037466s ago: executing program 3 (id=4117): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect(0x7, 0x24, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x4, 0x4142) syz_usb_connect(0x3, 0x8c6, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="15e3536428c3f8aabad01d036e44c17e25f302ccef0245205b2fe0e261e9ee3e1eefa63d940625"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 15.985229872s ago: executing program 0 (id=4118): syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xfd, 0x0, 0x1b, 0x40, 0xb95, 0x2790, 0xbbe0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xf, 0xc0, 0x9, [{{0x9, 0x4, 0x6b, 0x1, 0x0, 0x2, 0x6, 0x0, 0xb3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555788}) syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x61, 0xbf, 0x1d, 0x40, 0x104, 0xbe, 0xb46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xa5, 0xd8, 0x8}}]}}, 0x0) 15.101777045s ago: executing program 4 (id=4119): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0], 0x0) 14.09015275s ago: executing program 0 (id=4121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000405e049d00000000000001090224000100000000090122070009058103000000000000060000000000"], 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000b80)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276", @ANYRES64=r0, @ANYBLOB="db028094c92c7b297033d27fb0f5471a4c590418044f8a4dd7397abf7fb96e2d66201c70489b806e4b948b8f39d439228feb75f5566038c38b615e7217f52616dd89be1796d9e5e5b3c18ad9cf85d24e879201d5f46938cf64964a984418d6a3bfb7b0fa4be013c502e9b3ec0c7edb2e14664327ed6aae09cdc05827bd16c48f72773000204f1b8cdef831609cf993e5f64625f92b167e7c9f99c8e7992d3448c05c476c9610c7533077c2619c9bc2dca90c1aa4d9680e4be5fe0bac524f592a63508950851f247784822e6fd12412eb51ec57d5cfdf009895c75f5a", @ANYRES16], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000001480)={0x0, 0x21, 0x6c, {0x6c, 0xc, "c171a5af680c62bf8c62812422171ac7b1bf90f8e0fe55f2da388873aa9564a995995905770b9f32d048ef3c3bc2d39cbe0c2ff4454d613a0dc21fc498d61491ae689d010408f8af8bd5c3903209728c2b8a2e66db0d4b61534b794bb98592d1d98121b3235aaae6a5ca"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xe0, 0x1, 0x4, 0x8, 0x3a8, 0x5732, 0x5e12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x4, 0x0, 0x4e, 0xfc, 0x55, 0x5b}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xe2, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x2, 0x8d}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x200, 0x7f, 0xf, 0x5, 0x8, 0x62}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x4, 0xa6, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x23, 0x20, 0x38, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "e1715099b3"}, {0x5, 0x24, 0x0, 0x8008}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x57, 0xa28, 0x2}, {0x6, 0x24, 0x1a, 0x7fff, 0x34}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xe2, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x8, 0xe8, 0xd, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0x43, 0xf5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x81, 0x3, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x2, 0x70, 0x3, 0x20, 0x1}, 0x16, &(0x7f00000003c0)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0xc}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x9}]}, 0x1, [{0xe0, &(0x7f0000001380)=@string={0xe0, 0x3, "9a3d918b8623cea43165bcb2af5f2f87bd0bceb8f7a6edaa93de40df0298e30898d52084241f488c701bdada4b09dd3812b4d7a6a1ba538807327df51f0b2bd24e98ccc9635f12892f4ff5860bddf21a25cdbe2db64d24becaa0b05fe008bfc3cf527584e180b52d3b8ee9dd9b4cb7eb2ff4cf5d99c9d188f1dbdd40feba7427ea41c508080ccafe7149368b90bba558ea9147fd144241d23d6042c9eddff0f2d88a73bc5dcfd70013415d45e481bf1252ad474bcdf7909a224bd8d3c02201da587fc26bf268730426ecfa85cd7b58940a51cb75398a2099582bbcc4ecd9"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000880)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="690185000000850bf05f0221a27e1be19e29cdcfd91de8e2009bb2d76f7ac9cf8d5136f45d9ac2682b1996a876966c868611d57f3e1f62db93e0b58cf88a53e8b8c30e164614831104ca13aa2689da1ca7dddb443995a728eea85545a4b4f2f44a3a9c15a8efe4bb5515085d4f2cd97c883547edd07f2112ee6186473ea281ea3895e250c6959fccbc614b"], &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x20, 0x16, 0x21, "0d89276b070abb62476056a7c8ec2a75a477bfdf5fae153aeb6f83a0376e891fa3"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0xfffd, 0x8000, 0x7, 0x0, 0x0, 0x16d, 0x4, 0x8, 0x8, 0x1, 0x91, 0xc200}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100001ed472082a110500a8140002180109021b00010000000009040000015a07660009059f8e"], 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201110100000008d90481a000000000000109022400010000b00009040100010300010009210000000122050009058103"], 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000000)=0x413f4174e5f3eea2) syz_usb_control_io(r4, &(0x7f0000000d00)={0x2c, &(0x7f0000000b40)={0x40, 0x23, 0x39, {0x39, 0x21, "eee0a6c6f7e932035a8bae94f766fac5a646311448305d06f2cb4c60cf9731d6795edb3563d9f5c3bab54b2049682d685a000000000000"}}, &(0x7f0000000640)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "d471b63b6068fc6f5a2164057b4b40c1377a919aa0a85ba82b3f7d"}}, &(0x7f0000000480)=ANY=[@ANYBLOB="000f4e000000050f4e00040a100300010019060000100a0c05aa000000f005000f37ff000000000030c00000300000000f000000141004014cce63b34940d08bc579e7fbc421fa4800"/84], &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0xa0, 0x1, "80964549", "361a2375"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x3d, 0x4, 0xfd, 0x8}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x40, 0x5, 0x1b, "8f8b6857b1be0607fa826b5a273cd8321ee86b88678e388110a579"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xf00]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xed}, &(0x7f0000000340)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, 'yt'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @random="7c0ef3892a80"}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'i:'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x2}}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x93a, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x6d, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0xfffe, 0xf3, 0x1, {0x22, 0xc79}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3, 0x8}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "ae566ce48b2c39091f8303c23d8008893b08ef7e061ad8fab01e4829db86cbd11ee88aaf5417059fbcdaf21c430866ab6592eff62282fa1e7642fb0592367ce78b7006147ae46b10e799a615eb732f0193a7b4152020224462bd708d"}}]}) read$char_usb(r8, 0x0, 0x63) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB=' \"!'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd992d40431950220100010203010902120001000000000904"], 0x0) 14.002805111s ago: executing program 1 (id=4122): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000880)=0x2) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000880)=0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0xec2b3bbd2f9b0b39, 0x84, &(0x7f0000000100)="50f7ba9096302c401a6c38293205bde8253ea874e9c788ac27a71ea66647385b6c90857e94fd63c3d96468877f5a549f560dbd36ff0894701e68ea147fb04267b160ba398e0a20b1ed816a51558d59d715bd388145b76ad49a2eb19aa470ea58c367f4ba5093f0ffa85662c91e0d4098cf11aee8f14777a1be386d02aad26b4067786afa"}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0xcb, 0xfd, {0x7, 0x25, 0x1, 0x2, 0x3, 0x69c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0xd, {0x7, 0x25, 0x1, 0x80, 0x8, 0x45c9}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x0, 0x0}, {0x0, 0x0}, {0xfffffe53, 0x0}]}) (async) r4 = syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0xcb, 0xfd, {0x7, 0x25, 0x1, 0x2, 0x3, 0x69c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0xd, {0x7, 0x25, 0x1, 0x80, 0x8, 0x45c9}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x0, 0x0}, {0x0, 0x0}, {0xfffffe53, 0x0}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000d40)={0x14, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "846c"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000005100)={0x14, 0x0, &(0x7f0000005040)={0x0, 0x3, 0xfffffffffffffe61, @string={0x21, 0x3, "25927c0f48775d8ecdb914398547a15c9a89fc9d32cfab91dbcefa91d2f1b3"}}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010961b10004000010203010902240001010660800904000601ff01020c09210600010122ae00090589030004040148"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) 13.058393936s ago: executing program 3 (id=4123): syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0300000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="d305", 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9177204f17116a3f2601020301090212000100af32bc8d3416df8957ab3dcb0000170904000000833c8f00610f2354dc039455a9736cbbf963"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0x61, 0x8a, 0x8, 0x458, 0x7003, 0x7a1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x9, 0x40}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f00000005c0)={0x0, 0x1, 0xdb, {0xdb, 0x23, "f957da2e2da460a9d151d5e2f37af10496245f4266aa39b218c7dee3b324bbb7343fc12bff10eebc796d9feaff538f5557cb2c8bbf458e3f691af346056fdf6e00bccad49fccea5abbfceea245171e12f937440dbb02941ac274ca461efff7ef585fa9de153535ac6263e0fd3eb6525460e0bc7e1c934b789931c27248e2565e90b20fe93e9a8b412f943ce349be77deeb3d79419f2131ff3774a24269236204b626db9ef18ebe3f855f2f5183103e9cd20c0d4c6a433f69cc9e3472fac28fbf24e737c6207dd836ecaa08d2b56a4e0bdb965ae0cd1a22f653"}}, &(0x7f0000000080)={0x0, 0x3, 0x42, @string={0x42, 0x3, "99715eaa181d096a40da55d1f4ce479755f8bef5bf3062776f51be6fb1b897f564ee12b188a960eb290732ccdb5d4223dcb7344afa7adcd209854542043aa4a3"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x5, 0x1, "a21afaa2", "d2b95f92"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x80, 0x3, 0xfd, 0x8, 0x11d5, 0x9}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000700)={0x40, 0xe, 0x29, "a767bfadfc0d81d0a936c9e28ea017bc0fe4ebad1e7d9f8efcdaca9720629943355433a9f770c7969f"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1e0, 0x4, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xaa}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a16c"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000940)={0x40, 0x13, 0x6, @random="c773b2475ea0"}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "bab8"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x991}, &(0x7f0000000a40)={0x40, 0x1c, 0x1}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, &(0x7f0000000f00)=ANY=[@ANYBLOB="000000dac16344"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2f5, 0x420000) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0xa8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x1, 0xd}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xfe, 0x8, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc, 0xd, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x56, 0x7b2}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x418}}, {0x74, &(0x7f0000000200)=@string={0x74, 0x3, "533a37371b92067dd97c5b44b90990bc00eeb8857f879e1d6f8636e34059b8f2dae24e839d09280c1bb26e737cca0bea6617e75101d1537d20bce13a4a1020657529d6ba0f8e772ca774993150a29fada465249c70b364c2b0124ff0a109f04d820d1b5ac96e5fb49979844d50fbd40bf822"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}]}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) 12.05763656s ago: executing program 1 (id=4124): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0xbfb, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x6e, 0x29, 0x65, 0x20, 0xace, 0x1602, 0x3b7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe9, 0x2, 0x6, 0x6, 0x40, 0x8, [{{0x9, 0x4, 0xff, 0x0, 0xa, 0x43, 0x3, 0x87, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x66, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x1, 0x3, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x6, 0x3}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x4, 0x6, [0xf, 0x2, 0x4, 0x1, 0x6, 0x6], 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x3f, "f46d113e2a"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xa, 0x0, "94ca8791a2"}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x0, "231b705f23"}]}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x4, 0x4, "921195"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x9, 0x40, "540a08f38d61b4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x29, "8008a262f4"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0xb, 0xcb, 0x2, [@generic={0x40, 0x1, "7c8d674ab86c28267efacd6e5ee3b043911c58278af9103cbd8ae968904ffbceabc19ce7bbaa29755b1a5fb12afa8d0ab50fbce97412f12fefdfdf52b731"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xf2, 0x5, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x5}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x2, 0x5b, 0xf4, [@generic={0xa7, 0x5, "9c0bc5f506341e29e07ba4802a139cb7cdd64edc3e792a3e291059c2b443cd2577387a85f3b97aa506c5a18d82f154b19ca5d2a6d7a07caee4b688ce3daa61afa5941982ac5b56fc9bd2336dad71720a1905f3db5db217482b70c5f9d53a36d566e15274941b06b192799f7d1fac2af37bda81213c90fa49a4e6d0b9f3d179b24a19279a072b647f3fb2b66f0cf6b88791bba39c610fcd2dd3e5fcd61e2fd9b089e383843f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0xd}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x5, 0x10, 0x8, [@generic={0x6d, 0x9, "025be4d17494339627a0279e9882d39c807de405bc48e1205fe50564c2ec9ff8faa66906d53ed9159e5d4f5f21bc5e3fcaf30231034b592939083d742967f6e4da20e1bfdc847160cd35461d9dba766e59ba7c8fa243fad707286cc13251d8753f068023cf7f9faaf3be07"}]}}, {{0x9, 0x5, 0xdb9266bf1a767e05, 0x2, 0x10, 0x81, 0x3, 0xfe, [@generic={0x81, 0xa, "c9e0d181c4d9727588d3f223cd356b9b3a913e3347aa48bb8ac8b702c981fc85eed2dad51338d6c5b64ee7cf01b13db8b7546e4c65cd11bc2a2ddffee08ae1d33f969afef675b42fee4ac92cc0518dac5ba08c7928c11dde7cc9fc9623bdb3bb19262fa5c070386ced2fe3a2ce283d933aed962fafb5fa35f39220bb73c9ca"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x2, 0x8, [@generic={0x64, 0xa, "182bb0cbf139566408aede28e2bdef7ae378146621dfdb03343759107e1342b349a0dc4d1cdee18af5ca66d106a5486646546a80f46ac386b9517bfa3ecc0ac39e4dc54baee13f8a4f336808eb77a49222cfcd83321c2fb5b643c8243bc32b542402"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x1c, 0x8, 0x0, 0x2, 0x6, [@generic={0x8f, 0x21, "22b0c2d0596228c3802805559da4f7b5c417a9a678ed738b90bae081c369aadffeb7a0d67b0d9a6551182721afcc4f178f2d6e64405640c89c9dec2de19a12db1ff51acba83acb10c4c763c7781d9292f8a38870cf1c037dd3d1367579faab08c3d6da1b06da10145fc74835ac52e9322d34bef71ec78d381bc24ce5ff546e77964c05fd6d8d0ea875a8a2c693"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xfa, 0x8, 0x2, [@generic={0x45, 0xc, "ddc5056908549b8a88f6dde89e938ac54ab76f852401d0ce8c4668bef4b8f28c31a7057405c13f8fe7fbeb1aa49ff883a7c99e88c1d0bb8f018e9a158850cbe588c566"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xc3, 0xf6, 0x1, [@generic={0xcd, 0x5, "e501198dd3a4909f167b3848de0ac2b8e220dce0df23794d4c9c7dff4839538f168d52ecd3fde34b4f93d64a89180e08dccceff442c558a77365383a226fc591b7acc21b00a2394b38b51f7666942f9b2ef2dc9045cbd0109ded465aee9dde38c6a509f23087ce7dab0bd13a9c2c1c4209dd693bc382060508f38e30a7acb014490e74f2bc3f1a7183e8f6f4b0621aae7dd9eb1ea0ec127c8899dd301ad446d4e0edfe8cc6c77547b4c59ae79a8a22afaa907ba017053706cee5f1a65153dd1e7172f0b58076a59dcc0e10"}]}}]}}, {{0x9, 0x4, 0xd1, 0x0, 0xb, 0x51, 0xcd, 0x7e, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x4}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x5, 0x4, 0x3, 0x7]}]}, @uac_control={{0xa, 0x24, 0x1, 0x10, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2, 0x4, 0x6, 0xc}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x9, "f1742f95"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x4, 0x7, 0xa, 0x3, 0xa, 0x5], 0x8}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x6, 0xff, "caf3d6"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x5, 0x7, 0x4b33, 0x1, 0x6}]}], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0x9, 0x5, 0x9, [@generic={0xe5, 0x31, "400a6c7d197f2fbe458fdf8664f8f335f3792563bd461bdf19c64b0ee1e4fac5c09c688b50dca0cc563081f3e7a4f9f24ddca62c9e950b867f5ea94029fc209d89f6b9d7cac4e1e32a82611abd91afc8212eaec63dd41059f123b361774609d68fb5e3fa828a06eed6c8523bff60e77008629482383400b42c11b6ca26fa21ba5f66841ccaa5e5efd4f33426506533b616e93d73ebaeb5f1dfd5faf6c584f60b8988fe35e69e6dc55567dba937448ba50222d954d029a62a26a121ead667ec9a037432f11746722d1b2723f995696b5a99e1f8af3b67c4716aa2a88f8ef6c33a594b46"}, @generic={0x10, 0xc, "076d5a4d39f04d68d58aa39e68c9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x5, 0xd6, [@generic={0xa3, 0x3, "9af9fe8a383cc4615aa0638caa787f431e65f2a9b7c9df7726888a3e280ae02baeb56f4f62c0b21577e052978a1406b73ae57d4727655500f9f6468076ee20dd5eefaa14eaf3bd4583fe757c7dfdca935035e22f9a6fe326c83b50ce395c92b924e5952fb840168619153bd910552d31e17703f73783ca5e546d4885ea931a8f9af6c368d9cc3b586cb31af5130e1498ae4f1778d868ec17aed8be4c122f4ac29d"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x6, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x7, 0x9, [@generic={0xb, 0x6, "2759c1c4ceb3689af6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xfc, 0x3, 0x8, [@generic={0xff, 0x4, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x18, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfa, 0x6}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x2, 0x2, 0x7, [@generic={0xec, 0x21, "3a64a3534101db03a053aff3a5ff22f6b417763a9709b79253f4925421c967f50f706df612e56b05c71a939f036b87969643a477e6fabb28e95069b5b2d996fe910fd88574af620488300cf89fb7f4954f1e0db37e5bed3c16f8a6567a8de03a6ed269cfdad5c3fd67f8d4876c65a392d96a675674e0a1770ef8222dbb3c33ea74553c616d65c43af16370699af5aabc79b17b2d7eba817930d277bd56a71726f732239d187f96514221cbb7baafe31421396781868661614d7ee503ece38a4c42d17bf718b2ff326f63cdff820e0112c6902c842f5a35d0615a073efc61ecf9cfa89ae2a25665363440"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x40, 0x0, [@generic={0xb2, 0xb, "c557f23bfceff376d9816c0235503b9ded08d369ef22ad28b02bfbe0d8da451aa7c33ed18ac2ce4340a1d9df817fb4d4268890b6cdd834ec7317a728ce804ca200442d734a6881f42ab8f22b03635974fc5123f10a686ea25961e46d601b023eeee6f3124b52be78e8c2d5d364460a78bcfe94108ce1940507712a8f8f31b9c910b1ba4ae647a92cb28e531f81ec89ee021d901580d331c17b4642216446864c996161b4651ff41c9961819a3a0e64e6"}]}}, {{0x9, 0x5, 0x4b, 0x0, 0x10, 0x45, 0x3, 0x5, [@generic={0xde, 0x23, "8631b5e2032db684a10ebaff57efbee77af716e7dfc801c9a0245b8997d6493a2308c5b6cf4b55b0e3ce2ffea9c7432824f46b0cc918befbcb943a76ec44ffa716b685249daaaf5bc887e9dd7f41c1bda9fb75990faa25d706c5ccf6dae0d4fadb2e27d7bbfb69cf5c504353f320194a8b78a9422f2dc20d1becc8f1e37712d4cf63b2caceda7f46870705097a9316b6da540e2c664cba5f0133610c6749c3667892971649b0043f93bd5240bdb3ea9d3b3f7cd19c069ddddac505fac3e68f0db46c304db012fc3a0984b49135e920cbc386f604c9d80f1bafdcf502"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xfa, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x3, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7f}, @generic={0x100, 0x1, "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"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x7, 0x30, 0x8, 0x5}, 0x29, &(0x7f0000000080)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x0, 0xf00, 0xfffb, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0xa, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x0, 0x2000}]}, 0x9, [{0x9f, &(0x7f0000000140)=@string={0x9f, 0x3, "396625d6af9a24f00ee21ce6459e05e850a7307a75189306d67169db24617aeebce7bf5f14bc2d1cc6ac999f42f418f2008fb79120466ad79949ae2b803cb34607858559c464ed48c99d744ba8dfdf29134d289e4a5be67873cfa81b9cb40a14947544a27d1a6ca09119040a64d53b07be2b549a278ab83abdc175c75210c0fa3c631d6948aa7415f890b735dd1c87012438bf762c53c43f176fe718c1"}}, {0x65, &(0x7f0000000200)=@string={0x65, 0x3, "46da42751507a5ba27872b1657c5d24518ce23fd71ea3dc5c63139a02e69efe86722362a5c946cf5acbe3230af485976e6b0da120cdf50ee8c19be578fd8b724cc3bbe9f9df0108343a400b7e4d1c2dcea8f9f3230293be498e401c2480ae83c77f5ce"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x347d}}, {0x49, &(0x7f0000000280)=@string={0x49, 0x3, "381db52ed51ef52e2a83e6a8c2e79f67541ccc21923e239da3c105f9f4f4cbb433aecfa1051da1688ca462b3c53133020bc7b8668141f9e001e3d6c9c6d2094c4b966ca0ca800e"}}, {0x8c, &(0x7f0000000300)=@string={0x8c, 0x3, "45e514e985e1f83b08b228c67ad99517402a15ac1d2d54469aa15bcff0e7a21c4a4ed20ae782a8c518cf19bc9dcf31ec943b334d28e57c44e6b022453c40598bbf91b8487687ebb09f642446595b275c9cf788a5590be531964b3ecd92a24fccd4d1d9506f66dc1336b4fa7396dce972d1a97ba4258aa8ce995648ffe5db3e7da27df2ec63513c0fb999"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x82c}}, {0x32, &(0x7f0000001040)=@string={0x32, 0x3, "46214d01f01c4878ac8e7fa3e42fcf1558b736c267a0bad4a7f3f45039530a8367b7e2ddf90a520a922a77a3bfb92ead"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x480a}}, {0xdc, &(0x7f0000001280)=ANY=[@ANYBLOB="dc0313908d5b8298fd3e546dd31db25c4d7639d1f599b5118682ec0329261274dba02cac1d3fc9acb608b1133e4ff1cda717a97a26d4e5abe2b94eeb517fbc47fafa83ee940957b74ef00ee75ce7f8f07187db3707b1ddedc4b5ee124547472a58edf036517ab693ececa969fa318845fcfd8a2435efcd9d55738101bd7ab532af7ff507c5a55834d9c18f9726d2fe8e39d4e42b92ff4414a8c7c474c7c8edb6fc930a2f47ecefc2a0d8f51d5b898a9547a0a37f27d6509ad164ee1947bc4051ff6b6261b1824111a9f3d216bf2c399f7e9412650aaeaead9dac0073c0bb023dc7fc44f0"]}]}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c555201816139109"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 12.015348901s ago: executing program 2 (id=4125): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x201, 0x9b, 0xd4, 0x35, 0x8, 0x1b80, 0xd700, 0xa415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xf8, 0x0, 0x6, [{{0x9, 0x4, 0xb, 0x80, 0x1, 0x3, 0x0, 0x0, 0x3, [], [{{0x9, 0x5, 0xe, 0x3, 0x90, 0x7, 0x2, 0xa0}}]}}]}}]}}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0x23, 0xa5, {0xa5, 0x23, "21c044975069b7be2f92fe2b6bd1ff41ab607fd339354b6734e0b2e2925f0947fcbf8f50aec467f69f5b8fcec724903e93222a5d6a03e986db1bf6c164a99f4eccdeb8c3ef40b1bb1f16f15cdd14985485ef9304f55f806a2a528d3f8b40f0a649c036c3d285c4125a5471c6c5dd067db468deadaa9ee4e8c4a3db9c9a4d1639b8ce85a3cc0fd7d2790016782db736a02e5374ff45090f6aa9251f9296e0e9ffc4ac27"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "8b5afd6dd94a3aa737339382888937a75eef7a804960136d63b36325b59a49432f167da48dd776d5d6"}}, &(0x7f0000000c00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x44, 0x60, 0x4, 0x4, "4256bbf7", "4deb3d1d"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0xf, 0x6f, 0x3, 0x1}}}, &(0x7f0000001200)={0x84, &(0x7f0000000d00)={0x40, 0x0, 0x9d, "3bf7e788b1ee090bb8d2bfa83b17b717991af1fbccd62bbce4229bd538fac74fcc4882a99fa03727f6a22ce0f75862fadfc91f456cbb2c83dc644b6af115d0772a85e13ffe3d03150b331afb60fcf6f9274786405158712279cc3895096ba6f3f5b7c72a9ea44c17281327cf3ca698cbd0d8a719f85b240d8fddbdbd98a8999b8b95152811aba8f16fb154382c42456d79920a07ffa0d3f9db32a185c3"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x20, 0x1}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9148"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0xf}, &(0x7f0000001040)={0x40, 0x13, 0x6}, &(0x7f0000001080)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x19, 0x2, 'Uk'}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x8f}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_connect$uac1(0x1, 0xeb, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0xbf, 0x80, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xf}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x8, '$F'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x5, 0x6, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x9, 0x6, 0x3, 0x2], 0x1}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x9, "9eab32"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0xa, 0x8, 0x9, 0x6, 0x2], 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x0, 0x2, "9c1360eaef51"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x7, 0x8, {0x7, 0x25, 0x1, 0x1, 0x2, 0x3000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x709, 0x10, "af8e95685f5e"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x1, 0x9, "", "7e041c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x4, "6eb5a760"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x37, 0x2, 0x81, 0x3, ' [ 2046.081416][T22407] dump_stack_lvl+0x116/0x1f0 [ 2046.081453][T22407] print_report+0xcd/0x680 [ 2046.081481][T22407] ? __virt_addr_valid+0x81/0x610 [ 2046.081511][T22407] ? __phys_addr+0xe8/0x180 [ 2046.081540][T22407] ? v4l2_fh_init+0x27d/0x2c0 [ 2046.081566][T22407] kasan_report+0xe0/0x110 [ 2046.081593][T22407] ? v4l2_fh_init+0x27d/0x2c0 [ 2046.081626][T22407] v4l2_fh_init+0x27d/0x2c0 [ 2046.081655][T22407] v4l2_fh_open+0x83/0xc0 [ 2046.081683][T22407] em28xx_v4l2_open+0x24e/0x7e0 [ 2046.081714][T22407] v4l2_open+0x222/0x490 [ 2046.081740][T22407] ? __pfx_v4l2_open+0x10/0x10 [ 2046.081766][T22407] chrdev_open+0x234/0x6a0 [ 2046.081801][T22407] ? __pfx_chrdev_open+0x10/0x10 [ 2046.081840][T22407] do_dentry_open+0x6da/0x13a0 [ 2046.081872][T22407] ? __pfx_chrdev_open+0x10/0x10 [ 2046.081914][T22407] ? inode_permission+0x156/0x630 [ 2046.081942][T22407] vfs_open+0x82/0x3f0 [ 2046.081963][T22407] ? may_open+0x1f2/0x400 [ 2046.081990][T22407] path_openat+0x1de4/0x2cb0 [ 2046.082028][T22407] ? __pfx_path_openat+0x10/0x10 [ 2046.082061][T22407] ? __lock_acquire+0xb8a/0x1c90 [ 2046.082086][T22407] do_filp_open+0x20b/0x470 [ 2046.082119][T22407] ? __pfx_do_filp_open+0x10/0x10 [ 2046.082164][T22407] ? alloc_fd+0x420/0x760 [ 2046.082207][T22407] do_sys_openat2+0x11b/0x1d0 [ 2046.082230][T22407] ? __pfx_do_sys_openat2+0x10/0x10 [ 2046.082257][T22407] ? rcu_is_watching+0x12/0xc0 [ 2046.082288][T22407] ? handle_softirqs+0x5a3/0x8d0 [ 2046.082322][T22407] __x64_sys_openat+0x174/0x210 [ 2046.082348][T22407] ? __pfx___x64_sys_openat+0x10/0x10 [ 2046.082375][T22407] ? __pfx_handle_softirqs+0x10/0x10 [ 2046.082411][T22407] do_syscall_64+0xcd/0x4b0 [ 2046.082434][T22407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.082459][T22407] RIP: 0033:0x7ff9a0053407 [ 2046.082480][T22407] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2046.082504][T22407] RSP: 002b:00007ffde5cf25a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2046.082528][T22407] RAX: ffffffffffffffda RBX: 00007ff99ff65880 RCX: 00007ff9a0053407 [ 2046.082545][T22407] RDX: 0000000000000000 RSI: 00007ffde5cf3f22 RDI: ffffffffffffff9c [ 2046.082562][T22407] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2046.082577][T22407] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2046.082593][T22407] R13: 00007ffde5cf27f0 R14: 00007ff9a07e9000 R15: 0000556e121c94d8 [ 2046.082618][T22407] [ 2046.082626][T22407] [ 2046.086135][ T8245] dvb-usb: error while querying for an remote control event. [ 2046.093282][T22407] Allocated by task 797: [ 2046.093297][T22407] kasan_save_stack+0x33/0x60 [ 2046.093321][T22407] kasan_save_track+0x14/0x30 [ 2046.093341][T22407] __kasan_kmalloc+0x8f/0xa0 [ 2046.093359][T22407] em28xx_v4l2_init+0x114/0x40c0 [ 2046.093385][T22407] em28xx_init_extension+0x137/0x200 [ 2046.093417][T22407] request_module_async+0x61/0x70 [ 2046.112628][T19895] m920x_read = error: -19 [ 2046.115667][T22407] process_one_work+0x9cc/0x1b70 [ 2046.125787][T19895] dvb-usb: error while querying for an remote control event. [ 2046.128977][T22407] worker_thread+0x6c8/0xf10 [ 2046.132010][T20280] usb 4-1: Using ep0 maxpacket: 32 [ 2046.136547][T22407] kthread+0x3c2/0x780 [ 2046.136574][T22407] ret_from_fork+0x5b3/0x6c0 [ 2046.136605][T22407] ret_from_fork_asm+0x1a/0x30 [ 2046.136632][T22407] [ 2046.136638][T22407] Freed by task 797: [ 2046.136650][T22407] kasan_save_stack+0x33/0x60 [ 2046.142586][T15290] m920x_read = error: -19 [ 2046.146069][T22407] kasan_save_track+0x14/0x30 [ 2046.150564][T15290] dvb-usb: error while querying for an remote control event. [ 2046.155203][T22407] kasan_save_free_info+0x3b/0x60 [ 2046.155235][T22407] __kasan_slab_free+0x37/0x50 [ 2046.155256][T22407] kfree+0x283/0x470 [ 2046.155285][T22407] em28xx_v4l2_init+0x22c5/0x40c0 [ 2046.155311][T22407] em28xx_init_extension+0x137/0x200 [ 2046.165521][T22396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2046.168845][T22407] request_module_async+0x61/0x70 [ 2046.174829][T22396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.178012][T22407] process_one_work+0x9cc/0x1b70 [ 2046.190477][ T797] em28xx 3-1:0.89: Remote control support is not available for this card. [ 2046.191490][T22407] worker_thread+0x6c8/0xf10 [ 2046.196855][T20535] m920x_read = error: -19 [ 2046.201146][T22407] kthread+0x3c2/0x780 [ 2046.201173][T22407] ret_from_fork+0x5b3/0x6c0 [ 2046.201213][T22407] ret_from_fork_asm+0x1a/0x30 [ 2046.206197][T20535] dvb-usb: error while querying for an remote control event. [ 2046.211201][T22407] [ 2046.211209][T22407] The buggy address belongs to the object at ffff888128fc4000 [ 2046.211209][T22407] which belongs to the cache kmalloc-8k of size 8192 [ 2046.211228][T22407] The buggy address is located 1840 bytes inside of [ 2046.211228][T22407] freed 8192-byte region [ffff888128fc4000, ffff888128fc6000) [ 2046.215785][ T797] m920x_read = error: -19 [ 2046.219595][T22407] [ 2046.219604][T22407] The buggy address belongs to the physical page: [ 2046.219624][T22407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128fc0 [ 2046.219647][T22407] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2046.224289][ T797] dvb-usb: error while querying for an remote control event. [ 2046.229133][T22407] anon flags: 0x200000000000040(head|node=0|zone=2) [ 2046.229163][T22407] page_type: f5(slab) [ 2046.234450][T20280] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 2046.238567][T22407] raw: 0200000000000040 ffff888100042280 0000000000000000 dead000000000001 [ 2046.243634][T20280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.247885][T22407] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2046.247908][T22407] head: 0200000000000040 ffff888100042280 0000000000000000 dead000000000001 [ 2046.247929][T22407] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2046.254995][T19895] m920x_read = error: -19 [ 2046.257766][T22407] head: 0200000000000003 ffffea0004a3f001 00000000ffffffff 00000000ffffffff [ 2046.262608][T19895] dvb-usb: error while querying for an remote control event. [ 2046.267417][T22407] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2046.267434][T22407] page dumped because: kasan: bad access detected [ 2046.267454][T22407] page_owner tracks the page as allocated [ 2046.277629][ T5223] em28xx 3-1:0.89: Closing input extension [ 2046.282887][T22407] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5242, tgid 5242 (kworker/1:2), ts 1583478704377, free_ts 1499216530919 [ 2046.282932][T22407] post_alloc_hook+0x1c0/0x230 [ 2046.293502][T22396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2046.297737][T22407] get_page_from_freelist+0xf98/0x2ce0 [ 2046.317581][ T5223] em28xx 3-1:0.89: Deregistering snapshot button [ 2046.325731][T22407] __alloc_frozen_pages_noprof+0x259/0x21e0 [ 2046.325771][T22407] alloc_pages_mpol+0xe4/0x410 [ 2046.325794][T22407] new_slab+0x23b/0x330 [ 2046.325817][T22407] ___slab_alloc+0xda5/0x1940 [ 2046.325841][T22407] __slab_alloc.constprop.0+0x56/0xb0 [ 2046.334284][T19895] m920x_read = error: -19 [ 2046.341948][T22407] __kmalloc_noprof+0x15b/0x4d0 [ 2046.350033][T19895] dvb-usb: error while querying for an remote control event. [ 2046.357874][T22407] carl9170_usb_init_device.part.0+0x202/0x4c0 [ 2046.357902][T22407] carl9170_usb_firmware_step2+0x195/0x330 [ 2046.357924][T22407] request_firmware_work_func+0x13c/0x250 [ 2046.368614][T20535] m920x_read = error: -19 [ 2046.368899][T22407] process_one_work+0x9cc/0x1b70 [ 2046.371241][T20535] dvb-usb: error while querying for an remote control event. [ 2046.378574][T22407] worker_thread+0x6c8/0xf10 [ 2046.378598][T22407] kthread+0x3c2/0x780 [ 2046.378617][T22407] ret_from_fork+0x5b3/0x6c0 [ 2046.378648][T22407] ret_from_fork_asm+0x1a/0x30 [ 2046.378674][T22407] page last free pid 2956 tgid 2956 stack trace: [ 2046.383190][ T797] m920x_read = error: -19 [ 2046.387605][T22407] __free_frozen_pages+0x78a/0x1040 [ 2046.392375][ T797] dvb-usb: error while querying for an remote control event. [ 2046.396927][T22407] vfree+0x1fd/0xb50 [ 2046.396949][T22407] kcov_close+0x34/0x60 [ 2046.396968][T22407] __fput+0x402/0xb70 [ 2046.396986][T22407] task_work_run+0x150/0x240 [ 2046.397010][T22407] do_exit+0x86c/0x2bd0 [ 2046.403213][T20280] usb 4-1: config 0 descriptor?? [ 2046.407268][T22407] do_group_exit+0xd3/0x2a0 [ 2046.414895][T15290] m920x_read = error: -19 [ 2046.417020][T22407] get_signal+0x2673/0x26d0 [ 2046.421967][T15290] dvb-usb: error while querying for an remote control event. [ 2046.429390][T22407] arch_do_signal_or_restart+0x8f/0x7d0 [ 2046.429427][T22407] exit_to_user_mode_loop+0x7c/0xe0 [ 2046.429449][T22407] do_syscall_64+0x3e9/0x4b0 [ 2046.429467][T22407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.429489][T22407] [ 2046.429495][T22407] Memory state around the buggy address: [ 2046.429508][T22407] ffff888128fc4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.436205][T22396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.439182][T22407] ffff888128fc4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.452370][T19895] usb 1-1: USB disconnect, device number 115 [ 2046.452746][T22407] >ffff888128fc4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.472596][T15290] m920x_read = error: -19 [ 2046.472722][T22407] ^ [ 2046.472740][T22407] ffff888128fc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.480154][T15290] dvb-usb: error while querying for an remote control event. [ 2046.485100][T22407] ffff888128fc4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.485115][T22407] ================================================================== [ 2046.490257][T22407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2046.490277][T22407] CPU: 1 UID: 0 PID: 22407 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00314-gb4b4dbfa96de #0 PREEMPT(voluntary) [ 2046.490309][T22407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2046.490325][T22407] Call Trace: [ 2046.490333][T22407] [ 2046.490343][T22407] dump_stack_lvl+0x3d/0x1f0 [ 2046.490391][T22407] panic+0x71c/0x800 [ 2046.490418][T22407] ? __pfx_panic+0x10/0x10 [ 2046.490440][T22407] ? mark_held_locks+0x49/0x80 [ 2046.490466][T22407] ? v4l2_fh_init+0x27d/0x2c0 [ 2046.490500][T22407] ? check_panic_on_warn+0x1f/0xb0 [ 2046.490527][T22407] ? v4l2_fh_init+0x27d/0x2c0 [ 2046.490556][T22407] check_panic_on_warn+0xab/0xb0 [ 2046.490582][T22407] end_report+0x107/0x170 [ 2046.490609][T22407] kasan_report+0xee/0x110 [ 2046.490637][T22407] ? v4l2_fh_init+0x27d/0x2c0 [ 2046.490669][T22407] v4l2_fh_init+0x27d/0x2c0 [ 2046.490699][T22407] v4l2_fh_open+0x83/0xc0 [ 2046.490728][T22407] em28xx_v4l2_open+0x24e/0x7e0 [ 2046.490758][T22407] v4l2_open+0x222/0x490 [ 2046.490784][T22407] ? __pfx_v4l2_open+0x10/0x10 [ 2046.490810][T22407] chrdev_open+0x234/0x6a0 [ 2046.490845][T22407] ? __pfx_chrdev_open+0x10/0x10 [ 2046.490885][T22407] do_dentry_open+0x6da/0x13a0 [ 2046.490916][T22407] ? __pfx_chrdev_open+0x10/0x10 [ 2046.490951][T22407] ? inode_permission+0x156/0x630 [ 2046.490978][T22407] vfs_open+0x82/0x3f0 [ 2046.490999][T22407] ? may_open+0x1f2/0x400 [ 2046.491027][T22407] path_openat+0x1de4/0x2cb0 [ 2046.491065][T22407] ? __pfx_path_openat+0x10/0x10 [ 2046.491099][T22407] ? __lock_acquire+0xb8a/0x1c90 [ 2046.491124][T22407] do_filp_open+0x20b/0x470 [ 2046.491155][T22407] ? __pfx_do_filp_open+0x10/0x10 [ 2046.491197][T22407] ? alloc_fd+0x420/0x760 [ 2046.491234][T22407] do_sys_openat2+0x11b/0x1d0 [ 2046.491258][T22407] ? __pfx_do_sys_openat2+0x10/0x10 [ 2046.491286][T22407] ? rcu_is_watching+0x12/0xc0 [ 2046.491316][T22407] ? handle_softirqs+0x5a3/0x8d0 [ 2046.491350][T22407] __x64_sys_openat+0x174/0x210 [ 2046.491383][T22407] ? __pfx___x64_sys_openat+0x10/0x10 [ 2046.491411][T22407] ? __pfx_handle_softirqs+0x10/0x10 [ 2046.491446][T22407] do_syscall_64+0xcd/0x4b0 [ 2046.491470][T22407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.491495][T22407] RIP: 0033:0x7ff9a0053407 [ 2046.491515][T22407] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2046.491540][T22407] RSP: 002b:00007ffde5cf25a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2046.491564][T22407] RAX: ffffffffffffffda RBX: 00007ff99ff65880 RCX: 00007ff9a0053407 [ 2046.491582][T22407] RDX: 0000000000000000 RSI: 00007ffde5cf3f22 RDI: ffffffffffffff9c [ 2046.491599][T22407] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2046.491614][T22407] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2046.491630][T22407] R13: 00007ffde5cf27f0 R14: 00007ff9a07e9000 R15: 0000556e121c94d8 [ 2046.491656][T22407] [ 2046.494034][T22407] Kernel Offset: disabled