Extracting prog: 19m43.53919529s
Minimizing prog: 35m26.259736766s
Simplifying prog options: 0s
Extracting C: 1m23.708399063s
Simplifying C: 8m53.525838501s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$printer-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x71, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0xd, 0x8}}]}}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0xff, 0x0, 0x20, 0x5}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c57b911c63ddbebb404c3c8a9b16de59"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x9, 0x60d}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0xf00, 0x1, [0x3f0f, 0xff0000]}, @ptm_cap={0x3}, @generic={0xe, 0x10, 0x4, "30d2344fd1bd61e38ed9e2"}]}, 0x1, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "2cb818d80202b296926db97d5c713352c3b12d715fc99bb77449dbf34dd152b786d343f4b8dc1154ad2a92659cd5df88af00e431610393a754a1bf603765c1f1f4544f8310bbf057c58520858104ea1d5470f0b2afd8399adf743ebd663b1700326e9f28d4daf8fdb2bcf0"}}]}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d7"], 0x0}, 0x0) (rerun: 32)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x29, 0x1b, 0x76, 0x10, 0xccd, 0x78, 0x5dc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x79, 0xfa}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000a00)={0x40, 0xe, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x20, 0x17}, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000e0000000010"], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$hid-syz_usb_connect$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCGSW-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x59)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000406b1d0101400001020301090294000301101006090400000001010000be2401018000020102072408040100050c240703000000d8857005850904010000010200000904010101010200000c2402011300000001017f0400090402000001020000090402010101020000072401010502100f240202966802000007250102f80300"/166], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a25"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="07cc4dfa9fd2c2c2e9e60f1a2ac05d62efff8f39fd2f8da0931fb3f79c6cdd35d2b99ac7d4b6560e9402f1ec25d91b31d72e63688a53e84cce52a2809d78b2a7ed3642128310e936555a0e149323da7be332e1ae8dfe15ebfc88c885dbb9318cb60b5b5dc0188a477a24c944c0", @ANYBLOB, @ANYRES8=r0], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000780)=""/158)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "e03400"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2b, 0x2f, {0x2f, 0x11, "e61994525cd5b5f1b69e71c92d55607dd14823be01331d8e5af8f62ffe147f765f7aa23080ffec27f09edc38d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x60, 0x30, 0x10, "ca36bc1d0c07dac48966e9f9049d038c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe7}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x8, 0x3, 'vE\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 8, 4, 19, 30, 14, 30, 8, 6, 29, 19, 29, 10, 30, 14, 8, 30, 6, 30, 17, 30, 6, 30, 30, 16, 3, 12, 7, 4]
detailed listing:
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x3e, 0x8, 0x3f, 0x10, 0x4cc, 0x2533, 0xfc58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0xa8, 0x7, 0x2, 0x8, 0x55, 0xfe, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x400, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x4, 0x5, 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000a40)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1f220000ddcd"], &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0xb11}}}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x81, 0x1, 'a'}, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x85, 0x3, "a3bdb8"}})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000080)=""/94)
syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x4, 0xd5, &(0x7f0000000100)="bba1b2933e677161da978fec6030fa3dd7fc5c73fa2a05522270232f174004ef5b4eae0a6cf27baba3b13a730e2280636c5d1fff60ea352e9c4dbaf38490ad431b5de1f043f454e8590436e96b0423f6145441fb30f29b19dd3c71422a416bae24a764997668ed0ae50eb82a94cc0190630340659a4a7215b0355c86099f1e8191ac2761bb5366694729aa57b6e895ed98f447f21a2e5fdfd9cbe7331bdb8d567c6cc1037ed03ddb4ef625b4321cfdbba08229f937325e9395cd0c4d5ff19dcd187999a0aeba116d0b226a7c6af20946727136eb47")
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0)
syz_usb_connect(0x2, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038143a408e2040114880a0102030109024f0001018000510904db04000254f30207240600006cbc053400ff010d240f010000000006000300060624070304000524060000052400f4ff0d240f01"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "37471e3a3f17"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3c, 0x7e, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfe, 0x10, 0x7f}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x5a4, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0xfb, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x4ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x25, 0x8, 0xea}}}}}]}}]}}, 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120136b74ba15908cf100055"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xba, 0xa, 0x2, 0x0, 0x8}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331")
executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x202840)
ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xc6, 0x9])
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_connect$uac1(0x1, 0x1e, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019553c2010203010902120001000010000904430000317d5500"], 0x0)
r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x20, 0xc, 0x2, {0x2, 0x7}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000380)={0x20, 0x12, 0x80, "2dd4ffbd70060321ca52eab770d5fa6e795abdc952c1d160fad0fd285da44f3500c8cf02c2ceb6b10e55056047cf6b2af5d4ad6fc87145d0c3ccaa9da5faa25d084df7495bf720adc71f0879dc3002164b4dbb615feabae4abe53c67fd001d29d1ddbc05cf9b2e01e7f34d018180ff3fcad369e589980398aa7d90177ce271a6"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x80000)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) (async)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) (async, rerun: 64)
r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x145f, 0x212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xa3a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0xd2, 0x1f}}]}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x250, 0x7f, 0x6, 0x6, 0x10, 0x9}, 0x61, &(0x7f0000001100)={0x5, 0xf, 0x61, 0x2, [@generic={0x52, 0x10, 0x4, "a2af1d9a3eb811ae5be06b4c05a81f9c769a23c5414fc44211d916e2d71b068fcd5f1327f2f00ff7432cdb46f9bebef150b4ba14f505d716a32394fe4cfb27628b606c4d10a3e50c32b28d3574a467"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x9}]}, 0x4, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x9f, &(0x7f0000001200)=@string={0x9f, 0x3, "6681f055e8848af1b539a7a9ee1b6dc02ced449e124a066e014dd93a8946628230feb1b311bcc24ac8861fd4f84a5a4afc710edc5ca850e1ff5074e356c61185544bf8a97120e9754bbe0756abc686b32be6856a5157d12fec68bd7b87a614585a9d74a2882a022bc093134cb21687981fc47a9046ce4f82dc29e09b7e2292d247adb899432ddd8faa4fe6be28636f8b44e751ba4f79149b5279d9958d"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x42b}}]}) (rerun: 64)
syz_usb_control_io(r1, &(0x7f0000001540)={0x2c, &(0x7f0000001380)={0x40, 0x31, 0x45, {0x45, 0x4, "cf585243bb961500b2ad499a3f032cc9e5e8830ea92c6fc056e5642178e7ce22efde3f1ffd90c2edb05fad2d66ed6ba213915af2ad097085befd6aad0aeba4bbb3d08f"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000001440)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x86, "3e9d5449e9b9c066586ed3c8c56bf658"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfc, 0x4, 0x7, 0x81}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x719f, 0xf000, 0x1c, [0x30, 0xffc000, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xfe, 0xfe, 0x5}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x1, 0xf, 0x81, "b674662f", "9af1550a"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x3, 0x4, 0x5e, 0x4, 0x6, 0x5}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x40, 0x13, 0x57, "defc0ef2587e49a4011130e462569d04861f535dd903fa7a6affcbaea4e0879589d9659e16dc5fb0e7655914a595e30d78602c8a997cab741a2db46911b8d4f71d838eeb24ab7a880a36a43b156af905fe681c4e049a72"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x8, {0x1c00, 0x8, [0x0]}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001780)={0x40, 0xb, 0x2, "eeeb"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x4000}, &(0x7f0000001800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001840)={0x40, 0x17, 0x6}, &(0x7f0000001880)={0x40, 0x19, 0x2, "31e9"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001900)={0x40, 0x1c, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1}}) (async)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001a80)=""/67) (async)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001b00)=""/4096)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002b00)={0x5, 0x2b, 0x5, 0x9ca, 0x400, 0x1}) (async)
r2 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000002b40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x40, 0xe0, 0x57, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1c62ddb14b"}, {0x5, 0x24, 0x0, 0xf4aa}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0x1a, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0x11}, [@dmm={0x7, 0x24, 0x14, 0x8d37, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7a, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0x9, 0x1}}}}}}}]}}, &(0x7f0000002fc0)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x201, 0x1, 0xe8, 0xb, 0x8, 0xdf}, 0x36, &(0x7f0000002c00)={0x5, 0xf, 0x36, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x5, 0xff00, 0x3, [0xff3fcf, 0xffc03f, 0x3f30, 0xc000, 0xc060, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x27, 0x8, 0x9}]}, 0x8, [{0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x406}}, {0x1e, &(0x7f0000002c80)=@string={0x1e, 0x3, "2d0e5d404e432210c22891f5755c20bde23e86372a9cb4299361ffd8"}}, {0xfa, &(0x7f0000002cc0)=@string={0xfa, 0x3, "be24632f150f27b3f4e7ef1dee4c8179516eb6a44b3df15fe310df58a9a3e36a26855970b4d6a15009ae95f7fb1b40cfdcf167d2240bf0edbb1cba50a58ca908c8d7c31d5700aeafcc10f29253394558e93745ad76294dae9d6eee7ef0cc55b2b09c60c61efd95d382a7346d2b39595d8afc0c8b371aec5ed500041695e8cb09982637da57e5c4ea1d2f1e68fb3d499dc83c37a1d86d1ccf833a2bd7c8e7e96c816b8ba81212862719655931aad079637aeddad8c2a1a5a232ae6ec45379381c4103b90ee419f723588a880a68ac9f7a039400ee901406c4fe0208ecefbf4f7258c9b41f094ac8ecc99d3fa48a184ecbade8c42b644f2bbe"}}, {0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0xc23}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x1847}}, {0xc6, &(0x7f0000002e80)=@string={0xc6, 0x3, "72625588c89b25f8b23d0340089985db3b584e98f0ba075ef16a91d98c67f929695fd6b23e4383c08b35fd771c5b1319685202a9d8e8466e34dc075f25d9ca8dc8e722f620b0585b26b496127b54b37d8a867c546dfaa7fbe7525969466134306f299c4e3e1b68002a917b49361d71308eaa2bfdf9a5f4dc8eb5eca59f5b3d793e8f63cd2af323f2bd322d4dd851ec1a0c260a936cd43c2fa7673202c969c035706141af3838e1043181dad9e9fa53e5def556988cab5fc09073dde6bdd9bdacf98b11ac"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000003180)={0x14, &(0x7f0000003040)={0x40, 0x5, 0xe6, {0xe6, 0x21, "8576e15be9947b1a8b5b360ae62cd6927c7731d1d51b0d5c41a792ae00434455ed727b76f0af766a95a65c69acae671651a7822276079015829725db743bd54dc668998efa375b1631d676f231fba593243a8b3f6132ffc594d7a17399cfb2e9f25e0b780166e9cc54178f8c91ab263bea6f05317430ac51487c79200d32c805a0c1104bae99cb555946d4cccb06d73f158501b2dabd183164250139bf01d841485a29b0c46ad40315343f526b05dc638a148eda2d459442136a8bba42f05306aff40dbe18536684948f785f734a93c60702ce80561e3b6ad9d56f1239e9f66bf7090863"}}, &(0x7f0000003140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000033c0)={0x44, &(0x7f00000031c0)={0x40, 0xb, 0x2b, "e9b18593e3f89217f6ccbaa026578464fc8359844f70891ca1cb8369497b0734e5a6af63cd985c8f1445ee"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003280)={0x20, 0x80, 0x1c, {0x833e, 0x6c8, 0x400, 0x8001, 0x8, 0x5, 0x3ff, 0xff, 0x3, 0xe, 0x9, 0xc}}, &(0x7f00000032c0)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000003300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003340)={0x20, 0x87, 0x2, 0x86b4}, &(0x7f0000003380)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000003440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x4d9, 0xa0c2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x9a6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000003740)={0xa, &(0x7f0000003480)={0xa, 0x6, 0x241, 0xa, 0x2, 0x18, 0x40, 0x16}, 0x5, &(0x7f00000034c0)={0x5, 0xf, 0x5}, 0x7, [{0x3a, &(0x7f0000003500)=@string={0x3a, 0x3, "0b356911b1f231c62ead2761f1c1aa53e607e91ca16276f7319e9bfdb99d8422b52c23f51999ec0a5e90044a1271d1f36bfcac744187c810"}}, {0x70, &(0x7f0000003540)=@string={0x70, 0x3, "1437315245396479aefe037d1742ddf9f39a230a02df3fcf8942d71f667b1433eb09cb3fbf17aca898fd71a7c84123e21d193abc057f2e63c9bcec58bce05d1bff28a2101b439177def1af691c6fa903e3c1946b8a0c58ad83f7ab8f94534c4e67b007dbe4d11aa8fb2626915056"}}, {0x66, &(0x7f00000035c0)=@string={0x66, 0x3, "c65b027b1e05b8810e1c11bc08b01eb0aa2efd71150cad9bcbc63fa3c6fd6459cb1735a5b751a46670968ca785570a1bae3f7dd9dcf37d693c93696af604227255bccc1b05b1a34e13f14a39527b7f5240a7ab036ddbd106eb49a90940c2f827d8586d97"}}, {0x4, &(0x7f0000003640)=@lang_id={0x4, 0x3, 0x380a}}, {0x3d, &(0x7f0000003680)=@string={0x3d, 0x3, "c18942f8e6daf3b5f71f4c2a27a1c480af8d3f94a020f0043f6718aacd6108b0ebac983a72ce1039412c17bd750dd9d3834eae8202ee7ee57df1dc"}}, {0x2e, &(0x7f00000036c0)=@string={0x2e, 0x3, "74d6b6236931be46130a6a8eae74278fffdb133c15318b5d5e98697a520b000571737afd96f2c199e59853a4"}}, {0x2d, &(0x7f0000003700)=@string={0x2d, 0x3, "9ba207e09101979ef8ad80925ac6fcf28049dc203baf9b3729d2828194a94db81c50b009606d7dd65d0c77"}}]}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000003900)={0x14, &(0x7f00000037c0)={0x0, 0x2, 0xc9, {0xc9, 0x4, "6950080edf571043d962d4799f7cb2f3da08458c38a10f10bacedf9620745f41748111c7dc073ab2f6b1a9c90392bf02be0d8613e1c9f4dd24748fb0e47568ad7de781243ca358654ebdf178335ab211d60fb212cf48b3f60dd9fd323cae56b728bb2b0a4677ae2f0684fa95f39a298bda12150c1b500c947b61d222275b86951e5829f65271056ad1814243e53541df49309ba6476fb386359e0167a316392c1b9bcf5944cca7eeb163a14b851974ff4773c18fa8710a3b6ebe07ad7ab2fa430d94f96bf71bac"}}, &(0x7f00000038c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003b80)={0x44, &(0x7f0000003940)={0x40, 0x11, 0x57, "98ec48a39d5da53bc1098bb43fa12aaf6b15dc4ec053c0fa61b44d22b128afa1b97a26b1f742ce287d01cfbc29f1e096544a797730e29cfd6ad16116d26c78b7e23ad2d744ece1d24c00a99e699c99d98609bf1895b3b0"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0x3d}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000003a40)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x3, 0x8b, 0x7, 0x400, 0x3, 0x8ab, 0x6, 0x0, 0x5}}, &(0x7f0000003a80)={0x20, 0x85, 0x4, 0xfffffffa}, &(0x7f0000003ac0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003b00)={0x20, 0x87, 0x2, 0xd}, &(0x7f0000003b40)={0x20, 0x89, 0x2, 0x1}})
r3 = syz_open_dev$hiddev(&(0x7f0000003c00), 0x1, 0x141000)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000003c40)=0x1)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000003c80)=""/32)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000003cc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000003dc0)={0xa, &(0x7f0000003d00)={0xa, 0x6, 0x201, 0x4, 0x6, 0x6, 0x8, 0x7}, 0x21, &(0x7f0000003d40)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xa, 0x4, 0x7e, 0x35}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x9, 0x519}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x8}]}, 0x1, [{0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x416}}]}) (async, rerun: 64)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003e80)={0x14, &(0x7f0000003e00)={0x0, 0x0, 0x1d, {0x1d, 0x23, "0d0b8db500a3e50bdf17158367e146b08d71489c38db3319963e28"}}, &(0x7f0000003e40)={0x0, 0x3, 0x24, @string={0x24, 0x3, "d8ec014f872835459352035597396f99974de1a70bc53b1420ad9d79aba4daf3c9be"}}}, &(0x7f00000040c0)={0x34, &(0x7f0000003ec0)={0x20, 0x9, 0x7e, "8ac7e9b51eff0d8cccca81dc08ab27f2c1d56c110de53d403db8f85246a28c3a5f77663ce5882cbbe9baf32575cf193d68f7fd833f7c109c5adfa35dae06698a447da06ba7dd608778b540d888584aa783ddcc814e9b2b0e8525623f1f182de3d1dea5e526ad929e659cb62d9a34c9bc83380151f476bed4c90e6f53aa1e"}, &(0x7f0000003f80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003fc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000004000)={0x20, 0x0, 0x1a, {0x18, "f03fa2030361f1c31b2898181b9713a32f90f76a66efe87f"}}, &(0x7f0000004040)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000004080)={0x20, 0x0, 0x1, 0x6}}) (rerun: 64)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000004100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x810, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x30, 0xb, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xe3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0xf9, 0x3}}]}}}]}}]}}, &(0x7f00000043c0)={0xa, &(0x7f0000004140)={0xa, 0x6, 0x200, 0x0, 0x8, 0x6, 0x8, 0x6}, 0x81, &(0x7f0000004180)={0x5, 0xf, 0x81, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x0, 0x0, 0x5, 0x48}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e82b5676de86b036d2872aefbcd77303"}, @generic={0x52, 0x10, 0xa, "d8bc00ead680ebc45fccf5d119596e74dd40d3aa6e047cdbd7999fd15d1183cdb3a6e5b8dbc157599504db65daf28c3c28bffa3b832147610cdd537bf7ce2892324b2e054e10d83d45ec1b26048f99"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x56, 0x10, 0x6, 0x6, 0x1}]}, 0x3, [{0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x1007}}, {0xdb, &(0x7f00000042c0)=@string={0xdb, 0x3, "e8dc3c9b6d11a99b57d067df2079c44931b05928f5916e1c76fe222de42f9ce8a24f64644a9438ceac6352b2937b9b325f6e32bc1ba31f4378ece872c684705fe04df936df597808ce4236b35446768e85ecf11cb0be8ad7e6c3cb90706730f850890e86f38e207639998b2aa2fc4f67a9a9a315116904fb7f4f10ef22ec3f17f01384e808839821d98a62017d8a4128c924e745aa11f2e1c6be84c3b176f0531807e61fc4339d309cfa9678c45dc0e804ec346a781c088cc006e443323dd415be20e0a761eb4a7946513dc094c7f28a562e4143c88aee1817"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000045c0)={0x24, &(0x7f0000004400)={0x40, 0xd, 0xe8, {0xe8, 0x5, "3f39279d8065fde93ab7854d425130256061a2c97d317bcb299bc58ce007cfdb21b7c84c6780d09273eab5676b11187af9ef4cb3c80affa54071c0ffd57574d541d0cf84bb4ecd6a7340346ca8b770dbf2c9f7496729fcd53d2f013f4bb4934a44620c36357008cf0e2b0a8157276e3f50ba6ca34a595295b8e42c50f85f50a49a97db364d08fe4dd7bb5d370fe6f668477839a299130217c0c2ec0f1f8d190b23f2794c8eba95597fe29ce03b2162427cedf4c9aa8267252d8b467e3dd03042aa49ffcd3f5f4831d4ff0ab0d8fc4b49c0e2d5be6a520351279615b3b7ea2223135d22f962f5"}}, &(0x7f0000004500)={0x0, 0x3, 0x6, @string={0x6, 0x3, "b5eff05d"}}, &(0x7f0000004540)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x7}, @global]}}, &(0x7f0000004580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x638}}}}, &(0x7f00000047c0)={0x2c, &(0x7f0000004600)={0x40, 0x5, 0x9c, "54f5993185f58b78e3304f6c1c1882aa149a8f8bb8b69ac258bcbfd521be2f384fd6b81bc63d7de613de44f6099d575585f30b49037393a13890dbf5b7f34b71fc0ebc40d6d029ad339335b33ec7f323a68bd289e4f23b4fadac052934805eb066920cbf3eb61eae3af171135b2bbd185ddf2c48a1f04270dc49b66c06387b940b7e36bce17c5132518525cae7139531c52fe9360a0e6b02440e92c7"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0x9a}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0x9f}, &(0x7f0000004740)={0x20, 0x1, 0x1c, "3451447af797f4b505ceb1d83d7cdcd167ce244f03bf207a1a88c089"}, &(0x7f0000004780)={0x20, 0x3, 0x1, 0x56}}) (async, rerun: 32)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000004800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x7, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xff, 0x7f}}]}}}]}}]}}, &(0x7f00000048c0)={0xa, &(0x7f0000004840)={0xa, 0x6, 0x110, 0x40, 0x3, 0xfb, 0xff, 0x4}, 0x32, &(0x7f0000004880)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "243bd3dd8ec2726d7ba464b247c8d474"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x92, 0x4, 0xb5, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x0, 0x8000, 0x5}]}}) (rerun: 32)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000004900)=[0x10, 0x8])
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000004a80)={0x14, &(0x7f0000004940)={0x0, 0xc, 0xc8, {0xc8, 0x8, "1809d669333cd5dddcde36cfb5ffabb8c67debeee0cce6e05c617298494cff16b45ce541a7dc1fb7d27714d6b806a75cfdaa7e4a30af03f69c4cfa9292719411eba1c3d9e266e7d0f5b85d27aacd7e0e05973a82fa2848da09b469949b1bdbce322339eb50469fcbad3e78705a13020f280d35186ca4aadc56991a0ca8854bbf9b6d4f9f1d59689381d669d38c90fd49a73ed9bab7813de4969869f2c5e55470d4d218c78c1248738e6596defe05715a03fbf7522b399f844b4c934ef8d6f4bcefa31e6e10ab"}}, &(0x7f0000004a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004cc0)={0x44, &(0x7f0000004ac0)={0x0, 0xe, 0x1f, "0036550448cca4d6d699a32f437a44e111bad28a2319705d78096d71b68aaf"}, &(0x7f0000004b00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000004b40)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000004b80)={0x20, 0x80, 0x1c, {0xfff8, 0x40, 0x3, 0x8000, 0x7fff, 0x3, 0x6a, 0xa00, 0x80, 0x4, 0x8, 0x1}}, &(0x7f0000004bc0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000004c00)={0x20, 0x83, 0x2}, &(0x7f0000004c40)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f0000004c80)={0x20, 0x89, 0x2}}) (async, rerun: 32)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000004d40)=""/22) (async, rerun: 32)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000004d80)=""/180) (async)
syz_usb_control_io(r1, &(0x7f0000005000)={0x2c, &(0x7f0000004e40)={0x20, 0x21, 0x7c, {0x7c, 0x6, "ce99fdd8ef8d8164bb17c52f48a303bc006da35a97a995b7c06383ad0df8596d589fbba19c43ac5a903e784bccc834ce3564fd51234d585dd1ec2f4c2650757261da0f05bb737b596e376bf3e399e4bbbadb56f439c4a1db35e8c285667d5a0b656cee895add50d8cb194a7c77728fa3bd130bd1cec34c7e01a3"}}, &(0x7f0000004f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000004f40)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b7339525cb48fecaf0c3beedfe675c8a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x978}]}}, &(0x7f0000004f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x4, 0xe, 0x9, "321dfa60", "cf2b2ee5"}}, &(0x7f0000004fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xd, 0x5, 0xd, 0xfff4, 0x8}}}, &(0x7f00000054c0)={0x84, &(0x7f0000005040)={0x40, 0x1f, 0xb9, "1e9c5eb69547d1f90dc92b9049849e6d057ef1a7963074f9745d944e2716b89a4efbe57dd655d26221c13456bd7811df7ec92ac8916c94e10daed55765265d806b06059bf1d12ccc0c7ce6b88b073316c7bed7894c4b2d669124afe285360d491a0fa37906a461f1a4ce5fb46faf4d25aae4e0d78ec0e51d0954f10ad63f1e4f79f8f599f8a6c4403481f2e1c55f50fe80be48bf621c58c136e4cc22df170e667a6792e0de27489cd86e8e143b3c5e9556d420fb56d5068353"}, &(0x7f0000005100)={0x0, 0xa, 0x1, 0x43}, &(0x7f0000005140)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000005180)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000051c0)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf00]}}, &(0x7f0000005200)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000005240)={0x40, 0x9, 0x1}, &(0x7f0000005280)={0x40, 0xb, 0x2, "96b2"}, &(0x7f00000052c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000005300)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000005340)={0x40, 0x17, 0x6, @remote}, &(0x7f0000005380)={0x40, 0x19, 0x2, "c6c0"}, &(0x7f00000053c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000005400)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000005440)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000005480)={0x40, 0x21, 0x1, 0xd}}) (async, rerun: 32)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000005580)=[0x40, 0x4]) (async, rerun: 32)
read$hiddev(r3, &(0x7f00000055c0), 0x0) (async)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000005600)=""/251)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005700)={0x2, 0x18, 0xe7c, 0x0, "70fcf81b0add64232faca0c38e1b8206a615572f9def3ca9451be96e19251a43"})
syz_usb_connect$uac1(0x5, 0xf8, &(0x7f0000005740)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x4, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd9, 0x2}, [@processing_unit={0x7, 0x24, 0x7, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x2, 0x5, 0x2, 0x0], 0x63}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x62, 0x2, 0x2, 0x95, "1988"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0xa, 0x6, 'c'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x2, 0xff, "e08ea4b818f3a782"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x0, 0x6, "c5b62d7409"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x8, 0x5, {0x7, 0x25, 0x1, 0x82, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x9, 0x3, "0e8f78e0585403"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x1, "2abff8817c417dd9f4"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0xe, '|', "bb08ac"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x4a, "078d", "01"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0xd, 0xc, {0x7, 0x25, 0x1, 0x2, 0x8, 0x3}}}}}}}]}}, &(0x7f0000005940)={0xa, &(0x7f0000005840)={0xa, 0x6, 0x0, 0xff, 0x0, 0xb6, 0x10}, 0x30, &(0x7f0000005880)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xfb, 0x5, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xa, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7, 0xf000, 0x5d, [0xfe7f3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x7, 0x7}]}, 0x2, [{0x4, &(0x7f00000058c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000005900)=@lang_id={0x4, 0x3, 0xc01}}]})
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/254)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x0, 0x1, 0x1c, {0x1c, 0x10, "84177713dfff74750be88c512cbdea6859dc78e1fad71d2caf04"}}, &(0x7f00000001c0)={0x0, 0x3, 0x45, @string={0x45, 0x3, "d12c86d209b8e17dffada520347ccea59a177ed71e699bd958579f6a14a809a9962d055a864848408ce75821aa90338a79ace4b38a04d121e866d290f93f7d0c7bec6e"}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x8, "2adf"}, @local=@item_4={0x3, 0x2, 0x4, "458a30f1"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3648, 0x2, 0x1, {0x22, 0xc8a}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000640)={0x0, 0x5, 0x7f, "338ed04be3b34da7dc00000000c285bf175aaee5d2bd9e47b8ec388f23b73021549f6ae557df26cdd8f244138050fbff1d2706e9bae4782789f26fd793b1d8d5ec03e76c8f709c00748360f91fefd09339d3383789cfcf53898e7ef485327f5616137de6d899a0d9fb4a5f67f0c6f5a287233295dc8ea6d3297a33a60c6e01"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x66, "bd60fed30307e28177d203f70a9a85d35252cc8236c1cee807a9693fd693c9797057416660a6a352033015f7a6800db8e68040c979b87849bfb6e01b194d41c64360dd4d84a4efe79835fc6100012c1acf2314ac6f536c708b75ea9f6f937904a19624dae232"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x3}})
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0004570000005707a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000009000000000000000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd, 0x10, "f21d64911c4132db21fee26903f96d36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x60, 0x10, 0x4, "b44fdb09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r2, 0x4, 0xb3, &(0x7f0000000840)=""/179)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x17, "82f4bfc70b6260a42a0cc66c60d54bba5336cef9ab5e0f"}, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xb2, 0xad, 0xda, 0x20, 0x1bc7, 0x1040, 0xfd8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x14, 0x34, 0x70, 0x2}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xb, 0xf9, 0x8b, 0x40, 0x4f2, 0xaffc, 0x8861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x3, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000009c0)={0x20, 0x31, 0x3, "19e7c2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x6, "50b85d0951ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x760b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x20, 0x1, 0x81, {0x81, 0x1, "2300acc896a06ae9cbaeca7163d5d266fc0f4bd5c428164d5060730b8790556969f4be4de71fa8c0f36c0da19c7b1c640dbae1edea88ed4a688331e47c72c86e9f5635dfd147c29c07703115486829a86309677583514c28728916a61c90dc077c7999221415a0003e4a73d1f481656e8b9700ea28da849185fa6578c3da15"}}, &(0x7f0000000200)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "262dbf63f7e80bae0b29ae8c91aacecdda0baf8c4ff889cce6ca695e622be8cf6b65e1bca5cab55321bb770b593b638d7d2ff6df96c73f47660cf84f74ed46318534a1aa3656025fe057ab6e9ec0ba3852ed0328b48af4f3593e9028b6af7e871efffccf2adfb700bc2e6a242625481d1591a03ca7a4b6725cd271"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000440)={0x0, 0x0, 0xe2, "13ee20ccebaf3e5799e1897db9d47d389f2a6444fc51dca95a7166a10b11362ce60a0cf53e82e3dd46dfc4096890d4f405c1ef1791727cbcdde89263d424f184d5eb5f823dd7439ef62b317a450343a87d54851e7010750dadffd7ff6709bab96e6d39bda004cf94c95fc4ce90cdd3df1a0dd4c03eb27a266f7cfffd09ece58cc1da3537743984dbd4945577aab58f4c63acbc31bdc18c95586823fe5c5c384ec73cdfaebecb64531fae24fa475fc1fe1603dd2e6a9d28a525de5b6a9bcaac0a096d3ed77e7fee70b7aafc8b834386cedb3d54d90fb0d1e8296937bcddc905813f1e"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x95, {0x93, "3c50a0385fc7eb5850adeb6a543aec5dde2e93b6805118ff4838e98c6f701aaf55143c6d9678118ef96afcb40ece96554613fbcbbaf672ef2745811f9a9ff26e228075a0f0caee85c722ee471af3f45359f677d70bd7d913233e1b5c68af12ab3683c58382ea9fda3e6015fc281075a77d4fba812ebbe63a35c44c2760da15424ac4d6a2b25e52b6b3721fb83b9d6e705a3772"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x2}})
syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x453, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0xfb, 0xd1, 0x2a, 0x8, 0x403, 0xd9ab, 0x12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x441, 0x1, 0x81, 0x7, 0x10, 0x9, [{{0x9, 0x4, 0x95, 0xa3, 0xa, 0x21, 0x27, 0xc4, 0x6, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "92"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x7, 0xfff7, 0x8}, {0x6, 0x24, 0x1a, 0x1ff, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x6, 0x1, 0xb8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x9, 0xe, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xef}, @acm={0x4, 0x24, 0x2, 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x1, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x80}]}], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x7, 0x7, 0xc}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xa, 0x0, 0x47, [@generic={0xe, 0x22, "3caf1b4190f7cd7fa77acd4a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x5, 0x9, [@generic={0xb3, 0x5, "e2c6969c697a47e3b1284cde9f8bc0a7aefc8792383a48307666636940ab385bda938bff39daceb3b86f7a4384010ebca219586133f805f5f184b9be65dc003dc50462b29138b102d2b3cfd82d437fba824f900d7689fea430102992d26e3ad6c4e729444f3aa2b87cec9c67fb8e27cdac4eae45fb8c862dbb00f72c05297cc1f7aae0141b03bb85bf957b3d62ec6aa92059db2e0bffbc689d284a9f1ef62a13e18e714bac876f96513a86d5d30097e7bb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x5e, 0x5, 0x3, [@generic={0xbf, 0x24, "f8abdc1f5a7ca6ad5fc4e74392016c877f9444d68455b0e79b313b0fa2f35615a9301eeee924b7c415298e4e85a9d839c7f494a8d6b15723e9f556fb373602405e7109ac2db3c43a6ed6102fcfaa8b479ae0ceb4935534a089a91a9f34905c3739c8b71a197f3d830447522b971afdc2261613abaa73e1c31382f98eda6fbeb1f237dba9cc363468baef5e578f64627f27872cd7eab09bdab95297dba2b6215dbde2c818326b1a1aaa66e18f89b739e816d01bf4c6a35d22154c63c5b8"}]}}, {{0x9, 0x5, 0x0, 0x5, 0x40, 0x70, 0x0, 0x6, [@generic={0xa, 0x2, "bb3ed0398cafab38"}, @generic={0xb3, 0x30, "f9ea9a1b9bb680f3744b8a51b00317bb08ca905904a9ddc12f18229e4da1f05906aa6251e87681fbafb2e3f117b4cb86d3f7300530eac115bb68cc329160b69398a000660565c87651c9a010ccedd0ad39ecf289e76fe5e0c1458b161e5d8a6d57fa01c79df7fb63b518acabaae2cc9183e17322cdd6313162fc3065cfe2e7ddeb3ec8f94ab84e4df4dae947277dc2a5c6354a513cf271b6777fefa4e2fd7360654b077cd789ba24dcdfa2209378b873db"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3d, 0x3, 0x10}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0xf3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x17, 0xc20}]}}, {{0x9, 0x5, 0x1, 0x0, 0x208, 0x4, 0x5, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x4, 0x35, [@generic={0xfd, 0x7, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x1, 0xcf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x2}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0xff, 0xb8, 0x6, 0x20, 0x5}, 0x2d, &(0x7f0000000f80)=ANY=[@ANYBLOB="050ff70004071000070a7b03a8776f713f55ff0105254fc94b0000c6cd2c2dfeef946d6e63fa0ed37fa6bdc4f008b96a67ed"], 0x9, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1401}}, {0x78, &(0x7f0000000bc0)=@string={0x78, 0x3, "25eb7249840383ef88fbdbe833324ff10686eb68684de188f91add37e396ee3113052336c39d465c5c055974522b19e1a0bdfbd84ccae213fbe4d513fe2540d8a83f565151d54fc1b08d01e02a57ef4855a87844b133ef462b47aa051b000224cb4a27cc3a6876d0949db51397156cd1d3183483b289"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x441}}, {0x90, &(0x7f0000000c80)=@string={0x90, 0x3, "17020b896dbc80a6b98722a7e783c8d8df2dde5d23cf49bf8c141166d9c158656e9a100005c475c493add0513bff074bf8fce75469a15ee299f42f7813d910cad559d2ddadc5c6a635d2c194aae9b6a4737b5db3dfcb384b6a4f6e7c0b18992bf063e00805bb3b3aea64267d7edadce36c040bb45f42170faedf526932ed771809b00f11a3f29640cee5883f8052"}}, {0xbe, &(0x7f0000000d40)=@string={0xbe, 0x3, "2af0c4f9e13efd5494ff55c9907fe72e8fad0630777c973542d9840f1596a6013288b2fda9d2008a24d3796b60d348d9b1be83cce4dd5c147ec97ef14967e6fcc2cdcfcf50c5dfc152579f6888726ec2f8a7686f956f66beec833bcd4b94d16995326650144e3536371c97ec5298aa92f7b8b8d03ec808e5441c80be5ed392bf065b98dea76b4e99a8653f02ce196bf93d04eba05e2a83f2efe30b5eb07c6b437cc66c7955eb9ac1d3d2be22549e9e42d91d752889608faa842b0279"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x402}}]})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4e, 0x9f, 0xe6, 0x10, 0x4e8, 0x6889, 0x9b5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0xbe, 0x64}}]}}]}}, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
executing program 0:
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x800, 0x200)
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000200)=""/122) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x98}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="090f0c002155c1a6a8e0"]})
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xda, 0x7d, 0x3f, 0x10, 0x6cd, 0x109, 0x2504, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0x9, 0x65, 0x1e}}]}}]}}, 0x0) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000206a050c05000000000000000224000101601008090400980102ee020b0921224e030905036d017f00000000"], &(0x7f0000000140)={0xfffffffffffffdcc, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB='\"'], 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2409}}]})
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x22, 0x6, "5e14071f2620"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x31, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)={0x40, 0xf, 0x1, 'R'}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x20, 0x5, 0x2, "cf2e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x65}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x1, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x5, "5407ced9f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x84, 0x1, 'n'}, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x17, "365363343d75b8cab071336aa90110e52f3bcb4c1b0ff0"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xff}})
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x40, 0xd, 0x8, {0x8, 0x1, "e9da59178543"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x20, 0x1f, 0x5e, "d954d766848362c4d35ac9fb9c6dca4a20dd30b5be483319a463f5db3a1edb149b23f563a7c94ef7075b33eca350ea0ef9c72d30098806e55a06c4ca3657a3a9ae39bde99decacf85cd8dc6013ea5e6e74b5aa8f12997c15b3c568f19265"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}}) (async)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000d80)={0x40, 0x31, 0x1f, "00679f6feead1b1ae7fc5aaad3ee387523d6b44e6677baa4066d8d147d0425"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0xb, 0x2, "bd52"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x51, 0xf1, 0x3a, 0x20, 0x506, 0x11f8, 0xbfa0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x67, 0x10, 0x5, [{{0x9, 0x4, 0x1b, 0x7, 0x0, 0x9, 0xe0, 0xc1, 0x4c, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}]}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000001200)={0x24, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x89, 0xab, 0xa, 0x40, 0x45e, 0x445, 0xdf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x87, 0x3b, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32=r1], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
ioctl$EVIOCGLED(r1, 0x5452, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="961a29"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x95, 0xf1, 0x20, 0xd46, 0x78, 0x8292, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x1, 0x45, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000001c00)={0x24, 0x0, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000004600)={0x44, &(0x7f0000004340)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ncm(0x4, 0x11c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x2, 0x1, 0x7, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0x59, 0x7}, {0x6, 0x24, 0x1a, 0x81, 0x20}, [@mdlm_detail={0x9b, 0x24, 0x13, 0xa, "b426a249582d8916aaabbc6e43b3ae422059a0e2114631da721f8d5405e80b2631c83a9454bbfff1d2dd323ce396484cdce3eec6fbba4cffa40d0a89551e997eb0ebdb4f06bb685ba5d1f4d7236fc5b4ac428fbed95741b328a54552de49298ac2e02ff39b6655a37f9eb72f31bb3af60a10c416e439d2becbda1891fdad4f7e7ba3eafc1a0511f93bd09e32fc4f53dec38f0000000000"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x2a, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0x0, 0xf0, 0xc7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xeb, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x24, 0x3}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xf9, 0x4, 0x8, 0x10, 0x5}, 0x26, &(0x7f00000001c0)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5c, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a1fd859de33600b9c371078260a13822"}]}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x40, 0xa1, 0x92, 0x20, 0xbda, 0xb82c, 0x2a3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x40, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xa, 0x4b, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x80, 0x9f, 0x9f, 0x8, 0x57c, 0x2200, 0x3d45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x2, 0x20, 0x4, [{{0x9, 0x4, 0xd8, 0xf9, 0x2, 0xe, 0xe3, 0xe5, 0x6, [], [{{0x9, 0x5, 0xe, 0x8, 0x20, 0x3, 0x7, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0x8, 0xfc}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r3, 0xc0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x0)
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, "207d00000040000043a6700c1edce54f000000000422400000000700"}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x40, 0x7, 0xf6, {0xf6, 0x9, "3d4996ef974e76d0d7676076f1b28bb97dd06a48552530003f0063da1356ffdcab8b306f790f139e28899f8e3d9c429cef7599fff193b09434e2fabcdf164b9cbcce223b8f27bb185933c4ffadf75d16ea671778757650b6f1e16400b3ba0b8121e92c191b01ef1bdc21d1773c2d70cb59c8660e173ca4a73977b8efe06bef5eaa84a5ec65e2ff2d5cc376305065864d1ae54d43f66dace86b8c96392a0a6978694e85ca384bf3cfd98b6f510284655375daf3f63cc67186e3970b36c38ecd79a058bc361c1470887f204bfd59b0d5ede6cbedea36b1088bedc40ec5bfb97ad562ea680da9ad7be902a3d10f8530ddf07f061ac7"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001380)={0x1c, &(0x7f0000000400)={0x20, 0x18, 0xf5, "08ea4094e87b95dc18ec459982d3fa7f488218f2e9432b4d84d9ed2567f9ebd20f3481330868f3eb510a7b4a11e8cac9bf6621784f82e7b253038a1381ceeecba082ef555603fe9342a59fe23f1d97dd36f1e84e9b69577ee7f70e749bcf36dc1146cbd77ec588971cceea66049c85a2af79adea1d42dfd8462489dc67540834780b26945fecdffda279c1a01f97951218d4209b79108485872c654a04739e77c1ef01d35de9850d11c2c0eaf4293904c1bf583e34c58955bd1fa2d243f2fb2f7cdb58efbdab53bf45db90d89d0277c1b243a9d1de9b33ec14fd5c0e6a6d60c54a8f632ec6d951873a6e3336a8ab6d0cf0a3a6ca6e"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x9}}) (async, rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0xc6f, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x67, 0x6c, 0xfb, 0x20, 0xc45, 0x60fc, 0x9171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5d, 0x3, 0xb, 0x9, 0x20, 0xf, [{{0x9, 0x4, 0xec, 0x6, 0x10, 0xd8, 0xbe, 0xc6, 0x80, [@hid_hid={0x9, 0x21, 0xc4b, 0x9, 0x1, {0x22, 0x860}}, @generic={0xa4, 0xb, "5aaec5ede4db9c2d001a1b1495d324e9d0169507650fa84b91a067ce8b9d82365b43940afb5a70399c49cd5f4bd965f5b95ebd5b9c676cd15155aa2f0c8aa2f7898236d44f8dea5ce80b95091efabdf3b6410505d7944e769cc240c77d75ceeb1fb15bba22c443eb9181c93fabf5c62195688c05100a9f8066914d4e28f4b80277880fd31b94febe2346461a76973745c9859192a628582f8b0e90769b6245ed8131"}], [{{0x9, 0x5, 0x8e, 0x2, 0x40, 0x6, 0x71, 0xb, [@generic={0x66, 0x23, "27bce38f4ec42907b07588eb6e84173d6f9893d9cc55972469f0ff8351b0af70d3a1751eb613b7a0aa7b12cfb088785b76d594ce4fd212df063c912defe8bd14b0295384168b00423c7270b2abcbc63e1c92df238c3a312eb26915c9fa89f80748932c4d"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}, @generic={0x50, 0xd, "d50305a93464fd37e258b1df5bebf9624338c9d1d6e4b41de7b4fd8f1c49ccc89f266b0436c6a7400dbf64f5e69f600b7d1ebd6a26476413a5d6984315cefac3e9f5b407b868776b829b04570d43"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x4, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}, @generic={0x5c, 0x5, "7827ab339ff0900d6d482b20fdf1821325fe76aefc3369d8232b06acb41001e84dff1567b1d5cfe6fe7f92825413cfe00a3c0f05c3aaa9cab2201d12d36db0e0ebb307a6cba3687a8b98776f87e0f416c0e251c5cb81f69bbf32"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x7}, @generic={0xca, 0xd, "ede63052540db804aad111e59bb152eac25d1921453bcb7fd45c3601b72667de804b09dd1b820186d8e9c12ac4de0da5b8b0164a70446d8776211c6be95b92e9fdf47008f9f4a6793838cc118bfbc42a41aca33dc89108a04dca22d0a7c8b9ef78f6fbe5f7c1659d986ed6671c248b8f9b93becf308d00218b8bf5b870459ee8779f5867e02e04a2083033589263bd71b5bca54e7e4dc13aec1194cfae5e2bf1ea104efd8cca8dcd57ac5cc34469f6ab931d011a425e8bec73a9f8d6a0e06f05b8563b7709f0a94e"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x2, 0xf, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x1, 0xff, 0x8a, [@generic={0x100, 0x31, "e0d591f5746766ca89d22a963335f62559abb9dba61838590e8e79e7e579e9cdb11167155db5d5d9fc8e9ad7d49db0e89c229c89e681e3a8bd5a4baf6e7b50e027007757e2bed622c7c646ecae128d2d35c8e85a57c36350acb1d9036fd21560b2bf097008d4360e3660222c5bd50a7330b1eb3516e77585509b7637a8f982bc90e303fb324fda5507103e3a3ed13eaff675e802450d32cf29fea5c47872332d31aacc120274dcff4fd56bfb443c2a03d0a2390ae47713d8c3439bd67051178df703ee4ec78ba2a5a9e648e5521bca4c7ca93ab06f9f3d8f0da7ff1bf6363b35a618a2a3eb9b59ab5dc60407c52ffc37a51ce9e11dd45152a89bfa008a84"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x3, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf3, 0x8b}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3b, 0x2, 0x80, [@generic={0x56, 0x23, "8218137ca42ee2aef3355b76ca43bba0269b9a0cbaa5306fa4d8fbcc5e8d1b4dcec50f0933e0b709777c0801e4c6704fdf7266c737cc19bffd50025295ccf2edd2fb34cc2d60e1d498d937be5e957312a6969274"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x91, 0xc}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x701}, @generic={0x5c, 0x8, "3937d690194515e16b9f6a58444a9e794a8d518bcaf3276fe0ce4960bc7173e8977d14ba3dff2c4b878dd3f5593d7c086c76ba1fd0c73eb6ff4b725fe2cf977e50b7fb749b20aae4d8b2358e7db04e8a9bd8150bf9f609b2e69c"}]}}, {{0x9, 0x5, 0x8887b04feffabcad, 0x0, 0x400, 0x1, 0x5a}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x2, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xff49}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x0, 0xb7, 0xd2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x79, 0x9}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x1, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x4, 0x30}}]}}, {{0x9, 0x4, 0x12, 0x4, 0x10, 0xb0, 0x27, 0xb6, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0xad, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x3b7, 0x7, 0x6, 0x30, [@generic={0xa1, 0x23, "4589443aca2ff5cd0e4a22033675a9dd625e21c707d308ab6e603d17d9448a12092ad6654dd04bf8e031fca3e6971e72ebdcf93e18617fd930ffd9c1e18894bf1b939bf28a43e86e7c88c8f8faef3a904aef718f64782f85152aca2aec5ebd8cbca440719643057f2485f096af49495decd0673d20d0689cc8819319e8232908587f2aa4df0523221c2754d99bafe30ac09564bed2c2801c69a2dbf5c3a84a"}, @generic={0x93, 0x21, "3584942cfcb61f88816262ea2d475d067fc40eaf6c3669cc35bd3fe7da5a1d2444317270cd221cf82094a0fe4d50fa77ec7e44819acbbc9212d938b77eb666c5ea8185986623b4dec299d18b1ccd244315fd9312e454dcd6bc60b7fa404780574561c2ad705746473d230df992cdc8565e20f383e5d4cc41c439d189dd1aa6f42b1cbcfe2f135a6770d31c178ee45a7fa1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xee, 0x8, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x92, 0xba, [@generic={0x35, 0x22, "c1abdfe2ced0c020293266ad34f32fbf777a82f4502255a166699d4635292c79d81b11d7f1dc4288ba573ad80de032df703f05"}, @generic={0x97, 0x21, "c49eaa46577be91a04a894b2fd9eec73b28168f5dc59f95fd0d2f19761bb1a2a6bec42542c3f9bcaddc0dfcb0e4407879c042dcf03f61fe5c96ba1efd623f3c1ce3fe33a2e378f9ee5efee43fec37efed5fd5303050308e56573a2dd61bb691644f6b38a7d9c85649cf8c283ed0c5feff76bcd1a23f520e6b8f719da4c86227eab857ab2e7b2c6e30b6bd6c2ca39e6c1d4248869e5"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0x0, 0x18, 0x400, 0x2f, 0x7f, 0x81, [@generic={0x86, 0x1, "5f4293e58664f30881580217b36cb6f094f0ad85b4b2b1f471d20b4c673ccbb3181fd0695d220bfc095d9dc2cbc833f2b9ef5e1943c22f36ed2b32636295641a3bbebddb4e49e989f5411d88d82b71c1069a204d8e096aa806db4aaee7807530cd17ca07b96dcfaaf8bac82f7b17184619d19b5303c377672beeaf276652512d2b0adb04"}, @generic={0xfd, 0xe, "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"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x30, 0x1}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x4, 0x11, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9d05a3efb920f3a2, 0xc, 0x400, 0x8, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x80, 0x0, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xc00}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x8, 0x0, 0x7f}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x8, 0xf0, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0xc}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @generic={0x1e, 0x6, "442a5471ce3b23dff57fe8b222917d901516eae184a183545159c259"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}, @generic={0x16, 0x2, "20359e87d1c84c5ae17a8c44f12eca73e653cce3"}]}}]}}, {{0x9, 0x4, 0x67, 0x1, 0xe, 0x46, 0xcc, 0x7f, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x4}}], [{{0x9, 0x5, 0xb, 0x4, 0x7df, 0x9c, 0x0, 0x7}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x9, 0x4, 0x9}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x8, 0xd, 0x8}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x2, 0xfe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xc0, 0x7, 0x1, [@generic={0x4c, 0x30, "c12f6d281bf86a0c41824e574e9f2797f5fa76d9bfbbd3fc53327c21e83501e3ac7615c2cf2c44b2d2b59cf5112dc242315e9a47eb232162753f1e7eb5ee9bf04ee792c4f1acbb441477"}, @generic={0x46, 0x4d4689b063ff04bd, "05a99890414a89a5a3edeaa416df69a9b5452c88430f1864f8cf1ae3ce08d50e43957e75c77fba4eee12fd05b6721db8879f8f42bd57b77f60b40c1f0a0f3872db9b1d11"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0xfc, 0x87, [@generic={0x102, 0x24, "2235b6570bd8afb10f4f70ceef6c989f31463daaae4efc7614c34aab1c1e87a6cb2a816ea98e041845164326e5c0ec17011c2bbb0e28baaec41913fd9e152b141821293634f9a141139d0c8106d5396bb47000ce03f5901fb8916385ede37bfbc0c679acbf6e63bbd5eff6c171de657ae348930bc9baa26701c86e85299df8c0b3238b00f3db5f738bb21e4e7564c155702f884f5b2b1b024912645825f634f1407be07fe332ed5a5474c4156d5fced2c5bd3a09c44c7df07a7d928769bd9b5c5627998dca21d5b9524dc6e8ea4dd4581d1941e3d9c37b265c6191c437dd624902a5306937c832e2f8a496a18c83bc0c414a9ce1152555f1af09d53a1796bcc3"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xdd, 0xfb, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x7, 0x35}}, {{0x9, 0x5, 0xd, 0xc, 0x18, 0xe2, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x0, 0x6e, 0xd}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x7, 0x1, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x56}, @generic={0x7b, 0x7, "a7f9f4053d4dbecb1c8f51f84c38c64f0c5333539938ea0a4dc313779cce2f7fca1163b920523d807cf2d95e4a56abf5dd9e378b9134d8ec152960fa2ceeb3c17ecf0b36db9218492ffbb5925c2441ee9817119ac2f8b45579dc0726ebd3fbf887e2c3226dd7e941281c4b7ac51b99d592d901a4c85d2f8d84"}]}}, {{0x9, 0x5, 0xc, 0xf, 0x400, 0xff, 0xff, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xf2, 0x3, 0x2}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x0, 0x0, 0x8, [@generic={0x13, 0x4, "876cd0bd8a92d526b725427bd3d640a5dd"}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xffffffffffffffd4, 0x6, 0x201, 0x2, 0x5, 0xb, 0x20, 0x8}, 0x37, &(0x7f0000000180)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "6f89db31a379b7538bdf92bbea0c4da9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7f, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "b305cb0a20dfd18f0be9bc37d5c3a440"}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3009}}]})
executing program 2:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="fd0495317d75946966f521fed27afc4eb129bfa49382bf7d86b3d78b8c6d6e12892f0b5e14a5aad1b27fe7af1b3bd78904fc771366a354967e61d4f3a06087a876de707745a29eba316ed09950977cb680e2a8e9f5d8712fe04ee83e5d229e14e827b037ef9bbe4661d9aad1e2b1e1cfed8db7b179ecfacc29e56b922f23e240679d8d24559aed2229a088288017b1817186cae8b6b9e49efcacd40110b7d607e9c3ef38706b9dd77b2be92a2c2890b6a8fefbd87a4e366e3e7dad324f98b11e12f2f2ec16"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0xeb, 0xad, 0x8, 0x1608, 0x207, 0x438e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x66, 0x2e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001472209106401000000000000001200deff0120000904ce0000fffffee5000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x0)
syz_usb_disconnect(r3)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x7, 0x0, 0xfffffefc})
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0xb2, &(0x7f0000000240)="1025f1cce058d54a6702478d82730b9d02a4f620cb216907f2159024f0aa76843e0e259e59b04be8a15dfbb8a59b3267d75fd728f145504b285aeaee35b341bde366e0bce8f388eedc113a1152532b9143b5070f6bbe739534cc7c9dfaabd849f3c28f069fb2e2c8143066dda7febd601f1c765e45d039b7175af2a432b998a54f3f21f1655056d8eb80efdefaa52ceb4ce952fac32a05d707c1577c643dd9a8457c0dc49c5576797ae0b7fb3aa2535810ba")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
syz_usb_disconnect(r0) (async)
syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0xb2, &(0x7f0000000240)="1025f1cce058d54a6702478d82730b9d02a4f620cb216907f2159024f0aa76843e0e259e59b04be8a15dfbb8a59b3267d75fd728f145504b285aeaee35b341bde366e0bce8f388eedc113a1152532b9143b5070f6bbe739534cc7c9dfaabd849f3c28f069fb2e2c8143066dda7febd601f1c765e45d039b7175af2a432b998a54f3f21f1655056d8eb80efdefaa52ceb4ce952fac32a05d707c1577c643dd9a8457c0dc49c5576797ae0b7fb3aa2535810ba") (async)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f10000000407f04ffff00000000001109222d0401006ff8000000090400001503761cc1835895bfc101220f000905", @ANYRES16], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x3, 0xb48, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xc3, 0x45, 0x1c, 0x20, 0xccd, 0x35, 0xb474, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb36, 0x3, 0x5, 0xd, 0x80, 0x1, [{{0x9, 0x4, 0xb9, 0x81, 0x10, 0x1e, 0xa1, 0xc2, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c092"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x6, 0x9}, [@mdlm_detail={0x8b, 0x24, 0x13, 0x1d, "3edd0fcfc975c0acc7fb35a42119dee337988203de8692dafd8ab9e38cf0500098b8ae959d7d236e74a79e3e051cda8142f9c50b8743bc1542228ef285c713d3270dacb75622c664f8133fd3335dcc0988d0a2e52e0750ac0e297623835b59866d6244d8871313bd2bd23f01e64cbf7feb15bc74ffdbc5f12b6dc01ebf781f0e0fc79f6c6c8394"}, @acm={0x4, 0x24, 0x2, 0xe}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x4, 0xfc, 0x10, 0x7}]}, @generic={0xef, 0x31, "8a45e700a38aeed4810903b38c862edc3047a2ff4eeb7c38bf0234be98c567537b3cb9e7d4078457e0aa6ef6b2d145cca808cee5f5ca1b8f2384cae1600bbf6b2e593bd602ba54a9d89d4f7e557cffccb2c3013dc4fdb776348fcd3e1607b103d149de95c1d09bbf7604994f465f265b5141bb41d85964df4042218fcd085582773370a5f0f73cbbe091b3d3130c39fdb93160245e7d44b0263a6f71837f9a0246e5133c75ba4cb09f1e694c9dd65e41421cabfbd1be2d3bfb0f2fa2b4881b09e501a18d654684eeef4ee1e95deabee700f291dce90a5f1f60f4968007c7e2a1dc4ffe063661254f8bd2fe5512"}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x76, 0x6, 0xd}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xcc, 0x80, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x1, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x4, 0x4, 0x40}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3, 0x1, 0x5, [@generic={0x3, 0x5, '0'}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xbe, 0x4, 0xd3, [@generic={0xa8, 0x23, "6a0200346e749b4208b5684d8d9ba1966e491d5df84d51c8bc7c46b8efabd7959f357984b1b5cc5637f5d9e249bf919ad45b6b97804ecd1089839a537c702c54cba3ecb6edd3d62f80c6b1e9d24a81f99e5c6ad4a795e7cd1bbaa8697c8765be62e141e6401e29d32d7879bd166fad07dedb1242c9245a9ab01c3f99f718df81bded5f4a5254b2f4b8c692f32e5fe5c2b61dd145bbbeb81398364099d891f4128fe34c2ec538"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x9, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x1, 0x7, 0x10}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xc, 0xb, 0xc, [@generic={0x40, 0x1, "9d65bf2ff3a50c7b4def51d026217134ce97d236b6bf229aa9904e5f31088d5e2b5cad3c35651447e1aeb81eba55234c6e27c11b6cd855343e7aa2195eaa"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xa2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}, @generic={0xce, 0x1, "29d838e0fdacaa2b180264dc825e34d31fb78ca6f146e90c0e225ced266fbfec1016eb9fe2b9646267665b2ed3d7efcade1f103b1ce3e5d302c41a5d202851cbe5e842f002ec8fabdc2292cfe7b47c48402ef67746e55850aa89057a6ccfd92b224f8a9b2d138778875a20b5e482345f26fb80faa9aacd5342cd4d87d8e30a952eb84a81e931667f5dc8b4ecf447b00797ac793d82669a5068b5ba465eae84975cda4b83d0b91c2ec3aa689900abb642a9fe5b74a84dab699fa0ebcaa7f40a89bc5657bbe2c304242240a2c1"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x8, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2000}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x2, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe4, 0xea}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x75, 0x0, 0x8}}]}}, {{0x9, 0x4, 0xd5, 0x6, 0x9, 0x60, 0x42, 0xb6, 0x4, [@generic={0x96, 0x11, "131a0269bb57f102ddcdbb1e557dfbe1c3a9311ca8427d928056840119365196dd1241478e97a96a2794f2294c42a040e9141447461f6984d959d4dc2feb88653b77abfe12de75923726bb6a0d7d68823f245fdcf141a00281e2833b7811af11f4a2b1f63a59860cd270c1f70179c2b90f6ef2b45d1f2dae056ab766f69355c366848a627855ca00d836cfe758ba55d4f8a8ac2b"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x7f, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x40, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7fd8}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x9, 0x3, 0x7, [@generic={0x45, 0x2, "455c6b6fada6e641a507960fd630aaa302633276028ae32815b64b3f88e094895ce530420b9f8857048d21291b7b93a40fd456792009db74dc64c5e7a112fc67c898bc"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x90, 0x9, 0x4, [@generic={0x5d, 0x48, "8722a3400ebd690d3f71f15b5cbc9e9eeb1b23db1b0c62a8fd1fdbcb31f216621062b88f1bd63631c00c4ec4370f0a727d4e5626fb02c52418233da4fb06cb568546e753d5a88c010c10241fccd997275d26e72d63476286f86a1d"}]}}, {{0x9, 0x5, 0x7ddcb2a7437c8a89, 0x0, 0x40, 0x3, 0x3, 0x7, [@generic={0xd4, 0x10, "da7decf0a314847053d8e341b07bbfdbe3afc80bfbc83548985dd6790104322d18bc45cb21a798ea4ae5b0c27d8e8ae06a7c0b6c6a3cbbce7661423991a04fdd55d584b9422b6652cbf933067d4c4beaa8913c82a1656229f72952b178e0e90bce5458cb7689ab0500cfc2c98b958414e9d11d2f2a91862fb2fb350c4937fb89dcb23f456ce6a7f0c78e5498ba92b11ab83741229b485bfed22b9722a485eb700339d24ed6c5a6863058838fa2cd5cfccc0dd2f49844939e30a1cbe72ad47203881dbe1cdce33f45579fbdbcd4920ad79bc4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x81}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x80, 0x0, 0x7}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x1, 0xfc, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x3}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x2, 0xd8, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}, @generic={0xbd, 0x31, "6da7cd71533c2013b1c43a23309246a5d759d862c62eb8eb3450a52c1c6957c7b2804cd21790133998708877852f48cb1b76c1d50d45bfc70c979cbb523772af905c0a4698e7d7cbd28e3fbd6ff94c18216fe29a0eea9d68b70cf6c5dd5982a70defa26c228d9864620fd0a35e8afaaf703b58a70422af3886183df3647dbc9b5038ab6477f2ce591335c68c8108294b4a62197a0a70c7aaecd7c5623c1866736e4b7c6c66166c76608a72ff82d472f348644273e7610d33e6635a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x81, 0x5, 0x8, [@generic={0x7, 0x21, "8ba9196e92"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8c67}]}}]}}, {{0x9, 0x4, 0x9b, 0x6, 0xf, 0x5c, 0xf5, 0x47, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9f6bf865df"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x6, 0x79}, [@mdlm_detail={0x39, 0x24, 0x13, 0x7, "51287cd199c20cbfb5d6fb4aadfcffe44960c561083df452663c30974818ebc26fc90ee1ad0467aff7bbbb97e19e7df48f54b8b357"}, @country_functional={0xc, 0x24, 0x7, 0x2, 0xf, [0x2, 0x7ff, 0x5]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xa, 0x2}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0xe7, 0x5}, @acm={0x4, 0x24, 0x2, 0x7}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "c399b3811d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0x1b, 0x1}}], [{{0x9, 0x5, 0xe, 0xc, 0x40, 0x5, 0x88, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x8, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x5, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1b, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfd5c}]}}, {{0x9, 0x5, 0xe, 0x10, 0x24, 0x93, 0x0, 0x8, [@generic={0xf, 0x5, "8413c721fd05427c0853973962"}, @generic={0x7f, 0x0, "6b08c5fb70fabbac5026aa8815df9fd8fb4517f810be767c3e6ea2fd56a737be63ac93d51890830f49b4e97e81ab13e1f1e1e5edfa9d0b1068d45cda018463a938cfba729aa944b72250233bde18eac02262093843e3f89fdc41bd8d563e11a3a3558a95975047d13aa9512d490cee9ab749262e2c9203e882e59f67a0"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x83}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x6, 0xbd}}, {{0x9, 0x5, 0x8c, 0x0, 0x8, 0x1, 0x8, 0xf7, [@generic={0x29, 0x23, "306eab31202437351ccfd71645133e89063cc71e489bfb41bce0fd662fda74f3558fd10e381287"}]}}, {{0x9, 0x5, 0x791b5eca538d94c2, 0x0, 0x10, 0x5, 0x8, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0xd99e4f95eba6dcd9, 0x70, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x100}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x67, 0x6, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0xb, 0x8, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x220, 0xd4, 0x2}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x8, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0xd, 0x5, 0x1, [@generic={0x6d, 0xf, "ca0479942930acab8150e58a54da0f1461083d30720eac658f01a6f8e326090f5a99b93a8f060da34214793b6fd034d1831febcad2b9de5fbf6ffe01fe6d80534d5e30c501ff2ea2c2e13d581f1b8b298e00b16d315319d0fe26e03ed8c98b9c90b7cb282a0e5856e5e4b1"}, @generic={0xc5, 0xd, "cb0ceb42fa9242e29fa336f92c27f5ceedd839a1b514373baacd330b987f4bcd3d624e4abd817e7fa0bdeae7238afb4d4e8816bb812e6de6003049cd45fbd37019df4a0318b732afe0f600cd244d7ced201879dedefc8d546a07c3d9550eeec51f9a7a3c2dd9d9054dd7cb47ed0729caee2f2a2d1fea0eba483bb1a3d67b15d8906831542e5646726dc6258294e6fbcc559c73b42d4cac723858d26421325fa5a5470d51bd7850a8a959dcf0cfa486850c44f7056f63c02cee3bd1e398cc14779781d8"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x5, 0x2, 0x8, [@generic={0x83, 0x2a, "58ebc83ce312b690bd593e0c92a5780fcc17ea8f63ea0e059d38c43437745af1ab0e165f72f82de5cd1f5119b4064f0956bd6b3baebf436989eb4e70fb50128d402cfaaba93790fde85a0313616ae07837e7ed04e1a5f7faf8ad8bbc9f4720b4b795a7725b5c9ae674e403f3342d25e729ec5265f38c90b6fe22b7bb2da87bde94"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xde, 0x4, 0x7, 0x8, 0x3}, 0x1c, &(0x7f0000000140)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0x1ef00, 0x2d1, [0xff003f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x7, 0x8}]}, 0xa, [{0xf5, &(0x7f0000000180)=@string={0xf5, 0x3, "685ed8dd5bf27ba3c5e9766c8f1b1f885ed7e848a2b836b63d6415a2ff12c907a6f09c062d237fd8a7956908f77add76e0cf3ed2b89ce4cf1ebe990853ad391cbf6b69518225a7e20b69fc25de133fad5d4ec57935b7dd2633cd9efdfb98445f11fc5d388adbab8051dd0de45c04a882a292b456eedcc8148839ed61551bb617c58c07a8a1c8f1a8efeac7c527c6acd2901190d9a0204259317612e59d5b8f055db6a6a42fcadb47cbf85a3011f96fdc99c4456a56ad9f7c7b2ae2e093e86c3faad973f1cc0efe17204de58c3ac0a5f7273637c8df921dc1cc47920a3655afd0d2cc2f48549e4408f97507cecbe57195247a9b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0xf8, &(0x7f00000002c0)=@string={0xf8, 0x3, "d9764a3e8d3263731b002df4f38aff3326b3e476b09655ac9a24fda1da451115a02bcd56dc58ac62e424f20e47ae6e148960897fca1484a0a6a445378ad50f9869a056f79b5cbb7e48aaef64c7159d5ded6848f1450ce79a95b64a64970f0737ff08e940607b09f3101b32c572160dc8af2eef75e66c3d28146fb5885168d50712bee2158be23cbcfc1a2e3c403c6aabd92252744b4b122ab43f19eb3bd95368f3a77d394820d7887b466d92e1f25ed4427d0a3f5c9e9e277867046b3f7ae5c88f174ef421e051cb92a270b05708c8bdd5bfa59e6504a7ca30b6d34ef6616bcfee683d4354d98b9906a9ec8e5af24ded2a4fbbf5ce8c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xeb, &(0x7f0000000400)=@string={0xeb, 0x3, "ebd7771a16545cf686f0c6c679c2813d390b5d0e0edc108ca50c6320c56ad7c0e1af807c68aec9a1166f1ad0062af3b8432df5c16ce26b21a888ea5e174673d1d2a8bfe9f4fdf1e4002ff3b23be1304533795b0f620684526b3958319a96acfa55c620cea1fe623e5b9fc0d1262a27c05de0d28903343faa4d8048677128d6d0561f8c7b148fbd00bc041e9149e2b27df38d21e8437e208b1ad8c84494eaa4c8988ebcc5cd70b90dbfa916111aec921550f543b37ed7b4aeae130b90dd8ba23454796877e77a4aa8ca45124f9c7f8d4a31a9024b0fbc19df1adc5d11ad247fd49a4bad4606cc98731f"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x280d}}, {0xfe, &(0x7f0000000540)=@string={0xfe, 0x3, "fe74f74dddf38805629afe5719e405ecee169c273e6938b01de271c4f3d972b0d3a75a622ec1e8127e4fdb1cdb27adf3f2ef5b850fcee718e6495cfbcb8b6e5e0124075cdac48b105c3e150a26731b1e90b929fcb808f64d4323a9655accef803d3614e6bba68f72068e72d521847f602ce330cebc5fdfcb76b6234d99873bfc7906e23cca528db4bd2a356518649c5cc8f6d685b23759d5e9a0ffb4366146f48ff4a1e24b53d4eb297da3c1c7cb7b7fa0dde2f1d70c1089d3c8ac68066f572441251851eb9bff9156bfbc71e8d0e17385229da53bd123c960d4b50f8eba5e53977a25a4924c2d4734e487cbb8330e571d9a7c58fda1270f97f85831"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x820}}]}) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0x98, 0xb6, 0x10, 0x15c2, 0x41, 0x1f20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x8c, 0x78, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) (async)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x8, 0x80000002, 0x0, 0xfffffefc})
executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020e0000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b090581030002000000090401"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xc0, 0xd8, 0x5c, 0x40, 0xf11, 0x2051, 0x79c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x48, 0x22, 0xcf, 0x0, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff}}, {{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0xe, {0xe, 0x0, "6c46936e41c5838bf3d423ab"}}, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x20, 0x6, 0xe6, {0xe6, 0x23, "bae49c05e24da4365abe9d0cc209d767ebc1d0cf45313e35f2580303844a961aa09a31c368bf771916c1fbb02abff748243fc38125c93c57cb9f53b813e10ae8f2864fbb5e250cf4102f2ffd7a7a2c7b74fd9d5b358156bb606620508b10e9a945f83430b65e24d18e1bcba0a6a90cc2d861d30f2bcaf1f4e231a968e5f336e3ab82d7d76f8b4977ace9033ce36187763d43a2f8aa76fce61858ba042a9fccb838534085f2b4a59c11a1302fee0022901f4c8ee3c14935917211ae1edf7af408dbb88d6f55f449f97df33f9667d16427b7d198e0a65744b8f61d707ea742f84b645b6ce4"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000600)={0x0, 0x22, 0x1b, {[@local=@item_012={0x1, 0x2, 0x4, "b2"}, @global=@item_4={0x3, 0x1, 0x7, "fd3911b4"}, @main=@item_4={0x3, 0x0, 0x9, "6847e4f8"}, @global=@item_4={0x3, 0x1, 0x4, "c8346d8a"}, @global=@item_4={0x3, 0x1, 0xa, "a3929b99"}, @local=@item_4={0x3, 0x2, 0x8, "85d82c20"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x955}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x0, 0x14, "dadf75096a91fb6bc07d90d67b11644a0b661b3a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x1, 0xce, "4acbff403e8b853f5d9c8f2079b8972d99cda0ef034b866b6141eab38e0017fa3f03976ba1091766ba7105f66904da0f2c3cb86ef9b1c9cc08061ed728cd6ea493bc14ae26c3189c07021685662c977436c28b51bbae3e8a60232a2e2749c984b7692bab9ab20915c870b2d8254b74857a0c8e77339c009d2499033d7e9d2be9c92e86598688a4ee95a5b1fc0ef88162aa6fd554670c1efe25c56915d51ecd614f31c76b569182f0f30aac3a2057fa9238c9d9e63f7354429fbfcea1ef5c2647010b619c2cea14c536658c609a57"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x9}})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x40, 0x5, 0x87, {0x87, 0x24, "9445ca9a3b9c04458bb6806bbbd6fccb27e2aedc858b9b44522af8fd8cf7dad27ad82c52ba0c040b45e495505e5243d4f28baafb6f6ede7afc533634c384a40473112c61b0751f1540ac37790c47b95bbe78b717a0698ca0b26dc464f462ef4edf43536ec08174673d0a01641bc4123b2454cc9cb8267dc16da7377aa7454b9b660290e993"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000014c0)={0x44, &(0x7f0000001280)={0x0, 0x10, 0x70, "0df2ab2ddadc27edab27f9bac76a2bff7dbdcad773709c7e2c3db870af5a32c0798a51047ed0343ae18d73b0e2194c00ae72ce8b35aaaa533049735592a99b6ef9a112d4cd585e3e02b03d5694b772cd2e9da614787f7fc1248671fb229f88932b1393c75fd8885ac0ca5475269da30e"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x6c}, &(0x7f0000001380)={0x20, 0x80, 0x1c, {0x4, 0x4, 0x80000001, 0x15, 0xfc01, 0x7, 0x5, 0x0, 0xfff, 0x445, 0xb4, 0x6f}}, &(0x7f00000013c0)={0x20, 0x85, 0x4, 0x3b0b}, &(0x7f0000001400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001440)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001480)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0x79, 0x18, 0x8, 0x55f, 0xa800, 0xb3ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2d, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0x4, 0xed}}]}}]}}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0)
syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e0b00e46b8e3b0b000203100b03100b"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x120, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000400)="b9")
syz_usb_control_io(r3, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x0, 0x2, 0x76, {0x76, 0xc, "81f9b7c02820ac27cdf62abf829c3396d6c6f3a70c2dcf8e8a39c3eaa9f1eb8021a1140ee377ae2e6c782ffc1c8a0eb8ae2b03b708be8378254f9b984d3cc7f010aaad252d9514ea9f26cad866edfb86bf582b21c0283e49b4178cb01c1b9ca592b34a4c78329a93b6b84abad3a99674b9b6613f"}}, &(0x7f0000000a80)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "1f19a288bdba750b15cc4f87fafe247777810f87b17ecd9d327bef01149d52c30626b10691731e3b7654fc1f04592333e59b8036fdb926763eab6f2545d1ea78d787c16d138e00b2b4570fc34bcf83648568e7545064ef749f"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="000f45000000050f4500050b10010a40001b010900010b10010c240002000400070b10010804000908091b0803100b1c100a00a4000000000f03003000ff000000ff00000000000f000000"], &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x2, 0x7f, "c1cbd596", "797bb371"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x6, 0x2, 0x2, 0x0, 0x10}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x20, 0x16, 0xb8, "bff4aca7031c45e3a5c5e08c901519542a2f232316d5f3d889e3c6e22a7a1b9db5d87c9f231a97eee7ffc0502ba53b2197b5a01bce47d18f0a2c0f66d78655f83504fdca2e31c42a454834e71687aa54c8cc5225b0bae1f520b03009f2ee1c24c8b8cd9cb97eb1b42716b18a8eb8075676e285f1e21bb42ae1d7fecf7f28d749f60dae7b7ffb661edfaeaf5f0e5aff82a89d4fb9897605882593800048751761bd1b5c0b6031236714fbda14743f97eda77aa6b7930af070"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "e68e"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "5e85"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x1}})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
ioctl$HIDIOCGRDESC(r5, 0x541b, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x15, 0xcb, 0xfb, 0x40, 0xfe9, 0xdb98, 0x808f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x0, 0x35, 0xa4, 0xdd}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0)
syz_usb_connect$uac1(0x6, 0xe5, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xfc, 0x30, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xd1}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0xa0, "662cda96e23e"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x0, "ccb52af3fe26"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x1, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0xff, "08f175e46d8260"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x4, 0x7f, 0xfe, "c9", "957063"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0xf, 0x1, 'g'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0xfff, 0x7, "bf2acb3f63"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x80, 0x2, {0x7, 0x25, 0x1, 0x0, 0x1, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x23, 0x78, 0x5}, @as_header={0x7, 0x24, 0x1, 0x7, 0xbd, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3, 0x20, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x7ff, 0x2, "8927562aef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x7a, 0xc, {0x7, 0x25, 0x1, 0x80, 0xd, 0x5}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x2, 0xc0, 0x8, 0x7}, 0x52, &(0x7f0000000140)={0x5, 0xf, 0x52, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0xf00, 0x2, [0xff00cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "49b1c1d8ad2a36827e3bf795d0fef869"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x22, 0x2, 0x6, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0659e94b9aaa4be0e31a1ee3c4963957"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0x6b98}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x72, &(0x7f0000000200)=@string={0x72, 0x3, "6d9c3d42718b527de476d839513217f2e6a3e7c909a50eaf03dd161cd01f82597d22f0556d76d07d4e51b6f93fc9809487725365a71c66582e0be02449195314c36120e29ad21b50e86bdf8b288c1a2bf1b7d380284b1e352fbe4db0e759254d0b6bef77b04e61d9019637cf96687edf"}}, {0x9b, &(0x7f0000000280)=@string={0x9b, 0x3, "85b3bb18df272210b0169a48e11abaf62492fce9766df5beccc6bd75241157a339b7d904c0581d6b78672c28e057926b7db6342295e28e9dcb8a440df8fdcbb0734e01f3385b153551533721f9802706fad7d22885449c7727a8dfc908851ccc79b2054ab43240edcb2afad6b650b98b2189da4b06c024bcb3e12be720efe30a80b41b5cfb8552c78d5d491b9117e626057dc9891887abb3c1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x436}}, {0x26, &(0x7f0000000380)=@string={0x26, 0x3, "134521944f9b60aee349f4b584b74643f33b5f890633aa7a85cfdec87a6b51448f94cec6"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x816}}]})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x200040)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe7000200fb090503"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0xa, "f2904fbd"}, @local=@item_012={0x2, 0x2, 0x0, "02e4"}]}}, 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db9be9010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x29, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x20, 0x20, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xcb, 0x8d, 0xa7, 0x10, 0xbda, 0xb720, 0xfa72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)={0x40, 0xa, 0x3, 'X3%'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect_ath9k(0x3, 0x5c, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0x9, 0xdc, {0xdc, 0xc, "300ede7752b76f2e24ca0689383c8f353126fa3060cf124a6d1ba9a141c672dad6bb4c0f09308077a2172f76819fe1adbf622fa8bfd2efba6dc7c296bb95e128fbb54e6182b677ac05effa2dcbc8098b3d440828d3411823f3f513ea272dddd1c7a60d978c4c7f975693a79de95da82fd8c4737fec463449f7f4f93bce9e18a052a66a8f6b44a13815fb6d541b4ece273222364e9a7bae4464cf52dfadd621e2c799929bcb939d5afb7cb3c8cf5f90d6acc52d74be1e3e7c8fb49695ab87d1d8931b944c7e622a84ed8bbcc43f9eb194f96820399fb0cef947b1"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x12, 0xb, "9709da525bb665441d3092"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}}) (async)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x51, 0xf1, 0x3a, 0x20, 0x506, 0x11f8, 0xbfa0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x67, 0x10, 0x5, [{{0x9, 0x4, 0x1b, 0x7, 0x0, 0x9, 0xe0, 0xc1, 0x4c, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}]}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000001200)={0x24, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001c00)={0x24, 0x0, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000004600)={0x44, &(0x7f0000004340)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000001c40), 0x1, 0x4b842)
write$hidraw(r3, 0x0, 0x0) (async)
ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000000)={0xf, "6f5481000000e800000000000003d5"}) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000025c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "d8e1fbcb", {0x3, 0x0, 0x0, 0xf, 0xc0, 0x9, 0xc}}) (rerun: 32)
executing program 3:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x100)
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/19)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000080)={0x56, "0e39b85b33d115f6a4fd893135a0010bbdf426f336f65255317600049d979f6feb4a0e9783a69ff8c37a2de4db535798b72a9f399e3a64aa280c0b825f19e79e28cf64a5e02aae9ffb03fe210b3fd2473e6151812028"}) (async)
r1 = syz_usb_connect(0x5, 0x31d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x7, 0x46, 0x8, 0x424, 0xb832, 0x1ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30b, 0x3, 0x63, 0x3, 0x10, 0xe, [{{0x9, 0x4, 0xdc, 0x6c, 0xe, 0x8f, 0xe8, 0x8c, 0xa8, [@uac_as, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfe, 0x3, 0xdb, 0x7, "432a8404"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x5}]}], [{{0x9, 0x5, 0xe, 0x8, 0x200, 0x9, 0x4, 0xe, [@generic={0xa1, 0x21, "cb522aaaf54d98722f8c98b2033356769db6a34420b524877df66277cbfb102d8331345fb9c6f7942d44b2d620a971a0bbb25e9bb9c67a190568f93b3a9aa84d6053216a73087bed90dcbcb383fa80813175fa5d4f0604853613f3da398d5cfe5715dd5b915d585436e401bc325cef69d891da4a447116f2bb693c1e75412efb04b5dec7434525aa7b3e863b41abc53e741f2f1071bcefac4ee9f81907c535"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xc, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x100}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x8, 0xf9, 0x3b}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x5, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x9, 0x67, 0xfb}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x43, 0xbe, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0xf43}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0xcf7e}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x2, 0x80, 0x80}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x36, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x81, 0x6, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x7, 0x40, 0x0, [@generic={0x4, 0x7, "70af"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x5, 0x5, 0xd6, [@generic={0x85, 0x6, "9297c7cc85ea3d8c0da311681c0d0eea3b748770bf380503d1c1198c6a540f55e63b6fad8da499d5bf68387c44c9bca050a48041c669347413ebdacd1917d4f81c73c67ee1a0c04c75c646265abba1b565b54b896c8ea92c3e61c1c0dab144578bd200f5b474a15189811005bb5c82929bd8231c062c76d0700c0d2abb1888081fc70f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xe, 0x10, 0x81, [@generic={0xce, 0x23, "51fc5b646cf652cbf1ecb92dda3eb9acf381e5213cb454692808e63beb09dfe57f2c9d3f80a21dff7a030a0d2c2559e5ca3383aea4058ad94cee31ce3f1601ce63a1ed8de760e8073080c3171bea2815b94e8c2c34c6c2dfc73f85d6c045f7a8a570d20a2f002dbe9c97ca557145c29464c3d7e7157cc6d9b845fb3f0678ae69e95bb19dde9e8447c75d75454695ad25d857d43752306da6fa1ad4b8f7e48af74bc6483380c1ca9b603e8ce115b05aaa8bdc988d53d11b2050fb107afdf37bcfbbe94cff62210e7268106246"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x1, 0xff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x81, 0x7f}}, {{0x9, 0x5, 0x86, 0xc, 0x8, 0x3, 0xff, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x9, 0x0, 0x4a, 0x97, 0x91, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0x5}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0xd388, 0x7, "af57be"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x8, 'O'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x6, 0x2}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0xc0, '%='}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x4, 0x40, "da58ea"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x1, "c5"}]}]}}, {{0x9, 0x4, 0xef, 0x7, 0x0, 0xc6, 0xa1, 0x29, 0x4}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0xd5c4c51926fda084, 0x9, 0x1, 0x9, 0xff}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43f}}, {0xf4, &(0x7f0000000500)=@string={0xf4, 0x3, "194d2f6fe5fbab02b99fa38d51d3f745e3d99d634b87690d06c661514476a9c7c8cb20fe7fb12e9fdc5e67deab00dcebe2be1f05f2ca262f3fb95aa6eab4ab14cfc2079d313306631589a339995c2c1b8edeec4cfec9af5a6eac57be23e82854826eddc8ab50e5c37163f674b364b8e0ea023c448ca17f588fced1f429323b9a0f31b8b82fea8fff243e67fee98b4f3a8f2c389ef00cc31bfad99024db963bfb91ca6575faadd054f3b6462bf52ca2d36210515c11b8ca703323cc645fa1f079a01fb3eac9b7b30ccb12bae3f0fc6902fd80d2c230dce7effdceec9321a89019c573d4557f7b6ff1b54ad6f66b63d29f4461"}}, {0xb4, &(0x7f0000000600)=@string={0xb4, 0x3, "3b1e9b1830523ccec42e16445f4f5f64099e84312981996883969e1d3d4b7c63995bcaef39b1418ae6c51948a8a8f2e48d08dbc41b7ceb960b909f6d5a0e85e891db5c6cb435bd8c5d8d6fdb41102ef715bade062aedbdd15cb516fedd07524aeecd9f552aca24e7417ba12d17519fd924f0ce04143a10723ac88d6ca8d40e78efc027061015b33d971b71c8682c3b3d1cb4bab57b9311dca4bde22e6710eefa8dc911e8925bc4042b58788914bf631b886b"}}, {0x43, &(0x7f00000006c0)=@string={0x43, 0x3, "2f81c3a027292e8858706ca02a250e15d1ad67012c1fd23a476c838cb4344a886b5e9df48cc692b35f2b9a11b54af32312e7d0b1152ee86d383c38594c0d88d6a5"}}]}) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x1, 0xac, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x1, 0xe, 0x90, 0x41, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "86"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x7, 0x8, 0x7b}, {0x6, 0x24, 0x1a, 0x1, 0x11}, [@mbim={0xc, 0x24, 0x1b, 0x8001, 0x2, 0x8, 0x5, 0x81c}, @mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x87, 0x90, 0x2, 0xb8}, @dmm={0x7, 0x24, 0x14, 0x73, 0xb4}, @dmm={0x7, 0x24, 0x14, 0x93f, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x4f, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x8, 0x25}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0x8, 0x7, 0xcc, 0xff, 0x2}, 0x13, &(0x7f00000008c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x7, 0x6, 0x400, 0x4}]}, 0x1, [{0x68, &(0x7f0000000900)=@string={0x68, 0x3, "32c42c0e3fb6d92a8212ef800f41c8ef8e56158a6bd92130458ac722d1613d4cb0ce7daadee889a82fe463c1ae6b8348b5bbaf6d9c3421ef67da73439971429389b1badc3b6f9e4f2c90317c87e92a68255adc3a4e5c019bdbc265a387b2e5051eaf6c9715a6"}}]}) (rerun: 64)
syz_usb_connect$cdc_ecm(0x6, 0x9e, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x1, 0x1, 0x4, 0xe0, 0x93, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "db6eb61a9d"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x1000, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x7, [0x40, 0x100, 0x6, 0x2, 0x7]}, @dmm={0x7, 0x24, 0x14, 0x8, 0xfff6}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x2, 0x145, [0x37, 0x4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x2, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xc, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2a, 0x9, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0xb0, 0x8}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0x1, 0x7f, 0x6, 0x20, 0x2}, 0x20, &(0x7f0000000ac0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0xd, 0xff51}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b802331c11a38435343f736018e57c03"}]}, 0x9, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x402}}, {0x78, &(0x7f0000000b40)=@string={0x78, 0x3, "5cf51f65d457c6b51e226dfdf62931feceb046c17f4beacf7d62a20ac2f50df35fc82e67b067a5ba397ad22d39c738a706a6cb5cad36a16871b85652d15a0d922717dc9c287d25ae217785e16e3f2cbf90f1d6384d247b1d7d104386fd557110546052a992438a53243b1023570d345975bb61cfcdf9"}}, {0xd0, &(0x7f0000000bc0)=@string={0xd0, 0x3, "a0523841b730d376ddeac0cd45aee9ce6154aa5c68526310b0f6152b50770de21aacba87b8b81039bbfb1e803f854737e91d7f1b8b532d6d15b78354f026115c63bae6d31af70b1133fb236d5d78e6c92c1b6a2e85d5209140eb00eff0b2f74965d03ed81a693180f47b58bca0a3b058f84db411d739a39083e42ca9d4c3927e7c55521bf26edd18120a504637145a3300432a45d24b4cc533541882a713dce02aa7a0d8ae922143b2255bb9a1ea1a80b174192902aef246e1a383ac3991d861d7c6ebf67b79a0a5ed8cd96824af"}}, {0x91, &(0x7f0000000cc0)=@string={0x91, 0x3, "7cae30ae85ad40620bf26f62bd8e5fe9a4daf6b39adec57a8ed47081978c09bf9f72c1936df57d1605464e411b1a84cea40212b80d1456f001542f26502d90d48d1f0cb12cc3d3cc2ec554c33cd479efcdef282296b3a273a5e233e7822ac4671ce7ef63c468e3b63b8735c96768e2a5d6b21ce3bab787f42b20be85beef333f527b82963ff8d6bebe68aacaf9aa99"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x409}}, {0x39, &(0x7f0000000dc0)=@string={0x39, 0x3, "b0fb42c6a0d7276ba9464515cc8bfaa116de6155cb234c8fd7b226f2e96d7848ed8edb21bce6986c2766699e303b39fb84b98c73c6a2a5"}}, {0xe8, &(0x7f0000000e00)=@string={0xe8, 0x3, "876908144df1fa39fea35b9d9672f6c5a569c9329dcb407d309cfa93bab12662f34708e26ed14bc2f0ac68fa2060192dd5b2c04a4b3d554fb2d46ed9a44f135a0507182a15dd60b4b891e7738a3d74192ab0490b37128b5a8217b3ff3aeffb1e5d23d13ec1206f54e2bc75aaa8de15bb4af759720c867821889d67b437e94d5541f87b503cdaa4ab14a5ae5ee0fe5ae3d81d9122f2776d808036787048420c57ab6e0a60c346ecbf7517ff4c6d7eb387b16e80bd3c4726102874f6824ef8732ab9a4046c51792b4d55f65cb9df1ccb339b674764439316ee80278fdf7ce30140344ccb7fe84e"}}, {0x70, &(0x7f0000000f00)=@string={0x70, 0x3, "9fbd44c7dd753e5e9f5949f195078f019077389a64c19e98b2e14de5a8ddf5277ba9ba7ec8c47659bb0b9657cb77d6bec5cf1667711e62096de3f6c38d31417334364a350b8f9c1bcc75ec4da1150b9ed6d73973237e1cead5a47e3e9979f7a6ba266983677287ae2b06f5070854"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xe491}}]}) (async)
r2 = syz_usb_connect$cdc_ncm(0x5, 0x122, &(0x7f0000001080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x2, 0x1, 0xff, 0xe0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7e, 0xa4, 0x3, 0xb8}, {0x6, 0x24, 0x1a, 0x8, 0x1e}, [@dmm={0x7, 0x24, 0x14, 0x800, 0x3}, @mdlm_detail={0x99, 0x24, 0x13, 0x3, "7b4bc5bedb559d0f7f43414be5f670d4004850b6aa24ab99cc8377fc4fd2a15f1d25183825d55a0b8326b73071238006437cdbf87f9d44713396e540babfb2ab0ab74d5cf7a39f42680b142c33fc1803204c454b8eb17dd14be65d3c1e7908e4085a500e0988ad77c53d40d7a35eb7176f8e31f1043b1f80d0f8022e0ad07b9bfb1d012e05abb02ed6ec8a9495033e16eeff6534f4"}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x6, [0x8, 0x1, 0x1, 0x9]}, @obex={0x5, 0x24, 0x15, 0xe4d3}]}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x6, 0x9, 0xca}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xc, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x450, 0x6, 0xc, 0x40}}}}}}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x300, 0x0, 0x2, 0x0, 0x8, 0x39}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x2, [{0xac, &(0x7f0000001240)=@string={0xac, 0x3, "cd3bdd1f327fbf4b0d556080c898ec6e14c41f75611d8e90ae3ab25dd7a73e524ce61599893eeffdd8a59942f769f9bc74d9cff9629a2a8b77caf2812a36a79274cca6dc6a75feed54fcb3f80cacf9e5c2f3663610a2761f48247461017762b78104faf3817faa92c287fabc3f2aa2e58468f90b3eff035b6add892443fb7ef5cf1b03b1d6f5c0d9d11f09eb22dc97e1d92f5932a8541065f99d769f0aa107997147731b65f10f0fbcbb"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x441}}]})
syz_usb_disconnect(r2) (async, rerun: 32)
r3 = syz_open_dev$hidraw(&(0x7f0000001380), 0x9, 0x111000) (rerun: 32)
write$hidraw(r3, &(0x7f00000013c0)="06110df9da05a809597275a7a59d46db35fb81dd3f766180034129d9030d162ecf11d538e1d9d17f811ee60a4b66715b7fdac621cfbf1c6c8262b45ba8917a2fb2c20097f34cd154c8e03c25bfe8ca0e2ea0068cfd0c53bcf4cd568b71bb70a40c65a62e4ac91a483ae6d4b5f376146b96300fcb3289a42d34eef4ee6c6f461fd281121a87f8cbfc2df83e3051a5e3075c88d35c679d7d460ad1b2c58b8ca86b46bdeb6a66e6b2d4aeb9d3d788a4198c0ef8068975ae04c03f18", 0xba)
r4 = syz_open_dev$evdev(&(0x7f0000001480), 0x1, 0xc40)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000014c0)={0x57, 0x8, 0x7, {0x9, 0x3}, {0x9e}, @ramp={0x5, 0xfff5, {0x1, 0x8000, 0x9, 0x36}}})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x57, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa7, 0x2, 0x9}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x110, 0xf9, 0x4, 0x7, 0x10, 0x43}, 0x5, &(0x7f0000001580)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x860}}]}) (async)
r5 = syz_usb_connect(0x1, 0x7d3, &(0x7f0000001740)={{0x12, 0x1, 0x300, 0x1b, 0xf1, 0xa7, 0xd7, 0x1b3d, 0x192, 0x6abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c1, 0x3, 0x8, 0x5, 0xa0, 0x3, [{{0x9, 0x4, 0x3c, 0x93, 0x5, 0x4f, 0xc6, 0x23, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x405, 0x8}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0xa], 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x6, 0x8}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x6, 0xfe}}], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x6, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x4, 0x5, 0x6, [@generic={0x2c, 0x9, "c0e161eadf72268600d96474c4f0ed820862e8c3c1121ed02d64c246ba5587dfb582b54c5c8a4425c1cd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xff, 0xa7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x4, 0x9, 0xfd, [@generic={0xb1, 0x23, "fe0304422d7b924503c3e977aad02e04266bc042cbe2074ef222511dad5a26575b17179ff734ce21e434b64de7317abc66bb09999ef638f3f6d18d3740e1a2dae34194ce807329b68e0691225f45854373cff5170e3b37cd34589d38d08e395c8383bf1ee80cf7751195ab75fd75e2ced07a980aa08c89a2f969d24e1058c4228b9e91590875e5833412f27af602adf4052619a66c6fb767e6f4fda3d2bee1436a873acac71e21ce41c99a7843c902"}, @generic={0xb4, 0x23, "dcebae79a2b3ef7a13d8c30c5ad49bdb99c8aa4b8a8c3f4b27900e90a0248a93cea98476f00cf6eadc3fdfe58d8c855fd5b1213a5930c6015144f9f93d76b79e60a2262aca06db5f61eaeb893a2d0710091437ee15c011be54bd6a31b1e9af8246fc9e33b9f3a1a9696cf8f80d0c7e13312c8d59983e0d8a1a5351b5091bfc12390a80e5030c07b613abf3137813eba2d38c47d488bd5b31ec0b4ee66b483868f4997c3bb24ba32dd88491c4106b7d8176d3"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x4, 0x7f, [@generic={0x12, 0x5, "d15bb7e647da724eb7e06f22d1b85294"}, @generic={0xf, 0x5, "94f3ce9bec495b657cac9915cb"}]}}]}}, {{0x9, 0x4, 0xf, 0xd4, 0x2, 0xa9, 0xe6, 0x9c, 0xfd, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xb1}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x4, 0x4, 0x9}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0xf9, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x4, 0x1}}]}}, {{0x9, 0x4, 0x39, 0x10, 0xd, 0xff, 0xfb, 0xff, 0x80, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x7, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x1, 0x8, [@generic={0x5d, 0xc, "5e99bbec4ade8c8573369a28dca9f2c1e196fd2962dab1da2ebbbf26e0e48621cbc103f389812cf3b5081c988bfadb944035a41c144b34fdf848ea249bb3f1a1e44da5a36cd114e8e371b67d97b3fe9ecc5a0a45eb17622f9a6b24"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x1b, 0xff, 0x0, [@generic={0x2e, 0x6, "216d79817be2524e607c358c601fa7b4691299dda0a1370dba0692e4e600b0dd687447a4a1b310ccfdf10497"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7a, 0x9}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x10, 0x0, 0x4, [@generic={0xca, 0x23, "57d1854296c7a16e2dc3daddbd70ad425c936197f09649fc312502c0d29be7b66041e90e47f12a2ad5307a6515265507074050ebf04f03a24294e7925f9852cc2b7e2845b32072090438b9db6e196004c1b6d5e300d99766fe0a4bf010a36fa0c9b990efe66bdf0eee2bc2977fbfda7bf155f15c4d526fa757ec7ed31f4d0b30cfe0fe77bc2394f9f80a57b4801f939fba6e1576033678c05c07fc850c00a17a3f838f8289067e8a9b0b3649cd8dad2c7754aaf35006492cec3074317b8ce184fbeb14a5c2a618b6"}, @generic={0x33, 0x7, "6513179bc7f37fea12deeb11b576e83516fe1c022014ecceb793d077e794a150fea0672573951f61894c3e0ec14ffd4ce4"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xc, 0x6, 0xc}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x3, 0x3, 0xf}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x4, 0xff, 0x6, [@generic={0xf2, 0x2, "1c81f9624972452e59405b373021ea54297c9517a63af1953ae1a74c750c178d9d4859ee963a1836d6e26e1e30ab4b7600ff1203144d686bf9535163c99d141fa2e87d18dc8ade0ac867a51bc6660073ce99f4e31331bc1a438128d2d894e0f64eabfc2819515bbb686e28c24a6264ea45901247f5a68020ee792a17b9385b499c2958945c6d8a03f269dc14ed63945acd6304d7646ba25e3caad57eff68953371aff54ea7e3e38668d550fd93a92deef11f8d4dee517cf03449a446f06158978ab8e971ea6f835e29ec44751f552db01ad2b2f86472b6e2671a8ae70ba85e775ac74d65da39817011f4e598ee23a178"}, @generic={0xa7, 0xf, "d8038aeb67c717cd7929384c2da285fba39c8a7d41ef3ddaae8c2f3bbeddd4dd1ef08958695523ab27c4644c77e72400dd2b0cd221a6877da3c49d61f5d68a042726e61160c593ded69852df2e9376ad1e19c55a680157ef8dbc4982d99360c10aa2fe0b19d0b1f084710994adccc2ab01ae6037c1035778760e86771a6f43b708baded01a36e13709929c4316d5a5f7dd120e230fc48f10cabbbdf74fcb82000729e29d70"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x8, 0x44, [@generic={0x100, 0x4, "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"}]}}, {{0x9, 0x5, 0x7bef747684dda409, 0x0, 0x10, 0x7, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7f}, @generic={0x19, 0x6, "553d11814701097c34a5a8f04f2a54cfc78a437126ed23"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x7, 0x73}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x1, 0x4, 0xa1, [@generic={0x50, 0x1, "f6507d3f09f9a5f5b39cc564e343e721ac6fe0fb3fa100a0c2dd70c8fde0aa8cbd43854fb04c9fd265ff97f39f40289a7b1c7ccb5634b85e31f1f33d36cc3f80893ad30e44837a89fbc444062c5f"}, @generic={0x45, 0x2, "ee43caae2de2efe0ed67b75e79b561ec9fbdf05fe6727f03ed0648d6044a7377fb117542e5b6d8c0b023d04ba0c186b7f58bc0dccb5ebfd767a90102e02391554c4fb9"}]}}, {{0x9, 0x5, 0x81, 0x1, 0x10, 0x21, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}]}}]}}]}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x201, 0x7, 0xcc, 0x4, 0xff, 0x40}, 0xc9, &(0x7f0000001f80)={0x5, 0xf, 0xc9, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x2, 0x5, 0x7ff, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x0, 0x10}, @generic={0x9e, 0x10, 0x1, "ce06286dc0fe486e0cace7dc8caf963f3447f82d27748bd072388a314bb04da2bdd48b3c515b0cfd0b05dd82c227c4558b9d20ea3b20a628cbb6e713a313b620e91b8dc19b53098d7dbb238c2b0f114e9dd11259ea24c50462d8a90692de1a719d1198c5919a172de37ef17249e2bdcf5baa17c206bb816917127936e7f358d7471d8e3ca414ce1897579ca10f3c3984a4f3136b1574ac7ad85097"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x7, 0x800}]}, 0x5, [{0xee, &(0x7f0000002080)=@string={0xee, 0x3, "51fb859dc2cd7ab4f07f4c30f79e85713f8f2739e33a56e341826f8c25baeb4787cbcf467e030a1b3413eb30a06c2804b49e8897a62804585706cbf79379ea2165ab5710f3c1c4055af5d11d47d0508058876cb61c8ebb5cdb3b3544ce67ce171d108615336e458c5974a3bfa60beca70ed20d7a8303fa9076828949ae47543fa1fc85b485a8f4a65364d26729d17590f05aef948d7ff4526c74121cab640a93e31f8a0b82b21b84d92918b2ef080e43f3eb7827228eb1b1704f0c6e886a1678249184f2750226bb4dc3e2635a02e303051775be5a8ec9d47e2ba1326c4ee63a4aa3223a344344c8a8ef0812"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x1c09}}, {0xd, &(0x7f00000021c0)=@string={0xd, 0x3, "e6ccc2e5a6d0aaa91a0bcd"}}, {0x63, &(0x7f0000002200)=@string={0x63, 0x3, "55a2b37719ed43607ab14fb6ceb30d8b5f566be740ac3826554502391f613dcc766bd210406375cb3331ac82ab142cac6d9b250905eed34661d5b8f60dcf2e19253b158d671c7251632f392a733958e5f6bd06f3aafd64aa4afa9d1ed4fe2967c0"}}, {0x87, &(0x7f0000002280)=@string={0x87, 0x3, "06b902ccddca52a82be943a9e813cbebf07ddfb9625f8faa26b5b7d142dc6fc9ca726ebe3eb6f4a5f4f622a7f26622d09ded66f4710f421b16c2ffb03d959f2b3a0bea40f295562f3bf912333fb1a3614d8068334bafb9c1c3beecde81e1553a3d28f35d9b7b9504d6be61f3fb20947e1a32fbf4b0ccd8ac914e874c4a2f55a2bcb3bb35b3"}}]}) (async)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000023c0)=0x6) (async)
r6 = syz_open_dev$evdev(&(0x7f0000002400), 0x5, 0x80000)
ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000002440)=""/233)
syz_usb_connect(0x3, 0x1ba, &(0x7f0000002540)={{0x12, 0x1, 0x250, 0x34, 0xa3, 0x6d, 0x40, 0x1781, 0xc30, 0x495f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a8, 0x1, 0x18, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0xfe, 0x5, 0x5, 0xab, 0x2d, 0x79, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6456d37c, 0x5, 0x6, 0xe}, {0x6, 0x24, 0x1a, 0x8, 0x1}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e586bb1719"}, {0x5, 0x24, 0x0, 0xf940}, {0xd, 0x24, 0xf, 0x1, 0xef72, 0x6, 0x80, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x6}, [@obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x1}, @generic={0xcc, 0x1, "32272eaf8c43b14333ec5843c62a61dbb13c43f6a520ab0118f76dc9d8a6905c599281959cab0137c2bee2e2c5745c0dfea750c9618cf8e164b386f893c15ac03dc67e6bbfac71c9be183cd37166aa42efd6a4bb1cedfc07f739457eed86aa19ecdd58c40a771893a93ddccb66ecef18fc80d69c389c10e2d1e56754553fe2f703c6f627a061789c07ac027cfc123329b23fed1bffebc6eb4ecc7cef36e600d52cc2d7b1497025d851bc8cf33c14349083195c22404a25a20440a0572b9485177858733ea8b3773d8eff"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xb, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x24, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x549}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x579}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xff, 0x2, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xec, 0x0, 0x8, [@generic={0x36, 0x31, "f72a1c2d0688aa18583548e7c78b306eecd83216158d9decfa312ab6d7df0b6a616813fd4e706b57f6ba497edfa5c10bcdd709d0"}]}}]}}]}}]}}, &(0x7f0000002940)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x250, 0x0, 0x0, 0x3, 0xff, 0x7}, 0x5, &(0x7f0000002740)={0x5, 0xf, 0x5}, 0x3, [{0x73, &(0x7f0000002780)=@string={0x73, 0x3, "ec08011feb48cfddf3f4c75cd762995714c1816502d417810eee6cb3760dbcbe66c936e9f5eea30bb62dac9e32844534bf05afc4db4249d7f1e9e0083f9067a72618644394ec37588a7d14c5639aecc1a5849f17aa00affa2c170a9e9ade2c64fdf1fee70fb491ec74b9158f9a12e1cdec"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x82b}}, {0xdc, &(0x7f0000002840)=@string={0xdc, 0x3, "dbc4d674193413a9af043d3ccaa4f44657e0b6d26aa809a4e9d82b43ac7d434018cfa8634728485bd8c0e93569dafa10c39b241f8c83a71e6af3cf6b5c937a2496131e070f9cea8383f51151d919d758460eb6ca557cdd5e1cafa9ef378c8ae250a23040f58736c065ad9124c0dbe3e0bbc618f2b9bab1d0518c120f15e5faeaaf7585561d1bbfe58fed5fa994f45c007c60610d51e99c22883c5b5562d891975a2ff96661ab5c2984f94d65b238ca43888a9457fab7b67cb357491c5076b4412844f53c6075a82bfa0d2842485e79abcbc2a8a26efb06b10b2c"}}]})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x240, &(0x7f0000002980)={[{0x22, 0x4e00, "d8ecafc43de63bb10559e792e7a074d6fb456bc2fd987f0b96d58cb9f8f58d0920f9"}, {0xe8, 0x4e00, "e230dea9cd132b272f48cb88ab2fafc886334a083b3900a9101427e39def43625daef782aab687721659d2141252396360c039b822b7f2232c584031e86569c2fadee2a178abbd7e0e4ab6fe00ddd480ab15a910712995726d6dd425abd52ea0b74b984dee6ceec9a4ee2deb82da97ad6af33b1503ade07dea289da884a3279db3d2f41bda2c5d352986214da3eaad19004b52bac6de40b212f56af9910c948905463cc4d42e59fcc0986eb2fcb7ac4b7fc067a93b563309df425740f7f040e15425549abb8a5fb2d6debd39e7152a6234a74889bfb76ffe465ea00920ed41441f2af06116bdbc87"}, {0x67, 0x4e00, "db5688a22299b92c894668330685c56ce5a99500f4309d3fe156fd7fb595f8885d3430395e227dce6837334a27f08bc9358d2d30cfc77286e2453552449e43ee408ce08eed2a711240e4f663cb160c283a9f01393dcd5882085512bd16b7cdedd9da5c5e44ccf1"}, {0xb9, 0x4e00, "a677edc5f292b8faba3b3da87874f16c8ac643943e7c1156ac50ef81ace3f86368f551b41611ffc6edd5b84471a77bb7d7392239632408929078f0ffbb18d7690839e13cf91fac09175ff4c4c7f1589261709133bc8f70111aa380442114e896dff51423e13381fe1b432077872f607b2dc12d0fedbab094e352070625db3ed4ca1f11a77b72bb6eaa9890aa1ebe3424a8eacc08589b69e6dc64754f19d5b685205a7d1e68e47fecd5a3ed545b63fdb414dabf2dbd3c411f3d"}]}) (async)
syz_usb_connect$cdc_ncm(0x1, 0x96, &(0x7f0000002bc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x8, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, 'M\vL%'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0xa000, 0x28}, [@dmm={0x7, 0x24, 0x14, 0xd93, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xa, 0x43, 0xc, 0x7, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x6e, 0x1, 0x47}, @obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x42, 0x2, 0x94}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x1, 0x7}}}}}}}]}}, &(0x7f0000002fc0)={0xa, &(0x7f0000002c80)={0xa, 0x6, 0x300, 0x4, 0x6, 0x8, 0x20, 0x2}, 0x1ad, &(0x7f0000002cc0)={0x5, 0xf, 0x1ad, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x90, 0x7fff, 0x2c}, @generic={0x95, 0x10, 0x3, "c4f566081bd0e293a1bf70eb6dd6b9b278b48e052ffa086531939330d58289bec3f19abf7071e993d0f3ab8315137edc73273a364697a5e41353963f96da3aafa43a53a1f0d079e9f3023e91e6479cace96249252f471f447fb28011e5ac717d04f3d0152bd600faefc7964e42393a4c745d3242afa21505cf02a8e8d1088735bc9161d893903375677d0aaa6906590e9b04"}, @generic={0xfa, 0x10, 0xb, "5f2006f82e1a133df7f1706d7195ad60ff6e760904d7693497f9681c79fb84bd9477d41e34586fe56403983558275e7277a4f5fa2ba694e9888c9d26eaa86f686975ab6b9ea82522d4b00f218eb97509f36fd68810f68d0a0bafceeba6029ffc3eda1c4689448279e26e79c4fe0b71941b75ec99b4eefaed9090e7f189058adf94d2387923de52cb43419a382da7230da5aca965d5b4d070b5e0fe4e679c4a51f2e168830fb9434bb6d861e50eb4916e4a9013d12161ad7523d95b93e56f245142e57cd14dca58a85cf1e9f635c49623a674ad79fe50d8df6ede33a89aca6ad3dc6f8e5154df7f55910cd1dbe87bc2343c24deb3ba81cf"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x297}]}, 0x2, [{0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0xc01}}, {0xef, &(0x7f0000002ec0)=@string={0xef, 0x3, "fa157c2928f27c89393ca5d711a5d87214c8a505f675cbe15ea46bf308379d2efec39b6dbac83bdbfb26c2e51258b1fa1adcb5b302337e55094fda2fd4bbf2051e25b0b5156cf185f6736f6a52dea0e97237c5888822258a21c6c98f2ee37fe7b0ebcab6adbd3f4068458ee10b6b64e15942b222bbe77b86184120a8338a7841f6421a7e4d9bfd71c4462fe557137d3eaa3d26872e953cb0bc3583c57fe7ad8becf15b66572a547cf63638c141729fdf501d3b6abe1556f1820c2ec807b98cd7a376c0fcce5873d2fe18635fbc2258fb140673e480f9cf0e5c3b49632b345c9c491ca9ff0e928406c980551d1e"}}]}) (async)
r7 = syz_open_dev$evdev(&(0x7f0000003000), 0x7, 0x402)
ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000003040)=""/231) (async)
syz_usb_connect$cdc_ncm(0x1, 0x9a, &(0x7f0000003140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x10, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "be7e31"}, {0x5, 0x24, 0x0, 0x2c2b}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xfff, 0x1ff, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xf9, 0x8, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x5, 0xf314}, @mbim_extended={0x8, 0x24, 0x1c, 0xa6, 0x8, 0xfb08}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x7, [0x7, 0x2, 0xd]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x50, 0xf9}}}}}}}]}}, &(0x7f00000033c0)={0xa, &(0x7f0000003200)={0xa, 0x6, 0x300, 0x8, 0x0, 0x7, 0x10, 0x5}, 0xc, &(0x7f0000003240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0xa, 0x8}]}, 0x3, [{0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x42f}}, {0xbf, &(0x7f00000032c0)=@string={0xbf, 0x3, "40a37b6762e6a9be569c399b03bbe751ffc4c12624de07e7158743a9a1362cf889534bb9a1b7a17500a4164a2426fa2ba92c4d7f05b562d5abbcd2f67561b4772550319153a5ad5f08fb7c283c8a5f4e759d10350f82b447849e50cbe7a8d15a5f141b1818b6ab62f804ee075e7ae3880873d2179cf6bdcbd48c4d893cf36f43b910a9d9338fd0463cb33d3f4270adf57495d7ade0e0da756d37371000953af9fc8cff892fd73078ec688aadcdd305d223521da6f0b681a32d72739a81"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x804}}]})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0xa94)
write$char_usb(r8, &(0x7f0000003400)="87d62cad365ef59e332a3e84dcbbfecfc3768e870bacd0782b3ef1dfa478cc6e876ad3e45832446c3a53acb73c26fe10d69b1641cea5b021a9b9b3acf33ba1062bd8161e7b1034757da1da6ef82f25b5adaba226eee62c9b48a89d8aa5dc6e67d539c2633c4fb56af32b418dac8433e0e6774e5ecd01acee7b183fae61283bb679f8c7b728c9e6bc26de2ff1c4098ff2e6921ea0558f65c5d3ef09ec6f2a787e376374b1e2747c2baebd6c5d434aabe122464d9fb319d8cf91e769c905b97e8d9a0c8fc8a4ae2531fa702fd005b286395c0ef57f057e7d", 0xd7) (async)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000035c0)={0x16, 0x95, &(0x7f0000003500)="e79d79953aff47b301d82dd06c5935407514c952c1bb08f43a993de0071377c623437ebe01eb4568196be88947094c13c629fc360ea4a2724116062269adef1c3cbf4e7e6f7a0f901976d713848ff05ade3804f72c0d62d02087baae6a2e87249e0e01babfa6006bfe541d7506402f7e7d09683679eb39a34883829272bd19f0da0daf38a3de1d48d8feaa7b7693a49ee7369f3c77"}) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x50, 0xc, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x865}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000003780)={0xa, &(0x7f0000003640)={0xa, 0x6, 0x110, 0x8, 0xed, 0x0, 0x8, 0x5}, 0x46, &(0x7f0000003680)={0x5, 0xf, 0x46, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "754bafd623d9b9b7fe7844f149421801"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x0, 0x0, 0xfffd, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0xe, 0x1ff}, @ssp_cap={0x18, 0x10, 0xa, 0xf7, 0x3, 0x80, 0xf00, 0x4, [0xff003f, 0xffc0, 0xff003f]}, @ptm_cap={0x3}]}, 0x1, [{0x71, &(0x7f0000003700)=@string={0x71, 0x3, "e09f464151173bc5ba414692c5c9ef458ebee2894be589850447a06a73b7107f9dfd82fecf64343e2f298d41ee7afe6f53d07046bca9d2f768cf720b1f41b0a4a60d368fff12d6793a37111154c519845041ab12c7a41bb489aa1215c6f4f84a70c6a65ce231c36be797fadbc3faae"}}]}) (async)
syz_usb_connect(0x6, 0x51, &(0x7f00000037c0)={{0x12, 0x1, 0x310, 0xb5, 0x36, 0x6d, 0x40, 0x19d2, 0x1136, 0x301c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x39, 0xfb, 0x20, 0x53, [{{0x9, 0x4, 0xbe, 0x6a, 0x1, 0xff, 0xff, 0xff, 0x80, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0x5, 'u', "7b09dc"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x6, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0xfd, "6822db1726c1c697bf"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x6, 0x81}}]}}]}}]}}, &(0x7f0000003a00)={0xa, &(0x7f0000003840)={0xa, 0x6, 0x250, 0x7, 0x0, 0x2, 0x20, 0xff}, 0x5, &(0x7f0000003880)={0x5, 0xf, 0x5}, 0x2, [{0xf0, &(0x7f00000038c0)=@string={0xf0, 0x3, "797e9720a3fd6c460f1c63a4dd0953041349718af1abb3ae61ab889fd3620d8bab85f00190079aa602a4b136747bf222012850d903538d6572e5e0492b911a2b51cd3c3a6963cf397923f5b034bb99e1e89af36301e2ab7f85709cd6da73490c9f3ccbf0365ca3e7c436cd06d8db5a7949d25e7beda43ddc53c80f85a9daa1d543ccf2421ddb356ab7adca7c64866e102f6743399f5d8d7e159731592d702013a99cea7226fb0e1e483a3249642eba392013dd865c37490f90168a0891eb7828308e19c7cc0aae76abd6cbf70d638c3691db3b4f6704cedf2e841ce80940050634c82db3b6dac8adfc615287c6d4"}}, {0x4, &(0x7f00000039c0)=@lang_id={0x4, 0x3, 0x2009}}]}) (async)
syz_usb_control_io$hid(r5, &(0x7f0000003b80)={0x24, &(0x7f0000003a40)={0x40, 0x9, 0x1a, {0x1a, 0x2, "d04fdd004244ad972657295f1e50e5cadd38b618af8e3cfa"}}, &(0x7f0000003a80)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "0378fe62966f9f8e89987567d9ef669d0834107b27bf2cd4c4d3221bb7d8b2fa03264b937de1e0779a5e388cf96eea6ccdab36aeb377b4428dbd462a8c"}}, &(0x7f0000003b00)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "02ff"}]}}, &(0x7f0000003b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xf87}}}}, &(0x7f0000003dc0)={0x2c, &(0x7f0000003bc0)={0x40, 0x0, 0x3e, "ac4bece72a019efd39b723f14dacccc76db36c154dcbe98211e49aa88803fd0b8cd3158d7f10a1d44596d782ceb43b72f4f2bb5e0241eb623411f8cf5a91"}, &(0x7f0000003c40)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000003c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003cc0)={0x20, 0x1, 0x90, "cb71e0d2bb761aee2fdb53ce420592de052af1842cea8c780a0605ca3bdba3e96c9f9f9ddaceec8adb50e6ac65cf6032247102a163bb60d7661829c6bc1bdce1d78b4dd0063b19440b2aed4cb649940303783c43736706518ddeea201d4ff2e8fd6d66d20f4a1f1ec4ba6abdd9b0e9dbc657f60b846e285d741aed7da4e3b320df4dbda97a9b31d7773e70e1f4a738a5"}, &(0x7f0000003d80)={0x20, 0x3, 0x1, 0x5}}) (async)
syz_usb_connect(0xc6b4eb31d77998c0, 0xab2, &(0x7f0000003e00)={{0x12, 0x1, 0x300, 0x8c, 0x31, 0x71, 0xff, 0x403, 0xfb5e, 0x5738, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa0, 0x4, 0x19, 0x20, 0x10, 0x8, [{{0x9, 0x4, 0xbf, 0xfb, 0x4, 0x8, 0xaf, 0x2c, 0x80, [], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x1, 0x40, [@generic={0x8a, 0xf, "e84c59e64623f5b2efaed2eb59eff56aedd0475e4feefc6a2c77b8d9144939bf5f34f0a7c53f25de1962ff20b6ae30b364d67e765479173a7f972d3cd2e7ae772fb26e3af34ebaa2f76b44e5a66b7b542223238411302115e3fd4addcb2639a5c6efcd25bdfcee5c226d40a733b4c18089cb07e29408145c463c9bfcd14c966c2df81c0895687a4d"}, @generic={0xd4, 0x4, "d2c590f5c8233bbe2d5e5155b1a4ec379edc6d7ab7e60f947a323453a695186c7c6a930cbd15a252864d4a5985d1db684bc27bf6a4f7741ca93f0be2eb41b0b2684f83cb8ae215cf068e09911b368d1eb05a4cadc5916143567cfabb629fbc47051c83c8c2318ad3eba26d0f332758c78cdb9aa953ea5868ded826b719c142722ce9ea571ffe47e6ff9b7b9a590c5c0bb7b9baca703489a4f33074c465e85ec73f6fd5c4ec5c17a7accd9e7215a96a8eb5a6c1e0aa6571e69511d7180f27057d6c8f8981003df92fd58636b5c67827f26f10"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x9, 0x3, 0x80}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x4}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x2, 0x1, 0x9, [@generic={0x46, 0xb, "1e58a094bc4ce33fc7c13b6cd7bc08abb170820b9f5ce80f0fbabdf77624d91b99f75e6743377474d1645a999018f170636bc880ba4290877c6bd2dc16b693492a092f3f"}, @generic={0x2e, 0x23, "505e3b4d29f3e14d3065f7dff8ed582055ef3db29015b7b6f2415b975bd0127bc64ca5682717c25e64367361"}]}}]}}, {{0x9, 0x4, 0x37, 0x7, 0x9, 0xe4, 0x3d, 0x70, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d0a5f5"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x0, 0x1, 0xe}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x0, 0x10, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mdlm_detail={0x7d, 0x24, 0x13, 0x27, "d73590d85ee5eee6fd8443adb0ccfe5e6f9018832d4253f5648e1174358fe5762b041b5a0063156f423d395689c7a0cc8cf1570d6f408c76d3c0a207808f79fdec17653bcae83ca4e805050b7e216347f9bff59e2c154adff299738e5630044c1156ec45df45296f6ce0bf448cbe7fb964ac6b386df3b474fe"}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x80}]}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x6, 0x4}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x5, 0x2, 0x4, [@generic={0x4f, 0x21, "ca734239fa05399928cc356043c711ff5303c65bf92a566e8dbc40907c1bd3a2382481b7d31eb835080b72c15d2bd27f8513dd7d42eecb1d3ede40af811c3431a5a85133e40b6743d4ec4704c4"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x0, 0xfd, 0x2, [@generic={0xb6, 0x11, "54f80a6850297979dd1a7993ee79ad3ba26143ff9ec98913f6ccaa062cd6d83b4f929ddb0919019eb56150c8cc54efceff4ab6f5dd3dc8052fcb5bf8ab726c2f43b9b793b64022527e3fdcf85eb5788e78ddf24f271f6b5f28f4d740d418e27cd554d61e4a173dad4d2419cc66bf7ac76bd9002e65b6ee6028ddb8f25e2be67dfdf94ee4779d7a47e235a09e31789b5b77e458a3a0c01f7da1716185e7f41de35d61358065fa7b14c8c93d9ae8e16fa4acf9470b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x36, 0x1, 0x2, [@generic={0x61, 0x9, "da0a427d3b04c8f465ce263ff70822ef6e0a7f793a5b3fc41b1ecf7c7d1c43a9145df10b078a42cbeb40d4c9f7da5fea04a4b36006f2d994aa83e29de001d85fcb00761731265e08a1bfb390b74cb6564ac20f953d4a0eca3409c8e0247402"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xb, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0xc1, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0xce, 0xa, [@generic={0x96, 0xd, "0534b65ff184846fbf47cddd581c9ceeb4dc1573d4d61d1c8927f214a89f6e32cdf1709b1e033002ef91b13d832b80d43499ebc9c00984e1eafae2302ca3a6412837ae4367b2867949a1fc032f2026564bbc284669837b6c5d09fa9c83b01ee8b01aa3dbdf20986ff1774cd1e735b76a3840a0d4084030c5b44df6670f948c9f495d3a1f7a276ff3054615a0989459f7941233aa"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0xc, 0xc, [@generic={0x29, 0x1, "b59830b464207a00a0b183f6cb4ab5aa0176d6127e433f60da9cf403523ce070a2a2d61e28afd5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xf7, 0x5, 0x1d}}]}}, {{0x9, 0x4, 0xe3, 0x5, 0x7, 0x4d, 0x3f, 0x6, 0xff, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0x8, "3e0547e476"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x9, 0x3, "17a0"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x20, 0x7, 0x2, 0x0, [@generic={0xb5, 0x7, "f9e7734469c86e0f5704ab5618577d9e0c1884b979e495453e708362584aacf14a029c9d767638a7090d39309aa5fd04b24e2281ecb27868abc3e7cefbf426082b6504650aa70518a76b7a014e86fe272f0f3eebc04e2bd51296ce7579d7dd50d7456685158aa2697ec7a5edd91cda6ade8d4ba143ab0cb5f73c695ba6f3ea144417133cff82dba94f0f9ac0c7ab7caeb7c9402df8e7583037c0d187cb8918767fdd57c8b604b55ee98ca6659382e3878a7909"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x6, 0xf7}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0x4, 0xa7}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x80, 0x9, 0xdc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4a78}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x81, 0x81, [@generic={0xbf, 0xc, "04a7cb752ccbf6ae577bc324c4320eda3837a7994acd57d75a7a4ccb084095cf8b2e7d83bb31b884b3cff539078102b3a250b207c45c31df80a479cbb7a1c2d643c8ad996e327f0f82a1b35081979e097a24c6da17d18ef2aa245e33635c25a5300f71f76209cb3c9b53f3754c27640bc4596db2c4364d528c53fdd08fd0ae41e95903f76f6b7d509c49a16326b15297dec7ded4789d3de9d1eb1ab68126fb85a3b48426927f254ecfb15628620e82e5ac505fa86fc39aa6d83a63a8fe"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x10}]}}]}}, {{0x9, 0x4, 0x6b, 0x9, 0x7, 0x48, 0x3, 0x2f, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x80}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x7, 0x14, [@generic={0x56, 0x2c, "ec4ac9f43be9f959863b93e81046b979ee498587675fc96e3ae9b79601c9c717fcb5313983b2c93a84f12951e0d4c895e1b862813ab6aed430598bdaac3a19683756e95d0961d897c6d8829d8e0ddd4f94a1260c"}, @generic={0x58, 0x10, "54cd36364e49637cbb68f0ad0abddbfce44d7c2abd3c8303638eea78b029dcfbbbb8e8cbcaf49b09a6509b67cfeb42065b488d9f6df63fa4c3561a33703c1183ca17d96512c4884f4ba824cf6e749e5018bcbeb04d7f"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x8, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @generic={0xa7, 0x21, "14d45dcdb88c0795819b3b1e4966abe6963ee3a37e90d1e0c9185e25936e47143bc062a3e8648e4cb8a3b0a6fad3bb8d72253ddd55bf530f67125c7b0597e9007dbebc80569f7cee8df11487c02c2ed6286de84e4ef610e43a8c43c12ebed509a24a7c80efe67193861afb8c36b096b4d66755a830df7766e146040da35c8181eb54da9241c33248952846d374371a4f9771ea16a88f6090800ae0fc500b0c345a8cf0f8fa"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x81, 0x7, 0x50, [@generic={0xfe, 0x3, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0xb}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x5d, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x230, 0x6e, 0x4, 0xb5, [@generic={0x73, 0x7, "d62bde296ac4a16cd05ce33344a714fb6df6e620fa564afb1a19fc2e0984130cdf942ed53b65e10cbde554fa9b9c873f1cc8681993f938a4b23078dfc283ac1c1477ee50fd0c870003b1a6d2235d03a3ae7854621011f8183b5ad21bac85fc29c2bcd7e93207619382b4fa9b200c105c2b"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x0, 0x6, 0x2, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000004b40)={0xa, &(0x7f00000048c0)={0xa, 0x6, 0x310, 0x0, 0x2, 0x1, 0x20, 0x1}, 0x136, &(0x7f0000004900)={0x5, 0xf, 0x136, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "8c777592cf78c1903c0b0120e9c2dc86"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0x5, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa4, 0x3, 0x1, 0x4}, @generic={0xdc, 0x10, 0x3, "40afca70346a8ad4d838af1c22e7854114867c0347babf2388fcdc8ae014bd782d6427bf2b2a0c210af79dbc17e6a3178990d6f71ffdab482327adb519666bea75ace8c1e9e1500e246876205b0fa0f39d2448073c5005a2df3bb531c62fa77964e795c28481edd84e53bbeefbef1d9dae4372d78cf15fd52d140d65815d12629666a9b32dea0354f9e7483708618f7db26dd04f70fd4ad3c9a691f71bf882620a4dc6abb4a369701595f57824f43279ac652735bdae4b610c01af79ce7d87698af2b3d11d1cbd8bb0ba0df615670ba68f34e02460fa20bd1f"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0xd, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x7, 0xf000, 0x8, [0xc030, 0xc000, 0xc0, 0xffc01e, 0xf, 0xff00c0]}]}, 0x2, [{0x82, &(0x7f0000004a40)=@string={0x82, 0x3, "ed9663843e8975a29a2c42d7797f1c13894ffb502c20162cb40165eb476956a54bdcf10233435dff2e95c77fccaaa89ee5d257d6c93c6a9019c329e85eaec80b0f655512296c1012a646e8c5308df332964ee97283e61dc479a1a205bb248acbcd6f30847400b7182ca63897983d6dda0a9ae9e7d194b2bbf7a105b33c9e6b5c"}}, {0x4, &(0x7f0000004b00)=@lang_id={0x4, 0x3, 0x44b}}]})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x500f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffe, 0x5, 0x1, {0x22, 0x4f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x80, 0x9f, 0x9f, 0x8, 0x57c, 0x2200, 0x3d45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x2, 0x20, 0x4, [{{0x9, 0x4, 0xd8, 0xf9, 0x2, 0xe, 0xe3, 0xe5, 0x6, [], [{{0x9, 0x5, 0xe, 0x8, 0x20, 0x3, 0x7, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0x8, 0xfc}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(0x0, 0x1ff, 0x440000)
syz_usb_connect$cdc_ecm(0x2, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12015000020000202205a1a440000102030109026e000101cb00030904000902020600060924060000e3d6057a052400ff010d240f0107000000050008000106241a8000200624070502000d241381e620ab93366ae080cc08241c0900f1270008241c00000a000206240702070009058202400005030309050302200007ff00"], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x58, 0x84, 0x6, 0x8, 0xfa}, 0x65, &(0x7f0000000100)={0x5, 0xf, 0x65, 0x1, [@generic={0x60, 0x10, 0x3, "bf4aa014ed7f66904c75061c071560f74e2ba2c392570595b1b2875bb0f29cc2b6c624d2c23d1c7eca35dccce4a9e246ce40251b79baf42b5cf290777d4bb002a0951caef643525e4a84453b0e122b6466e86aa8492793724dda486a4e"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1014}}, {0xbc, &(0x7f0000000200)=ANY=[@ANYBLOB="bc0332f320af636578ab49fb729c9b58fd694c4c4d300b72e77fd9d68004466dfaf59a0544e4454864b11eb1c3a2b70148a2690e8b36dad239efc3a00d2a9ce7c1a5ea9408aeef28a26082fb1873cc86244e560d7abae9299210fa48e65f379934a3ba9dd5a5200acc95304843cc9a9f71823ff00043a2fb7690521d4276ff6369281c2c3e0b7971099fe6924f85414e9d91572fc598b69895f577e89bead3b681e6f6ca48f4e8d18fe41c7e"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xe4f8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="188e7b0305289c52827875260fdb14a5cf9efaef71c8bb21dc79"]}]})
syz_open_dev$hidraw(&(0x7f0000000580), 0x7fffffffffffffff, 0xf23c1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3f5b579890739b62, 0x3, 0x0, "170adfa5", "df344ccc"}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0xe, 0x0, 0x9, 0x2, 0x9}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)=ANY=[@ANYRES16=r2], 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x40, 0x1c, 0x1}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x7}, 0x0})
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0xc0145b0d, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000400)={0x2, 0x3, 0xe6f0})
read$hiddev(r6, &(0x7f0000000140)=""/104, 0x2e)
ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000a80)=0x3)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100000001229403090581030000000000179d67538409369c06541218aaa875c254e839a3c22a8566d729b20f082a4787ecd98481df5ac55dc41e5742dcc686e3039343dbcd5ceb51b099bfd4d3c0453243eb9146795fffce290d6ce53c139c8060aaf4d43c9a7fbbfc18036197ba57d91131050a1b37d489b653a41d6b51d432c32dce18d22dee440202075f"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) (async)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESDEC], 0x0) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xd0, 0x4, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xff6a, 0x88, 0x1, {0x22, 0x53}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x5, 0xd4}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x0, 0x1, 0x9, 0x8, 0x3}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x2, [{0x33, &(0x7f00000003c0)=@string={0x33, 0x3, "2585b436c3d5eaa114eef9ab5861f2cd6c8c7f30c91fbdc6101237a4cb43627a26556558577910732df293a42d2391a048"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}]}) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x2f, "10d833788ef11aa395b593b95b3b52c4317c48a84008ee07c032f2f3f7c81fb078faf4e5e3cb01af747adfbad1c421"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x3ff, 0x6, 0x93, 0xff, 0x52, 0xfff, 0x6, 0x1000, 0xd5, 0x8, 0xf}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x2}, 0x0, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x8000}, 0x0}) (async)
syz_usb_disconnect(r2) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x86, 0x1b, 0x33, 0xff, 0x1b3d, 0x9317, 0xbe5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc8, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x5, 0x0, 0x74, 0x7f, 0xad, 0x2}}]}}]}}, 0x0) (async)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000100)={0x3, 0x100, 0xfffffffd, 0x8001, 0x6, 0x5}) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000007f063fa63ea02862b9f6e"], 0x0}, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="400a0100000042b331e0b3c6be2e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2b, 0x2f, {0x2f, 0x11, "e61994525cd5b5f1b69e71c92d55607dd14823be01331d8e5af8f62ffe147f765f7aa23080ffec27f09edc38d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x60, 0x30, 0x10, "ca36bc1d0c07dac48966e9f9049d038c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe7}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x8, 0x3, 'vE\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "e03400"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x59)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000406b1d0101400001020301090294000301101006090400000001010000be2401018000020102072408040100050c240703000000d8857005850904010000010200000904010101010200000c2402011300000001017f0400090402000001020000090402010101020000072401010502100f240202966802000007250102f80300"/166], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a25"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="07cc4dfa9fd2c2c2e9e60f1a2ac05d62efff8f39fd2f8da0931fb3f79c6cdd35d2b99ac7d4b6560e9402f1ec25d91b31d72e63688a53e84cce52a2809d78b2a7ed3642128310e936555a0e149323da7be332e1ae8dfe15ebfc88c885dbb9318cb60b5b5dc0188a477a24c944c0", @ANYBLOB, @ANYRES8=r0], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000780)=""/158)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x29, 0x1b, 0x76, 0x10, 0xccd, 0x78, 0x5dc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x79, 0xfa}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000a00)={0x40, 0xe, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x20, 0x17}, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000e0000000010"], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x71, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0xd, 0x8}}]}}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0xff, 0x0, 0x20, 0x5}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c57b911c63ddbebb404c3c8a9b16de59"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x9, 0x60d}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0xf00, 0x1, [0x3f0f, 0xff0000]}, @ptm_cap={0x3}, @generic={0xe, 0x10, 0x4, "30d2344fd1bd61e38ed9e2"}]}, 0x1, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "2cb818d80202b296926db97d5c713352c3b12d715fc99bb77449dbf34dd152b786d343f4b8dc1154ad2a92659cd5df88af00e431610393a754a1bf603765c1f1f4544f8310bbf057c58520858104ea1d5470f0b2afd8399adf743ebd663b1700326e9f28d4daf8fdb2bcf0"}}]}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d7"], 0x0}, 0x0) (rerun: 32)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect$printer-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x71, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0xd, 0x8}}]}}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0xff, 0x0, 0x20, 0x5}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c57b911c63ddbebb404c3c8a9b16de59"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x9, 0x60d}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0xf00, 0x1, [0x3f0f, 0xff0000]}, @ptm_cap={0x3}, @generic={0xe, 0x10, 0x4, "30d2344fd1bd61e38ed9e2"}]}, 0x1, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "2cb818d80202b296926db97d5c713352c3b12d715fc99bb77449dbf34dd152b786d343f4b8dc1154ad2a92659cd5df88af00e431610393a754a1bf603765c1f1f4544f8310bbf057c58520858104ea1d5470f0b2afd8399adf743ebd663b1700326e9f28d4daf8fdb2bcf0"}}]}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d7"], 0x0}, 0x0) (rerun: 32)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x29, 0x1b, 0x76, 0x10, 0xccd, 0x78, 0x5dc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x79, 0xfa}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000a00)={0x40, 0xe, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x20, 0x17}, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000e0000000010"], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$hid-syz_usb_connect$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCGSW-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x59)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000406b1d0101400001020301090294000301101006090400000001010000be2401018000020102072408040100050c240703000000d8857005850904010000010200000904010101010200000c2402011300000001017f0400090402000001020000090402010101020000072401010502100f240202966802000007250102f80300"/166], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a25"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="07cc4dfa9fd2c2c2e9e60f1a2ac05d62efff8f39fd2f8da0931fb3f79c6cdd35d2b99ac7d4b6560e9402f1ec25d91b31d72e63688a53e84cce52a2809d78b2a7ed3642128310e936555a0e149323da7be332e1ae8dfe15ebfc88c885dbb9318cb60b5b5dc0188a477a24c944c0", @ANYBLOB, @ANYRES8=r0], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000780)=""/158)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "e03400"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2b, 0x2f, {0x2f, 0x11, "e61994525cd5b5f1b69e71c92d55607dd14823be01331d8e5af8f62ffe147f765f7aa23080ffec27f09edc38d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x60, 0x30, 0x10, "ca36bc1d0c07dac48966e9f9049d038c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe7}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x8, 0x3, 'vE\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2b, 0x2f, {0x2f, 0x11, "e61994525cd5b5f1b69e71c92d55607dd14823be01331d8e5af8f62ffe147f765f7aa23080ffec27f09edc38d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x60, 0x30, 0x10, "ca36bc1d0c07dac48966e9f9049d038c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe7}})
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2b, 0x2f, {0x2f, 0x11, "e61994525cd5b5f1b69e71c92d55607dd14823be01331d8e5af8f62ffe147f765f7aa23080ffec27f09edc38d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x60, 0x30, 0x10, "ca36bc1d0c07dac48966e9f9049d038c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe7}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="40000091")

program did not crash
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x83, 0x75, 0xba, 0xa7, 0x4d8, 0xa, 0x9afb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0xa7, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0xb2, 0x3, 0x2, 0xff, 0xff, 0x0, 0xd, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x2, 0x16}}], [{{0x9, 0x5, 0x4, 0x1a, 0x10, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x8, 0x40, 0x3, [@generic={0x73, 0x31, "32ec48c6b498487854bc3bb5045357a1bb9f7aee96359fb2f673c174c0eba8679413aff19de68e2a8246011d757ff082af162cc43971f691eb6bd3ebdae20d9691de071c510a0cba3a4a5577a5b4af1715800d4daf76a3882af77e40df90c2fb08d47d50258b23b16ea6b67cad519f08b6"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe, 0xb9, 0xff, 0x20, 0xcf3, 0x817b, 0xd5e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x40, 0x30, 0x75, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x57}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x7}]}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x4, "7168d64c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
extracting C reproducer
testing compiled C program (duration=2m32.179030024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
simplifying C reproducer
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program did not crash
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m32.179030024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
reproducing took 1h5m27.03319032s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811d4d0730 by task v4l_id/3114

CPU: 1 UID: 0 PID: 3114 Comm: v4l_id Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x231/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6d7/0x13a0 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3845 [inline]
 path_openat+0x1e5e/0x2d40 fs/namei.c:4004
 do_filp_open+0x20b/0x470 fs/namei.c:4031
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1429
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f45d443d9a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffd69713c40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffd69713e58 RCX: 00007f45d443d9a4
RDX: 0000000000000000 RSI: 00007ffd69714f25 RDI: 00000000ffffff9c
RBP: 00007ffd69714f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd69713e70 R14: 000056467eccf670 R15: 00007f45d488ea80
 </TASK>

Allocated by task 9:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 em28xx_v4l2_init+0x114/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 9:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2389 [inline]
 slab_free mm/slub.c:4646 [inline]
 kfree+0x286/0x470 mm/slub.c:4845
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22c5/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811d4d0000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811d4d0000, ffff88811d4d2000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d4d0
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004753401 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 60951247534, free_ts 57522096993
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1717
 prep_new_page mm/page_alloc.c:1725 [inline]
 get_page_from_freelist+0x10ca/0x2fd0 mm/page_alloc.c:3652
 __alloc_frozen_pages_noprof+0x25c/0x2160 mm/page_alloc.c:4934
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2459 [inline]
 allocate_slab mm/slub.c:2623 [inline]
 new_slab+0x23c/0x330 mm/slub.c:2676
 ___slab_alloc+0xda5/0x1940 mm/slub.c:3862
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3952
 __slab_alloc_node mm/slub.c:4027 [inline]
 slab_alloc_node mm/slub.c:4188 [inline]
 __kmalloc_cache_noprof+0x209/0x3c0 mm/slub.c:4357
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 em28xx_v4l2_init+0x114/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 3079 tgid 3079 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 __free_frozen_pages+0x66c/0xe70 mm/page_alloc.c:2680
 discard_slab mm/slub.c:2720 [inline]
 __put_partials+0x16d/0x1c0 mm/slub.c:3189
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4151 [inline]
 slab_alloc_node mm/slub.c:4200 [inline]
 kmem_cache_alloc_noprof+0x14f/0x3b0 mm/slub.c:4207
 getname_flags.part.0+0x48/0x540 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:322
 getname include/linux/fs.h:2852 [inline]
 do_sys_openat2+0xb8/0x1d0 fs/open.c:1423
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811d4d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d4d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811d4d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811d4d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d4d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811d4d0730 by task v4l_id/3114

CPU: 1 UID: 0 PID: 3114 Comm: v4l_id Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x231/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6d7/0x13a0 fs/open.c:956
 vfs_open+0x82/0x3f0 fs/open.c:1086
 do_open fs/namei.c:3845 [inline]
 path_openat+0x1e5e/0x2d40 fs/namei.c:4004
 do_filp_open+0x20b/0x470 fs/namei.c:4031
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1429
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f45d443d9a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffd69713c40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffd69713e58 RCX: 00007f45d443d9a4
RDX: 0000000000000000 RSI: 00007ffd69714f25 RDI: 00000000ffffff9c
RBP: 00007ffd69714f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd69713e70 R14: 000056467eccf670 R15: 00007f45d488ea80
 </TASK>

Allocated by task 9:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 em28xx_v4l2_init+0x114/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 9:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2389 [inline]
 slab_free mm/slub.c:4646 [inline]
 kfree+0x286/0x470 mm/slub.c:4845
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22c5/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811d4d0000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811d4d0000, ffff88811d4d2000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d4d0
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004753401 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 60951247534, free_ts 57522096993
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1717
 prep_new_page mm/page_alloc.c:1725 [inline]
 get_page_from_freelist+0x10ca/0x2fd0 mm/page_alloc.c:3652
 __alloc_frozen_pages_noprof+0x25c/0x2160 mm/page_alloc.c:4934
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2459 [inline]
 allocate_slab mm/slub.c:2623 [inline]
 new_slab+0x23c/0x330 mm/slub.c:2676
 ___slab_alloc+0xda5/0x1940 mm/slub.c:3862
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3952
 __slab_alloc_node mm/slub.c:4027 [inline]
 slab_alloc_node mm/slub.c:4188 [inline]
 __kmalloc_cache_noprof+0x209/0x3c0 mm/slub.c:4357
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 em28xx_v4l2_init+0x114/0x40c0 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 3079 tgid 3079 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 __free_frozen_pages+0x66c/0xe70 mm/page_alloc.c:2680
 discard_slab mm/slub.c:2720 [inline]
 __put_partials+0x16d/0x1c0 mm/slub.c:3189
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4151 [inline]
 slab_alloc_node mm/slub.c:4200 [inline]
 kmem_cache_alloc_noprof+0x14f/0x3b0 mm/slub.c:4207
 getname_flags.part.0+0x48/0x540 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:322
 getname include/linux/fs.h:2852 [inline]
 do_sys_openat2+0xb8/0x1d0 fs/open.c:1423
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811d4d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d4d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811d4d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811d4d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d4d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================